How You Should Store Your Infrastructure as Code (IaC, Terraform, ARM, etc)

Where to store the Infrastructure as Code (IaC) scripts? Together with the App Code? Or in a separate GitHub repository?

In this video we discuss what are the best practices for storing IaC (Terraform, ARM, and more), how I do it and why I think you should do it too.

🆘 NEED HELP? 🆘
We can talk about GitHub, Azure DevOps, or any other DevOps tool or project you need help with!

🙏🏻SUPPORT THE CHANNEL🙏🏻

🎥VIDEOS

💬JOIN THE COMMUNITY

❓QUESTIONS?
Have a question about DevOps, Cloud, Coding, or Anything Else? Post in comments section of this video!

_______________

🔮TOOLS I USE

📸🖥️GEAR AND SOFTWARE

Disclaimer:
Some product links are affiliate links which means if you buy something I'll receive a small commission at no additional cost to you.
As an Amazon Associate, I earn from qualifying purchases.

[CoderDave]

✨ Question of the day ✨: How do you store your IaC?



SUPPORT THE CHANNEL :

[jeremyruffell]

I would love to see how you structure you IAC Repository's for multiple Accounts, Regions, Environments and Products! Nice work!!

[vijaydevathi]

Hi Dave, thanks for sharing your knowledge, i would like to see how you mange terraform modules and best practices to maintain and integrate with CI/CD

[AleksandarIvanov]

I would say the ideal way to organize IaC is the following:
- Parameterized templates for/of a -> in a templates repo e.g. .NET build, test, package and publish template pipeline
- Purpose-specific resources, utilizing the parameterized templates (ideally) or not -> in the project's repo e.g. project's CI pipeline that gets data from some storage (e.g. AzDO Variuable Groups) and feeds it to the aforementioned .NET template

Other than easy of use and maintenance, the biggest benefit I like to point out is the unintentional standard enforcement, especially for organizations i.e. build applications to conform to being built, tested and packaged this way.

[jNtMbi]

Hi Dave I would like to see how you manage your terraform code. Hope you can share your experience with Terraform modules!

[EldoCodes]

Very pertinent to some of my current thinking on a project, thanks!
Do you have any videos about secrets management with Terraform to avoid it being in the repository?

[okerror]

We will generally have one or more platform teams that facilitate the ability for software development teams to self-service on the cloud. The platform teams(s) can work on one or more repos which serve as the basis for the application development teams. This makes the application development teams completely self reliant, and the responsibility seperate. But everything is in code and all the benefits that come with that.

It's not that we want to remove Ops, or Dev to create a DevOps team. Instead, we want to avoid handovers of responsibility. Ops supplies the platform. Dev supplies the application.

You build it. You run it.

[VishalGoyal]

Hi Dave, How do you validate your IAC scripts against best practices or mis configurations before running them. Any suggestions.

[arvindgupta]

I didnt understand.. Can you make detailed video on Arm and Terraform