2019 - Automated, modularized and versioned infrastructure with Terraform and Terragrunt

preview_player
Показать описание


Learn to automate your infrastructure with Terraform and Terragrunt in a modularized way. Declare your servers as cattle and don't manage them like pets. That's what you are able with fully automated infrastructure.

Terraform modules help you to decouple your infrastructure into reusable components and code them together in a flexible way. With Terragrunt you are able to organize and evolve your infrastructure in a versioned and structured way. With both tools together you have whole insight into your infrastructure by just looking at the code.

Emily Karisch

Рекомендации по теме
Комментарии
Автор

You can run Terragrunt from a CI/CD and handle permissions there or use Atlantis to have a workflow of approval based on git

LuisMGallardoD
Автор

i thought this would be a bit more hands on for terragrunt but thanks for the great overview!

amyqb
Автор

Thanks for sharing the knowledge!

Regarding the question about CI, it is possible but only if you have a different git account for the infrastructure team.
Also having a build script will enable the team to manage how all infrastructure are provisioned, tested for integration and company policies, less human error.

jcb
Автор

Really terrible thing not to use CI with terraform. All mentioned issue are not valid really.

tnapierala
Автор

"I'am the only one in my organisation doing DevOps and all the other ones are simple developers... and I don't trust them with infrastructure" Not only does that sound somewhat arrogant, to me is also sound like the opposite of a DevOps mindset. Terraform/Terragrunt should be run through a CI Tool. If not everyone is supposed to trigger such a pipeline you can restrict access to it.

infinitecycle
Автор

trust issues aside, seems like with this setup if zie was to recreate the entire infra from scratch, zie would have to manually apply them in a very specific order, hence not possible to have this in a cicd tool. or am i completely wrong about this?