Questions tagged [infrastructure-as-code]

Use this tag for DevOps related questions about 'Infrastructure as Code', which is a way to automate and backup environments.

0
votes
0answers
11 views

Using the terraform github provider on an existing github organization

If I use the github provider in terraform on an existing github organization, do I need to write out each user and role within the .tf files or can the state be imported? What is the best approach ...
3
votes
1answer
32 views

Configuration Management Tools and Rollbacks / Approaching Immutable Infrastructure

I am interested in whether there are any configuration management tools out there that make it easy to roll back. So far it seems that with Ansible, Chef, and Puppet you have to write the roll back ...
0
votes
1answer
107 views

Ansible cloudformation vs cloudformation

I would like to know the difference between - AWS cloudformation - Make AWS cloudformation template through Ansible (https://docs.ansible.com/ansible/latest/modules/cloudformation_module.html) I ...
2
votes
3answers
94 views

How to structure a IaC for production, and development?

We have a typical multi layered web application: a balancer, 2 web server 2 db server. I feel we strongly need to start using a kind of Infrastructure As Code in order to replicate easily ...
4
votes
2answers
90 views

If we are using containers do we still need to worry about configuration management at an infrastructure level?

We are about to begin our journey with containers and I am wondering if we still need to utilize something like Chef, Ansible, Terraform, etc. to ensure that our infrastructure is properly maintained? ...
0
votes
0answers
10 views

How do you create and implement a customized IAM Policy in AWS using LandingZone(Control Tower)

I have to this point only used managed policies and not customized policies, has anyone used created and implemented customized IAM policies using LandingZone?
3
votes
1answer
125 views

How to handle large deployments using tools like gitlab and docker

How to deploy multiple instances (40+) of the same application with gitlab? (it is a simple tomcat web app) I want to be able to individually upgrade/downgrade them using web interface. We already ...
0
votes
0answers
160 views

How can I get gs_secret_key and gs_access_key to use gc_storage module in Ansible

I need to create a directory in a Google Cloud Bucket using Ansible. I would like to know where I can find the values to complete "gs_secret_key" and "gs_access_key" to use "gc_storage" module in ...
2
votes
2answers
108 views

Open source private cloud VM provisioning for container workload

There is a new generation of tooling developed that tries to integrate different IaaS providers (Azure/AWS/GCE/DigitalOcean) into one "infrastructure codebase". It's dubbed "Cloud Native" and it's ...
3
votes
1answer
1k views

How to “inject” AWS Lambda code into a CloudFormation?

I'm exercising an idea of not using S3 bucket to refer to the code of a lambda function. The usual example of a lambda CloudFormation code might look like: MyLambda: Type: AWS::Lambda::...
3
votes
4answers
191 views

DevOps tools and automation of manual processes

This is a general question, but couldn't find a better place to ask. I'm a new DevOps member in a company, and I've been ask to "update" our DevOps technologies. Generally speaking, in what areas do ...
0
votes
0answers
77 views

Terraform Project Organization with AWS VPC Peering Connections

How best does one organize a project for AWS that makes use of peering connections. At present my folder structure looks like this modules/ staging/ production/ provisioning/ peering/ I'm also ...
0
votes
1answer
178 views

Terraform resource definition for Azure App Service Environment

I am trying to create an Azure App Service Environment using Terraform. Is there any real-life working samples for this? How should we decide to use a terraform resource is there a tested resource ...
3
votes
1answer
64 views

Do you use existing automation code (cookbooks/playbooks/dockerfiles/etc) or you write your own from scratch?

I noticed that many cookbooks/playbooks/... are not of particularly high quality, and even if they are they rarely cover all cases. So it should be expanded with my custom logic everytime, while 90% ...
0
votes
0answers
771 views

Build Breaker plugin on SonarQube version 7.0?

It seems build breaker plugin is not supported in SonarQube versionn 7.0. Ref: https://github.com/SonarQubeCommunity/sonar-build-breaker So What are the alternatives I can use for this plugin ...
5
votes
1answer
138 views

What is a suitable strategy for provisioning Chef Server through code?

Background I am tasked with setting up a Chef server on our Azure Cloud for a new DevOps automation project. We are using the Resource Manager model for Azure, in case it's relevant. We will likely ...
7
votes
3answers
245 views

How should we automatically rebuild immutable infrastructure when new packages are available?

We're going to be using Terraform to automate our infrastructure deployment and Packer to create the machine images deployed by Terraform. By following immutable infrastructure design principles, we ...
6
votes
1answer
897 views

How to organize infrastructure as code projects?

I have completed an Infrastructure-as-Code project using Terraform and Ansible. Currently, I organize my project as follows: Project1 Terraform ec2.tf rds.tf … variables....
3
votes
1answer
1k views

AllowedPattern for emails in Cloudformation template

I am struggling with specifying a regular expression for email parameter of Cloudformation : Parameters: MyEmail : Type: String Description: Email for notifications AllowedPattern: /[^\...
0
votes
1answer
880 views

Suspend autoscaling processes through Cloudformation template

I have the following autoscaling as a Cloudformation template : MyAutoScalingGroup: Type: AWS::AutoScaling::AutoScalingGroup Properties: DesiredCapacity: 1 MinSize: 1 ...
11
votes
4answers
483 views

Infrastructure as code and TDD

Infrastructure as code tells us to use tools that automate your builds. Great. Tools like ansible, chef, puppet, salt stack and others push us towards writing how infrastructure looks like, while ...
3
votes
1answer
1k views

How to apply using Terraform to launch multiple EC2 Resource with different configs (VPC not maintained by TF)

We are planning to use Terraform for provisioning EC2 instance which will host Oracle DB. While we are able to achieve this, there are some questions for which I am searching for suggestions / ...
9
votes
2answers
363 views

How to Chef things that don't exist yet

Let us say I have some Chef code like: require 'mixlib/shellout' yum_package 'somepackage' myvar = Mixlib::ShellOut.new('/bin/somecommand').run_command.stdout.strip Where /bin/somecommand does not ...
1
vote
1answer
381 views

Accessing attributes from within recipes

Let us say I do knife node edit mynode and within the normal section I edit the JSON to add "myattribute": "myvalue",. I save this and verify that it has taken effect by issuing knife search node -a ...
6
votes
2answers
146 views

How to reconcile Infrastructure as Code and not storing env config in code?

When developing a Web App, and trying to adhere to what is generally considered best practice, e.g. The 12 factor app methodology etc. One key concept is to keep configuration and sensitive data out ...
7
votes
2answers
451 views

What are ChatOps approach use cases of production infrastructure management?

Many "simple" use cases shown in examples of ChatOps approach, creation of cloud instances, deployments to test environment etc., are there any use cases for production infrastructure management?
12
votes
2answers
889 views

What is “Infrastructure as Code”?

The phrase "Infrastructure as Code" has been mentioned several times in the last two weeks in different contexts. What does it actually mean in a practical sense to have Infrastructure as Code?