Das Thema digitale Transformation stellt heutzutage eine große Herausforderung für viele Firmen dar. Hierbei muss man sich mit vielen Themen beschäftigen und diese auf das eigene Unternehmen anpassen. Eines dieser Themen ist die Verwendung der Cloud für das Betreiben der eigenen Anwendungen. Für viele Firmen stellt sich dabei die Frage wie sie ihre Prozesse anpassen müssen. In diesem Vortrag geht Jochen Zehnder, von 56K.Cloud, dieser Frage anhand eines Fallbeispiels nach. Hierbei stellt er die Möglichkeiten von Infrastructure as Code (IaC) vor, und wie dies in den DevOps Prozess eingebettet werden kann.

1. your cloud
journey together!”
“Let’s start
Jochen Zehnder
Partner & Site Reliability Engineer
Email: jz@56k.cloud
Twitter / GitHub / GitLab: @elft3r
15. Dezember 2021

2. Die Verwendung von IaC
im DevOps Prozess
15. Dezember 2021 2

3. Agenda
• Who is 56K.Cloud?
• DevOps
• Infrastructure as Code (IaC)
• IaC in the DevOps Process
• Summary
15. Dezember 2021 3

4. Who is 56K.Cloud?
15. Dezember 2021 4

5. Our Vision: Why are we here?
• We Solve: "Time to Market Problem" for innovators by breaking​
down technical barriers.​
• We Build: A "Technical strategy" and building that alignment
with Business strategy​.
• We Execute: Enabling new technologies that accelerate the
technical strategy.
15. Dezember 2021 5

6. Show core competencies of 56K.Cloud team
• Methodologies: DevOps, DevSecOps, SRE
• Cloud Infrastructure Automation (IaC)
• CI/CD Application Automation (SDLC)
• Cloud Security & Monitoring
• Cloud Design & Architecture
• Machine Learning
• Data Analytics & Data Lake
• 5G & Edge Cloud Application Development
15. Dezember 2021 6

7. Partner Network
15. Dezember 2021 7
Cloud Native Network​
Main Business Partners

8. DevOps
15. Dezember 2021 8

9. DevOps
15. Dezember 2021 9
http://dev2ops.org/2010/02/what-is-devops/

10. DevOps
15. Dezember 2021 10
https://agileboost.io/blog/what-is-dev-ops/

11. Infrastructure as Code
(IaC)
15. Dezember 2021 11

12. Infrastructure Management vs. Configuration
Management
• Infrastructure management
• Terraform, Pulumi, AWS CloudFormation, Azure Resource Templates (ARM),
Google Cloud Deployment Manager, …
• Configuration Management with infrastructure management
• SaltStack, Ansible, Puppet, Chef, …
• Configuration Management
• CFEngine, …
15. Dezember 2021 12

13. Infrastructure as Code (IaC)
• Define Infrastructure in Code
• Leverage APIs of the Cloud Providers and other Infrastructure
Manufacturers
• Automation via CI/CD pipelines
• “No more” manual provisioning and management
15. Dezember 2021 13

14. Terraform Providers
15. Dezember 2021 14
https://registry.terraform.io/browse/providers

15. Terraform Examples
15. Dezember 2021 15
resource "aws_rds_cluster" "default" {
cluster_identifier = "aurora-cluster-demo”
availability_zones = ["us-west-2a", "us-west-2b", "us-west-2c"]
database_name = "mydb”
master_username = "foo”
master_password = "barbut8chars”
}
resource "aws_rds_cluster_instance" "cluster_instances" {
count = 2
identifier = "aurora-cluster-demo-${count.index}”
cluster_identifier = aws_rds_cluster.default.id
instance_class = "db.r4.large”
engine = aws_rds_cluster.default.engine
engine_version = aws_rds_cluster.default.engine_version
}
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/rds_cluster_instance

16. Terraform Examples
15. Dezember 2021 16
resource "aws_ssm_parameter" "db_user" {
name = "/${var.name}-${var.account_name}/DB_USER”
type = "SecureString”
value = aws_rds_cluster.default.master_username
}
resource "aws_ssm_parameter" "db_pass” {
name = "/${var.name}-${var.account_name}/DB_PASS”
type = "SecureString”
value = aws_rds_cluster.default.master_password
}

17. Terraform Modules
15. Dezember 2021 17
https://github.com/terraform-aws-modules

18. Terraform Modules
15. Dezember 2021 18
https://gruntwork.io/

19. IaC in the DevOps Process
15. Dezember 2021 19

20. DevOps
15. Dezember 2021 20
https://agileboost.io/blog/what-is-dev-ops/

21. Example Voting App
15. Dezember 2021 21
https://github.com/dockersamples/example-voting-app

22. Example Voting App in AWS
• Showcase deployment in AWS
• Automation with GitHub Actions
15. Dezember 2021 22

23. PostgreSQL
15. Dezember 2021 23
module "cluster" {
source = "git::git@github.com:terraform-aws-modules/terraform-aws-rds-aurora?ref=v6.1.3”
name = "test-aurora-db-postgres96”
engine = "aurora-postgresql”
engine_version = "11.12”
instance_class = "db.r6g.large”
...
}
resource "aws_ssm_parameter" "cluster_endpoint” {
name = "/CLUSTER_ENDPOINT”
type = "String”
value = module.cluster. cluster_endpoint
}

24. PostgreSQL - Deploy
15. Dezember 2021 24
- name: Terraform Validate
run: |
cd ${GITHUB_WORKSPACE}/infra
terraform validate
- name: Terraform Plan
run: |
cd ${GITHUB_WORKSPACE}/infra
terraform plan
- name: Terraform Apply
run: |
cd ${GITHUB_WORKSPACE}/infra
terraform apply

25. Build & Push App Containers
15. Dezember 2021 25
- name: Build the Docker container
shell: bash
run: |
docker build -t ${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }} .
- name: AWS ECR Log In
run: |
$(aws ecr get-login --registry-ids ${{ env.ACCOUNT_ID }} --no-include-email --region ${{ secrets.AWS_DEFAULT_REGION }})
- name: Push the Docker container
shell: bash
run: |
docker push ${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}

26. Deploy Application Containers
15. Dezember 2021 26
- uses: Bardavon-Health/actions-aws-ssm-params-to-env@v1.2
env:
AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }}
with:
ssm-path: /CLUSTER_ENDPOINT
prefix: SSM_
- name: Trigger ECS deployment
run: |
aws --region us-east-1 ecs update-service --cluster $CLUSTER_NAME --service $VOTING_APP_SERVICE
aws --region us-east-1 ecs update-service --cluster $CLUSTER_NAME --service $RESULT_APP_SERVICE
aws --region us-east-1 ecs update-service --cluster $CLUSTER_NAME --service $WORKER_SERVICE

27. Summary
15. Dezember 2021 27

28. Summary
• DevOps aims to bring Developers and Operations together
• IaC leverages APIs to provision and configure infrastructure
• Example of how IaC can be integrated in the DevOps process
• Full demo available soon on GitHub: https://github.com/elft3r/example-
voting-app
15. Dezember 2021 28

29. Contact, Follow and Subscribe
W:https://56k.cloud
E: info@56k.cloud
T: twitter.com/56kcloud
JochenZehnder
Partner&SiteReliabilityEngineer
jz@56k.cloud
15. Dezember 2021 29