Infrastructure as Code 🤖

Back in May 2020 I published what would be one of the more popular posts on this blog Azure DevOps Ansible Pipeline, it covered the Azure DevOps pipeline I had settled upon for running my Ansible playbooks which built and interacted with workloads running in Microsoft Azure. Fast forward four years, I updated the pipeline for Chapter 15 of the second edition of Learn Ansible↗ ; this version of the pipeline, which is covered in detail in the book, can be found in the repo linked below; ...

I am pleased to announce that my latest book, “Infrastructure as Code for Beginners,” is now available for purchase. Over the last six months, I have fully dedicated myself to this project, channeling my experience and knowledge into providing a resource that simplifies the complexities of Infrastructure as Code (IaC). The importance of IaC cannot be overstated in today’s rapidly evolving technological landscape. IaC ensures consistent and repeatable deployment of cloud-based services, thereby saving time while delivering robust results. However, understanding and effectively implementing IaC can be a challenge for many, and that’s where this book comes in. ...

Probably a little late to the party with this one, but I have recently upgraded to an M1 Pro MacBook Pro, for the most part, the problems with moving to arm64 are not as bad as I thought - most are annoying little things. However, the biggest one came when I decided to take a serious look at Bicep. After installing the Bicep VSCode extension ↗ and opening a test Bicep file, I was greeted with the following message … ...

I have just finished working on a few large Terraform Azure deployments, thought I would stick a few notes down in a blog post so that I can refer to them in the future as well as hopefully being useful to others. Azure Diagnostic Settings While the azurerm_monitor_diagnostic_setting resource can be used to apply diagnostic settings to pretty much any other resource, however, as each resource has different logs and metrics figuring them out can be a chore. This is where the azurerm_monitor_diagnostic_categories↗ data source comes in. ...

In my last blog post I introduced a stage which executed Checkov↗ to my Terraform Azure DevOps pipeline, this scanned the Terraform configuration and stopped the deployment if there was an issue. I also added a stage which checks to see if there are any resources being destroyed. Whats missing? Both of these I thought should give some basic protection against problems caused by common configuration issues, which they did, but it didn’t take into account the end user, i.e. me, making a change which would dramatically increase the running costs of the deployment. ...

It’s been just over a year since I first posted about the Azure DevOps Terraform Pipeline I used to use↗ , I say used to use, because that pipeline is now a little outdated. This posts covers the updated Pipeline I am starting to deploy along side my Terraform code. Pipeline Overview The pipeline itself has expanded a little and it now not only uses stages but also depending what Terraform is planning on doing it will trigger a manual approval process should there be any resources being destroyed. ...

As I move into using Azure DevOps more and more, there is one thing which I really haven’t got on with and that is release pipelines. I didn’t like that I couldn’t easily define it as YAML like I could with build pipelines, even though I don’t like them, there are a few things I do like — like approval gates. Environments Luckily, there are ways to get around this — the most simple way is to add an Environment and then add an Approval. Adding an Environment is simple enough, just click on Environment in your Pipeline and then add one with None selected under Resource; ...

I got my invite for GitHub Codespaces the other day and I thought I would have a quick play with it as having an an online IDE sounds like it could come in handy. If you know me — you will know that I am not a developer, but I do a lot of work in Visual Studio Code as that is where I tend to develop work on a lot of the infrastructure as code projects using Terraform and Ansible, as well as Docker projects. ...