Setup IaC demo

This repository is "step zero" of the IaC demo, and needs to be run once.

The scripts and terraform code here will take care of seeding the initial facts and secrets required to enable Terraform Cloud to perform configuration and provisioning against itself and the Azure subscription provided.

Instuctions

The included terraform.tfvars demplate contains all the variables used in the demo. This file is intentionally excluded from git - many of the variables contain secrets that you probably do not want to accidentally commit to a shared repo.

subscription_id = "Azure Subscription ID here"
client_id = "Azure Client ID here"
tenant_id = "Azure Tenant ID here"
client_secret = "Azure Client Secret here"
tfe_token = "TFE Organization or User token here"
github_oauth_token  = "GitHub OAuth2 token here"

Included in the repo is also a small helper script which uses the 'az' shell to create a client secret for Terraform to use as bearer token.

About the IaC demo

Basic principles:

• Use code to create and manage infrastructure
• Describe desired result using a declarative configuration language
• Fully automated change management

We want to use CICD to create the infrastructure underlying our applications. We want to manage this infrastructure using a modern development process:

• Change management through
  • Code reviews
  • Automated testing
• Track changes using commit messages and blame
• Automated delivery

Tool stack

• Hashicorp Terraform
• HCL 2.0
• Azure AD account
• Azure Subscription
• AzureRM provider for terraform
• Hashicorp Nomad

Provisioning flow

graph TD
  0[Admin] -->|Create terraform.tfvars| A
  A[Setup Repo] -->|Create| B(TFE Workspace: Main)
  A -->|Seed config| B
  B -->|Create| C(TFE Workspace: Infrastructure)
  B -->|Seed config| C
  B -->|Create| D(TFE Workspace: Service)
  B -->|Seed config| D

Loading