awesome-kubernetes/docs/iac.md

Infrastructure Provisioning. Infra Management Tools. IaC Infrastructure as Code

1. Introduction
2. Local Environment as Code
3. Comparing the Tools
4. Tools
5. Infrastructure as Code using Kubernetes
   1. Config Connector
6. Videos
7. Tweets

Introduction

• Platform Engineering Guide - 5 Key Use Cases of Internal Developer Platforms - (Related to devops topic)

• stackoverflow.blog: Infrastructure as code: Create and configure infrastructure elements in seconds IaC allows developers to supply IT environments with multiple lines of code and can be deployed in a matter of minutes (in contrast to manual infrastructure, which can take hours if not days to be deployed).

• invensislearning.com: Infrastructure as a Code Tutorial: How it Works, Types, and Best Practices

• agileconnection.com: Infrastructure as Code: The Foundation of Effective DevOps

• cloudify.co: Infrastructure As Code – Is It REALLY Enough For DevOps? IAC DevOps Best Practices 🌟

• bridgecrew.io: 5 tips for securely adopting infrastructure as code

• redhat.com: Pull vs. push in automated VM provisioning: What you need to know Understanding the different techniques for provisioning virtual machines in the CI/CD process is essential for enterprise architects planning deployment automation into their designs.

• itnext.io: Platform-as-Code: how it relates to Infrastructure-as-Code and what it enables

• daffodilsw.medium.com: What is Infrastructure Automation in DevOps?

• thenewstack.io: IaC Cloud Misconfiguration Tools too Noisy without Context

• ==freecodecamp.org: Infrastructure as Code - Full Course== 🌟🌟

• faun.pub: The best Infrastructure as Code tools for 2021

• ==alpacked.io: Infrastructure as Code in DevOps== 🌟 Key driving force of efficient application delivery.

• devops.com: Updating and Managing Infrastructure-as-Code (IaC)

• thenewstack.io: GUIs, CLI, APIs: Learn Basic Terms of Infrastructure-as-Code

• thenewstack.io: Infrastructure-as-Code: Increase Security, Scale Development

• ==thenewstack.io: Struggling with IT Staff Leaving? Try Infrastructure as Code== 🌟 With IaC, the organization retains critical knowledge of deployment and updates in code repositories, lessening the impact of any one expert leaving

• devopscube.com: Immutable Infrastructure Explained For Beginners

• medium.com/@bunnyshell: How to Overcome Infrastructure as Code (IaC) Challenges

• dzone.com/articles: A Beginner's Guide to Infrastructure as Code 🌟 In this article, take an in-depth look at how Infrastructure as Code (IaC) works, its benefits, and common challenges.

• javacodegeeks.com: Infrastructure as Code: Best Tools For 2023 Included

• thenewstack.io: Infrastructure as Code or Cloud Platforms — You Decide!

• infoworld.com: 5 priorities that cut cloud costs and improve IT ops With infrastructure as code, virtual desktop infrastructure, and a proactive approach to incident management, you can help keep cloud costs reasonable.

• spacelift.io: Why Generic CI/CD Tools Will Not Deliver Successful IaC

• matt-rickard.com: Infrastructure as Code Will be Written by AI

• thenewstack.io: Achieve GitOps on Day One with IaC Automation GitOps helps redefine how we manage infrastructure and application deployments in environments where precision, automation and transparency are vital.

• medium.com/@faisalkuzhan: DAY_43/90 => Infrastructure as Code(IaC)

• build5nines.com: Benefits of Convention over Configuration for IaC Deployment Projects

• levelup.gitconnected.com: Short: Using IaC over Clickops

Local Environment as Code

• thenewstack.io: Local Environment-as-Code: Is It Possible Yet?

Comparing the Tools

• clickittech.com: Infrastructure as Code Tools, what are the best IaC tools? 🌟
• intellipaat.com: Terraform vs Ansible: Key Differences Between Terraform and Ansible 🌟
• clickittech.com: Terraform vs CloudFormation: The Final battle 🌟
• k21academy.com: Terraform vs Ansible: Working, Difference, Provisioning 🌟
• cncf.io: Cloudformation vs. Terraform: Which is better?
• cloudify.co: Ansible Vs Terraform 🌟
• techcommunity.microsoft.com: Infrastructure as Code (IaC): Comparing the Tools
• spacelift.io: Terraform vs. Ansible : Key Differences and Comparison of Tools
• env0.com: Ansible vs Terraform: Choose One or Use Both?
• awstrainingwithjagan.com: Comprehensive Comparison of Top Infrastructure as Code (IaC) Tools

Tools

• Pulumi: Infrastructure as Code in Any Programming Language 🌟 - Pulumi is an open-source Infrastructure as Code (IaC) tool that allows users to define and manage cloud infrastructure using familiar programming languages like Python, JavaScript, TypeScript, Go, C#, and Java. It enables developers to provision and manage resources across various cloud providers and services with the power of general-purpose programming languages, offering benefits like code reuse, testing, and better developer workflows.

• Terraform 1.15: Flexible Module Management, Deprecation Warnings, and Windows ARM64 Support - (Related to terraform topic)

• IBM IAM for AI Agents - (Related to ai-agents-mcp topic)

• Terraform Enterprise 2.0 - (Related to terraform topic)

• Scale with Confidence Using Terraform: Better Cost Visibility, Stronger Governance, and Less Operational Overhead - (Related to terraform topic)

• Terraform for Standardizing AWS Deployments - (Related to terraform topic)

• Terraform & OpenTofu Skill for AI Agents - (Related to terraform topic)

• Enterprise-Scale Azure Subscription Vending Using Azure Verified Modules (AVM) - (Related to azure topic)

• CloudCanvas - Diagramming for Cloud Infrastructure - (Related to cloud-arch-diagrams topic)

• AZVerify: Bridging Azure Resources, Bicep Templates, and Diagrams with GitHub Copilot - (Related to azure topic)

• Azure Landing Zone IaC Accelerator Release Notes 🌟 - Official release notes for the Azure Landing Zone Infrastructure as Code (IaC) Accelerator, detailing changes, particularly breaking changes that may require user action. It also links to release notes for individual components like PowerShell modules and Terraform/Bicep starter modules, and highlights new features such as a local management group for Azure Local/Sovereign workloads.

• Terraform 2.0 in Practice: Using AI to Generate Infrastructure as Code - (Related to terraform topic)

• Transitioning an Existing Azure Environment to the Azure Landing Zone Reference Architecture - (Related to azure topic)

• Terraform Provider for Google Cloud 7.0 is now GA - (Related to terraform topic)

• AWS Organizations: The Key to Managing Your Cloud Infrastructure Effectively - (Related to aws topic)

• Terraform Azure Resource IPAM Module - (Related to terraform topic)

• Ephemeral Values in Terraform - (Related to terraform topic)

• Deploying Virtual Networks Across Tenants Using Azure Virtual Network Manager - (Related to azure topic)

• Announcing Public Preview of Terraform Export from the Azure Portal - (Related to terraform topic)

• Announcing Public Preview of Terraform Export from the Azure Portal - (Related to terraform topic)

• ClusterClass: Experimental Feature for Streamlined Cluster Lifecycle Management in Cluster API - (Related to kubernetes topic)

• Enhancing Infrastructure as Code Generation with GitHub Copilot for Azure 🌟 - This blog post introduces an updated experience for GitHub Copilot for Azure, simplifying the generation and updating of Infrastructure as Code (IaC) files using Bicep or Terraform. The new release allows users to directly update project details, hosting, services, configurations, and environment variables through a streamlined UI, improving workflow efficiency and reducing errors compared to previous methods relying solely on Copilot Chat.

• Subscription Vending Implementation Guidance - (Related to azure topic)

• DevOps Roadmap for 2026 - (Related to devops topic)

• Awesome Sysadmin - (Related to devops-tools topic)

• Terraform Best Practices - (Related to terraform topic)

• Enhanced Local IDE Experience for AWS Step Functions - (Related to aws topic)

• TerraSchema: Generate JSON Schema from Terraform Configurations - (Related to terraform topic)

• Terraform Module Releaser GitHub Action - A GitHub Action designed to automate the versioning, release process, and documentation generation for Terraform modules, particularly useful in monorepo environments.

• The Maester - Terraform Module - (Related to terraform topic)

• Azure Landing Zone IaC Accelerator 🌟 - The Azure Landing Zone IaC Accelerator provides opinionated modules for deploying and managing Azure landing zone architecture core platform capabilities using Bicep or Terraform. It supports Azure DevOps and GitHub for version control and bootstraps a continuous delivery environment, guiding users through planning, prerequisites, bootstrapping, and running the deployment.

• Azure Landing Zone Technical Documentation - (Related to azure topic)

• Announcing General Availability of Terraform Azure Verified Modules for Platform Landing Zone (ALZ) - (Related to terraform topic)

• Azure Landing Zone - Microsoft Cloud Adoption Framework - (Related to azure topic)

• The Beginner’s Guide to the Ansible Inventory - (Related to ansible topic)

• Terraform Provider for Azure IPAM - (Related to terraform topic)

• AWS Well-Architected IaC Analyzer - (Related to aws-architecture topic)

• ==Checkmarx/kics== Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx. KICS stands for Keeping Infrastructure as Code Secure, it is open source and is a must-have for any cloud native project.

• ==gofireflyio/aiac== 🌟 Artificial Intelligence Infrastructure-as-Code Generator.

• ==github.com/gofireflyio/aiac: AIaC== Artificial Intelligence Infrastructure-as-Code Generator.

Infrastructure as Code using Kubernetes

• The Definitive Guide to Importing Your Cloud Resources into IaC 🌟 - This guide provides a comprehensive approach to migrating existing cloud infrastructure, built manually via portals or CLI commands, into an Infrastructure as Code (IaC) format, specifically mentioning Terraform. It highlights the importance of IaC for auditability, security, access control, documentation, and disaster recovery, contrasting it with the limitations of 'clickOps'.

• How Kubernetes Operators Fit into Platform Building and When Traditional IaC Isn't Enough - (Related to kubernetes-operators-controllers topic)

• The DevOps Bottleneck: Why IaC Orchestration is the Missing Piece 🌟 - This article discusses how the increasing pace of feature development in DevOps often strains infrastructure teams, creating a bottleneck. It argues that Infrastructure as Code (IaC) orchestration is crucial for scaling DevOps practices effectively and preventing team burnout, moving beyond just automation to true orchestration.

• Azure Cloud Adoption Framework: Platform Landing Zone Implementation Options - (Related to azure topic)

• medium.com/nerd-for-tech: Kubernetes: Declaratively Deploying Infrastructure (IaC) “Declaring the Kubes”

Config Connector

• ==cloud.google.com/config-connector== Config Connector is an open source Kubernetes addon that allows you to manage Google Cloud resources through Kubernetes.
• medium.com/globant: Infrastructure as Code using Kubernetes
  • Config Connector (KCC) is a solution to maintain Cloud Resources as Infrastructure as Code. It is built as an Open Source initiative and runs on Kubernetes clusters. As such, it leverages YAML files to maintain and operate such resources.
  • Config Connector has two versions: an Add-On for Google Kubernetes Engine (GKE) clusters and a manual installation for other Kubernetes distributions.

Videos

• youtube: Mitchell Hashimoto: The Inside Story of HashiCorp's IaC Journey | The IaC Podcast

??? note "Click to expand!"

<center markdown="1">

<iframe width="560" height="315" src="https://www.youtube.com/embed/POPP2WTJ8es" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>
<iframe width="560" height="315" src="https://www.youtube.com/embed/EIOuIwKS0P0" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>
<iframe width="560" height="315" src="https://www.youtube.com/embed/--RRpw_6onA?si=UNaIShD8z-_ZLCwt" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe>

</center>

Tweets

Click to expand!

Jeez, people in my timeline arguing about the merits of CDK vs. Pulumi and I'm just waiting for you all to get on my level. pic.twitter.com/S3PU7FGuw2

— Corey Quinn (@QuinnyPig) December 14, 2021

<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

Do you use the AWS, GCP, or Azure web consoles beyond getting started with a new cloud provider? If so, why not an automation tool such as Terraform or Cloud Formation? pic.twitter.com/5LIZSTcNpG

— Kelsey Hightower (@kelseyhightower) January 19, 2022

<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

- [IaC and OpenShift Virtualization handshake (using Terraform for VMs on OCP)](https://medium.com/@nidhibansal26/iac-and-openshift-virtualization-handshake-c0a4ada79af5) 🌟 - Explora la integración de Infraestructura como Código (IaC) con Terraform para gestionar Máquinas Virtuales (VMs) en OpenShift Virtualization, demostrando un 'handshake' efectivo entre ambas tecnologías. - [Building a FinOps-Ready Azure Landing Zone: Infrastructure Foundations for Cost Optimization](https://techcommunity.microsoft.com/blog/AzureInfrastructureBlog/building-a-finops-ready-azure-landing-zone-infrastructure-foundations-for-cost-o/4411706) - *(Related to finops topic)*