Build Your Azure Infrastructure as Code With .Net Core - Global Azure 2021

Transcript

1. Build Your Azure
   Infrastructure as Code
   With .NET Core
   Hossam Barakat
   Technical Lead at Willow
   @hossambarakat_ | www.hossambarakat.net
   

   View Slide

2. @hossambarakat_
   Data Centers
   

   View Slide

3. @hossambarakat_
   Rise of Cloud Computing
   

   View Slide

4. @hossambarakat_
   How to provision cloud resources?
   

   View Slide

5. @hossambarakat_
   Manual AKA Point and Click
   

   View Slide

6. @hossambarakat_
   Manual AKA Point and Click
   

   View Slide

7. @hossambarakat_
   Snowflake Servers
   

   View Slide

8. @hossambarakat_
   Infrastructure as Code
   

   View Slide

9. @hossambarakat_
   • Managing and provisioning cloud resources using
   code.
   Infrastructure as Code
   

   View Slide

10. @hossambarakat_
    Imperative: CLI commands and scripts
    

    View Slide

11. @hossambarakat_
    Idempotency and error handling
    

    View Slide

12. @hossambarakat_
    Declarative Infrastructure as Code
    

    View Slide

13. @hossambarakat_
    Tool
    Declarative Infrastructure as Code
    Desired State Actual Resources
    

    View Slide

14. @hossambarakat_
    • Azure Resource Manager
    • Terraform
    • Bicep
    • AWS CloudFormation
    • Google Deployment Manager
    • …
    Declarative Infrastructure as Code tools
    

    View Slide

15. @hossambarakat_
    • JSON, YAML, domain specific languages (DSLs),…
    Infrastructure as Code tools
    

    View Slide

16. @hossambarakat_
    

    View Slide

17. @hossambarakat_
    Enter Pulumi
    

    View Slide

18. @hossambarakat_
    • Pulumi is an open source infrastructure as code tool
    the lets you use real languages – C#, TypeScript,
    Go,… – to provision and manage cloud resources.
    What is Pulumi?
    

    View Slide

19. @hossambarakat_
    • Control flow with loops and if conditions
    • Abstraction with functions, classes, packages,…
    • Code sharing with package management (Nuget,
    npm,…)
    • Authoring with favourite IDEs, refactoring, code
    completion, static type checking
    • Testing with existing frameworks and tools
    Benefits
    

    View Slide

20. @hossambarakat_
    

    View Slide

21. @hossambarakat_
    Terraform vs Pulumi
    var resourceGroup = new ResourceGroup("pulumi-resources",
    new ResourceGroupArgs
    {
    Location = " Australia East"
    });
    );
    var environments = new string[]{"dev", "uat", "prod"};
    foreach (var environment in environments)
    {
    var storageAccount = new StorageAccount(
    $"storage{environment}",
    new StorageAccountArgs
    {
    ResourceGroupName = resourceGroup.Name,
    Location = resourceGroup.Location,
    Sku = new SkuArgs{ Name = SkuName.Standard_LRS },
    AccessTier = AccessTier.Hot
    });
    }
    resource "azurerm_resource_group" "rg" {
    name = "terraform-resources"
    location = ”Australia East"
    }
    variable "environments" {
    description = "storage account regions"
    type = list(string)
    default = ["dev", "uat", "prod"]
    }
    resource "azurerm_storage_account" "sa" {
    name = "iacpulumi${var.environments[count.index]}"
    resource_group_name = azurerm_resource_group.rg.name
    location = azurerm_resource_group.rg.location
    account_tier = "Standard"
    account_replication_type = "LRS"
    count = length(var.environments)
    }
    

    View Slide

22. @hossambarakat_
    Pulumi Fundamentals
    

    View Slide

23. @hossambarakat_
    Projects & Stacks
    web-app (Pulumi.yaml) Project
    $ pulumi new
    Stacks
    $ pulumi stack init stackName
    Pulumi..yaml
    Pulumi.yaml
    

    View Slide

24. @hossambarakat_
    Configurations
    $ pulumi config set dbPassword S3cr37
    config:
    serverless-app:dbPassword: S3cr37
    Pulumi..yaml
    var config = new Pulumi.Config();
    var password = config.Require("dbPassword");
    Pulumi.cs
    

    View Slide

25. @hossambarakat_
    Secrets
    $ pulumi config set --secret dbPassword S3cr37
    var config = new Pulumi.Config();
    var password = config.Require("dbPassword");
    Pulumi.cs
    Pulumi..yaml
    config:
    serverless-app:dbPassword:
    secure: AAABAELDrCQE+rQbzTxN43iAD6iGDXTYQ90AzpILkfEY3uwtc+g=
    

    View Slide

26. @hossambarakat_
    Application architecture on Azure
    

    View Slide

27. @hossambarakat_
    

    View Slide

28. @hossambarakat_
    But that would be imperative, right?
    

    View Slide

29. @hossambarakat_
    How Pulumi Works
    State
    CLI and Engine
    AWS
    Azure
    Kubernetes
    Providers
    Code
    Plan
    Apply
    new Resource()
    

    View Slide

30. @hossambarakat_
    Continuous Deployment
    Infrastructure as
    Code
    Manual
    Review
    State
    

    View Slide

31. @hossambarakat_
    GitHub Integration
    

    View Slide

32. @hossambarakat_
    Testing
    Unit Testing Integration Testing
    

    View Slide

33. @hossambarakat_
    Unit Testing
    

    View Slide

34. @hossambarakat_
    Summary
    

    View Slide

35. @hossambarakat_
    

    View Slide

36. @hossambarakat_
    • https://github.com/hossambarakat/pulumi-demos
    • http://pulumi.com/docs
    • https://github.com/pulumi/examples
    Resources
    https://bit.ly/pulumi-ndc-porto
    

    View Slide

37. @hossambarakat_
    Questions?
    

    View Slide

38. Thanks
    Hossam Barakat
    @hossambarakat_
    www.hossambarakat.net
    

    View Slide