Managing PostgreSQL with Terraform

Automation is key to success if you are planning for scalability, traceability and reproduceability.
In this talk we are going to have a look into how to manage databases, roles and grants in PostgreSQL with Terraform.
Prior knowledge of Terraform is not required.

Transcript

1. Managing PostgreSQL with Terraform Carlos León Skelleftech 25-Nov-2022 Skellefteå, Sweden
2. Cloud Native Specialist @ CoreX Social Media: - mastodon: @mongrelion@fosstodon.org - Twitter: @mongrelion - LinkedIn: https://www.linkedin.com/in/mongrelion/ - carlos@corex.co
3. Introduction to IaC
4. What is not IaC?
6. What is IaC?
7. Foundation - Servers - Public IPs - Load Balancers - Firewalls - API Gateways - DNS zones + records - Service Principals / Non-personal Accounts - Mail campaigns - PagerDuty users, groups, alert rules, etc - A big et cétera
8. server-a public IP firewall load balancer server-b dc-sft-a
9. server-a server-b dc-sft-a Input: - CPU - RAM - DISK Output: - Hostname - LAN IP
10. server-a load balancer server-b dc-sft-a Input: - server-a LAN IP - server-b LAN IP Output: - LAN IP
11. server-a firewall load balancer server-b dc-sft-a Input: - load balancer LAN IP - Inboud rules - Outboud rules Output: - LAN IP
12. server-a public IP firewall load balancer server-b dc-sft-a Input: - firewall LAN IP Output: - public IP
15. Web application with PostgreSQL as the main database
16. frontend backend
17. admin app reader
24. Considerations - Security (traceability, blast radius limitation) - Reusability/DRY - Principle of least privilege is widely adopted in the industry - Initial work is “more” than just hacking into the server
25. Can we do it with code?
26. Jajamänsan!
27. The database
28. The roles
29. The grants
30. terraform plan
31. Q&A
32. Tackar!