You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I don't think it is possible to have a "dev ops" environment without some kind of Configuration Management Tool.
They make it possible to configure an environment through scripts.
The big advantage of a tool like this is that new virtual machine or container instances can be easily created or updated.
The most common solutions here I think are Ansible, Puppet, Chef and Salt.
It is probably best to pick one tool and have practical scripting exercises how to an enviroment can be configured programmatically.
"Use Cases for GitOps. DNS is an obvious place to start, as are VM creation, container maintenance and orchestration, firewall rules, website updates, blog posts, email aliases and mailing lists, and just about any virtual infrastructure or one with a configuration file or API."
Starlark (formerly known as Skylark) is a language intended for use as a configuration language. It was designed for the Bazel build system, but may be useful for other projects as well. https://github.com/bazelbuild/starlark
Rego is a general-purpose policy language, which means that it works for any layer of the stack and any domain. The primary purpose of Rego is to accept JSON/YAML inputs and data that are evaluated to make policy-enabled decisions about infrastructure resources, identities, and operations.
Activity
monperrus commentedon May 4, 2018
Hi Göran,
Thanks for your suggestion.
Among Ansible, Puppet, Chef and Salt, what's the one with the best documentation, in particular getting started and tutorials pages to your opinion?
[-]Configuration Management Tools[/-][+]Configuration Management Tools (eg ansible)[/+]monperrus commentedon Aug 27, 2018
Terminology: infrastructure as code (IaC) #22
monperrus commentedon Aug 27, 2018
Reading material:
GitOps: A Path to More Self-Service IT
https://cacm.acm.org/magazines/2018/9/230599-gitops/fulltext
MatsJonsson commentedon Oct 11, 2018
We've done this with Ansible and Salt in a couple of big projects, only to end up with huge amounts of stuff just to get the actual stuff working.
Terraform
The move to Terraform and Hashicorp Configuration Language (HCL) made life a lot easier https://www.terraform.io/.
bittermandel commentedon Oct 18, 2018
We're running Salt extensively on thousands of nodes. It's working great for us and gives us great power in controlling our "standard" environments
https://saltproject.io/
alanmcg commentedon Nov 6, 2018
I have seen this implemented with puppet, both badly and very well, in different organisations.
monperrus commentedon May 15, 2019
How good is your puppet? an empirically defined and validated quality model for puppet
https://pure.tudelft.nl/portal/files/37386939/how_good_is_your_puppet.pdf
bbaudry commentedon May 20, 2019
Molecule is a tool for testing ansible scripts
https://molecule.readthedocs.io/en/stable/#
monperrus commentedon May 23, 2019
Using Testinfra with Ansible to verify server state
https://opensource.com/article/19/5/using-testinfra-ansible-verify-server-state
monperrus commentedon Oct 31, 2019
Python library to create AWS CloudFormation descriptions
https://github.com/cloudtools/troposphere
monperrus commentedon Oct 31, 2019
Pulumi - Infrastructure as Code
https://www.pulumi.com/
[-]Configuration Management Tools (eg ansible)[/-][+]Configuration Management Tools / Infrastructure as code[/+]bbaudry commentedon Jun 2, 2020
The 'as Code' Activities: Development Anti-patterns for Infrastructure as Code
http://arxiv.org/abs/2006.00177
22 remaining items
monperrus commentedon Apr 2, 2023
Mars is an infrastructure-as-code tool for Ethereum
https://github.com/TrueFiEng/Mars
monperrus commentedon Apr 3, 2023
CircleCI orbs: package management ecosystem for CircleCI configuration
https://circleci.com/docs/orb-intro/
bbaudry commentedon Apr 17, 2023
Vulnerability Scanner for Containers and other Artifacts with trivy
bbaudry commentedon Apr 19, 2023
Mining for Cost Awareness in the Infrastructure as Code Artifacts of Cloud-based Applications: an Exploratory Study.
http://arxiv.org/abs/2304.07531
monperrus commentedon Apr 28, 2023
Testing idempotence for infrastructure as code
https://dsg.tuwien.ac.at/team/hummer/docs/2013-middleware-iac.pdf
monperrus commentedon Apr 28, 2023
werf: CD and gitops for Kubernetes
https://werf.io/
tutorial by https://killercoda.com/jarns-zeiher/scenario/Simple-End-to-End-GitOps-with-Werf
monperrus commentedon May 5, 2023
Automated Code generation for Information Technology Tasks in YAML through Large Language Models. (arXiv:2305.02783v1 [cs.SE])
monperrus commentedon Sep 22, 2023
OpenTofu lets you declaratively manage your cloud infrastructure.
https://github.com/opentofu/opentofu
monperrus commentedon Oct 10, 2023
Infrastructure-as-Code Ecosystems
https://link.springer.com/chapter/10.1007/978-3-031-36060-2_9
monperrus commentedon Nov 19, 2023
Heavily used in the tensorflow repo
monperrus commentedon Nov 30, 2023
https://docs.aws.amazon.com/prescriptive-guidance/latest/saas-multitenant-api-access-authorization/rego.html
monperrus commentedon Jan 19, 2024
Crossplane is a framework for building cloud native control planes without needing to write code.
https://www.crossplane.io/
bbaudry commentedon Jul 2, 2024
qq, a query language that supports the main formats for config files
https://github.com/JFryy/qq
monperrus commentedon Aug 21, 2024
Bicep is a declarative language for describing and deploying Azure resources
https://github.com/Azure/bicep
monperrus commentedon Nov 22, 2024
Otterdog is a tool to manage GitHub organizations at scale using an infrastructure as code approach.
https://otterdog.readthedocs.io/