IaC (Infrastructure as Code)

Contents

1. 1. Infrastructure automation tool registries
2. 2. General-purpose configuration registry products
3. 3. Handling secrets as parameters
   1. 3.1. Encrypting secrets
   2. 3.2. Disposable secrets
4. 4. Continuously Test and Deliver
   1. 4.1. Delivery pipeline software dnd services
      1. 4.1.1. Build server
      2. 4.1.2. CD software
      3. 4.1.3. SaaS services
      4. 4.1.4. Cloud platform services
      5. 4.1.5. Source code repository services
      6. 4.1.6. Evaluating tools
   2. 4.2. Deployment packages

Infrastructure automation tool registries

• Chef Infra Server
• PuppetDB
• Ansible Tower
• Salt Mine

General-purpose configuration registry products

• Zookeeper
• etcd
• Consul
• doozerd

Handling secrets as parameters

Encrypting secrets

• git-crypt
• blackbox
• sops
• transcript

Disposable secrets

• HashiCorp Vault

Continuously Test and Deliver

Delivery pipeline software dnd services

Build server

• Jenkins
• Team City
• Bamboo
• Github Actions

  CD software

• GoCD
• ConcourseCI
• BuildKite

  SaaS services

• CircleCI
• TravisCI
• AppVeyor
• Drone
• BoxFuse

  Cloud platform services

• AWS CodeBuild(CI)
• AWS CodePipeline(CD)
• Azure Pipelines

  Source code repository services

• Github Actions
• GitLab CI and CD

  Evaluating tools

• Atlantis (manage pull requests for Terraform projects)
• Terraform Cloud
• WeaveWorks(managing Kubernetes clusters)

Deployment packages

Target runtime	Example packages
Server oprating system	Red Hat RPM files, Debian .deb files, Windows MSI installer packages
Language runtime engine	Ruby gems, Python pip packages, Java .jar, .war, and .ear files
Container runtime	Docker images
Application clusters	Kubernetes Deployment Descriptors, Helm charts
FaaS serverless	Lambda deployment package