ترافرم به‌سادگی: تأمین، مدیریت و خودکارسازی زیرساخت ابری با ترافرم در گوگل کلود

Terraform Made Easy: предоставление, управление и автоматизация облачной инфраструктуры с помощью Terraform в Google Cloud Explore the transformative benefits of Infrastructure as Code (IaC) and understand why Terraform is the go-to tool for managing cloud infrastructure efficiently. This book is your ultimate guide to mastering Terraform on Google Cloud Platform, providing you with the tools and knowledge to automate and optimize your cloud infrastructure with confidence. You’ll start by reviewing the traditional approach to managing infrastructure, common challenges, and the benefits of adopting IaC and Terraform. You’ll then learn how to install Terraform on various operating systems and get familiar with its configuration language, basic commands, and syntax. The book then turns to provisioning infrastructures on GCP, managing secrets and enhancing security, and concludes with integrating collaboration and DevOps using Terraform. The power of cloud platforms is growing, providing numerous ways to manage infrastructures more efficiently. While the traditional approach to infrastructure management works well on a smaller scale, it becomes a challenge when dealing with complex or extensive projects. From installation and configuration to advanced provisioning and security practices, this book provides a clear, step-by-step approach to mastering Terraform. Welcome to your comprehensive guide to mastering Terraform—the leading tool for IaC. Whether you’re just starting out or looking to enhance your existing cloud management skills, this book is designed to elevate your understanding and application of Terraform. Here’s what you can expect from this resource: A Strong Foundation: We begin by simplifying IaC and Terraform, clarifying their benefits for efficiency, collaboration, and consistency in infrastructure management. You’ll grasp the core reasons behind adopting IaC and how it can transform your Table of Contents About the Author About the Technical Reviewers Acknowledgments Preface Chapter 1: Introduction to IaC and Terraform The Traditional Approach of Managing Infrastructure Resources The Growing Complexity of Managing Infrastructure The Need for Change: Adopt Infrastructure as Code Infrastructure as Code Benefits of Infrastructure as Code A Closer Look at Terraform Key Features of Terraform Benefits of Terraform Summary Chapter 2: Getting Started with Terraform Terraform Installation macOS Windows Linux Option 1: Installing with Homebrew Option 2: Installing on Ubuntu/Debian Option 3: Installing on CentOS/RHEL Option 4: Installing on Amazon Linux Docker Configuration Language Syntax and Structure of HCL Blocks Arguments and Expressions Variables Outputs Modules Terraform Workflow Initialize Terraform Write Configuration Files Plan the Changes Apply the Changes Manage or Destroy Resources Summary Chapter 3: Key Concepts of Terraform Providers for Everybody Versatility and Widespread Adoption Terraform Registry Types of Providers Independent Releases and Maintenance Installing and Managing Provider Versions Optimizing Provider Management Examples of Providers Understanding Provider Requirements AWS Provider Example Azure Provider Example GitHub Provider Example Kubernetes Provider Example MongoDB Atlas Provider Example Variables and Outputs Input Variables Defining Input Variables Understanding Variable Arguments Environment Variables Setting Environment Variables Using Environment Variables Undeclared Variables Output Variables Declaring Output Values Accessing Outputs from Child Modules Optional Arguments for Output Blocks Local Values Declaring Local Values Using Local Values Leveraging the .tfvars Files What Are .tfvars Files? How to Use .tfvars Files? Managing Multiple Environments Understand Modules What Is a Module? Root Module Child Module Local Module Published Module Module Block Building a Module Nested Modules Example of Nested Modules Organizing Nested Modules Dependencies Implicit Dependencies Inspect the Dependency Explicit Dependencies Module Dependencies Infrastructure Management Understanding State Local State and Remote State Local State Remote State Understanding Back Ends Local Back End Remote Backend Managing Workspaces Understanding State Locking What Is State Locking? How State Locking Works Manual Unlocking Summary Chapter 4: Provisioning Infrastructure on GCP Provisioning Cloud Storage Create a Storage Bucket Confirming Resource Creation Create Multiple Storage Buckets Google Cloud Storage for State Management Create a Cloud Storage Bucket for Remote State Configure the Terraform Back End Migrate the Back End from Local to Remote Step 1: Update Terraform Configuration Step 2: Initialize the New Back End Step 3: Verify the Migration Step 4: Manually Migrate the Existing State Provision Compute Engines Create a Compute Engine Create Multiple Compute Engines with Tags Create Multiple Compute Engines in Different Regions Provisioning VPC Networks Default Network and Custom VPC Network Default Network Custom VPC Network Provision Multiple VPC Networks in Different Regions with Firewall Rules Create VPC Networks with Private IPs Provisioning Cloud SQL Databases Provision a MySQL CloudSQL Instance Pitfalls and Improvement Tips Pitfalls in the Code Improvement Tips Improved Code Provision a PostgreSQL CloudSQL Instance with Advanced Configurations Create Resources Backups and Recoveries Securing Database Access Monitoring and Alerting Provisioning Service Accounts and Keys Understanding Service Accounts and Keys Provision Service Accounts and Keys Constructing an Event-Driven Data Pipeline Provisioning GKE Clusters with Advanced Configurations Creating a GKE Cluster Autoscaling HTTP Load Balancing Setting Network Policy Service and Ingress Resource Ingress Control RBAC and Role Binding Summary Chapter 5: Managing Secrets, Enhancing Security, and Ensuring Resilience Managing Secrets Inappropriate Ways to Store Sensitive Data in Terraform Challenges with Managing Secrets in Terraform Secret Management Services Example: Creating and Accessing Secrets Encryption Encryption at Rest Example: Using CMEK with Google Secret Manager Encryption in Transit Example: Enabling Encryption for Google Cloud Storage Lifecycle of Secret Versions TTL (Time To Live) Timeouts Expire Time Managing Sensitive Data with Variables Enforce Identity and Access Management IAM Policy Role-Based Access Control (RBAC) Example: Granting Access to BigQuery Datasets Grant Access Example: Granular Access Control Binding Service Accounts with Members Secure Remote State Management Use Remote Backends for State Storage Enable Encryption Implement Access Controls and Policies Enable State Locking Implement Versioning and Regular Backups Audit and Monitor Access Disaster Recovery and Regular Backups Understanding Disaster Recovery, Backups, and GCP Services Disaster Recovery Regular Backups GCP Services for DR and Backups Implementing Backups with Terraform Example: Creating a Snapshot Example: Creating a Backup Bucket with Lifecycle Rules Implementing Disaster Recovery with Terraform Example: Setting Up DNS Failover Auditing and Monitoring Auditing Example: Enabling Cloud Audit Logs Monitoring Example: Setting Up Monitoring Alerts Integrating Auditing and Monitoring Summary Chapter 6: Testing and Automation Testing Initial Testing and Validation Testing Tools and Frameworks TFLint TFLint’s Capabilities Syntax Error Detection Unused Variables Enforcing Best Practices Pre-commit Hook Integration Checkov Checkov’s Capabilities Extensive Policy Library Custom Policy Creation Detailed Reporting and Remediation Guidance Integration with CI/CD Pipelines Example: Testing for AWS Terraform Configuration Example: Customizing Checkov Policies Example: Integrating Checkov with Jenkins Terratest Example: Modules Testing Example: End-to-End Infrastructure Testing Example: CI/CD Pipeline Integration Steps to Integrate Terratest with GitHub Actions Python Scripts Example: Using pytest for an AWS EC2 Instance Example: Using Python to Validate Terraform Outputs for VPC Subnetwork Example: Integrating Python Tests into CI/CD Pipelines Automation Integrating Terraform with CI/CD Pipelines Popular CI/CD Tools for Terraform Integration Examples with Popular CI/CD Tools Terraform with GitHub Actions Trigger Fetch Code Set up Terraform Terraform Workflow Steps Terraform with GitLab CI Terraform with Jenkins Summary Further Resources Index