This document discusses infrastructure as code using tools like Ansible, Packer, and Terraform to manage cloud infrastructure resources in a declarative and reproducible way. It provides an overview of how infrastructure was traditionally managed manually versus now defining it as code. Examples are given of using Terraform and Ansible modules to define Scaleway compute, storage, and networking resources as code. The benefits discussed include having a single source of truth, improved collaboration between dev and ops, and enabling continuous integration/delivery of infrastructure changes.

1. Infrastructure as codeInfrastructure as code
chez Scalewaychez Scaleway
Comment gérer ses ressources avec Ansible, Packer
et Terraform ?
1

2. Rémy Léone
Cloud Developer Advocate
Scaleway Ansible modules maintainer
2

3. How things are usually doneHow things are usually done
without IaC?without IaC?
Infrastructure were usually managed by
tickets/manual instantiation
Infrastructure churn was considered low
Manual / Semi-automated installation
3

4. ad-hoc management problemsad-hoc management problems
Not scalable
No elasticity
Non reproducible infrastructure
No single source of truth about what the
infrastructure is.
So it is hard to recreate a copy for a pre-prod
for instance
4

5. HypothesisHypothesis
Churn is supposed to be slow
Standard tools are not available and widespread
Ops are required to provide additional work
anyway
5

6. Why is it different today?Why is it different today?
Churn is increasing as project rise and fall
Standard tools are available and widespread
Ops are required to provide different work today
6

7. Solution: InfrastructureSolution: Infrastructure
as codeas code
7

8. What is it?What is it?
Code that define infrastructure
8

9. Paradigm shiftParadigm shift
Uses tools to make the desired state match the
declared state
Declarative paradigm
Idempotency as a by-results
9

10. Why use code?Why use code?
Files can be versionned and replayed
Single source of truth
Classical git workflow
Infrastructure can be re-created
Reproducibility of the infastructure
10

11. How do I convince myHow do I convince my
management this ismanagement this is
important?important?
11

12. Easier to grasp the infrastructureEasier to grasp the infrastructure
and contribute to itand contribute to it
Reduce the risk to have only a single person able to
do a task
12

13. Align incentives between Dev andAlign incentives between Dev and
OpsOps
Single source of truth that both can review and
apply
Lower the risk of misunderstanding between dev
and ops
13

14. Easier to test a completeEasier to test a complete
deployment using CI/CDdeployment using CI/CD
Lower the risk of breaking change
14

15. Pet / Cattle paradigmPet / Cattle paradigm
Lower the risk on a single machine
15

16. Which toolsWhich tools
can I use?can I use?
16

17. TerraformTerraform
17

18. TerraformTerraform
Tool from Hashicorp
Resources description
Diff-based operation: Local state (tfstate) /
Remote state in S3
18

19. TerraformTerraform
provider "scaleway" {
region = "par1"
}
data "scaleway_image" "my_image" {
architecture = "x86_64"
name = "Ubuntu Bionic"
}
resource "scaleway_server" "my_server" {
name = "my_server"
image = "${data.scaleway_image.my_image.id}"
type = "gp1-s"
}
19

20. Scaleway ressources for TerraformScaleway ressources for Terraform
scaleway_bucket
scaleway_ip
scaleway_security_group
scaleway_security_group_rule
scaleway_server
scaleway_ssh_key
scaleway_token
scaleway_user_data
scaleway_volume
scaleway_volume_attachment
20

21. Scaleway data sources forScaleway data sources for
TerraformTerraform
scaleway_bootscript
scaleway_image
scaleway_security_group
scaleway_volume
21

22. AnsibleAnsible
22

23. AnsibleAnsible
Agent-less
Sequential workflow
Large community
Many roles
Many modules
23

24. AnsibleAnsible
scaleway_compute:
name: My server
state: present
image: 00000000-1111-2222-3333-111111111111
organization: 00000000-1111-2222-3333-111111111111
region: fr-par-1
commercial_type: gp1-s
wait: true
24

25. Ansible modules for ScalewayAnsible modules for Scaleway
scaleway_compute
scaleway_ip
scaleway_lb
scaleway_security_group_rule
scaleway_sshkey
scaleway_user_data
scaleway_volume
25

26. Ansible modules for Scaleway factsAnsible modules for Scaleway facts
scaleway_image_facts
scaleway_ip_facts
scaleway_organization_facts
scaleway_security_group_facts
scaleway_server_facts
scaleway_snapshot_facts
scaleway_volume_facts
26

27. ConclusionConclusion
27

28. Paradigm shift from imperative to declarative
Same tooling that developers (git, editors, ...)
Single Source of truth, code review workflow, ...
Scaleway is compatible with Ansible, Terraform
28

29. Next step: ContainerizationNext step: Containerization
Immutable infrastructure (Image built)
Packer / Ansible
Dockerfile
Kubernetes
Declarative paradigm
Container based
29

30. Thanks!Thanks!
Follow our news, new tutorials and cloud infos on
and @Scaleway
and follow me on & @remyleone
Twitter LinkedIn
Twitter LinkedIn
30

31. 31