It's meant to strike a balance between human-friendly and machine-readable code. HCL is easy to learn and easy to troubleshoot.
#BETTER TOGETHER CODE#
Terraform code is written in HCL or the HashiCorp Config Language. Terraform is an open source command line tool that can be used to provision any kind of infrastructure on dozens of different platforms and services. In case any of you are brand new to Terraform, here's a real quick, brief introduction. Some of this will be review for most of you. What is Terraform?Īll right, so brief review. Where do you store the password? Okay, we have a thing for that in case you need a place to store the password. Sean: How many of you are using Ansible Vault today? Show of hands. We actually suggest to you users to push toward something like that. When we think of places to secure your passwords or tokens or other authentication methods, that's really something that HashiCorp Vault is really good for. It's a place where you can type protected, sensitive data, and have it vaulted to use in a playbook run. Multiple authentication methods are possible, so Vault is easy to integrate with the provisioning and config management tools, just like Ansible or Terraform.ĭylan: And when we talk about Ansible vault, it really is just a feature to us. The Vault Cluster can store secrets or generate dynamic credentials. Sean: HashiCorp Vault comes in both open source and enterprise versions. Think of a modern, multi-cloud distributed API-driven secrets management engine.ĭylan: And we have a lot of those same concepts as well with our Ansible Vault, but we want to expand on this by saying a couple of things. HashiCorp Vault can certainly be used to store your secrets, but it can also generate new secrets or even encrypt your data on the fly. When you think of a vault, you might think of a giant safe in a bank with a big door, and you can lock your secrets inside of the vault. There are many products and projects that contain "vault" in their name. Next we'll show you how Ansible can be combined with Terraform or Packer to enable powerful and efficient build pipelines. First we'll take a look at how HashiCorp Vault-our secrets management product-and how it compares to Ansible Vault. Sean: Today we'll be showing you how three different HashiCorp tools can benefit the Ansible user. There are other instruments that can do the job better than us, or can actually do it in a sense that we wouldn't actually be able to tackle it with. So, we're not that big instrument that owns the whole piece. So, being that glue or being the orchestrator, think of it as the composer of a nice symphonic piece, we can reach out and tell other tools and work with other tools to do the task that it's best suited for. Taking that step back, Ansible doesn't necessarily have to own and do every single task that it sets out to do. So, occasionally you'll hear us mention Ansible as the glue of all that is automation, all that is the DevOps tool ecosystem that we all work with. Well, we look at it this way, from Red Hat Ansible automation side, which really is the culmination of engine, tower, galaxy, Ansible vault, it's how do we take that tool set and take the community that comes from it and extend it out to the rest of the ecosystem. Why do you need more than Ansible?ĭylan: So, the first question. I've got a boring slide coming, but we'll get past that one pretty quickly. A fair amount.ĭylan: I'll apologize in advance. How many of you are actually Ansible users as well? All right. Sean: How many folks in the room today are using Terraform? Okay. So just kick back, enjoy the ride with us and hear us muttering amongst ourselves on how these work together. Sean: So today we're going to present to you our musings on the subject of how our tools work better together.ĭylan: A lot of you and a lot of our users pretty much like to peg us as an either/or story, and our goal here is to really tell you how these two tools, or how the HashiCorp suite of tools and the Ansible suite of tools are really very synergistic with each other.
I'm out of this fair Bay Area of San Francisco. I'm based out of Austin, Texas.ĭylan: I'm Dylan Silva, the product manager for Ansible Engine or Ansible Core, or just Ansible project-whatever you want to call it.
Sean: I'm Sean Carolan, solutions engineer with HashiCorp. Dylan Silva Principal product manager, Ansible Engine at Red Hat
0 kommentar(er)
