book

Terraform Cookbook

by Kerim Satirli, Taylor Dolezal

October 2024

Intermediate to advanced

282 pages

6h 1m

English

O'Reilly Media, Inc.

Read now

Unlock full access

Preface
Who Should Read This BookWhy We Wrote This BookWhat You Will Find in This BookWhat You Won’t Find in This BookConventions Used in This BookUsing Code ExamplesO’Reilly Online LearningHow to Contact UsAcknowledgments
1. Getting Started with Terraform
1.1. When to Use Terraform1.2. When Not to Use Terraform1.3. Installing and Configuring Terraform1.4. Understanding Terraform Providers1.5. Understanding Terraform Modules1.6. Modifying Terraform State with terraform console1.7. Using HashiCorp Cloud Platform Terraform1.8. Using Terraform with Visual Studio Code1.9. Managing Terraform Provider Version Constraints1.10. Strategies for Deploying Version-Controlled Terraform Code Repositories1.11. Deploying a Docker Container with Terraform1.12. Upgrading Terraform: From 0.x to 1.x and Beyond1.13. Using Terraform Variables1.14. Consistent Code for a Consistent Experience
2. Terraform Basics
2.1. Formatting and Validating Terraform Code2.2. Rapid Experimentation with terraform console2.3. Improving Code Quality with TFLint2.4. Improving Code Quality with TFSec2.5. Validating Code with Preconditions and Postconditions2.6. Validating Code with Open Policy Agent2.7. Documenting Code with terraform-docs2.8. Automating Code Validation with GitHub Actions2.9. Using Dependabot for Provider Version Updates2.10. Using GitHub Codespaces and DevContainers2.11. Limiting Blast Radius with Terraform
3. Terraform Syntax Patterns
3.1. Cleaning User Inputs with trimspace3.2. Removing Prefixes and Suffixes3.3. Working with Regular Expressions3.4. Advanced String Manipulation3.5. Working with Case-Sensitive Strings Using title, upper, and lower3.6. Alphabetically Sorting Lists3.7. Creating Subnets from a CIDR Block3.8. Interacting with the Local Filesystem3.9. Rendering Templates3.10. Validating Input Strings3.11. Optimistically Retrieving Data Using can and try3.12. Sequentially Processing Input Data3.13. Good Error Messages for Bad Input3.14. Consuming Data Across Terraform States
4. Terraform Modules and Providers
4.1. Using Public Modules to Create an EKS Cluster4.2. Linting Terraform with GitHub Actions4.3. Authentication for Terraform Providers4.4. Authentication for Private Modules4.5. Creating a Terraform Module4.6. Managing GitHub Secrets with Terraform4.7. Managing GitHub Repositories with Terraform4.8. Dynamic Configuration with Consul KV4.9. Service-Health-Aware Provider Configuration4.10. Consuming Terraform State with Providers4.11. Using Multiple, Identical Providers
5. Container Management with Terraform
5.1. Using Local Versus Remote Docker Images5.2. Distinguishing Between Cluster Deployment and Cluster Configuration5.3. Authorizing Terraform for Cluster Operations5.4. Scheduling Containers on Kubernetes with YAML5.5. Scheduling Containers on Kubernetes with HCL5.6. Transmuting Kubernetes YAML into HCL using k2tf5.7. Adjusting Annotations for Kubernetes Deployments5.8. Adjusting Configuration for Kubernetes Deployments5.9. Applying Kubernetes NetworkPolicies with Terraform5.10. Deploying Containers with Helm5.11. Enabling Monitoring for Kubernetes Deployments Using Helm5.12. Scheduling Containers on HashiCorp Nomad
6. HCP Terraform and Terraform Enterprise
6.1. Setting Up HCP Terraform6.2. Integrating HCP Terraform with VCS6.3. Consuming Terraform State with HCP Terraform6.4. Using HCP Terraform with GitHub Actions6.5. Collaborative Workflows with HCP Terraform6.6. Troubleshooting HCP Terraform and Terraform Enterprise6.7. Enforcing Policy as Code6.8. Managing Costs with HCP Terraform6.9. Utilizing Remote Operations for Large-Scale Deployments6.10. Advanced State Management and Recovery
7. Consuming and Managing Secrets with Terraform
7.1. Dealing with Sensitive Data in Terraform7.2. Retrieving Key-Values from HashiCorp Vault7.3. Managing Kubernetes Secrets with Kubernetes-Native Functions7.4. Managing Kubernetes Secrets with Vault and Terraform7.5. Storing Secrets as Environment Variables7.6. Auditing and Rotating Secrets7.7. Managing Secrets with Terraform and Password Managers7.8. Compliance and Governance with Terraform Secrets7.9. Dynamic Secrets with HashiCorp Vault7.10. Securing Secret Injection in CI/CD Pipelines
8. Configuration Management with Terraform
8.1. Writing Shell Scripts with Terraform8.2. Writing Ansible Configuration with Terraform8.3. Dynamic Configuration with Consul Key-Values8.4. Consuming Data from HTTP Interfaces8.5. Applying Conditional Logic in Terraform8.6. Importing Existing Infrastructure into Terraform8.7. Leveraging Terraform Workspaces8.8. Utilizing Terraform Templates8.9. Managing Dependencies Between Terraform Resources8.10. Using Terraform for Blue-Green Deployments
9. Advanced Terraform Techniques
9.1. Writing Configuration Files with Terraform9.2. Writing Cloud-Init Configuration9.3. Implementing Terraform Modules in CI/CD Pipelines9.4. Advanced State Management in Terraform9.5. Terraform and Multicloud Strategies9.6. Terraform for Scalable Architectures9.7. Terraform Custom Provider Development9.8. Integrating Terraform with Monitoring Tools9.9. Managing Security and Compliance with Terraform9.10. Advanced Debugging Techniques in Terraform

10. Real-World Use Cases
10.1. Managing Multiple Environments with Terraform Workspaces10.2. Deploying a Highly Available Web Application Across Regions10.3. Provisioning a Scalable Kubernetes Cluster on AWS EKS10.4. Implementing Blue-Green Deployments with Terraform10.5. Automating Database Migrations with Terraform and AWS RDS10.6. Deploying a Serverless Application on AWS Lambda and API Gateway10.7. Implementing Infrastructure as Code for GitOps Workflows10.8. Optimizing Costs with Terraform and Spot Instances10.9. Deploying a Multicloud Monitoring Solution with Terraform10.10. Automating Disaster Recovery with Terraform and AWS
Index
About the Authors

Overview

Cloud services and SaaS software permeate every company's IT landscape, requiring a shift from manually provisioned services to a more structured approach, with codification at its core. Terraform provides tools to manage the lifecycle of your IT landscape across thousands of different cloud providers and SaaS platforms.

By defining your infrastructure as code you can safely and predictably make changes, modularize crucial building blocks, and create reusable service components. Each recipe in this cookbook addresses a specific problem and prefaces the solution with detailed insights into the "how" and "why".

If you're just starting with Terraform and codified infrastructure, this book will help you create a solid foundation, on which you can build for years to come. If you're an advanced user, this guide will help you reaffirm your knowledge and take it to the next level, as you challenge yourself with more complex infrastructure, spread across multiple providers.

Recipes include:

Strategies on how to use Terraform with Version Control Systems
Validation and testing patterns for Terraform-managed infrastructure
Methods for importing pre-existing resources
Transforming infrastructure services into reusable components
Integrating Terraform with other HashiCorp tools
Deploying Containerized Workloads

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781098108458Errata Page

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills