April 2019 Summaries

Pulumi's infrastructure as code approach streamlines the deployment of AWS microservices by simplifying the process into a concise 28 lines of TypeScript code, eliminating the need for complex YAML configurations or multiple CLI commands. This method leverages AWS's native capabilities, such as ECS, Fargate, and ECR, allowing for the efficient creation and management of containerized services with features like load balancing and auto-scaling. The process is designed to enhance productivity and enable repeatable deployments across various environments, integrating seamlessly with CI/CD pipelines and supporting other cloud providers like Azure and GCP. Pulumi's solution not only facilitates infrastructure provisioning but also tracks deployment state for reliability and team collaboration, akin to Git's functionality with GitHub.

Version 3.0 of the Pulumi EKS Provider simplifies the process of managing role-based access control (RBAC) on Kubernetes, which is traditionally a complex and often mishandled task. By replacing the need for YAML configurations with TypeScript or JavaScript, Pulumi allows users to program Kubernetes objects directly using cloud SDKs, enhancing development speed and ease of updates. Pulumi's approach enables automated workflow for RBAC at scale, integrating easily with CI/CD tools like GitHub, GitLab, and others. The traditional sequential method of creating IAM roles and EKS clusters is contrasted with Pulumi's streamlined process, which involves updating a TypeScript file and running a single command to deploy all components simultaneously. This approach reduces complexity, particularly in environments with multiple users, namespaces, and clusters, by allowing all configurations and updates to be managed through code, thus improving security and maintainability. Pulumi also simplifies the process of mapping IAM roles to Kubernetes usernames during cluster creation, eliminating the need for additional configmap updates and ensuring that permissions are applied correctly and efficiently.

Pulumi has introduced a streamlined process for protecting serverless application APIs using AWS's API Gateway and Lambda authorizers, making it easier for developers to implement OAuth authorization with Auth0. The process involves three main steps: defining a Lambda function and its authorizer using Pulumi’s AWSX package, writing custom authorization logic with Auth0 to handle access tokens, and integrating the Lambda authorizer with API Gateway to validate requests. Auth0 simplifies OAuth implementation by managing user authentication and authorization, while AWS Lambda authorizers provide custom logic for API access control. The AWSX package automates provisioning necessary resources, such as Lambdas and roles, though developers can override these as needed. The blog post offers examples of setting up API routes, custom authorization logic, and testing access with valid and invalid tokens, demonstrating the flexibility of AWS Lambda authorizers and encouraging developers to explore further with Pulumi’s resources and examples.

Pulumi has announced an updated pricing structure to better align with user feedback, moving from a per stack to a per user model, aiming to provide more affordable and predictable pricing. The new structure introduces three paid editions: Team Starter for small teams, Team Pro for medium to large teams, and Enterprise for large organizations with advanced needs, while maintaining a free Community Edition for individuals. These changes are designed to support teams of all sizes in delivering cloud applications and infrastructure across various platforms, including AWS, Azure, Google Cloud, and Kubernetes, by offering features such as CI/CD integrations, secrets management, and support options. Pulumi emphasizes its commitment to an open-source community while offering robust production services, and encourages users to explore its new editions with a 14-day free trial. Existing customers on per stack plans can switch to the new model, and custom pricing discussions are available for large teams.

The blog post discusses the advantages of using Pulumi, a platform for infrastructure as code, with general-purpose programming languages to harness software engineering practices like testing. It highlights the importance of testing infrastructure to catch errors and ensure desired attributes, offering various testing options such as unit testing for individual logic components and integration testing for broader deployment scenarios. Pulumi leverages familiar tools and frameworks, enabling testing across multiple clouds and environments. The post also details the process of setting up and running tests using JavaScript and Mocha, along with the Pulumi CLI, while addressing specific testing challenges. Furthermore, it explores Pulumi's integration test framework, which validates deployment behavior and allows runtime verification, ultimately supporting continuous integration workflows and ephemeral environment setups in CI systems like GitHub Actions and AWS Code Services. By integrating these practices, teams can improve productivity and confidence in their infrastructure changes.

Pulumi provides a streamlined solution for creating, deploying, and managing Google Cloud applications and infrastructure using familiar programming languages such as JavaScript, TypeScript, and Python. It simplifies the serverless experience by allowing developers to focus on application code without the need to learn new domain-specific languages or YAML templating solutions. Pulumi integrates seamlessly with Google Cloud Functions, enabling the creation of serverless applications with minimal code, and supports event-driven programming with resources like Pub/Sub topics and storage buckets. It also enhances the development process by managing infrastructure as code, handling deployment complexities, and providing secure management of secrets through its configuration tool. A practical example is illustrated through a Slack Bot application, demonstrating how Pulumi facilitates the integration of cloud resources and serverless code in a unified structure, thereby streamlining continuous deployment and resource management.

Google Cloud Platform offers a wide array of infrastructure services, such as Google Container Engine (GKE) and Google Cloud Functions, which can be effectively managed using Pulumi, a tool that facilitates cloud application development in popular programming languages like JavaScript, Python, and Go. Pulumi allows teams to define and deploy infrastructure as code, providing seamless integration with Google Cloud's features and ensuring reliable and repeatable deployments. It simplifies operations like working with Kubernetes through a single programming model that spans both Google Cloud and Kubernetes environments, and supports serverless functions with ease using Google Cloud Functions. Pulumi's continuous delivery capabilities enable straightforward deployment processes, integrating with services like Google Cloud Build and providing feedback mechanisms for infrastructure changes. Additionally, Pulumi's service offers a comprehensive management interface for tracking deployment history, managing access controls, and navigating resources across Google Cloud and Kubernetes, all while being free and open-source, making it an attractive choice for cloud developers.

Python has surged in popularity due to its adaptability in automating tasks, and is central to tools like Ansible and OpenStack in the DevOps realm. Pulumi leverages Python to redefine "infrastructure as code" by allowing developers to use general-purpose programming languages for provisioning cloud infrastructure and deploying applications, offering advantages such as repeatability and resilience while opposing the limitations of YAML and domain-specific languages. Through Pulumi, infrastructure is treated as software, enabling the application of engineering disciplines such as automated tests and code analysis, thus facilitating swift and confident iterations. An example provided demonstrates how a simple Python script can deploy a static website to AWS S3, showcasing the efficacy of integrating Python’s standard library with Pulumi's infrastructure as code engine, highlighting its capability to handle changes efficiently. Pulumi advocates for reclaiming the "code" in "infrastructure as code," encouraging users to explore its documentation and examples to experience the benefits firsthand.

Pulumi offers a streamlined approach to developing and deploying serverless and container-based applications, with a focus on simplifying the monitoring and logging processes. The Pulumi CLI includes the `pulumi logs` command, which integrates seamlessly into the development workflow to provide insights into application behavior without additional setup, although it currently supports only AWS applications with plans to expand to other platforms like Kubernetes, Azure, and GCP. This feature aggregates logs across various forms of compute, such as microservices and containers, enabling developers to gain a unified view of their applications across different cloud resources. The `pulumi logs` command allows for efficient debugging and monitoring by supporting options for controlling log output, such as scoping logs to specific resources or retrieving logs from a particular time, thus facilitating a more interactive development process. Plans are underway to extend these logging capabilities across multiple cloud providers, enhancing Pulumi's utility for developers working in diverse cloud environments.