October 2021 Summaries

tfenv is a versioning tool for managing multiple versions of Terraform across different environments such as development, testing, staging, and production. It allows users to easily upgrade or rollback to specific versions of Terraform as needed. The article provides step-by-step instructions on how to install, upgrade, switch, and uninstall Terraform versions using tfenv. Additionally, Spacelift is recommended for managing Terraform versioning, state, workflows, policies, configurations, and more.

In the article, the author discusses the challenges faced when managing a Software as a Service (SaaS) product and needing to take administrative actions to assist users or help them debug issues. The author highlights that using built-in admin UIs like Django's can be helpful but also brings potential security risks. They then explore alternative solutions such as WYSIWYG back office tools, cloud-based managed tools, and self-hosted open source tools. However, these options have their own set of trade-offs and challenges. The author then introduces the concept of using Slack for administrative tasks due to its textual interface, access management capabilities, and ease of use for non-technical users. They explain how they built a slackbot called Backoffice Bot that handles various commands related to their SaaS product. The bot uses regular expressions to match commands and has approval flow features for certain destructive commands. Access control is managed by limiting the available commands based on the Slack channel, with separate channels for non-technical users and technical developers. The author concludes that using a slackbot for administrative tasks in their SaaS product has been well received by users and streamlined their workflow without introducing additional tools or processes to maintain.

Polish and US-based startup Spacelift has raised $15m in Series B funding led by Insight Partners to scale its management platform for Infrastructure as Code (IaC) in the US market. The new investment will allow Spacelift to quadruple its engineering team, accelerate product development and build out its commercial team in the United States. Founded in 2020, Spacelift is building a platform to help DevOps teams manage their infrastructure-as-code performance for maximum optimization of scaling businesses.

The article discusses the development and implementation of Spacelift's Azure integration from a technical perspective. It explains how Spacelift aims to provide maximum flexibility and security for its users, particularly in managing infrastructure using Infrastructure as Code tools and CI/CD systems. The post also outlines the challenges faced during the design and development process, such as credential rotation and eventual consistency issues in Azure AD. Furthermore, it provides an overview of how Spacelift's Azure integration works, its goals, and the steps taken to ensure a secure and pleasant experience for users.

Spacelift has introduced a fully-managed integration with Azure to simplify the process of managing Infrastructure as Code for customers. This integration allows users to connect their Azure subscriptions and attach them to stacks, automate credential rotation, and use granular permissions depending on the action being performed. The integration is aimed at new customers who want a quick setup and existing customers who are manually managing their Azure credentials via Spacelift environment variables or contexts.

Infrastructure as code (IaC) is becoming increasingly important in businesses due to its ability to manage complexity and increase visibility into infrastructure configuration. By representing infrastructure as reproducible blocks of code, IaC minimizes errors and provides a clear history of changes. This leads to stable and consistent environments for faster product iterations, decreased risk, cost optimization, and self-documenting code that simplifies onboarding new team members. The benefits of IaC are not limited to engineering teams but can be felt across the entire business, from product development to finance.

Both Terraform and Ansible are open-source DevOps tools with overlapping functions in infrastructure management. However, they have distinct strengths. Terraform is an Infrastructure as Code platform that excels at orchestration/provisioning, while Ansible focuses on configuration management. Terraform supports immutable infrastructure better and can be used for managing the entire lifecycle of resources, whereas Ansible does not support any lifecycle management but shines in handling configuration changes. It is recommended to leverage both tools based on their respective strengths, with Terraform handling orchestration and Ansible focusing on configuration management.