Terraform configuration files describe the components needed to run a single application or your entire datacenter. Terraform generates an execution plan describing what it will do to reach the desired state, and then executes it to build the described infrastructure. As the configuration changes, Terraform is able to determine what changed and create incremental execution plans to execute.<\/p>\n\n\n\n
In this lab, you will learn how to incorporate Terraform into Azure Pipelines for implementing Infrastructure as Code.<\/p>\n\n\n\n
After you complete this lab, you will be able to:<\/p>\n\n\n\n
- Use Terraform to implement Infrastructure as Code<\/li>
- Automate infrastructure deployments in Azure with Terraform and Azure Pipelines<\/li><\/ul>\n\n\n\n
Review applications required for this lab<\/strong><\/p>\n\n\n\n
Identify the applications that you\u2019ll use in this lab:<\/p>\n\n\n\n
- Microsoft Edge<\/li><\/ul>\n\n\n\n
Set up an Azure DevOps organization.<\/p>\n\n\n\n
If you don\u2019t already have an Azure DevOps organization that you can use for this lab, create one by following the instructions available at Create an organization or project collection<\/a>.<\/p>\n\n\n\n
Prepare an Azure subscription<\/strong><\/p>\n\n\n\n
- Identify an existing Azure subscription or create a new one.<\/li>
- Verify that you have a Microsoft account or an Azure AD account with the Owner role in the Azure subscription and the Global Administrator role in the Azure AD tenant associated with the Azure subscription.<\/li><\/ul>\n\n\n\n
<\/p>\n\n\n\n
Lab 0: Configure the lab prerequisites<\/strong><\/p>\n\n\n\n
In this Lab, you will set up the prerequisites for the lab, which consist of the preconfigured Parts Unlimited team project based on an Azure DevOps Demo Generator template.<\/p>\n\n\n\n
<\/p>\n\n\n\n
Task 1: Configure the team project<\/strong><\/p>\n\n\n\n
In this task, you will use Azure DevOps Demo Generator to generate a new project based on the Terraform<\/strong> template.<\/p>\n\n\n\n
- On your lab computer, start a web browser and navigate to Azure DevOps Demo Generator<\/a>. This utility site will automate the process of creating a new Azure DevOps project within your account that is prepopulated with content (work items, repos, etc.) required for the lab.<\/li><\/ul>\n\n\n\n
Note<\/strong>: For more information on the site, see https:\/\/docs.microsoft.com\/en-us\/azure\/devops\/demo-gen.<\/p>\n\n\n\n
- Click Sign in<\/strong> and sign in using the Microsoft account associated with your Azure DevOps subscription.<\/li>
- If required, on the Azure DevOps Demo Generator<\/strong> page, click Accept<\/strong> to accept the permission requests for accessing your Azure DevOps subscription.<\/li>
- On the Create New Project<\/strong> page, in the New Project Name<\/strong> textbox, type Automating infrastructure deployments with Terraform<\/strong>, in the Select organization<\/strong> dropdown list, select your Azure DevOps organization, and then click Choose template<\/strong>.<\/li>
- In the list of templates, in the toolbar, click DevOps Labs<\/strong>, select the Terraform<\/strong> template and click Select Template<\/strong>.<\/li><\/ul>\n\n\n\n
<\/p>\n\n\n\n
![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/06\/Picture1.png\")
<\/figure>\n\n\n\nBack on the Create New Project<\/strong> page, if prompted to install a missing extension, select the checkbox below the Replace Tokens<\/strong> and Terraform<\/strong> labels and click Create Project<\/strong>.<\/p>\n\n\n\n
![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/06\/Picture2.png\")
<\/figure>\n\n\n\nNote<\/strong>: Wait for the process to complete. This should take about 2 minutes. In case the process fails, navigate to your DevOps organization, delete the project, and try again.<\/p>\n\n\n\n
- On the Create New Project<\/strong> page, click Navigate to project<\/strong>.<\/li><\/ul>\n\n\n\n
<\/p>\n\n\n\n
Lab 1: Automate infrastructure deployments in the cloud with Terraform and Azure Pipelines<\/strong><\/p>\n\n\n\n
In this Lab, you will deploy Infrastructure as Code into Azure by using Terraform and Azure Pipelines<\/p>\n\n\n\n
Task 1: Examine the Terraform configuration files<\/strong><\/p>\n\n\n\n
In this task, you will examine the use of Terraform in provisioning Azure Resources required to deploy PartsUnlimited website.<\/p>\n\n\n\n
- On your lab computer, in the web browser window displaying the Azure DevOps portal with the Automating infrastructure deployments with Terraform<\/strong> project open, in the vertical menu bar at the far left of the Azure DevOps portal, click Repos<\/strong>.<\/li>
- On the Files<\/strong> pane, click the facing-down caret next to the master<\/strong> entry at the top and, in the dropdown list of branches, click the entry representing the terraform<\/strong> branch.<\/li><\/ul>\n\n\n\n
![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/06\/Picture3.png\")
<\/figure>\n\n\n\nNote<\/strong>: Make sure that you are now on the terraform<\/strong> branch and Terraform<\/strong> folder appears within the content of the repo.<\/p>\n\n\n\n
- In the folder hierarchy of the Terraform<\/strong> repo, expand the Terraform<\/strong> folder and click webapp.tf<\/strong>.<\/li>
- On the webapp.tf<\/strong> review the content of the webapp.tf<\/strong> file and click Edit<\/strong>.<\/li><\/ul>\n\n\n\n
![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/06\/Picture4.png\")
<\/figure>\n\n\n\n- Add a new lines for the provider<\/strong> section, the file should like the following example:<\/li><\/ul>\n\n\n\n
CodeCopy<\/p>\n\n\n\n
terraform {\n required_version = \">= 0.11\" \n backend \"azurerm\" {\n storage_account_name = \"__terraformstorageaccount__\"\n container_name = \"terraform\"\n key = \"terraform.tfstate\"\n access_key =\"__storagekey__\"\n }\n}\nprovider \"azurerm\" {\n features {} \n }\n\nresource \"azurerm_resource_group\" \"dev\" {\n name = \"PULTerraform\"\n location = \"West Europe\"\n}\n\nresource \"azurerm_app_service_plan\" \"dev\" {\n name = \"__appserviceplan__\"\n location = \"${azurerm_resource_group.dev.location}\"\n resource_group_name = \"${azurerm_resource_group.dev.name}\"\n\n sku {\n tier = \"Free\"\n size = \"F1\"\n }\n}\n\nresource \"azurerm_app_service\" \"dev\" {\n name = \"__appservicename__\"\n location = \"${azurerm_resource_group.dev.location}\"\n resource_group_name = \"${azurerm_resource_group.dev.name}\"\n app_service_plan_id = \"${azurerm_app_service_plan.dev.id}\"\n\n}\n<\/code><\/pre>\n\n\n\nClick Commit<\/strong>, and, on the Commit<\/strong> pane, click Commit<\/strong> again.<\/p>\n\n\n\n
![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/06\/Picture5.png\")
<\/figure>\n\n\n\nNote<\/strong>: webapp.tf<\/strong> is a terraform configuration file. Terraform uses its own file format, called HCL (Hashicorp Configuration Language), similar to YAML.<\/p>\n\n\n\n
Note<\/strong>: In this example, we want to create an Azure Resource group, App service plan and App service required to deploy a website. We have added the Terraform file to source control repository in the Azure DevOps project so you can use it to deploy the required Azure resources.<\/p>\n\n\n\n
<\/p>\n\n\n\n
Task 2: Build your application using Azure CI Pipeline<\/strong><\/p>\n\n\n\n
In this task, you will build your application and publish the required files as an artifact called drop.<\/p>\n\n\n\n
- In the Azure DevOps portal, in the vertical menu bar at the left of the Azure DevOps portal, click Pipelines<\/strong>. Underneath, select Pipelines<\/strong>.<\/li>
- On the Pipelines<\/strong> pane, click Terraform-CI<\/strong> to select it and, on the Terraform-CI<\/strong> pane, click Edit<\/strong>.<\/li><\/ul>\n\n\n\n
![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/06\/Picture7.png\")
<\/figure>\n\n\n\nNote<\/strong>: This CI pipeline has tasks to compile the .NET Core project. The DotNet tasks in the pipeline will restore dependencies, build, test and publish the build output into a zip file (package), which can be deployed to a web application. In addition to the application build, we need to publish terraform files to build artifacts to make them available in CD pipeline. This is the reason for the Copy files<\/strong> task to copy Terraform file to Artifacts directory.<\/p>\n\n\n\n
- Once you review the Tasks<\/strong> tab of the Terraform-CI<\/strong> pane, click Queue<\/strong> (you might first need to click the ellipsis symbol in the top right corner of the pane to display a drop-down menu).<\/li><\/ul>\n\n\n\n
![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/06\/Picture8.png\")
<\/figure>\n\n\n\nOn the Run pipeline<\/strong> pane, click Run<\/strong> to initiate the build.<\/p>\n\n\n\n
![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/06\/Picture9.png\")
<\/figure>\n\n\n\nOn the Summary<\/strong> tab of the build run pane, in the Jobs<\/strong> section, click Agent job 1<\/strong> and monitor the progress of the build process.<\/p>\n\n\n\n
![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/06\/Picture10.png\")
<\/figure>\n\n\n\nOnce the build succeeds, switch back to the Summary<\/strong> tab of the build run pane, in the Related<\/strong> section, click the 1 published, 1 consumed<\/strong> link. This will display the Artifacts<\/strong> pane.<\/p>\n\n\n\n
![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/06\/Picture11.png\")
<\/figure>\n\n\n\nOn the Artifacts<\/strong> pane, on the Published<\/strong> tab, expand the drop<\/strong> folder, verify that it contains the PartsUnlimitedwebsite.zip<\/strong> file, then expand its Terraform<\/strong> subfolder, and verify that it includes the webapp.tf<\/strong> file.<\/p>\n\n\n\n
![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/06\/Picture12.png\")
<\/figure>\n\n\n\n<\/p>\n\n\n\n
Task 3: Deploy resources using Terraform (IaC) in Azure CD pipeline<\/strong><\/p>\n\n\n\n
In this task, you will create Azure resources using Terraform as part of your deployment pipeline and then deploy the PartsUnlimited application to an Azure app service web app provisioned by Terraform.<\/p>\n\n\n\n
- In the Azure DevOps portal, in the vertical menu bar at the left of the Azure DevOps portal, in the Pipelines<\/strong> section, click Releases<\/strong>, ensure that the Terraform-CD<\/strong> entry is selected, and click Edit<\/strong>.<\/li><\/ul>\n\n\n\n
![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/06\/Picture13.png\")
<\/figure>\n\n\n\nOn the All pipelines > Terraform-CD<\/strong> pane, in the rectangle representing the Dev<\/strong> stage, click the 1 job, 8 tasks<\/strong> link.<\/p>\n\n\n\n
![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/06\/Picture14.png\")
<\/figure>\n\n\n\n- In the list of tasks of the Dev<\/strong> stage, select the Azure CLI to deploy required Azure resources<\/strong> task.<\/li>
- On the Azure CLI<\/strong> pane, in the Azure subscription<\/strong> dropdown list, select the entry representing your Azure subscription and then click Authorize<\/strong> to configure the corresponding service connection. When prompted, sign in using the account with the Owner role in the Azure subscription and the Global Administrator role in the Azure AD tenant associated with the Azure subscription.<\/li><\/ul>\n\n\n\n
![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/06\/Picture15.png\")
<\/figure>\n\n\n\nNote<\/strong>: By default, Terraform stores state locally in a file named terraform.tfstate. When working with Terraform in a team, use of a local file makes Terraform usage complicated. Terraform supports a remote data store, that facilitates state sharing. In this case, we are using the Azure CLI<\/strong> task to create an Azure storage account and a blob container to store Terraform state. For more information regarding Terraform remote state, refer to Terraform documentation<\/a><\/p>\n\n\n\n
- In the list of tasks of the Dev<\/strong> stage, select the Azure PowerShell<\/strong> task.<\/li>
- On the Azure PowerShell<\/strong> pane, in the Azure Connection Type<\/strong> dropdown list, select Azure Resource Manager<\/strong> and then, in the Azure Subscription<\/strong> dropdown list, select the newly created Azure service connection (the one under \u201cAvailable Azure Service Connection\u201d).<\/li><\/ul>\n\n\n\n
![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/06\/Picture16.png\")
<\/figure>\n\n\n\nNote<\/strong>: To configure the Terraform backend<\/a>, we need the access key to the Azure Storage account hosting the Terraform state. In this case, we are using Azure PowerShell task to retrieve the access key of the Azure Storage account provisioned in the previous task. By using Write-Host “##vso[task.setvariable variable=storagekey]$key” we are creating a pipeline variable that we will be able to use on later tasks.<\/p>\n\n\n\n
- In the list of tasks of the Dev<\/strong> stage, select the Replace tokens in Terraform file<\/strong> task.<\/li><\/ul>\n\n\n\n
![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/06\/Picture17.png\")
Note<\/strong>: If you carefully reviewed the webapp.tf<\/strong> file, you should have noticed a few values suffixed and prefixed with __<\/strong>, such as __terraformstorageaccount__. The Replace Tokens<\/strong> task will replace those values with the variable values defined in the release pipeline.
Terraform tool installer task is used to install a specified version of Terraform from the Internet or the tools cache and prepends it to the PATH of the Azure Pipelines Agent (hosted or private).<\/figcaption><\/figure>\n\n\n\n![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/06\/Picture18.png\")
<\/figure>\n\n\n\n- In the list of tasks of the Dev<\/strong> stage, select and review the Install Terraform<\/strong> task. This task installs the Terraform version you designate.<\/li><\/ol>\n\n\n\n
Note<\/strong>: The When running Terraform in automation, the focus is usually on the core plan\/apply cycle, which typically consists of the following three stages:<\/p>\n\n\n\n
- Initializing the Terraform working directory.<\/li>
- Producing a plan for modifying current configuration to match the desired configuration.<\/li>
- Applying the changes determined during the planning stage.<\/li><\/ul>\n\n\n\n
Note<\/strong>: The remaining Terraform tasks in the release pipeline implement this workflow.<\/p>\n\n\n\n
- In the list of tasks of the Dev<\/strong> stage, select the Terraform: init<\/strong> task.<\/li>
- On the Terraform<\/strong> pane, in the Azure subscription<\/strong> dropdown list, select the same Azure service connection you used previously.<\/li>
- On the Terraform<\/strong> pane, in the Container<\/strong> dropdown list, type terraform<\/strong> and ensure that the Key<\/strong> parameter is set to terraform.tfstate<\/strong>.<\/li><\/ul>\n\n\n\n
![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/06\/Picture19.png\")
<\/figure>\n\n\n\nNote<\/strong>: The terraform init command parses all of the *.tf files in the current working directory and automatically downloads any of the providers required to process them. In this example, it will download the Azure provider<\/a>, since we are deploying Azure resources. For more information about terraform init command, refer to Terraform documentation<\/a><\/p>\n\n\n\n
- In the list of tasks of the Dev<\/strong> stage, select the Terraform: plan<\/strong> task.<\/li>
- On the Terraform<\/strong> pane, in the Azure subscription<\/strong> dropdown list, select the same Azure service connection you used previously.<\/li><\/ul>\n\n\n\n
![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/06\/Picture20.png\")
<\/figure>\n\n\n\n- On the Terraform<\/strong> pane, in the Additional command arguments<\/strong> text box, enter -out=tfplan.<\/li><\/ul>\n\n\n\n
Note<\/strong>: The terraform plan command is used to create an execution plan. Terraform determines what actions are necessary to achieve the desired state specified in the configuration files. This allows you to review which changes are in scope, without actually having to apply them. For more information about terraform plan command, refer to Terraform documentation<\/a><\/p>\n\n\n\n
- In the list of tasks of the Dev<\/strong> stage, select the Terraform: apply -auto-approve<\/strong> task.<\/li>
- On the Terraform<\/strong> pane, in the Azure subscription<\/strong> dropdown list, select the same Azure service connection you used previously.<\/li><\/ul>\n\n\n\n
![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/06\/Picture21.png\")
<\/figure>\n\n\n\n- On the Terraform<\/strong> pane, in the Additional command arguments<\/strong> text box, replace the current entry with -auto-approve tfplan.<\/li><\/ul>\n\n\n\n
Note<\/strong>: This task will run the terraform apply command to deploy the resources. By default, it would also prompt for a confirmation to proceed. Since we are automating the deployment, the task includes the auto-approve parameter that eliminates the need for a confirmation.<\/p>\n\n\n\n
- In the list of tasks of the Dev<\/strong> stage, select the Azure App Service Deploy<\/strong> task. Select Azure service connection from the drop-down.<\/li><\/ul>\n\n\n\n
Note<\/strong>: This task will deploy the PartsUnlimited package to Azure app service, provisioned by the
- In the list of tasks of the Dev<\/strong> stage, select the Azure App Service Deploy<\/strong> task. Select Azure service connection from the drop-down.<\/li><\/ul>\n\n\n\n
- On the Terraform<\/strong> pane, in the Azure subscription<\/strong> dropdown list, select the same Azure service connection you used previously.<\/li><\/ul>\n\n\n\n
- In the list of tasks of the Dev<\/strong> stage, select the Terraform: apply -auto-approve<\/strong> task.<\/li>
- On the Terraform<\/strong> pane, in the Azure subscription<\/strong> dropdown list, select the same Azure service connection you used previously.<\/li><\/ul>\n\n\n\n
- On the Terraform<\/strong> pane, in the Azure subscription<\/strong> dropdown list, select the same Azure service connection you used previously.<\/li>
- In the list of tasks of the Dev<\/strong> stage, select the Terraform: init<\/strong> task.<\/li>
- In the list of tasks of the Dev<\/strong> stage, select and review the Install Terraform<\/strong> task. This task installs the Terraform version you designate.<\/li><\/ol>\n\n\n\n
- On the Azure PowerShell<\/strong> pane, in the Azure Connection Type<\/strong> dropdown list, select Azure Resource Manager<\/strong> and then, in the Azure Subscription<\/strong> dropdown list, select the newly created Azure service connection (the one under \u201cAvailable Azure Service Connection\u201d).<\/li><\/ul>\n\n\n\n
- On the Azure CLI<\/strong> pane, in the Azure subscription<\/strong> dropdown list, select the entry representing your Azure subscription and then click Authorize<\/strong> to configure the corresponding service connection. When prompted, sign in using the account with the Owner role in the Azure subscription and the Global Administrator role in the Azure AD tenant associated with the Azure subscription.<\/li><\/ul>\n\n\n\n
- In the list of tasks of the Dev<\/strong> stage, select the Azure CLI to deploy required Azure resources<\/strong> task.<\/li>
- In the Azure DevOps portal, in the vertical menu bar at the left of the Azure DevOps portal, in the Pipelines<\/strong> section, click Releases<\/strong>, ensure that the Terraform-CD<\/strong> entry is selected, and click Edit<\/strong>.<\/li><\/ul>\n\n\n\n
- On the Pipelines<\/strong> pane, click Terraform-CI<\/strong> to select it and, on the Terraform-CI<\/strong> pane, click Edit<\/strong>.<\/li><\/ul>\n\n\n\n
- In the Azure DevOps portal, in the vertical menu bar at the left of the Azure DevOps portal, click Pipelines<\/strong>. Underneath, select Pipelines<\/strong>.<\/li>
- On the webapp.tf<\/strong> review the content of the webapp.tf<\/strong> file and click Edit<\/strong>.<\/li><\/ul>\n\n\n\n
- On the Files<\/strong> pane, click the facing-down caret next to the master<\/strong> entry at the top and, in the dropdown list of branches, click the entry representing the terraform<\/strong> branch.<\/li><\/ul>\n\n\n\n
- On your lab computer, in the web browser window displaying the Azure DevOps portal with the Automating infrastructure deployments with Terraform<\/strong> project open, in the vertical menu bar at the far left of the Azure DevOps portal, click Repos<\/strong>.<\/li>
- If required, on the Azure DevOps Demo Generator<\/strong> page, click Accept<\/strong> to accept the permission requests for accessing your Azure DevOps subscription.<\/li>
- Click Sign in<\/strong> and sign in using the Microsoft account associated with your Azure DevOps subscription.<\/li>
- On your lab computer, start a web browser and navigate to Azure DevOps Demo Generator<\/a>. This utility site will automate the process of creating a new Azure DevOps project within your account that is prepopulated with content (work items, repos, etc.) required for the lab.<\/li><\/ul>\n\n\n\n
- Microsoft Edge<\/li><\/ul>\n\n\n\n