Bringing software development practices to your infrastructure

#JAWSPANKRATION Bringing software development practices to your infrastructure @jennapederson

What is Infrastructure as Code? Code that lets you automate deployments of your infrastructure to facilitate both scaling and quicker, repeatable deployments. @jennapederson

Infrastructure as Code IS Code Version control it Code review it Test it Deploy it to each environment with CI/CD @jennapederson

wo on m e rks my ac hin (or account or region) What happens when infrastructure code breaks? The blast radius is much wider. More resources, regions, accounts, customers, and dollars are impacted. @jennapederson

Why Test Infrastructure? The cloud makes it easier and quicker to provision infrastructure, but there is complexity with that scale. @jennapederson

Slow + Expensive Manual Tests Failing Fast Balance fast and cheap tests with more expensive tests that are closer to the real infrastructure and production environment. System Tests Integration Tests Contract Tests Unit Tests Fast + Cheap

Benefits of TDD Reduced defect rates Improve the overall design Focused on requirements Focused on small chunks Serves as documentation Confidence @jennapederson

The Flow RED REFACTOR 3. Make it better

Write a failing test GREEN GREEN
Write only enough code to make it pass

What is a unit test? Exercises a small part of your application, one unit, and verifies that it’s correct. Get feedback early on to shorten the feedback loop between changes Serves as documentation Can be run in your CI/CD tool Isolated from other resources and external APIs @jennapederson

Unit Testing Infrastructure Code Apply the same process to your infrastructure code. @jennapederson

A unit test checks: If a resource will be created with the correct configuration The correct number of resources will be created Dependencies between resources are correct Interpolated values are correct @jennapederson

Example Unit Test

How do we go from code to infrastructure?

What is an Integration Test? Tests the interactions across different units or modules, or in the case of infrastructure testing, across cloud resources. Verifies your provisioned cloud resources are created and configured as you expect them to be. Gives you confidence in infrastructure at scale and at velocity. @jennapederson

Chef InSpec Open-source framework to test and audit cloud resources IN the cloud Tests are written with a DSL Can be used across teams Test resources that are managed manually or with code Ensures requirements are met at every stage of the SDLC @jennapederson

Example Integration Test

Detecting Drift Use InSpec to compare the desired state with the actual state of your cloud resources. Can be used against any resources, regardless of how they are managed. @jennapederson

Without CI/CD Development Test Staging Production @jennapederson

With CI/CD Development Test Staging Production @jennapederson

Wrapping Up Infrastructure code is like any other code, treat it as such. Testing is never done, even once you reach production. It’s cheaper to detect broken code early. @jennapederson

Thank you! @jennapederson /in/jennapederson jennapederson https://jenna.link/hq7