Azure DevOps Pipelines with Terraform and Stages
HTML-код
- Опубликовано: 15 июл 2024
- In this video, we build an Azure DevOps pipeline with stages to deploy resources built with Terraform. We start by reviewing the environment including the code and the storage account used for the backend Terraform data. We add the Terraform extension to DevOps and create a multiple stage Azure DevOps pipeline with tasks to initialize, verify plan and apply the Terraform configuration. Next, we create a second pipeline to run the destroy command to clean up the deployment.
00:00 - Start
01:37 - Demo Overview
02:59 - Add a Service Connection
04:17 - Add the Terraform Extension
05:45 - Create the Pipeline
06:45 - Add the Validate Stage
08:04 - Add Terraform Install Task
09:03 - Add Terraform Init Task
10:41 - Add Terraform Verification Task
11:18 - Add the Deploy Stage
12:41 - Create the Deployment Jobs
13:54 - Add Terraform Plan Task
14:33 - Add Terraform Apply Task
15:09 - Run the Pipeline
17:23 - Create a Destroy Pipeline
Links:
Terraform Playlist
• Getting Started with T...
Azure DevOps Playlist
• Azure DevOps
Files on GitHub
github.com/tsrob50/PublicDevOps
Zero to Hero with Azure Virtual Desktop
www.udemy.com/course/zero-to-...
Hybrid Identity with Windows AD and Azure AD
www.udemy.com/course/hybrid-i... 
Наука
![XO (Only If You Say Yes) - ENHYPEN エンハイプン 엔하이픈 [Music Bank] | KBS WORLD TV 240712](http://i.ytimg.com/vi/wBT1bKKwPTo/mqdefault.jpg)
Great video, we're moving away from classic pipelines so this was very helpful.
Great video. Really did a good job of explaining yaml stages and use of terraform tasks.
great explanation- thank you!
After a bunch of googling, this video was gold. Thank you!
Thank you so much for making this video. It took a process that is quite daunting to new DevOps engineers and made it very easy to follow.
Thank you so much for making this video. Amazing
Thanks Travis, this was a great video for getting started with pipelines using yaml rather than using the classic pipeline builder UI
Exactly what I was looking for. Tyty!
Great Help Travis!
Wow, Great Explanation. This helped me to clear my concepts from basic . Very Professional !! Thanks a lot !
I super appreciate this video. Thank you! This was an awesome tutorial.
Great teaching .to the point what is needed . Thanks for the content
Wow Its nice video. Explanation to deploy different stages using azure pipeline. facing couple of issues regarding destroy stage. finally we fixed based on your video reference. Thanks sooo muchhh.
amazing.. excellent.. superb explanation
Thank you, everything is well explained in a simple manner.
Glad it was helpful!
Wow! I just witnessed a professional at work. Subscribed.
Thanks for the sub!
I dont know if I commented this earlier but what a great video.
Great video
Awesome! thanks
Clear cut what was needed.
You rock, keep it coming
Thanks!
thankyou sir ❤
Nice!
this is just wow !!
Thanks!
Jai ho
Thanks for your wonderful videos. just wondering if you have done any CI/CD videos?
You explained very well each steps of YAML pipeline , can you please make video for multistage deployment as well. Appreciate your help and couldn't find YAML file which you provided gitrepo
Much appreciated your efforts.Need to understand how to deploy azure resources like vent and subnet and vm & SQL paas and kV for different subscription via azure pipeline also queries on branch pipeline for the respective environment.
Great video. But how does this approach accommodate different environments? Wouldn't it be better to run the majority of these commands in the release pipeline, so you can distinguish the environment in the release lanes?
Great job! Super easy to understand and follow, thank you very much.
Being said that, I have a question:
How do you manage the storage for multiple deployments? Do you use the same?
Let's imagine that we have a pipeline to deploy RG1 for project1.
Another pipeline to deploy RG2 for project2.
All this TF status can be/should be stored in the same blob container?
How I can use a TF destroy only for RG1 and keep RG2 available?
Thanks in advance
Have always loved your videos my man. First time posting a question here. What is a solution in Azure or Windows to auto-deploy and Azure File Share to Windows VMs as a drive letter? I have tried using the PowerShell connect script to run on startup via GPO (for servers or users in OUs) but have been unsuccessful. Thanks!
Great video. I would like to know how to import existing resources in my pipelines.
Thanks
Excellent video. Question: How do we move the lock.hcl file back to our ADO repository ?
great explanation, though I was not able to find pipelines in git repo only tf files are stored.
Hi Travis. What’ll happen if you enable trigger to the main branch and make a code change and commit. Will it re-create the same resources? From what I understand it won’t because the current resources will exist in tfstate. Trying to understand how this will work in a prod environment when code changes should deploy new infra. Thanks
6:26 where do you find the backend storage key? Is that from ADO or from the Azure portal?
how did you get the variables you are specifying under variables from line no 11
in the gitignore you have the .tfvars, yet the file is and needs to be present in the repo?
Its detailed . thank for help ,is it possible to share this sample pipeline ?
Hi, how did you use variables in backend block in terraform configuration? Terraform doesn't allow to do that
Hi Travis. If I ran terraform in visual code ebrything seems to work. When I push this to devops and ran the pipeline , it error on unit stating tfstate rg , storage and tfstae already existed. How do I run pipeline without getting errors saying the tfstae has change?
Great! but I have a quick question. What if I need to add an environment between the two stages?? For manual approval.
Say I have created the same, two stages, first one to validate and plan. and if plan is completed successfully it moves to the second stage, which is apply stage. But before I run the apply I want to make sure that someone goes manually and approve the pipeline to apply the changes ....
There is a task called "manualvalidation". You can add this in between the "stages" and the recipients can do a validation to decide whether to approve or not.
@travis is there a way to create the back end storage in the project itself or is that just not best practice?
The backend storage has to be available for the initialization. It has to be in place before apply command runs.
This only works if first manually create the resource group, storage account, and container in Azure. If fails otherwise!
So because it needs terraform installer in yml file on top inside stages, you can just put - validate, apply, destroy without preceding with 'terraform' keyword?
E.g.:
just 'validate' instead of 'terraform validate' cmd?
Please correct me if I am wrong.
I ran into a problem, no file was created for the tfstate in the container.
Hi @Travis Is there a way we can avoid initializing terraform multiple times in the pipeline ??
Thanks,
Satish
Hi! I believe you can use self-hosted agents when running your pipeline and that would allow you to preserve data and pass it on from one stage to the next. Haven't really tried it myself though
@scerons that makes sense will try once...thank you
@Travis if we are not providing the working Directory in the pipeline steps how this pipeline knows where is the code?
did you manage to find the answer?
Anyone know a workaround for: Failed to get existing workspaces: containers.Client#ListBlobs: Failure responding to request: StatusCode=403. The App Registration has "owner" and Storage Account Blob owner. Thx?
I found it, it is due to restricting the storage account to a specific IP. It seems that for this to work, the storage account must be "accessible from all networks", even if you have "allow azure services on the trusted services list to access this storage account" selected.
╷
│ Error: No configuration files
│
│ Apply requires configuration to be present. Applying without a
│ configuration would mark everything for destruction, which is normally not
│ what is desired. If you would like to destroy everything, run 'terraform
│ destroy' instead.
╵
##[error]Terraform command 'apply' failed with exit code '1'.
##[error]╷
│ Error: No configuration files
│
│ Apply requires configuration to be present. Applying without a
│ configuration would mark everything for destruction, which is normally not
│ what is desired. If you would like to destroy everything, run 'terraform
│ destroy' instead.
I have the same issue, did you manage to resolve it?
Destroy pipeline is not deleting the resources 😑
Well
The video is blurry
thank you for you best content, I am getting error running azure devops pipeline , its not initializing terraform , I appreciate your suggestion, /opt/hostedtoolcache/terraform/0.14.11/x64/terraform init -backend-config=storage_account_name=xxx -backend-config=container_name=xxx -backend-config=key=xxx -backend-config=resource_group_name=xxx -backend-config=arm_subscription_id=xxx -backend-config=arm_tenant_id=*** -backend-config=arm_client_id=*** -backend-config=arm_client_secret=***
##[error]Error: There was an error when attempting to execute the process '/opt/hostedtoolcache/terraform/0.14.11/x64/terraform'. This may indicate the process failed to start. Error: spawn /opt/hostedtoolcache/terraform/1.0.0/x64/terraform ENOENT
Finishing: terraform init