"SessionTitle": "Infrastructure as Code" { "parameters": { "SessionTitle": "Infrastructure as Code" }, "variables": { "Speaker": "Marcel Zehner", "Role": "itnetX CTO" "resources": [ ], }

Challenges in a modern IT landscape More and more complex infrastructures Relations between components Modification of a component has impact on others Configuration drifts Admins don’t follow the processes No change management Manual configuration Slow, errors, inconsistent and boring Too many permissions And tons of other challenges …

2 Approaches for IaC Imperative (procedural) Declarative (functional) Configuration is done step-by-step Automation scripts deploy and configure everything Classic approach (Powershell Scripts, Batch Files, SDK etc.) Declarative (functional) Final state of system is described Automation process configures everything as described Modern approach (Azure Resource Manager, Powershell DSC) And many 3rd Party Tools (e.g. Puppet or Chef)

imperative declarative 2 Approaches for IaC New-AzureVM –VM $myVM New-AzureStorageAccount –StorageAccountName $acct Set-AzureVNetConfig –ConfigurationPath -Path imperative declarative { "$schema": "https://../deploymentTemplate.json#", "contentVersion": "1.0.0.0", "parameters": {}, "variables": {}, "resources": [], "outputs": {} }

Demo Imperative Azure Provisioning 14.11.2018

Azure Resource Manager (ARM) Manages resource providers Resource providers manage resources Azure virtual network Azure sql database Azure LogicApp Azure virtual machine Etc.

Azure Resource Manager (ARM) Resources can be grouped in resource groups Containers Resources that share the same lifecycle Every resource exists in only 1 resource group Access delegation to resource group possible RBAC Resource Group

Consistent Management Layer Azure Resource Manager Consistent Management Layer Tools Visual Studio Microsoft Azure Command line RESOURCE MANAGER API RESOURCE MANAGER Contoso ADFS AAD Curated extensions Azure AD ADFS RESOURCE PROVIDER CONRACT Resource Providers DB

One Azure Ecosystem Microsoft Azure Microsoft Azure Stack Applications Microsoft Build 2016 11/14/2018 1:42 PM One Azure Ecosystem Applications Windows | Linux Java, PHP, .NET, … IaaS PaaS Containers Operations Templates PowerShell, CLI Puppet, Chef, DSC Metrics Diagnostics Experiences Portal Gallery RBAC GitHub … Tools Visual Studio Eclipse … Azure Ecosystem Microsoft Azure Public National Government Service Providers Enterprises Microsoft Azure Stack © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

ARM Templates ARM has an API that understands human-readable JSON Files Declarative, not imperative Can be created in a variety of tools Visual Studio Code Visual Studio with Azure SDK Lifecycle Describe the app Test the deployment in Test Environment Deploy the exact same configuration in the production environment

Source Control & Versioning Follow DevOps processes and best practices Available solutions Visual Studio Online TFS Git/Github

Demo Creating and deploying an ARM template 14.11.2018

Powershell DSC Overview Declarative approach for VM configuration VM can be deployed with ARM Step 2 would be the configuration of the VM MOF file assigned to VM One or more, depending on requirements and used technologies Can be pushed or pulled Local configuration manager consumes the configuration Monitor only Remediate

Powershell DSC Step-by-Step Create DSC Configuration File Import into Azure Automation Compile Configuration File into Node Configuration Files One MOF per Role Existing Files are overwritten Add DSC Nodes to Azure Automation Pull Server Azure VMs (VM DSC Extension) Any other VMs Assign Node Configuration to VM

Powershell DSC Step-by-Step

Demo Managing VMs with Azure Automation DSC 14.11.2018

Conclusion Use declarative approach where possible Use Version Control Azure Resource Manager (ARM) Powershell DSC, Azure Automation DSC Use Version Control VSO, TFS, GitHub etc. Visual Studio and Powershell are your friends, not your enemies!

"SessionTitle": "Infrastructure as Code" { "parameters": { "SessionTitle": "Infrastructure as Code" }, "variables": { "Speaker": "Marcel Zehner", "Role": "itnetX CTO" "resources": [ ], }