►
From YouTube: Demo Theater: Practical Path to Infrastructure as Code at Scale - Sean O'Dell, Spacelift
Description
For more Continuous Delivery Foundation content, check out our blog: https://cd.foundation/blog/
Demo Theater: Practical Path to Infrastructure as Code at Scale - Sean O'Dell, Spacelift
Infrastructure as Code (IaC) has become fundamental to managing any cloud, infrastructure, or service for many individuals, teams, and organizations. With the expansion of Multi-Cloud and distributed teams, IaC tooling has struggled to maintain the agility and value that it originally set out to solve. Infrastructure management can and should follow basic DevOps principles and practices, but many organizations are beginning to see a gap or change in awareness, collaboration, and teamwork.
This session will focus on solving a few of the challenges that teams face when managing their infrastructure as code at scale!
A
All
right,
let's
get
going
it's
almost
lunch
time.
My
name
is
sean
o'dell.
I
lead
the
developer
advocacy
at
space,
lift
and
we're
gonna
have
a
little
bit
of
fun.
It's
15
minutes
we're
not
going
to
do
like
a
major
product
demo,
but
just
a
little
bit
about
myself.
I
am
a
reformed
enterprise.
Architect
I
used
to
only
care
about
infrastructure,
never
apps
right.
I
did
once
upload
my
keys
or
my
peers
keys
to
get
hope.
That
was
fantastic.
I'll
talk
about
that
in
my
journey
today
I
am
always
customer
community.
A
First,
I
was
a
customer
to
begin
with
and
I
am
a
texan
and
I
prefer
seafood
over
steak
any
day
of
the
week.
So
and
yes,
there
was
a
soccer
reference.
So
what
is
space
lift?
We
are
infrastructure
s
code.
I
assume
we
are
ci
for
infrastructures,
card
purpose
built
and
we'll
talk
about
that
as
we
as
we
navigate
through.
Hopefully,
everybody
knows
what
infrastructure
is
code
is
if
you
don't.
A
Let's
have
a
separate
conversation,
so
here's
a
little
bit
of
the
journey
starting
locally,
just
as
any
app
dev
does
we
start
locally?
We
take
our
code.
We
build
it
locally,
we
test
it,
we
break
it
and
that's
really
where
it
all
begins.
So
here's
a
little
bit
of
a
depiction
kind
of
what
it
looks
like
from
a
from
a
terraform
perspective,
I'm
a
user.
A
I
put
a
few
things
together
and
I
run
a
plan
I
run
on
apply
and
then
I
push
it
to
my
provider
of
choice
and
then,
ultimately,
it
gets
pushed
right.
The
key
here
is:
it's
done
locally.
So
with
me,
if
there's
anybody
else
involved,
it
gets
a
little
bit
different
and
where's.
My
state
where's
my
configuration.
A
A
They
built
this
fine
application
from
infrastructure's
code,
all
the
way
from
nothing
to
application,
fully
running
and
deployed,
and
the
key
is
what
I
think
is
interesting
about.
Ci
series
is
as
infrastructure
as
code
is,
you
can
take
a
lot
of
different
things
and
you
can
glue
it
together,
just
like
any
sort
of
app
dev
environment
and
this
example.
It
worked
right.
There
were
seven
of
us
on
the
team.
A
We
figured
out
how
to
make
it
work,
mostly
with
gitlab,
but
it
wasn't
perfect
and
there
were
some
gaps
right
and
so,
as
iac
has
kind
of
come
through.
Some
of
the
journeys
that
have
or
some
of
the
challenges
that
have
come
about
in
these
in
these
different
times
is
isolated
development.
Right.
If
I
was
working
on
something
so
I
said,
I
uploaded
my
peers,
github
keys.
Let
me
give
you
an
example.
A
This
was
five
or
six
years
ago
now,
but
we
were
doing
things
locally,
one
of
my
peers.
He
made
some
changes.
He
had
a
aws
shared
key
and
private
key
inside
of
a
yaml
file
that
I
didn't
know
about.
He
built
it
gave
it
to
me.
I
didn't
read
it.
I
didn't
look
at
it
and
guess
who
uploaded
that
to
a
public
repo
on
github
me
built
locally
shared
with
me.
I
took
the
blame
for
it.
We
still
laugh
about
it.
A
A
But
we've
repurposed
tools,
and
sometimes
those
aren't
built
perfectly
or,
as
this
lovely
graphic
tells
you
my
code
works,
but
I
have
no
idea
why
and
it's
the
same
way
with
infrastructure,
same
thing
that
we
that
we
do
so
in
that
journey
oss
actually
solved
some
of
the
challenges
right.
One
of
those
things
was
terra
grant,
which
I'm
a
big
fan
of,
and
I
love
the
just
kind
of
quick
snippet.
On
the
right
hand,
side,
it
is
kind
of
the
root
folder
structure.
A
The
real
issue,
for
me
kind
of
personally
that
came
about
is
something
that
atlantis
tried
to
solve
and
is
solving
from
an
open
source
perspective,
and
this
is
really
about
pull
requests.
Okay,
so
yes-
and
you
would
hope
that
if
you're
doing
things
that
are
in
a
code
or
a
codified
fashion,
you
would
have
pull
requests.
You'd
have
mergers.
You
would
have
comments
all
those
good
things
well,
that
was
not
available
in
kind
of
the
initial
iterative
iterations
of
infrastructure's
code
and
so
atlanta's
came
along,
provided
this
visibility
provided
some
collaboration.
A
If
I
deployed
it
or
if
I,
if
I
submitted
a
pr,
somebody
else
was
able
to
come
along
and
approve
it
or,
more,
more
importantly,
just
validate
it,
and
so
we
started
to
work
together
in
a
collaborative
team,
but
unfortunately
that
only
goes
so
far,
and
so
we
still
had
some
challenges.
There's
more
than
just
terraform
right.
I've
got
cloud
formation
templates,
I've
got
pollumi,
I've
got
azure
resource
manager.
I've
got
a
bunch
of
different
ways
that
I'm
producing
code
for
infrastructure,
and
so
you
know
came
about,
but
now
there
are
individual
teams.
A
Maybe
we
have
created
some
silos
like
I
did
in
my
previous
example,
as
I
mentioned
all
the
way
to
lack
of
visibility.
Think
of
the
fact
of
you
know
if
I
provision
something.
Maybe
I
don't
necessarily
know
what
my
other
teammates
are
doing.
We
overlap
each
other
right.
You
run
into
a
lot
of
problems,
changes,
diffs
and
so
on,
and
I
mean
these
are
common
challenges
in
the
app
dev
world.
Not
necessarily,
we
didn't
really
think
about
those
from
an
infrastructure
perspective,
but
now
that
we're
doing
it
in
code.
A
This
is
where
we
are,
and
the
other
thing
that
really
is
important
to
me
is
the
security
aspects,
and
so
I
I
got
my
I
really
first,
when
I
got
into
I.t,
obviously
outside
of
support.
I
worked
in
enterprise
security
and
compliance
yeah
such
a
fun
job,
but
even
to
this
day,
I
still
care
about
security
right,
and
so
one
of
the
things
that
we
couldn't
really
bring
into
the
end
of
the
equation
in
devops
is
adding
security
into
that
paradigm,
and
so
that
was
also
an
additional
challenge.
A
Yes,
it
took
me
eight
minutes
to
get
there
but
spacelift
one
of
the
things
we're
trying
to
do
and
we're
you
know
continuing
to
work
with
our
our
community
and
our
customers
is
to
develop
all
of
these
things
together
and
really
build
a
highly
collaborative,
secure
platform
that
allows
each
organization
to
do
what
they
think
is
best,
and
that
means
in
some
organization
some
of
our
customers
right,
one
team:
does
it
a
little
bit
differently
than
another
team?
That's
okay!
A
Right!
We
want
to
allow
that
if
you
want
to
use
a
certain
on
the
app
dev
side,
if
you
want
to
use
the
library
or
if
you
want
to
use,
you
know,
kubernetes
versus
you
know
a
a
a
far
gate
or
a
lambda.
Something
of
that
nature
right.
You
give
those
options
on
the
infrastructure's
code
side.
We
want
to
do
the
same,
but
we
also
want
to
do
this
in
a
collaborative
way,
and
so
that
is
where
oops
went
too
far.
Let
me
go
to
a
demo
here
and
act
like
I've.
A
So
this
is
space
lift.
Hopefully
my
internet
holds
up
with
me
and,
and
you
know
once
again,
we
support
terraform
paloomi
clan
information,
templates,
kubernetes
and
then
the
other
thing
is
we're
also
going
to
do
the
integration
to
your
public
cloud
provider
for
you.
So
it's
impossible
for
me
to
upload
my
keys
to
a
public
repository
right,
so
we're
doing
a
lot
of
the
a
lot
of
the
work
for
you
and
not
having
sean
moments.
A
So
let
me
take
a
quick
view
of
one
of
our
deployments
and,
as
you
can
tell,
this
is
pretty
specific,
we're
looking
at
drift
detection
on
purpose
and
in
the
example
one
of
our
peers,
jean-marc,
he
actually
was
doing
a
an
ami
differential,
and
so
in
this
case
he
was
basically
doing
some
validation
checks
and
what
we
wanted
to
do
in
the
plan
phase
is
we
are
looking
for.
You
know.
Obviously
we
run
a
terraform
apply,
we're
making
change
to
a
bucket.
Did
it
make
a
you
know,
necessary
change?
Did
it
break
something?
A
A
Come
on
internet
work
with
me
demo
gods,
there
we
go
so
in
this
example,
I
made
one
specific
change
to
the
environment,
and
so
what
we've
done
is
we?
You
can
actually
add
comments
from
a
from
a
team's
perspective.
As
you
can
see
here
and
say,
hey,
this
looks
really
good.
No,
this
looks
terrible.
Why
did
you
make
this
change?
This
is
going
to
break
something
that
I'm
building
all
the
way
to
adding
different
policies
and
different
resources.
So
let
me
look
at
the
policies.
A
Real,
quick
we've
integrated
with
opa
our
open
policy
agent,
very
clear,
and
we
allow
you
to
have
push
policies
all
the
way
to
login
policies
and
trigger
policies.
So
if
you
have
a
maybe
a
change
to
one
of
your
infrastructure
environments
that
happens
to
be
kind
of
the
core,
it
will
then
trigger
off
additional
changes.
A
This
is
our
you
know,
kind
of
a
policy
around
terra
grant
from
a
mono
repo
perspective,
and
it
allows
you
to
bring
a
lot
of
the
same
tarot
grant
person.
You
know
terra
grunt
perspectives
and
purviews
into
it
as
well
and
then
just
to
let
me
show
a
couple
things,
because
I
know
this
always
comes
up.
Is
you
know
what
do
we
supply?
Where
do
we
support
all
of
our
vcs
providers
native
support?
We
can
add
comments.
A
We
could
you
know,
integrate
really
easily
and
then
also
with
the
public
clouds,
aws
azure,
google
as
well,
and
so
here's
a
quick
view
of
all
of
the
runs.
I
wanted
to
show
this
real
quick.
This
is
two
very
specific
ones:
terraform
drift
detection,
as
well
as
our
cloud
formation
aws
example,
which
is
yeah,
something
that
we
we
often
do
in
a
you
know.
You
know
fun
fun
moment.
I
don't
know
why
apple
is
doing
that,
so
any
comments
or
questions.
A
I
ran
through
there
real
quick,
but
I
wanted
to
kind
of
give
a
highlight-
and
I
know
it's
lunch
time
so
I
wanted
to
be
respectful
of
your
time
as
well.
So
any
comments,
questions
thoughts.
If
not,
we
have
a
booth
come
come
by
check
us
out
a
couple
things
to
note.
I
think
some
of
my
team
are
in
the
back
they're
gonna.
If
you
want
a
t-shirt,
you
can
have
a
t-shirt.
We
have
a
happy
hour
tonight
if
you're
interested
in
joining
and
if
you
want
to
win
a
lego
space
shuttle
discovery.
A
You
can
also
do
that
because
we're
space
lift
like
same
theme
right.
It's
the
way
to
go,
but
yeah
it'd
be
cool
to
hang
out.
I
hope
you
enjoy
cdcon.
I
know
for
us
it's
our
very
first
one
because
well
we're
startup,
but
we'd
love
to
have
a
conversation,
see
what
you're
doing
and
see
how
we
all
can
work
together.
Awesome
thanks.
Everybody.