Crazy fast Kubernetes Automation with Terraform

[@TechnoTim]

Nice work Christian! Great video!

[@christianlempa]

Thank you! :) I've learned so much about Kubernetes with the help of your videos!

[@TechnoTim]

@@christianlempa That's awesome! Glad they helped!

[@beyond990]

Fantastic video, this gave a nice run down of how all the components are connected together. Keep up your great work.

[@PhilipFreude]

The kubernetes terraform provider introduced a kubernetes_manifest resource a while back. I think it’s a better choice than the kubectl provider especially because it’s more readable (not just a single multiline string) and it’s an official provider (in contrast to the third party kubectl provider).

[@christianlempa]

Nice, I didn't know that

[@ronaldm.1556]

you could create a custom helm chart for these yamls and deploy the argocd on you cluster, this is a MUST have! you gonna love it

[@christianlempa]

Sounds like a great idea, currently learning CI CD is one of my topics to learn for this year.

[@kaveh6161]

Could you please elaborate on this? I would love to implement your idea, but I need more clues to start. Thanks.

[@MichaelBransonCoach]

bloody hell! and sooo awesome. Fantastic video! Love the speed of delivery and single command deployment solutions

[@christianlempa]

Thank you very much!

[@ANTGPRO]

Perfect channel for professionals.

[@christianlempa]

Thanks ;)

[@danchisholm1]

Christian thanks very much. I've been trying to understand for weeks where terraform stops and Kubernetes starts.

[@christianlempa]

Glad it was useful! :)

[@PhilipFreude]

Nice Video! However, try not to use the „depends_on“ keyword, but instead you should reference the dependent resource. For the „helm_release.traefik“ resource you should set „namespace = kubernetes_namespace.metadata.0.name“. This way terraform can figure out the dependencies automatically and most importantly you don’t repeat yourself (i.e. when changing the namespace name you only need to change it in one location). Using „depends_on“ is not a good practice, and you will thank me once you terraform codebase reaches a certain size.

[@capps1994]

Yeah terraform will implicitly wait for the value you have referenced

[@christianlempa]

Thank you, that's such a great tip ;)

[@Michael201078]

Hi. I've just started to learn DevOps. Your video is great. Explanation is super.

[@christianlempa]

Thank you so much 😃

[@mrpheo]

love the drawings in your videos, is that just an ipad app and you are screen capturing the ipad?

[@christianlempa]

Thanks ;) It's just my Samsung Galaxy Tab as an external screen and recording in OBS

[@OlegKorsak]

why not to let traefik to do certificate stuff?

[@coolrazor6835]

Incredible video! I’m totally going to be forking this one and putting my own spin on it. Very nicely done!

[@christianlempa]

Thank you! :)

[@mchannel1365]

why use Terraform when you can do all by Rest APIs ?

[@josem2100]

​@@mchannel1365 why implement what terraform does when you have terraform?

[@jamallmahmoudi9481]

Hi, Christian Great video , thank you so much for sharing🙏👌

[@KD_Puvvadi]

man, my love for terraform exceeds love for myself

[@olivierbourdon2397]

Great video as usual. Just wondering if some of the new features of latest Terraform versions like pre and post conditions could solve some of the timing issues you mentioned and therefore get rid of the timers ;-)

[@christianlempa]

Thanks for the idea, I think that would be great to solve some of the problems here ;)

[@Az9rtt]

This is super cool. Could you please make it a little more sophisticated using redis, postgresql ha, minio and perhaps argocd to deploy an app repository?

[@christianlempa]

Wow, Argo CD that's something I don't know anything about :D It's on my list to learn for this year.

[@Deevg-f9e]

Very informative. I tried to create a GKE auto mode cluster with a shared VPC network(private IP range), and assigned necessary IAM roles to the GKE hosted service project with (compute.engineadmin and container.admin roles). While provisioning the gke auto pilot cluster, getting this exception as - " Error: Error waiting for creating GKE cluster: All cluster resources were brought up, but: only 0 nodes out of 1 have registered; cluster may be unhealthy." Verified the logs for any key findings, but not helpful. Any thoughts/references on this error scenario to troubleshoot ??

[@zceld]

Hi, what a cool video-it all seems like magic. It's a pleasure. By the way, I'm new to all this sysOps and k8s stuff. In fact, to learn, I'd like to set up an automated k3s on a VPS with Terraform. I'm mentioning it in case you'd like to set up a proof of concept someday! Thanks!

[@christianlempa]

So cool! Thank you :)

[@eladdieyo84]

So if you can use terraform to create tbe resources, and kubernetes to orchrstrate the deployment, with Argo CD to build the solution after tested development... doesnt this make it a No Ops architecture?

[@KR1ML0N]

Awesomejob, keep up the quality content. 🙂

[@christianlempa]

Thank you! Will do!

[@dragonmax2000]

Though I like this video, the pace is so high that anything meaningful is lost. Pure entertainment is the highest outcome of this.

[@marcosx86]

16:00 you can use both atomic and wait equals true on the cert manager helm release and evict a time_sleep resource

[@christianlempa]

Thanks mate!

[@guidob_work4708]

i am trying to start my own homelab, but not knowing where to start actually. anything you can share on that ? like having certificates inside my homelab and pc/laptop, so that the pages do not show errors all time.

[@dadrad]

Great video! I never messed with the time_sleep resource, very cool.

[@oakfig]

Nice shirt! Where do we get it at?

[@christianlempa]

Great to hear!

[@fabmartel]

you dont have the Terraform for create the cluster Kubernetes on Premises (no cloud) ?

[@gookulgopan]

may I know which tool you are using for that handwritten visualizations ?

[@christianlempa]

I think that time I was using explain everything, now I’m using excalidraw

[@asalehi2255]

awesome video, a lot of effort but well worth it. Thank you for video.

[@christianlempa]

Thanks 😊

[@Spydaw]

This is really awesome, thank you so much for sharing ;)

[@christianlempa]

Thank you so much! And also for your help with that :D

[@Spydaw]

@@christianlempa You are always welcome ;)

[@ummeamjad1191]

Please make a video of deploying eks cluster using Terraform

[@infocus-media]

Very funny Christian , "If that does not sound very interesting to you, then I don't know what you are doing here?", well kind sir, I was enjoying a cup of French Coffee with an English friend of mine, in an Antwerp Coffee shop when I heard a knock on the door, and voila there was this guy called Christian, peddling software and I thought to myself , "It is probably going to be more interesting listening to him than trying to understand the Englishman's DRY sense of humor, and we speak IT does not matter where you from. I can even watch a Polish IT guy on KZbin and just by the way he pulls his face and angrily points at a non existing point in the sky I instinctively know he is getting problems from a Load balancer somewhere in Das Bundesrepublik and there is a Data Center in Berlin that is guarded by a guy called Christian Lempa who does not want to give him access the iDRAC on his New Dell.

[@rebelwwg1wga431]

i'd like to make something like zillow... so i need have a way to sccale huge. I am thinking about using hetzner infractucture and especially their new s3 option. Any tips how to do it? I am thinking to make almost auto infractucture which will scale/load balancing what needed... thinking to use for start hetzner cloud or vps during first few or more months during reating software, testing and first customers/stages... then using probably their dedicated servers + s3... do not know yet what to do with database... something like amazon rds clone or maybe mongodb?

[@christianlempa]

Sorry, but I can't say anything about Hetzner because I never used it myself :/

[@derekcarday]

Thanks for the high quality videos.

[@christianlempa]

You’re welcome ☺️

[@yogeshdharya3857]

That Gopher T-Shirt though

[@christianlempa]

🙏😊

[@infologiax]

-Interesting videos as usual, many thanks :)

[@christianlempa]

you're welcome :)

[@TakeOnMe5]

My head just got terraformed 🤯

[@cheebadigga4092]

Curious: why did you set "proxied" to false at the last step (nginx DNS record)? Any particular reason or didn't that matter to you in that case?

[@christianlempa]

Mainly to show how the cert-manager certificate is working.

[@cheebadigga4092]

@@christianlempa ahhh good point.

[@tanchwa3740]

So I haven't been able to find a good answer for this online. When is it appropriate to run ingress on bare metal/ terraform versus through the ingress controller object in Kubernetes?

[@tanchwa3740]

Or was this actually a k8s object since it got run through a helm chart?

[@Tech-Junkie]

Thanks for the high quality content. There's one thing I would like to ask. Does teraform have any kind of code encrypting/compiling function so that people got the encoded copy they cannot read the source code but able to run it.

[@KD_Puvvadi]

while running terraform plan, you can add -out with output file like "terraform plan -out kubclt" and you can run "terraform apply kubctl"

[@bxhehehehdhdhhd1443]

Yes the terraform plan provides the binary to run and configure your infrastructure

[@zixxrElixir]

Great video with a lot of good detail! I'll say though Terraform is great at a lot of things except for Helm deployments...very static compared to something like ArgoCD.... ask me how I know.

[@christianlempa]

Thanks! :)

[@cariyaputta]

Thanks. Simple to follow.

[@christianlempa]

Thanks for watching :)

[@benjamin3044]

Give us an OpenTofu tutorial next!

[@sagarbasutkar1901]

How to run this via cloudbuild yaml

[@marcelomarcon8216]

What is this vscode theme that you uses ?

[@AloeusCapitalManagem]

you can also terraform virtio which I found nicer (I think everyone would have their own opinion about this) than proxmox for local projects

[@ajk7151]

excellent video! thank you.

[@christianlempa]

Thank you! :D

[@vincentmetallive]

ok first of all, GREAT RESOURCE!, Thanks! I have some trouble converting this to a non-civo based cluster (I run on Azure). Could you tell me how the cluster knows to connect the loadbalancer to traefik ? Can this be forced ?

[@christianlempa]

Hey mate, sorry I only have done it on Civo. I guess it depends on the Terraform Provider for Azure how to do that, but they should have a similar config.

[@vincentmetallive]

@@christianlempa thanks!

[@kaveh6161]

F#%^ing awesome. Thanks for sharing 🤗

[@christianlempa]

Glad you enjoyed it

[@АлександрСтекольщиков-у6ч]

man, you are the best👍 thanks

[@JackLogan90]

Amazing! Thank you!

[@christianlempa]

Thank you too!

[@shashank.bharadwaj]

Hey Christian! Great video as always!. I have a video request showcasing the proper way to setup WordPress with SSL using Nginx which is reverse proxying to an Apache back-end. I'm really stuck from 2 days and not much help online on the forums. Would really love it if you make an in-depth video with SSL in the picture with WordPress. At some point i had WordPress pages working but i couldn't login to wp-admin as it always told "you are not authorized to access this page". All permissions are setup correctly. It was working before with Apache. I believe it has to do something with the reverse proxy which messes up wp-admin dashboard. Hoping to get a solution from you! As always Thanks a bunch!

[@christianlempa]

I currently have too many projects to do. But I will at some point look into that. However I plan a slightly different setup with an HA PHP-FPM based setup of wordpress on Kubernetes. Will be a bit of a challenge 🤣

[@Fiox789]

How do I get ahead at work if everyone they hire or that remains in a similar position knows more than I do? Room full of engineers I'm the newest and dumbest, currently a hiring spree these new people know way more than I do leapfrog over me for raises and promotions

[@farzadmf]

Very nice video, impressive!

[@christianlempa]

Thank you very much!

[@abdulmunir3662]

this is amazing, really help on traefik part as i was trying to do same with AKS , can you share refence link for traefik for the helm parameter in terraform?

[@christianlempa]

Thank you so much! Which reference do you mean?

[@abdulmunir3662]

@@christianlempa the parameter for traefik helm chart in terraform like this one set { name = "ingressClass.isDefaultClass" value = "true" }

[@seanknowles9985]

Man I wish someone would show us how to deploy multiple gcp backend services, setup ingress and load balancer and then setup proper custom domains with either Terraform or Pulumi. Could start with a Cloud run example.

[@bmejia220]

You can do it Sean!

[@seanknowles9985]

@@bmejia220 if someone would actually show the end to end solution I can probably do it ;)

[@allisondealmeida]

This project can be applied in On-premises?

[@christianlempa]

The projects would need some adjustments, but you could in theory use the same tools, yes.

[@wilburdietz1780]

Bro....awesome ..ty

[@SaikumarN1993]

Lovely mate..

[@christianlempa]

Thank you! Cheers!

[@kebab-case]

Can you do a video on Harvester

[@christianlempa]

Not in the near future, maybe I'll do at some point.

[@Falc0n68]

Don't you need 3 nodes for it to be HA?!

[@StanyCarteny]

Great Works!!!!

[@christianlempa]

Thanks!

[@skaramicke]

Now do one for OpenStack!

[@montyh9448]

Amazing

[@christianlempa]

Thanks

[@i-am-oi]

Great Video! I hope somebody can help me to solve this issue and understand how to implement the best approach. I have a number of situations where I need to retry a task n-times if it fails. My ask is, I need help writing a Terraform module to monitor an azure task which is to restart it in case it encounters an exception. retry logic). If an exception is thrown, the task should be retried up to the max-retry count.

[@brensleyfoster700]

Once again, can you share the code....?

[@christianlempa]

It's on my GitHub

[@enzo.albornoz]

It's just me or he put a frame with a clown at 20:10?

[@christianlempa]

That’s my desktop wallpaper sneaking in xD

[@vincentnthomas1]

NOTE: Terraform is not free anymore

[@christianlempa]

Of course it is free in the community version, as well as the free plan in terraform cloud!

[@Admiral_AWS]

Pretty homosexual thumbnail but the content of the video is on point. Good job my man!

[@ss-o]

Got tired of KZbinrs making the same videos about the same tech + in a narrow window while there is so much news and improvements made. Sad to unsubscribe those who had a good start. but failed along the way...

[@sundarshi]

M

[@dyllanmccreary688]

“Deploy in seconds”

[@marcusaurelius6607]

i want to like this stack, but this is just a horrible way of doing things, a cake with a million layers of abstractions and code everyone uses with zero understanding of inner workings. so a simple task of deploying a binary becomes an insane mashup of CRAP that nobody needs.

[@stuff26422]

Using Terraform for such things is a really bad idea. Overly complicated, unmaintainable and inflexible. Terraform is for creating VMs, volumes and stuff. It's a not configuration tool.

[@TheLocalStuff]

Thanks!

[@christianlempa]

Thank you so much for your support ❤️👏