ministicraft
f0075bf083
Some checks failed
Deploy presentation / deploy (push) Has been cancelled
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
287 lines
12 KiB
HTML
287 lines
12 KiB
HTML
<!doctype html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<title>Configuration as Code — Puppet vs Ansible vs Terraform</title>
|
|
|
|
<!-- Reveal.js CDN -->
|
|
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/reveal.js@5.1.0/dist/reset.css">
|
|
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/reveal.js@5.1.0/dist/reveal.css">
|
|
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/reveal.js@5.1.0/dist/theme/moon.css">
|
|
|
|
<!-- Highlight.js for code blocks -->
|
|
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/reveal.js@5.1.0/plugin/highlight/monokai.css">
|
|
|
|
<style>
|
|
:root {
|
|
--puppet-color: #FFAE1A;
|
|
--ansible-color: #EE0000;
|
|
--terraform-color: #7B42BC;
|
|
}
|
|
|
|
.reveal .slides section {
|
|
text-align: left;
|
|
}
|
|
|
|
.reveal h1, .reveal h2 {
|
|
text-align: left;
|
|
}
|
|
|
|
.reveal h1 { font-size: 1.8em; }
|
|
.reveal h2 { font-size: 1.4em; line-height: 1.2; }
|
|
.reveal p, .reveal li { font-size: 0.85em; }
|
|
.reveal code { font-size: 0.7em; }
|
|
.reveal pre { width: 100%; }
|
|
|
|
.title-slide { text-align: center !important; }
|
|
.title-slide h1 { text-align: center; font-size: 2em; margin-bottom: 0.2em; }
|
|
.title-slide .subtitle { font-size: 1em; color: #aaa; }
|
|
.title-slide .meta { font-size: 0.7em; color: #888; margin-top: 1em; }
|
|
|
|
.puppet-col { color: var(--puppet-color); }
|
|
.ansible-col { color: var(--ansible-color); }
|
|
.tf-col { color: var(--terraform-color); }
|
|
|
|
.filename {
|
|
font-family: monospace;
|
|
font-size: 0.65em;
|
|
color: #888;
|
|
margin-bottom: 0.2em;
|
|
}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<div class="reveal">
|
|
<div class="slides">
|
|
|
|
<!-- ─── SLIDE 1 : Title ─────────────────────────────────────────── -->
|
|
<section class="title-slide">
|
|
<h1>⚙️ Configuration as Code</h1>
|
|
<p class="subtitle">Puppet · Ansible · Terraform<br>— What's the difference and when to use what? —</p>
|
|
<p class="meta">FinistDevs · 2026</p>
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 2 : Speaker intro ────────────────────────────────── -->
|
|
<section>
|
|
<h2>Arnaud Prémel-Cabic</h2>
|
|
<p>Tech Lead @ OVHCloud</p>
|
|
<p style="color:#888; font-size:0.75em;">arnaud.premel-cabic@ovhcloud.com</p>
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 3 ──────────────────────────────────────────────────── -->
|
|
<section>
|
|
<h2>"It works on my server."</h2>
|
|
<p><em>Or: why doesn't it work here, when it works everywhere else?</em></p>
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 4 ──────────────────────────────────────────────────── -->
|
|
<section>
|
|
<h2>You have a server. It works.</h2>
|
|
<p><em>Great.</em></p>
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 5 ──────────────────────────────────────────────────── -->
|
|
<section>
|
|
<h2>You have 10 servers.</h2>
|
|
<p><em>Still manageable… but every small change means 10 SSH sessions, 10 vim edits, 10 chances to make a mistake.</em></p>
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 6 ──────────────────────────────────────────────────── -->
|
|
<section>
|
|
<h2>Now you have 100 servers.</h2>
|
|
<p><em>Some 2 years old. Some a couple of months. Some freshly provisioned.<br>None of them are exactly alike.</em></p>
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 7 ──────────────────────────────────────────────────── -->
|
|
<section>
|
|
<h2>Each one is unique. Unreproducible. Undocumented.</h2>
|
|
<p><em>Welcome to Snowflake Hell.</em></p>
|
|
<img src="https://media.giphy.com/media/QMHoU66sBXqqLqYvGO/giphy.gif"
|
|
alt="This is fine"
|
|
style="height:220px; margin-top:0.5em; border-radius:6px;">
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 8 ──────────────────────────────────────────────────── -->
|
|
<section>
|
|
<h2>Configuration drift is silent… until it isn't.</h2>
|
|
<p><em>Prod breaks on a Tuesday. You can't reproduce the bug locally. You can't scale reliably. You can't onboard a new server without fear.</em></p>
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 9 ──────────────────────────────────────────────────── -->
|
|
<section>
|
|
<h2>What if your infrastructure was just… code?</h2>
|
|
<p><em>Yes, even your AI assistant can write it. But you still need to understand what it deploys.</em></p>
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 10 ──────────────────────────────────────────────────── -->
|
|
<section>
|
|
<h2>Configuration as Code</h2>
|
|
<p>Managing infrastructure through machine-readable files, stored in version control.</p>
|
|
<p style="margin-top:0.8em; color:#aaa;">Reproducible · Versionable · Auditable</p>
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 11 ──────────────────────────────────────────────────── -->
|
|
<section>
|
|
<h2>Meet the three musketeers of infrastructure.</h2>
|
|
<p><span class="puppet-col">Puppet</span> · <span class="ansible-col">Ansible</span> · <span class="tf-col">Terraform</span> — each fights a different battle.</p>
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 12 : Terraform intro ──────────────────────────────── -->
|
|
<section>
|
|
<h2>🏗️ <span class="tf-col">Terraform</span></h2>
|
|
<p>Start here. Before you configure a server, you need to have one.</p>
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 13 : Terraform concepts ───────────────────────────── -->
|
|
<section>
|
|
<h2>HCL: HashiCorp Configuration Language.</h2>
|
|
<p>Declarative, human-readable — and pure JSON works too.<br>
|
|
<code>terraform plan</code> previews · <code>terraform apply</code> creates · <code>terraform destroy</code> removes.</p>
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 14 : Terraform state ──────────────────────────────── -->
|
|
<section>
|
|
<h2>Terraform remembers what it built.</h2>
|
|
<p>The <code>.tfstate</code> file maps code to real-world resources. Store it remotely.<br>
|
|
Depending on what you manage, it can contain plaintext sensitive values — credentials, tokens, secrets.<br>
|
|
<em>Handle it with care. Don't feed it to your LLM.</em></p>
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 15 : Terraform providers ──────────────────────────── -->
|
|
<section>
|
|
<h2>One tool. Every API.</h2>
|
|
<p>1000+ providers: AWS, GCP, Azure, Cloudflare, GitHub, Kubernetes…<br>
|
|
Not just cloud — manage GitHub teams, Datadog monitors, PagerDuty schedules, DNS records.<br>
|
|
<em>If it has an API, there's a Terraform provider for it.</em></p>
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 16 : Terraform code ───────────────────────────────── -->
|
|
<section>
|
|
<p class="filename"># main.tf</p>
|
|
<pre><code class="language-hcl" data-trim>
|
|
terraform {
|
|
required_providers {
|
|
aws = { source = "hashicorp/aws", version = "~> 5.0" }
|
|
}
|
|
}
|
|
|
|
provider "aws" { region = "eu-west-3" }
|
|
|
|
resource "aws_instance" "web" {
|
|
ami = "ami-0c55b159cbfafe1f0"
|
|
instance_type = "t3.micro"
|
|
tags = { Name = "finistdevs-web" }
|
|
}
|
|
|
|
output "public_ip" {
|
|
value = aws_instance.web.public_ip
|
|
}
|
|
</code></pre>
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 17 : OpenTofu ──────────────────────────────────────── -->
|
|
<section>
|
|
<h2>In 2023, HashiCorp changed Terraform's license.</h2>
|
|
<p>BSL instead of MPL — no longer truly open-source.<br>
|
|
The community responded: <strong>OpenTofu</strong>, by the OpenTF Foundation, is the open-source fork.<br>
|
|
<em>Drop-in replacement. Fully compatible. Community-driven.</em></p>
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 18 : Terraform platforms ──────────────────────────── -->
|
|
<section>
|
|
<h2>Terraform at scale needs a platform.</h2>
|
|
<p>
|
|
<strong>Terraform Enterprise / HCP Terraform</strong> — HashiCorp's commercial offering: remote state, RBAC, audit logs<br>
|
|
<strong>Spacelift</strong> — GitOps-first CI/CD for Terraform (and OpenTofu)<br>
|
|
<strong>Atlantis</strong> — open-source: plan & apply triggered by pull requests<br>
|
|
<strong>env0, Scalr</strong> — SaaS alternatives with policy & cost management
|
|
</p>
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 19 : Ansible intro ─────────────────────────────────── -->
|
|
<section>
|
|
<h2>⚡ <span class="ansible-col">Ansible</span></h2>
|
|
<p>Your servers are provisioned. Now make them do something.</p>
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 20 : Ansible concepts ──────────────────────────────── -->
|
|
<section>
|
|
<h2>Push, not pull. SSH, not agents.</h2>
|
|
<p>YAML playbooks run tasks in order, across any number of hosts.<br>
|
|
No daemon. No certificate authority. Just Python + SSH.<br>
|
|
<em>Idempotent modules ensure the same playbook can run safely again and again.</em></p>
|
|
<img src="https://media.giphy.com/media/3oEjI6SIIHBdRxXI40/giphy.gif"
|
|
alt="It just works"
|
|
style="height:180px; margin-top:0.5em; border-radius:6px;">
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 21 : Ansible code ──────────────────────────────────── -->
|
|
<section>
|
|
<p class="filename"># playbook/webserver.yml</p>
|
|
<pre><code class="language-yaml" data-trim>
|
|
- name: Configure web server
|
|
hosts: webservers
|
|
become: true
|
|
|
|
tasks:
|
|
- name: Install nginx
|
|
ansible.builtin.package:
|
|
name: nginx
|
|
state: present
|
|
|
|
- name: Deploy nginx config
|
|
ansible.builtin.template:
|
|
src: nginx.conf.j2
|
|
dest: /etc/nginx/nginx.conf
|
|
notify: Restart nginx
|
|
|
|
handlers:
|
|
- name: Restart nginx
|
|
ansible.builtin.service:
|
|
name: nginx
|
|
state: restarted
|
|
</code></pre>
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 22 : Ansible Galaxy ────────────────────────────────── -->
|
|
<section>
|
|
<h2>The community does the heavy lifting.</h2>
|
|
<p><strong>Ansible Galaxy</strong> — 10,000+ ready-made roles and collections.<br>
|
|
Don't write a playbook to install Docker from scratch. Someone already did.<br>
|
|
<em>Just <code>ansible-galaxy install geerlingguy.docker</code>.</em></p>
|
|
</section>
|
|
|
|
<!-- ─── SLIDE 23 : Ansible platforms ────────────────────────────── -->
|
|
<section>
|
|
<h2>Ansible at scale: open-source vs enterprise.</h2>
|
|
<p>
|
|
<strong>AWX</strong> — open-source web UI, API, and scheduler for Ansible<br>
|
|
<strong>Ansible Automation Platform</strong> (Red Hat) — enterprise version of AWX, with support & integrations<br>
|
|
<strong>Semaphore</strong> — lightweight open-source alternative to AWX<br>
|
|
<em>The core Ansible engine remains Apache 2.0 — truly open-source.</em>
|
|
</p>
|
|
</section>
|
|
|
|
|
|
</div>
|
|
</div>
|
|
|
|
<script src="https://cdn.jsdelivr.net/npm/reveal.js@5.1.0/dist/reveal.js"></script>
|
|
<script src="https://cdn.jsdelivr.net/npm/reveal.js@5.1.0/plugin/notes/notes.js"></script>
|
|
<script src="https://cdn.jsdelivr.net/npm/reveal.js@5.1.0/plugin/highlight/highlight.js"></script>
|
|
<script>
|
|
Reveal.initialize({
|
|
hash: true,
|
|
slideNumber: 'c/t',
|
|
transition: 'slide',
|
|
backgroundTransition: 'fade',
|
|
controls: true,
|
|
progress: true,
|
|
center: false,
|
|
plugins: [ RevealNotes, RevealHighlight ]
|
|
});
|
|
</script>
|
|
</body>
|
|
</html>
|