2890 Automating IBM Cloud Infrastructure with Terraform.pdf

《2890 Automating IBM Cloud Infrastructure with Terraform.pdf》由會員分享，可在線閱讀，更多相關《2890 Automating IBM Cloud Infrastructure with Terraform.pdf（24頁珍藏版）》請在三個皮匠報告上搜索。

1、October 21-24,2024Mandalay Bay Convention CenterLas Vegas,Nevada2890Sven Frauen(CIO)Matthias Heicke(CTO)Sweap.ioAutomating IBM Cloud Infrastructure with Terraform:Technical Insights and Best PracticesIBM Cloud|2023 IBM Corporation41.Sweap and their business challenges2.Journey to the Cloud3.Sweap ar

2、chitecture4.Managing Sweap architecture with Terraform5.Deploying applications with DevOps toolchains,Code Engine and Terraform6.Live demo7.SummaryAgendaStudied business computer science in Stuttgart(DHBW/IBM)and Karlsruhe(KIT)Software development in various start-upsFirst startup founded in 2012Fou

3、nded Sweap(formerly MATE)in 2016CIO with focus on backend,cloud,infrastructure,data privacy and SvenStudied computer science in Paderborn,Sweden and BerlinSoftware development in various start-upsFirst startup founded in 2012Founded Sweap(formerly MATE)in 2016CTO with focus on frontendAbout Matthias

4、Transparent Guest ManagementAutomated Event CommunicationSecure White-Label Registration PagesEvent Data&ReportingModern&Easy to OperateSeamless IntegrationsWhat is Sweap?Invitation via Emaildoesnt happen because to complicated to feed the data back.EvaluationReplies?with a printed out paper listChe

5、ck-in 6 hoursOn average,guest management employs one staff member for at least 6 24 hours in the run-up to an event.Depending on the size of the event,this can also be more.Social MediaSocial MediaEmailOnlineFormFaxCallInvitation via Letter postCall orface-to-face collected by hand in some sort of e

6、xcel fileClient Process before Sweap75%Reduction6 hs1,5 hsvs.=Reduction in expenditure with consistently satisfied guestsInvitationRegistrationTicketEvaluationDigitization of the process Small Product TeamLimited developer resourcesand need to ship and deliver fast.Short-Time High LoadEvent software

7、 usage varies a lot.When sending out invitation campaigns and during event there is a spike in usage.Cost EfficiencyAs a startup we are still very cost sensitive.Data PrivacyEvent management handles a lot of personal data.And our main market Germany is very sensitive about data protection.Easy Manag

8、ementOur product team should focus on fast development and needs easy ways of deploying and managing applications.ReliabilityOur customers still demand a high availability and reliability of our services.Business ChallengesWebApp Java Monolith on IBM Cloud/VPC Spring Boot Vaadin FrontendNative iOS a

9、pp for on-site entry/check-in managementCloud Engine Microservices for Tools(Mailer,PDF generation)Special applications(Zoom client,video streaming)Kafka(IBM Event Streams)for asynchronous microservice communicationIBM Cloud Databases+Cloud Object Storage PostgreSQL RedisKeycloak as Identity&Access

10、ManagementDevOps Pipelines with Terraformwatsonx(in development)TechstackHeroku IBM CloudReasons:Data privacy,strong partnerCloud Foundry KubernetesCloud Foundry was deprecatedWish for container orchestration and more controlCloud Functions Code EngineMore controlBetter support for local testingGoes

11、 hand in hand with switch of main applicationTerraformInfrastructure management in code with nearly identic multiple environmentsAutomated deploymentsStandardizationJourney to the cloudIn this live demo,we follow a typical Sweap user processUploading guests,sending out invitations,responding,sending

12、 out tickets and check-inBehind the scene the WebApp will communicate with our Cloud Engine microservices to create assets and sending out the emailsSweap Live-DemoEmail InvitationsGuest RegistrationE-Mail Tickets&AttachmentsSweap ArchitectureManaging Sweap architecture with TerraformTerraform as ou

13、r solutionCode that describes the configuration(clusters,deployments,DNS,cloud services)Can be maintained in Version Control(git)Documentation Versioning Audit logSecurity:Review and keep standardsDisaster recovery:recreate infrastructure instantlyCI/CD via IBM DevOps PipelineThis is how our adminis

14、tration scales!Deploying applications with Terraform and DevOps toolchains for Code Engine and KubernetesDifferent environments(dev,staging,prod)managed in IBM Cloud resource groupsKeep those environments as similar as possible(only vary in resource scaling)Each application/GIT project has its own t

15、erraform setup forConfiguration for environment variables and secrets with less frequent changesDeployment for scaling,docker image name,routing,etc.Use Terraform modules for basic structure and environments differ only in variablesDeploying applications with Terraform and DevOps toolchains for Code

16、 Engine and KubernetesEach project has its own Devops toolchainBuild image phase with default scripts and push image to IBM Container RegistryDeploy image by executing terraform apply with new image name as variableGlobal infrastructure is managed in its own GIT repository with Terraform for IBM ser

17、vicesDatabase,Object Storage,Cluster,Networking,DNS,loggingTerraform modules for structure and variables for settingsShort-Time Peak LoadThe Sweap event platform sends a lot of invitations and ticket emails,with bursts of high usage.One-time email campaigns can be up to 100.000 emails containing PDF

18、,wallet and calendar attachments.Solution:Scalable NodeJS Code Engine microservices with Event Streams(Kafka)and Cloud Object Storage to handle large email traffic andattachment creation.Everything is managed by Terraform.Short-Time Peak LoadDEMOSweap Terraform Usage with IBM CloudSmall Product Team

19、We are using a limited set of well-known technologies.Short-Time High LoadCode Engine allows us to easily scale deployments by traffic and with Event Streams(Kafka)and Object Storage can handle a lot of requests.Cost EfficiencyServices like Code Engine and Object Storage give us the possibility to p

20、ay for what we use.Automated and managed solutions with one Terraform setup keep down the IT operations costs.Data PrivacyGDPR compliant hosting with Frankfurt region and services like Key Protect to bring your own encryption keys.References in data critical industries like health care help a lot.Ea

21、sy ManagementHosted services,Code Engine,DevOps toolchains and terraform let us automate a lot of processes.The team can focus on writing code and shipping features faster.ReliabilityVPC,Code Engine,managed services together with Terraform and DevOps pipelines all give us high availability and easy way to reproduce.Solutions Summary