Immutable deployment

Hey,

I've been playing with Openziti for a couple of days, successfully deployed a simple network of 1 controller 1 edge router and few services.

I had to enroll the edge router manually, create my services manually (either using Zac or CLI), make the management api and ZAC dark manually.

I was wondering if there are any Terraform providers or Ansible roles available to make a immutable deployment and configure all of the stuff I mentioned before.

None that are actively worked on, supported by and shipped as part of the OpenZiti project itself. There are various flavors of one here/there but it's not a priority at this time for us to provide it. It's just a time/prioritization thing. It's asked for here on the forums once in a while but we have lots of other competing priorities.

Yeah makes sense, you're doing a great job with this project tbh, last time I tried controller wasn't even "HA-able", the documentation is richer aswell

2 Likes

This is looking good, @nenkoru !

1 Like

Thanks!
I actually completed the posture-checks suit just yesterday. Will upstream it today or tmrw.

Preparing to make an initial release to terraform registry.

1 Like

Released as 0.6.1
https://registry.terraform.io/providers/nenkoru/ziti/latest

Quite a journey it was. Still need to implement a few entities but much easier than configs and posture checks it would be. Perhaps this weekend could make it whole.
1.0 release after a few tests suits, but I could already start to guarantee backwards compatibility of the HCL facing side between minor versions.

2 Likes

This is amazing ! Will be using this for sure !

2 Likes

Me too. I'm expecting to be creating a clustered ziti test env soon and this will be perfect for controlling all the variables.