Easy Infra[structure as Code]
easy_infra is a docker container that simplifies and secures Infrastructure as Code deployments.
In order to run your code from within the container, volume mount your files
/iac and pass your command, such as
terraform validate, as such:
docker run -v $(pwd):/iac seiso/easy_infra terraform validate
Secure by default¶
This container provides security features by default. Let’s say you are looking to deploy an environment using terraform:
docker run -v $(pwd):/iac seiso/easy_infra /bin/bash -c "terraform init && terraform validate && terraform apply"
What actually happens is that a security scan of your terraform code will be
run prior to executing the first
terraform command, regardless of what it is.
If an issue is detected, it will exit with a non-zero status, preventing any
subsequent execution of
While it’s not suggested, if you’d like to disable this behavior you have some options:
SKIP_TFSECenvironment variable to
docker run --env SKIP_TFSEC=true -v $(pwd):/iac seiso/easy_infra /bin/bash -c "terraform init && terraform apply"
- Pass the
--skip-tfsecargument to specific
argument is processed by easy_infra and removed prior to passing parameters to the
- Pass the
docker run -v $(pwd):/iac seiso/easy_infra /bin/bash -c "terraform --skip-tfsec init && terraform apply --skip-tfsec"
Create a feature branch via
git checkout -b feature/description
Make your changes
Commit your changes via
git commit -am 'Summarize the changes here'
Create a new pull request (how-to)