Introducing Carbonetes’ Infrastructure as Code (IaC) Analysis

“Infrastructure as a code is the process of managing and provisioning computer data centers through machine-readable definition files, rather than physical hardware configuration or interactive configuration tools” (Wikipedia: The Free Encyclopedia. Wikimedia Foundation, Inc. 22 July 2004. Web. 28 March 2021, from https://en.wikipedia.org/wiki/Infrastructure_as_code).

Basically, it is an infrastructure configuration represented by code configuration files.

However, common misconfigurations can’t be prevented, and that’s why Carbonetes now offers YAML (IaC) analysis within Kubernetes YAML file configurations from a code repository.

The analysis is performed for each active configuration (demo-app.yaml) in an image (carbo/influxdb:latest):

Image settings -> Image to YAML file configuration

Analysis results are displayed in the form of a table in which the user can review the checks.

“Passed checks” indicate the specified YAML file configuration already meets the condition of a check while “failed checks” designate that the YAML file does not met the condition of a check.

Within the table, the user can review the description of the check and also which part of the file configuration is affected. By clicking the description, the user will be redirected to another page which gives more detailed information about the check:

Analysis result of demo-app.yaml

IaC formats that we support:

• Terraform
• Cloudformation
• Kubernetes
• Dockerfile
• Serverless
• ARM Templates