Geodesic

Geodesic is the fastest way to get up and running with a rock solid, production grade cloud platform built entirely from Open Source technologies.

It’s a swiss army knife for creating and building consistent platforms to be shared across a team environment.

It easily versions staging environments in a repeatable manner that can be followed by any team member.

It's a way of doing things that allows companies to collaborate on infrastructure (snowflakes) and radically reduce Total Cost of Ownership, along with a vibrant and active slack community.

It provides a fully customizable framework for defining and building cloud infrastructures backed by AWS and powered by kubernetes. It couples best-of-breed technologies with engineering best-practices to equip organizations with the tooling that enables clusters to be spun up in record time without compromising security.

It's works natively with Mac OSX, Linux, and Windows 10 (WSL).

---

This project is part of our comprehensive "SweetOps" approach towards DevOps.

It's 100% Open Source and licensed under the APACHE2.

Screenshots

Example of running a shell based on the cloudposse/geodesic base docker image.

Introduction

These days, the typical software application is distributed as a docker image and run as a container. Why should infrastructure be any different? Since everything we write is "Infrastructure as Code", we believe that it should be treated the same way. This is the "Geodesic Way". Use containers+envs instead of unconventional wrappers, complicated folder structures and symlink hacks. Geodesic is the container for all your infrastructure automation needs that enables you to truly achieve SweetOps.

Geodesic is composed of two parts:

1. It is an interactive command-line shell. The shell includes the ultimate mashup of cloud orchestration tools. Those tools are then integrated to work in concert with each other using a consistent framework. Installation of the shell is as easy as running a docker container.
2. It is a distribution of essential services and reference architectures. The distribution includes a collection of 100+ Free Terraform Modules and their invocations, dozens of preconfigured Helmfiles, Helm charts for CI/CD, VPN, SSH Bastion, Automatic DNS, Automatic TLS, Automatic Monitoring, Account Management, Log Collection, Load Balancing/Routing, Image Serving, and much more. What makes these charts even more valuable is that they were designed from the ground up to work well with each other and integrate with external services for authentication (SSO/OAuth2, MFA).

An organization may chose to leverage all of these components, or just the parts that make their life easier. We recommend starting by using geodesic as a Docker base image (e.g. FROM cloudposse/geodesic:... pinned to a release) in your projects.

Let's roll...

1. Review our documentation
2. Check our reference architectures to learn how we architect the infrastructure
3. Use our coldstart automation to get started quickly
4. Quickly provision kops clusters

---

title: ABOUT(1) | Geodesic author:

• Erik Osterman date: May 2019

---

NAME

about - About the Geodesic Cloud Automation Shell

FEATURES

• Secure - TLS/PKI, OAuth2, MFA Everywhere, remote access VPN, ultra secure bastion/jumphost with audit capabilities and slack notifications, IAM assumed roles, automatic key rotation, encryption at rest, and VPCs
• Repeatable - 100% Infrastructure-as-Code with change automation and support for scriptable admin tasks in any language, including Terraform
• Extensible - A framework where everything can be extended to work the way you want to
• Comprehensive - our helm charts library are designed to tightly integrate your cloud-platform with Github Teams and Slack Notifications and CI/CD systems like TravisCI, CircleCI or Jenkins
• OpenSource - Permissive APACHE 2.0 license means no lock-in and no on-going license fees

TECHNOLOGIES

At its core, Geodesic is a framework for provisioning cloud infrastructure and the applications that sit on top of it. We leverage as many existing tools as possible to facilitate cloud fabrication and administration. We're like the connective tissue that sits between all of the components of a modern cloud.

• atlantis - GitOps style operations by Pull Request. Ideal for terraform, helm and helmfile.
• aws-vault for securely storing and accessing AWS credentials in an encrypted vault for the purpose of assuming IAM roles
• aws-cli for interacting directly with the AWS APIs
• chamber for managing secrets with AWS SSM+KMS and exposing them as environment variables
• direnv for managing environment variables per project or globally
• helm for installing packages like Varnish or Apache on the Kubernetes cluster
• helmfile for 12-factorizing chart values and installing chart collections
• kops for Kubernetes cluster orchestration
• kubectl for controlling kubernetes resources like deployments or load balancers
• gcloud, gsutil for integration with Google Cloud (e.g. GKE, GCE, Google Storage)
• gomplate for template rendering configuration files using the GoLang template engine. Supports lots of local and remote datasources
• goofys a high-performance Amazon S3 file system for mounting encrypted S3 buckets that store cluster configurations and secrets
• terraform for provisioning miscellaneous resources on pretty much any cloud
• tmate for remote terminal sharing with other engineers (pairing) and collaborative debugging

SEE MORE

Extensive documentation is provided on our Documentation Hub.

title: LOGO(1) | Geodesic author:

• Erik Osterman date: May 2019

---

NAME

logo - Explanation of the Geodesic Logo

SYNOPSIS

In mathematics, a geodesic line is the shortest distance between two points on a sphere. It's also a solid structure composed of geometric shapes such as hexagons.

DESCRIPTION

We like to think of geodesic as the shortest path to a rock-solid cloud infrastructure. The geodesic logo is a hexagon with a cube suspended at its center. The cube represents this geodesic container, which is central to everything and at the same time is what ties everything together.

But look a little closer and you’ll notice there’s much more to it. It's also an isometric shape of a cube with a missing piece. This represents its pluggable design, which lets anyone extend it to suit their vision.

Share the Love

Like this project? Please give it a ★ on our GitHub! (it helps us a lot)

Are you using this project or any of our other projects? Consider leaving a testimonial. =)

Related Projects

Check out these related projects.

• Packages - Cloud Posse installer and distribution of native apps
• Build Harness - Collection of Makefiles to facilitate building Golang projects, Dockerfiles, Helm charts, and more
• terraform-root-modules - Collection of Terraform "root module" invocations for provisioning reference architectures
• root.cloudposse.co - Example Terraform Reference Architecture of a Geodesic Module for a Parent ("Root") Organization in AWS.
• audit.cloudposse.co - Example Terraform Reference Architecture of a Geodesic Module for an Audit Logs Organization in AWS.
• prod.cloudposse.co - Example Terraform Reference Architecture of a Geodesic Module for a Production Organization in AWS.
• staging.cloudposse.co - Example Terraform Reference Architecture of a Geodesic Module for a Staging Organization in AWS.
• dev.cloudposse.co - Example Terraform Reference Architecture of a Geodesic Module for a Development Sandbox Organization in AWS.

Help

Got a question?

File a GitHub issue, send us an email or join our Slack Community.

Commercial Support

Work directly with our team of DevOps experts via email, slack, and video conferencing.

We provide commercial support for all of our Open Source projects. As a Dedicated Support customer, you have access to our team of subject matter experts at a fraction of the cost of a full-time engineer.

• Questions. We'll use a Shared Slack channel between your team and ours.
• Troubleshooting. We'll help you triage why things aren't working.
• Code Reviews. We'll review your Pull Requests and provide constructive feedback.
• Bug Fixes. We'll rapidly work to fix any bugs in our projects.
• Build New Terraform Modules. We'll develop original modules to provision infrastructure.
• Cloud Architecture. We'll assist with your cloud strategy and design.
• Implementation. We'll provide hands-on support to implement our reference architectures.

Slack Community

Join our Open Source Community on Slack. It's FREE for everyone! Our "SweetOps" community is where you get to talk with others who share a similar vision for how to rollout and manage infrastructure. This is the best place to talk shop, ask questions, solicit feedback, and work together as a community to build totally sweet infrastructure.

Newsletter

Signup for our newsletter that covers everything on our technology radar. Receive updates on what we're up to on GitHub as well as awesome new projects we discover.

Contributing

Bug Reports & Feature Requests

Please use the issue tracker to report any bugs or file feature requests.

Developing

If you are interested in being a contributor and want to get involved in developing this project or help out with our other projects, we would love to hear from you! Shoot us an email.

In general, PRs are welcome. We follow the typical "fork-and-pull" Git workflow.

1. Fork the repo on GitHub
2. Clone the project to your own machine
3. Commit changes to your own branch
4. Push your work back up to your fork
5. Submit a Pull Request so that we can review your changes

NOTE: Be sure to merge the latest changes from "upstream" before making a pull request!

Copyright

Copyright © 2017-2019 Cloud Posse, LLC

License

See LICENSE for full details.

Licensed to the Apache Software Foundation (ASF) under one
or more contributor license agreements.  See the NOTICE file
distributed with this work for additional information
regarding copyright ownership.  The ASF licenses this file
to you under the Apache License, Version 2.0 (the
"License"); you may not use this file except in compliance
with the License.  You may obtain a copy of the License at

  https://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing,
software distributed under the License is distributed on an
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
KIND, either express or implied.  See the License for the
specific language governing permissions and limitations
under the License.

Trademarks

All other trademarks referenced herein are the property of their respective owners.

About

This project is maintained and funded by Cloud Posse, LLC. Like it? Please let us know by leaving a testimonial!

We're a DevOps Professional Services company based in Los Angeles, CA. We ❤️ Open Source Software.

We offer paid support on all of our projects.

Check out our other projects, follow us on twitter, apply for a job, or hire us to help with your cloud strategy and implementation.

Contributors

Erik Osterman	Igor Rodionov	Andriy Knysh	Sarkis Varozian	Oscar Sullivan