home.social

#terraform — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #terraform, aggregated by home.social.

fetched live
  1. Enforce OPA Conftest policy checks directly in Atlantis custom workflows. Convert terraform plan outputs to JSON using terraform show and validate them before apply to automatically block non-compliant PRs.

    #atlantis #terraform #opa

    valtersit.com/vault/enforcing-

  2. Spent tonight moving everything off my MikroTik access point and onto a new rack mount 10G router, also from MikroTik. It took a while, but now everything is defined as code in Terraform, and seems to be routing much faster than before.

    I still need to move my second Proxmox node over, but I’m looking forward to those getting 2.5 Gbit speeds. This upgrade has been a long time coming.

    #homelab #mikrotik #networking #terraform

  3. Atlantis: что пошло не так, а потом — так

    Всё началось с желания организовать и автоматизировать работу с Terraform, впоследствии с Terragrunt, выстроить управляемый процесс, централизовать, настроить понятный RBAC, в общем, сделать так, «чтобы было красиво». Было сделано несколько подходов, и были рассмотрены разные варианты. Отправной точкой стало структурирование кода, его декомпозиция и рефакторинг, и постепенно дошло до автоматизации самого процесса применения (или просто plan/apply). К этому моменту основная часть кода сконцентрировалась в монорепозитории в self-hosted GitLab, общая и повторяемая логика отделилась во внутренние приватные модули, а сам код вырос в объёмах: более 4 000 .tf файлов, не учитывая внешних и внутренних модулей, более 900 проектов (каталогов), более 30 000 ресурсов, более 30 уникальных провайдеров Terraform. Конечно, все эти условия в той или иной степени повлияли на конечный выбор. В этой статье расскажу, как мы перешли от ручного управления Terraform и Terragrunt к автоматизированному процессу на базе Atlantis, какие альтернативы рассматривали, почему выбрали именно Atlantis и с какими неочевидными особенностями столкнулись при его эксплуатации.

    habr.com/ru/articles/1073152/

    #terraform #terragrunt #atlantis #aws #devops

  4. AWS apis are reporting 4 AZs in London today. Good luck with all your Terraform off-by-one errors. #AWS #Terraform

  5. One day I should add CI to my Terraform/OpenTofu infrastructure repository, so I can apply changes from my phone while sitting in a train :3
    Just gotta figure out a better way of managing secrets and state for that.

    Also, can't wait to break my CI by updating the infrastructure and then being unable to remotely fix it xD


    #Terraform #OpenTofu #self-hosting #IaC
  6. #Pinterest has revealed the Resource Provisioner Pipeline (RPP) - its own Terraform execution engine.

    RPP enforces least-privilege access and dual-control reviews, adding strict guardrails to GitHub Actions workflows and AWS infrastructure.

    Read the full story on #InfoQ 👉 bit.ly/3RK9Fik

    #DevOps #AWS #Terraform #CloudSecurity

  7. Current CEO mandates full #RTO after hiring me as a #remote 🤷‍♂️

    #GetFediHired #fedihire searching new role, preferably mostly remote (Germany or CET)

    last 5 years:
    #backend with #kotlin #java #springboot #postgresql including #DevOps, CI/CD, #git #testing #docker #kubernetes #terraform #observability

    prior professional experience: #frontend #web #JS #python #linux #Android

    CS educator at a university

    Open for new technologies! Prefer open source, hands-on and purpose.

  8. I finally have the Invirtuate tofu/terraform provider mostly complete in my homelab. I need to add more update functionality for resources, but create, destroy, read, state import, and data sources all work now.

    Pictured are tofu plan, tofu apply, and tofu destroy.

    #technology #terraform #tofu #automation #homelab #selfhosted #devops #sre

  9. Slightly annoying thing with Hetzner's #terraform provider - if you update an SSH key it will want to recreate the servers you attached it to.

    ```
    # hcloud_server.factorio must be replaced-/
    + resource "hcloud_server" "factorio" {
    # <snipped>
    ~ ssh_keys = [ # forces replacement
    "15539156",
    - "25145102",
    ]
    ~ status = "running" -> (known after apply)
    # (10 unchanged attributes hidden)
    }
    ```

  10. Enforce S3 bucket encryption across all Terraform workspaces with custom Sentinel policies. This snippet shows how to upload a policy set via the tfe provider and attach it in minutes. Linux/macOS ready. #terraform #sentinel #policy-as-code #ValtersIT

    valtersit.com/vault/implementi

  11. Nova atividade para o CoffeeOps de Agosto no LHC. Dia 15 de às 09:00 horas

    Agora vamos falar de Proxmox IaC: Gerenciamento com OpenTofu & Terraform com o Marc Pires.

    Uma apresentação mão na massa sobre gerenciamento do Procmox com IaC

    Tópicos:
    Proxmox API
    Preparando o ambiente com Terraform/OpenTofu e SeeWeedFS
    Preparando Proxmox
    Criando VMS e outros recursos via IaC

    eventos.lhc.net.br/event/coffe

    #hackerspace #coffeeops #comunidade #proxmox #iac #campinas #cafe #free #opentofu #terraform #devops

  12. RE: mastodon.social/@cichy1173/117

    For now we host provider code and packages on @codefloe and we test it internally using network mirror #terraform feature.
    I want to publish the provider in official Registry in the future - but this requires pushing the code to #GitHub :(

  13. Looks like it works! Finally Terraform Provider that works with Zabbix 7.0. I wished for this for more than a year.

    #zabbix #terraform #opentofu

  14. Today's Challenge: try to pull apart a #Cloudformation template (because #CFT sucks as an #IaC solution) and build #Terraform from it. Ive been working on this one all day. I mean, I even built #terragrunt hcls around it to deploy it DRY.

    But does anyone deal with Cloudformation in AWS accounts and actually have a good opinion about it?

    Because I can find NOTHING good about it.