• How to use terraform's coalesce() function

    2 min read

    terraform coalesce

    Terraform's coalesce() function can com handy when we have optional arguments coming from several sources and we want to pick one using some preference.

    10/03/2022

    Read more...

  • Managing (safely) Secrets as Code with sops and terraform

    3 min read

    Terraform Secret as code sops git

    If you are using Infrastructure as Code you've realized there is something it shouldn't be on a git repository: That's the secrets, we should never store clear-text secrets on a git repository, not even if it's a private repository: Anyone with access to that repository could get them.

    How can we securely create secrets as code into the AWS Secrets Manager using terraform?

    15/02/2022

    Read more...

  • Kubernetes provider for terraform: kubernetes_manifest

    2 min read

    Since version 2.8.0 of the Kubernetes provider for terraform, the kubernetes_manifest resource is no longer considered experimental. With this resource we can push any kind of Kubernetes objects using terrraform that doesn't have a specific resource for it:

    resource "kubernetes_manifest" "example_km" {
  manifest = yamldecode(<<-EOF
    apiVersion: v1
    kind: Namespace
    metadata:
      name: example-ns
      annotations:
        test: example
    EOF
  )
}

    11/02/2022

    Read more...

  • Moving terraform resources from the state file as code

    2 min read

    Terraform moved

    Certain operations can cause terraform to try to delete an recreate a resource when we are just trying to move it around within the state, for example renaming a resource

    02/02/2022

    Read more...

  • Terraform apply without updating modified resources

    2 min read

    Terraform plan apply refresh

    When we are deploying infrastructure using terraform we need to understand that we should not be modifying what we have deployed, otherwise terraform will undo these changes if we apply it again. This is actually a good thing to make sure the code reflex the state of the infrastructure but sometimes can be a pain

    24/01/2022

    Read more...

More recent...

Older content...

Terraform:
Infrastructure as Code
terraform
Categories
tags related to this category
AWS IaC HCL root_block_device block_device_mappings Lambda python ELB NLB ALB ASG init lookup backend state Secret datasource AMI coalesce sops provider kubernetes_manifest moved plan apply aws_caller_identity aws_partition aws_region Environment IRSA ServiceAccount jsonencode less aws_security_groups data lifecycle ignore_changes sensitive merge debug mixed_instances_policy spot instances aws_launch_configuration aws_launch_template Pod securityGroup external csvdecode for_each try resource time_sleep depends_on tuple setproduct S3 MinIO validate dynamic blocks one function taint replace fmt import refactor output state show dynamodb_table upgrade helm_release terraform_remote_state null_resource local-exec count tfenv json show