Automatic security updates with automatic reboots, on a host that runs queue workers with no drain step. The reboot is right and the missing piece is a systemd…
Infrastructure code is edited rarely and by different people each time, so it accumulates whitespace disagreements faster than application code. The point is not tidiness but that a…
Adopting Terraform on existing infrastructure is mostly import, and import brings a resource into state without writing any configuration for it. One resource, one commit, one empty plan…
Renaming a resource or moving it into a module makes Terraform plan a destroy and a create, and 1.1 lets the rename be declared instead. The value over…
Marking a variable sensitive suppresses it in plan and apply output, and the state file holds every value in plain text regardless. The sensitivity marking propagates to any…