TerraformAzureSRE
Terraform count vs for_each: removing one item destroys the rest of the list
Removing one item from a count list re-indexes everything after it, so Terraform replaces them. Switch to for_each and move state with moved blocks.
Blog · topic
Terraform
State, plans, modules and drift: Terraform in real life, beyond the happy path.
4 postsRSS feed
TerraformAzureCI/CDSRE
Terraform plan in dev wants to replace production: wrong state, backend key or workspace
A dev plan that renames prod resources is reading prod's state. How to read the plan, find the backend key, and re-init with -reconfigure, not -migrate-state.
TerraformCI/CDAzureSRE
Terraform secret leaked in a CI log: sensitive = true, TF_LOG and rotating first
sensitive = true only hides values in plan output. How a prod password reaches a CI log, how to confirm it without printing it, and how to rotate it.
TerraformAzureCI/CDSRE
Terraform "Error acquiring the state lock": when force-unlock is safe
A stale Terraform state lock blocks every pipeline run. Read Lock Info, prove the holder is dead, force-unlock that ID, then import what it left behind.