Entities › name
33 headlines · 3 outlets · 2021-03-11 → 2026-11-06 · Wikipedia ↗ · 🔒 Follow
With the latest release, Steampunk Spotter checks Terraform plans before apply, in addition to Terraform configurations at merge request. It enforces built-in checks and your custom policies on the resolved plan, flags secrets left in cleartext, and validates code against the definitions of…
Our login endpoint sits behind AWS WAF, and one rule in the web ACL is a rate based statement: any single address that sends more than a set number of login requests in five minutes is blocked. The web ACL is Terraform, and the number is a variable, login_rate_limit. Our pipeline runs plan and…
You find a Stack Overflow answer with an aws_s3_bucket block, paste it into main.tf , run terraform apply , and it works. Two weeks later someone asks why the state file lives in that backend, or what a data source is doing in the module you copied, and you stare at the HCL like it's a foreign…
Adding a security scanner to a pipeline gives us findings. The next task is deciding what those findings mean, what needs to change, and whether the proposed fix actually works. As a DevOps engineer, that is where I wanted to explore AI assistance. Could I give GitHub Copilot the output from a real…
November 2026 | ~18 min read The Shared Cluster That Wasn't Sharing Three incidents in one month. Same cluster. Different root cause every time. All preventable. Week 1: Noisy neighbor. The data team kicked off a backfill job — 40 pods, no resource limits, no dedicated node pool. Within minutes…
Cuando un cambio de infraestructura falla, el problema no siempre es que Terraform haya calculado mal. Muchas veces el plan era correcto, pero nadie pudo explicar a tiempo qué iba a cambiar, qué evidencia faltaba o cómo volver atrás. Para una guardia SRE, un plan útil es también un contrato de…
TL;DR State is Terraform's memory of what it manages. Lose it or corrupt it and Terraform doesn't lose your infrastructure — it loses the map to it, which from the operator's chair is nearly as bad. Remote state with locking is not optional for teams: an S3 (or equivalent) backend with versioning…
