In my previous blog entry, I shared details about a tool called konstraint. That entry focused on generating YAML. As a follow up, I will delve deeper into the documentation generation capabilities. Many programming languages make the use of documentation conventions in code and will often have annotations to support…

Recently, I’ve started writing policies to be enforced on Kubernetes clusters using Open Policy Agent (OPA) Gatekeeper. The process involves creating policies/assertions using the Rego language, and then packaging the logic into the OPA CRD’s: ConstraintTemplate — Resource with the rego logic and defines whether the policy has input parameters…

Recently, I have been involved with a project where we will be integrating GKE with Vault. Having worked with external Secret solutions on AKS in the past, it was a good starting point to expand my knowledge and apply it to GKE/Vault. I was also keen on understanding the excitement…

Azure peeps, you may have heard, Microsoft has finally established its exam renewal program. If you have certifications expiring in less than 6 months, you probably have received an email…or will be soon. So what does it mean and entail to recertify your Azure credentials? TL;DR — It is not…

Recently, some of our modules have required breaking changes and we didn’t have a good way to communicate the impacts to users and allow them to pin to a specific version. While an astute Terraform user could pin to a Git SHA, it is a less than ideal approach. …

Developing unit tests for Terraform modules is critical to validating behavior and also doing regression testing. Recently, I had to do regression testing on about 15 modules during a Terraform 0.14 migration and the tests were a life saver. However, I have found that validating outputs from modules using Terratest…

In my latest blog entry, I brought up details about the new feature in TF 0.14 where you can mark inputs and outputs as sensitive. This feature was also the cause of a panic issue found in 0.14.3. I am happy to announce this has been resolved in 0.14.4 …

While things quiet down for the holidays, I figured I’d take a crack at validating our modules against Terraform 0.14. The goal of this article is to focus on the changes required to existing modules and less so about the full list of changes. HashiCorp released the full changes at…

Terragrunt, a small wrapper around Terraform, adds a ton of capabilities. In my previous posts, I focused on capabilities and using it in novel ways. Terragrunt — The Glue around Terraform Terragrunt — Dynamic Remote State Management Terragrunt — Inter-module Dependency Management Terragrunt — Using credentials dynamically and Azure multi-subscription…