4 ms·
Stop mucking around in production. Stop. Seriously, stop.
by bg4 9y ago
Stop mucking around in production. Stop. Seriously, stop.
- brianwawok 9y agoIf you have never screwed up anything in production, no one at your org trusts you enough to give you production access. Which is ok and great for you, but at the end of the day SOMEONE has to have production access. You can write a devops template that wipes out data just as easy as you can sudo rm -rf /
- optimuspaul 9y agoI say that all the time. You automation can be just as dangerous as prod ssh access.
- brianwawok 9y agoAnd in some ways it is worse.. I remember at least one prod incident where a script made it out into prod and wiped out 100s of servers. Something like it had rm -rf /$SOME_ENV_VAR which was set in QA but not prod. Opps....
- madamelic 9y agoI am much more terrified of Terraform than myself, especially `terraform destroy`. I mean, a human can only do so much so quickly but a script could kill everything semi-instantly. I look at `terraform plan -destroy` and it still terrifies to destroy an internal service.
- theleftfielder 9y agoWe actually had a production outage due to a `terraform destroy` typed in production instead of dev.
- bg4 9y agoImo, it's not about trust, it's about rigor.
- brianwawok 9y agoYah? Good luck with that