5 ms·
As someone using Terraform from it's first release on I still think that Terraform has one fundamental flaw: It always looks at things using provider specific
by marenkay 7y ago
As someone using Terraform from it's first release on I still think that Terraform has one fundamental flaw:
It always looks at things using provider specific resource, while IMHO it should just expose a bunch of predefined resource types (see rOCCI specs e.g.) and then allow you to attach a specific provider to it.
IMHO the biggest win as a user would be having not to have an implementation for every provider over and over. Do we really need to have a consul module for Azure, AWS, Tudeluuu and god knows who? No.
That being said, Terraform in the long run still is the most reliable tool in that space.
The whole situation about state management is... lacking. Experience says the one thing no client ever wants in the cloud but always on prem is state.
- ben0x539 7y ago> The whole situation about state management is... lacking. Experience says the one thing no client ever wants in the cloud but always on prem is state. Hm, can you elaborate? S3 state seems perfectly serviceable, and I don't immediately see why I would want to operate on-prem resources just to maintain state.
- zwischenzug 7y agoSec policies.
- marenkay 7y agoThis, and also total lack of control.
- marenkay 7y agoS3 is Amazon. In some cases you want to exert control over your state without being dependent on external parties. Currently Terraform Enterprise is the only approach to solving that and its a good one but... only if you're one of the big guns and even those sometimes think twice because the infrastructure state requires much more security than that offers.
- tmzt 7y agoS3 compatible on-prem storage like minio might work for you
- NikolaeVarius 7y agoThere is nothing stopping you from backing up state in s3 and git. Just have CICD to sync it up. State really shouldn't have anything secret in it in the first place, so 3rd party having access to it shouldn't matter.
- jk563 7y agoMany different clients will be happy with many different situations. Current and previous 3 clients all happy with state not on-prem.