8 ms·

I wish there was a type safe, algebraic data type using Terraform alternative.

ParetoOptimal 2y ago
You can use dhall for terraform, but no idea if UX for it got better.
cies 2y ago
There are Java and C# (somewhat typesafe imho) and this (Kotlin, reasonably typesafe imho): https://github.com/VirtuslabRnD/pulumi-kotlin https://github.com/VirtuslabRnD/pulumi-kotlin For Pulumi. When I see the pulumi-kotlin example code I much prefer it over my Terraform scripts. (We picked TF before Pulumi was an option, and waaaaay before it had reasonably typesafe lang support)
- andrewfromx 2y ago
  +1 for pulumi! https://thenewstack.io/pulumi-launches-new-infrastructure-lifecycle-features/ https://thenewstack.io/pulumi-launches-new-infrastructure-li...
- jpgvm 2y ago
  I made this suck less last year and it was just recently merged: https://github.com/pulumi/pulumi-java/pull/1231 https://github.com/pulumi/pulumi-java/pull/1231 This lets you use Pulumi w/Gradle multi-project builds in Kotlin script.
maineldc 2y ago
We use typescript + pulumi for this. It's pretty amazing. And Pulumi uses Terraform modules under the hood so you get the full power of Terraform with the goodness of Typescript. Even self hosting your state management in a bucket is simpler with Pulumi since it uses lock files on S3 versus a separate DyanamoDB + S3 combo. I have been using it in production for 4-5 years and used Terraform for several years before that.
- fishnchips 2y ago
  > since it uses lock files on S3 versus a separate DyanamoDB + S3 combo This is disturbing because S3 does not give you guarantees required to implement real locking.
  - erik_seaberg 2y ago
    https://aws.amazon.com/blogs/aws/amazon-s3-update-strong-read-after-write-consistency/ https://aws.amazon.com/blogs/aws/amazon-s3-update-strong-rea... guarantees that a client's lockfile can always be seen by other clients immediately (which didn't used to be true). If every client backs off and retries after a race, is that enough?
    - fishnchips 2y ago
      I think not, actually. There would still be cases where a race is not detected. I can think of the following sequence: A checks - no lock, B checks - no lock, A writes - success, A reads - match, success, B writes - success, B reads - match, success. A and B both think they now hold the lock. For locking to work properly you'd need to have a conditional write that would fail if some prerequisite was not met. GCP offers that operation, S3 AFAIK does not.
      - erik_seaberg 2y ago
        I'm no expert but from a quick glance at https://www.pulumi.com/docs/concepts/state/#using-a-self-managed-backend https://www.pulumi.com/docs/concepts/state/#using-a-self-man... it looks like this might work: client A lists s3://bucket/prefix/.pulumi/locks/, sees nothing client B lists s3://bucket/prefix/.pulumi/locks/, sees nothing client A creates s3://bucket/prefix/.pulumi/locks/unique1.json client A lists s3://bucket/prefix/.pulumi/locks/, only sees unique1.json, and proceeds client B creates s3://bucket/prefix/.pulumi/locks/unique2.json client B lists s3://bucket/prefix/.pulumi/locks/ and sees both unique1.json and unique2.json client B assumes it lost a race, deletes s3://bucket/prefix/.pulumi/locks/unique2.json, and retries There's another mode where both clients pessimistically retry, but fuzzing a retry delay could eventually choose a winner randomly.
pxc 2y ago
Idk if the APIs look like what you want, but Scala has ADTs and there's a new Pulumi SDK for Scala that just entered public beta: https://virtuslab.github.io/besom/ https://virtuslab.github.io/besom/ There's also a first-party Pulumi SDK for F#: https://www.pulumi.com/docs/languages-sdks/dotnet/ https://www.pulumi.com/docs/languages-sdks/dotnet/ If you're into Nix, you might enjoy using this to generate Terraform JSON. The language is inspired by Nix, so it feels familiar to Nixers, but it has a better type system that recently includes ADTs, at least on its master branch: https://github.com/tweag/tf-ncl https://github.com/tweag/tf-ncl

You can use dhall for terraform, but no idea if UX for it got better.

cies 2y ago

There are Java and C# (somewhat typesafe imho) and this (Kotlin, reasonably typesafe imho): https://github.com/VirtuslabRnD/pulumi-kotlin https://github.com/VirtuslabRnD/pulumi-kotlin For Pulumi. When I see the pulumi-kotlin example code I much prefer it over my Terraform scripts. (We picked TF before Pulumi was an option, and waaaaay before it had reasonably typesafe lang support)

andrewfromx 2y ago
+1 for pulumi! https://thenewstack.io/pulumi-launches-new-infrastructure-lifecycle-features/ https://thenewstack.io/pulumi-launches-new-infrastructure-li...
jpgvm 2y ago
I made this suck less last year and it was just recently merged: https://github.com/pulumi/pulumi-java/pull/1231 https://github.com/pulumi/pulumi-java/pull/1231 This lets you use Pulumi w/Gradle multi-project builds in Kotlin script.

maineldc 2y ago

We use typescript + pulumi for this. It's pretty amazing. And Pulumi uses Terraform modules under the hood so you get the full power of Terraform with the goodness of Typescript. Even self hosting your state management in a bucket is simpler with Pulumi since it uses lock files on S3 versus a separate DyanamoDB + S3 combo. I have been using it in production for 4-5 years and used Terraform for several years before that.

fishnchips 2y ago
> since it uses lock files on S3 versus a separate DyanamoDB + S3 combo This is disturbing because S3 does not give you guarantees required to implement real locking.
- erik_seaberg 2y ago
  https://aws.amazon.com/blogs/aws/amazon-s3-update-strong-read-after-write-consistency/ https://aws.amazon.com/blogs/aws/amazon-s3-update-strong-rea... guarantees that a client's lockfile can always be seen by other clients immediately (which didn't used to be true). If every client backs off and retries after a race, is that enough?
  - fishnchips 2y ago
    I think not, actually. There would still be cases where a race is not detected. I can think of the following sequence: A checks - no lock, B checks - no lock, A writes - success, A reads - match, success, B writes - success, B reads - match, success. A and B both think they now hold the lock. For locking to work properly you'd need to have a conditional write that would fail if some prerequisite was not met. GCP offers that operation, S3 AFAIK does not.
    - erik_seaberg 2y ago
      I'm no expert but from a quick glance at https://www.pulumi.com/docs/concepts/state/#using-a-self-managed-backend https://www.pulumi.com/docs/concepts/state/#using-a-self-man... it looks like this might work: client A lists s3://bucket/prefix/.pulumi/locks/, sees nothing client B lists s3://bucket/prefix/.pulumi/locks/, sees nothing client A creates s3://bucket/prefix/.pulumi/locks/unique1.json client A lists s3://bucket/prefix/.pulumi/locks/, only sees unique1.json, and proceeds client B creates s3://bucket/prefix/.pulumi/locks/unique2.json client B lists s3://bucket/prefix/.pulumi/locks/ and sees both unique1.json and unique2.json client B assumes it lost a race, deletes s3://bucket/prefix/.pulumi/locks/unique2.json, and retries There's another mode where both clients pessimistically retry, but fuzzing a retry delay could eventually choose a winner randomly.

pxc 2y ago

Idk if the APIs look like what you want, but Scala has ADTs and there's a new Pulumi SDK for Scala that just entered public beta: https://virtuslab.github.io/besom/ https://virtuslab.github.io/besom/ There's also a first-party Pulumi SDK for F#: https://www.pulumi.com/docs/languages-sdks/dotnet/ https://www.pulumi.com/docs/languages-sdks/dotnet/ If you're into Nix, you might enjoy using this to generate Terraform JSON. The language is inspired by Nix, so it feels familiar to Nixers, but it has a better type system that recently includes ADTs, at least on its master branch: https://github.com/tweag/tf-ncl https://github.com/tweag/tf-ncl