Right now HashiCorp is livestreaming their annual HashiTalks Conference

It's gonna be 48 hours of tech talks about HashiCorp projects and it's totally free, no registration is required whatsoever

P.S. It's been almost three years and they still haven't added Kyiv to the HUG map 😡

#hashicorp #event

HashiCorp announced a general availability of the Terraform Cloud Operator, which allows you abstract the infrastructure as Kubernetes resources.

In order to use it you have to have Terraform Cloud subscription, so this is might be not that important news per se. However, this shows that Kubernetes is a platform on its own and people alongside with well-known companies acknowledge that. Also, managing your insfrastructure from within a Kubernetes cluster doesn't seem like a wrong order of operations. Such things like Terraform Cloud Operator only proves that.

BTW, you can write-up your use case for potential Terraform OSS Operator in this issue

#kubernetes #hashicorp

Terraform 0.15 is here. Via the link is the upgrade guide from the version 0.14

Hopefully, no big code chages are required. Moreover, I already got a PR for 0.15 for my public module.

Also, Mitchell Hashimoto has mentioned in his Twitter that this version is a pre-release for Terraform 1.0. So, would the next on be 1.0?

#terraform #hashicorp

Consul Service Mesh for Amazon ECS is now in the Tech Preview.

This means that you can deploy Consul Service Mesh on Fargate type ECS using official Terraform modules. However, only setups for Dev are supported right now, i.e. the official module deploys only a single dev/testing Consul task for now. This will be changed before Consul Service Mesh for AWS ECS hits GA.

#consul #hashicorp #aws #networking

So, first big announcements from HashiConf Europe, which is happening right now.

Terraform goes 1.0 at last!!

People were expecting this release for a long time. Also, it seems like there gonna be less jokes about Terraform's production readiness from now on.

#hashicorp #terraform

Unless you contribute to Terraform core, this won't be super relevant for you.
However, this update is a bit disturbing.

Quote:

Due to current low staffing on the Terraform Core team at HashiCorp, we are not routinely reviewing and merging community-submitted pull requests. We do hope to begin processing them again soon once we're back up to full staffing again, but for the moment we need to ask for patience. Thanks!

Source

Kudos to HashiCorp for being explicit about it, though!

#hashicorp #terraform

If you haven’t read a Roblox’s postmortem on October‘s 73-hour outage, you definitely should!

Even though this event happened in October, the postmortem was released just a few days ago. And in this case, this is a very good decision! Especially, because this write up provides a detailed analysis on what happened at that time and what chain of events caused that.

It‘s cool to read postmortem the next day after an outage - we are all curious human beings. Unfortunately, those postmortems usually they are lacking many details. This is understandable: it‘s not enough time for a thorough analysis, also your team is probably already tired.

In this case, though, you can have a detailed overview of what happened as well as plans to prevent this chain of events happening again. Moreover, with some plans already implemented.

It‘s a pity that not may companies do similar postmortems. And I must say that this is probably in their disadvantage either. After reading this document I have a feeling that Roblox is a cool place to work, TBH.

#postmortem #hashicorp #consul

Consul API Gateway is now in beta.

It also got TCPRoute Support as well as now it's supported in the official Helm Chart.

There is also a new learning material for you to take a closer look at it.

#hashicorp #kubernetes #networking #consul

I had an idea of writing something about Terraspace for quite some time now. I might have even had a draft somewhere! But of course, someone wrote it before me :)

Here's an article about Terraspace - a part of series about Terraform ecosystem. Other parts are:
- From Terralith to Terraservice with Terraform
- Terragrunt cheat sheet
- Another part with the comparison between Terragrunt and Terraspace is coming soon, but there are already some source files

I got this article from the Terraform Weekly subscription. It's curated by a proud member of our community - Anton Babenko. If you use Terraform in your work, you should definitely subscribe!

P.S. If you still think I should write something about Terraspace, let me know by putting 👍 emoji on this post. If you have more specific suggestions, you're always welcome in our chat (chat is in Ukrainian and Russian)!

#terraform #hashicorp #terragrunt #terraspace

Folks talk a lot about networking in Kubernetes, but not so much about networking in Nomad.

Here’s an article that describes the latter.

Karan has some other great articles about Nomad in his blog, by the way. So, feel free to check other stuff too!

#nomad #hashicorp #networking

Today I want to share HashiCorp's official doc about Vault performance tuning.

I know that an official doc is not that impressive as some author's article. However, it contains a lot of useful information. Also, sometimes you have to refer to docs like this one.

Moreover, Vault is not that simple as it seems. For example, many people think that Vault is HA if you have multiple hosts, which is not in fact true, unless you have an enterprise version. Otherwise, it's just an active leader and stand by hosts.

Also, Vault's performance is very dependent on its storage backend. Therefore, tuning can also be related to that. For example, you can tweak max_parallel option if you're using AWS S3 as a backend and hitting AWS API rate limiting.

Also, I would be very glad if you can share some materials about Vault load testing with different storage backends. I've heard that PostgreSQL is the most performant, but I have no data or a research to prove it. Would be nice to read one.

After a super-quick research, I was only able to find this article on how to setup benchmark tests for Vault.

Although, here's a benchmark for Vault's integrated storage

#hashicorp #vault #performance

Yesterday I made a post about Vault. I have incorrectly put that the open source version of Vault is not HA. This is a mistake. What I meant is that with a community version only one node actively processes the connections, while others don’t. Though, this doesn’t contradict a definition of “high availability”.

However, this installation is HA. So, you can use the open source version without any major concerns (as long as your storage backend supports HA!).

Many thanks to our subscribers, who spotted this mistake! Mistakes happen and I very much appreciate when you help finding them!

You can read more about Vault’s HA configuration in the official documentation.

#hashicorp #vault

Only 4 days left to get the Terraform - From Zero to Certified Professional course for free!

I think, this is a great opportunity to get yourself familiar with Terraform or take a look, how things are done in the newer versions in case you're still using 0.11 for whatever reason.

#terraform #hashicorp #aws

Video from the 16th HashiCorp User Group Kyiv meetup (in Ukrainian) is available now!

If you were wondering what to watch on Friday, you have a perfect candidate!

Topics of this meetup:
- Deploy apps to K8s with Terraform
- RenovateBot: what, why, and how we use it

#slides #hashicorp #terraform #kubernetes

As a continuation of the HashiCorp / Terraform topic, I would suggest you an article by Yi Lu “The Pains in Terraform Collaboration”.

Problems discussed in this article may not be new to the Terraform users. Those are good old: state management, organization of the environments, merge-apply dilemma, etc.

Yet, the author points out the approaches different tools leverage to overcome those issues. Also, hopefully this article will motivate you to use Atlantis if you aren’t using it already.

#terraform #hashicorp

Maksym Vlasov - the co-author of this channel - has written an article about how to create Terraform lockfiles for hundreds of root modules.

You can read it in:

- My blog. This is the first guest article, BTW!
- Or you can find it on Substack (don't forget to subscribe there!)

Also, the live stream with Maksym and Terraform-master - Anton Babenko - is live right now!

#terraform #hashicorp #oc

​​HashiCorp posted an article in their blog on why platform teams should run as product teams.

If you're familiar with the topic of Platform Engineering, likely there is not that much new information for you. However, I think it's important to repeat those points, because the more people see them and start acting this way, in the better shape the industry will be.

Also, this article contains links to other articles and case studies that clarify some aspects. I like it when an article is a so-called "crossroad". So, you can continue exploring a topic once you've done with the original piece.

P.S. I cannot come up with a short tag for the platform engineering related topics. So, I would appreciate it if suggest something in the chat.

#platfom_engineering #hashicorp

AWS NLB now supports security groups! This is amazing and it would’ve prevented a couple of questionable architectural decisions on my side in the past.

P.S. Yet, the most discussed news is the licensing changes by HashiCorp. Unpopular opinion here: nothing changes for you as a practitioner. However, companies like Spacelift and Terramate got hit. Also, big huge cloud providers won’t be able to adopt “Terraform as a Service”. That’s it. Survives the one who can adapt to the new realities the best. And the new realities is that people pay for “service platforms” and not for the code written.

#aws #hashicorp

The drama around HashiCorp’s decision to move to Business Source License (BSL) continues. So, now we have OpenTF.

However, today I want to share with you this sane article: Why We Are Not Supporting OpenTF which pretty much resonates with my thoughts.

P.S. Here is OpenTF if you’re interested.

#hashicorp

There’s a new test functionality in Terraform v1.6.0.

You can read more about writing tests for your Terraform projects in this article, which also has examples of the tests.

For someone who values tests for IaC, I’m very glad that such functionality is a part of the core. Although, I haven’t been working much with Terraform lately, implementing tests for Helm charts yielded some great results. I hope to write an article in that one day.

P.S. This article was kindly sent right into my inbox by Terraform Weekly. Do not hesitate to subscribe, you’d like to get the latest news on the most popular IaC tool.

#terraform #hashicorp