Terraform: upgrade a provider without uncontrolled drift
A production runbook for qualifying a Terraform provider upgrade with a lockfile, baseline plan, canary, operational evidence and an explicit rollback.
Read article
Tag
terraform
6 articles connected to this technical signal.
Azure IaC: validate an infrastructure plan before production apply
A production runbook for qualifying a Terraform, Bicep or ARM plan before apply with drift, CI identity, Azure Policy, destructive changes, validation and rollback.
Read articleAzure Private Endpoint: detect Terraform, DNS, and network drift before incident
Build an operational drift reading across Terraform, Private Endpoint, private DNS, CI runners, and validation evidence before a private Azure path breaks in production.
Read articleAzure snippet: detect Private Endpoint DNS drift
A short check to compare the expected DNS chain, returned private address, and test path from a workload or CI runner.
Read articleTerraform snippet: diagnose a stuck state lock before force-unlock
A short procedure to qualify a stuck Terraform lock, confirm that no apply is still active, and restart with a clean plan.
Read articleTerraform Azure: secure a private state backend without breaking CI
Design an Azure Terraform backend based on a private Storage Account with CI identity, controlled network access, locking, separate bootstrap, and a diagnostic runbook when init or plan fails.
Read article