I currently use Terraform locally because it's quick to fix errors and test changes or new services. I'm storing the state in a remote backend. Since I can spin up and down services locally with Terraform, won't a malware in my computer be able to do the same in my behalf? If yes, how can I protect myself? submitted by /u/Bartmr [visit reddit] [comments ..read more

Hi, I have set up Azure Key Vault and AppConfiguration with a combination of config items that reference Key Vault values, and some that are manually defined (non-sensitive). I am trying to create an Azure Container App instance whose secrets reference the values used by AppConfiguration, but have so far been unable to find a way to do this - using the app_configuration_keys data source gives me the items but the values are just url representations, and when I try to populate the container app secrets with this, those same urls are used. Does anyone know if it's possible to do this? Previousl ..read more

Hi! I am trying to setup Terraform on a Windows Server 2022 based virtual machine. I have downloaded, extracted and setup the environmental variable to include the path to the Terraform application file. After starting a new Powershell, I verified that the newly added path is included in the path variables ($env:path). When I execute "terraform -version", Windows Server displays a window asking me to select the file or application which should be linked to the request. When I select the Terraform file from the directory and save, nothing happens. I installed/setup Terraform on a standard wind ..read more

Hello. I am new to Terraform and wanted to ask a couple of questions related to state locking. I was reading "http" backend documentation (https://developer.hashicorp.com/terraform/language/settings/backends/http#unlock\_method) and have a couple of questions. 1) First, it is not clear for me what is the purpose of lock_address and unlock_address endpoints ? Do I understand correctly that when request is made to lock_address endpoint the state gets locked and after applying changes to the state there needs to be made the request to unlock_address to unlock the state ? 2) Secondly, there exist ..read more

I currently have 2 terraform repo that is a flat terraform (not modules). the files inside are named base on what resource it creates. example: project_1 - provider.tf - resource-group.tf - vnet.tf - nsg.tf - .. I will only have 2 terraform repo for this project, now Im thinking of changing it and do modules, but Im not sure what will be the benefit of it? Should I stay to the current setup since it is simple? Considering resources are up and running. below are the pros of both approach I have in mind. flat pros: - easy to maintain since it is straight forward and simple. - working as it ..read more

Let's say I have a structure like: testing - terraform.tfvars production - terraform.tfvars main.tf terraform.tf variables.tf output.tf In the main.tf file I have something like: module "lambda" { source = "..." // variables... } Using .tfvars I can easily substitute and adjust according to each environment. But let's say I want to use a different source for testing than production? How can I achieve this using this approach? Setting a different source affects all environments. submitted by /u/Familiar_Employ_1622 [visit reddit] [comments ..read more

Hello everyone, Facing some issue with terraform basically I'm trying to enable cors so for I have created options method but facing method already existing issue for the resource Also I checked entire file I declared only one place Can anyone help me thanks in advance submitted by /u/Embarrassed_Time_354 [visit reddit] [comments ..read more

How do you guys do this is really my question. I have a new env I am building and I have to migrate databases from the old sub to the new one and I can't really see where I should be using Terraform for the DBs, the server sure. If I build it blank I can, of course, clone in the data but at the same time it feels rough to do and I have a lot of worry about data loss with having the DB in Terraform, even with lifecycle triggers to prevent deleting. submitted by /u/Obvious-Jacket-3770 [visit reddit] [comments ..read more

Are you new to Terraform and feeling overwhelmed by all the possibilities? Fear not! We've compiled a series of step-by-step how-to guides to help you navigate the world of Terraform with ease. From setting up your first infrastructure to managing complex deployments, these guides will have you up and running in no time. Let's dive in and level up your Terraform skills together! submitted by /u/imprecisewoodward0 [visit reddit] [comments ..read more

Really love TF but man can it be counterintuitive. E.g. I run an apply, create a bunch of resources but then my plan fails in the middle because I misconfigured some variable. Fix the issue, run it again, "Error - Resource XYZ already exists". Well, yes, because you already created it half a minute ago. I thought that this would also be tracked in the terraform state and being accounted for in the next run. Do I miss something fundamental here? submitted by /u/SaremS [visit reddit] [comments ..read more