Re:Creating my personal cloud with HashiCorp
by Omekutio on Saturday October 30, 2021 @03:51PM
(#29051816)
I highly appreciate what Terraform does for me and the whole industry.
I also think sometimes why i don't like it very much and how i would make it different.
How the state is handled, including potential secrets in it, is just frustrating. Having root secrets for your whole setup exposed/unsecure is bad. The state is relativly fragile and cumbersome to clean up or fix. I also can't grasp that tf even needs a state and the cloud providers can't return the current state just fast enough. Only a lightweight cache would then be needed.
And probably due to implementation details, plans show sometimes changes when there would be no changes necessary.
For me its a good tradeoff to use terraform for setting up a k8s environment and then handling everything with ArgoCD.
Google Connector is a very great thought: you create a k8s resource and the cloud provider executes it for you on their cloud. No terraform needed anymore at all.
I also think sometimes why i don't like it very much and how i would make it different.
How the state is handled, including potential secrets in it, is just frustrating. Having root secrets for your whole setup exposed/unsecure is bad. The state is relativly fragile and cumbersome to clean up or fix. I also can't grasp that tf even needs a state and the cloud providers can't return the current state just fast enough. Only a lightweight cache would then be needed.
And probably due to implementation details, plans show sometimes changes when there would be no changes necessary.
For me its a good tradeoff to use terraform for setting up a k8s environment and then handling everything with ArgoCD.
Google Connector is a very great thought: you create a k8s resource and the cloud provider executes it for you on their cloud. No terraform needed anymore at all.