A more mature take on stateless Terraform

Re:A more mature take on stateless Terraform by kasfkaj on Sunday October 08, 2023 @08:19AM (#37809823)

Yes, this. Just supply a few flags to configure terraform backend to store the state in remote storage and encrypt it.

terraform init --backend=gcs --bucket="xxx" --prefix="my-deployment-name" --encryption_key="my-random-bits"

[ Parent | on HN ]

Re:A more mature take on stateless Terraform by Hnrobert42 on Tuesday October 10, 2023 @08:52AM (#37831415)

Again, that just puts a bandaid over the problem. You can’t individual audit access to or rotate secrets stored state files.

[ Parent | on HN ]