Tag

#terraform

8 pages tagged #terraform.

Often with #operations 5 #ansible 4 #guide 2 #handoff 2 #state 2 All tags →

Decisions `decisions/` 1 page

Decision 0004 — OpenTofu state: HTTP backend implemented in SQLiteDecision

OpenTofu HTTP state backend implemented in SQLite, sidestepping the S3 conditional-write gap.

decisions/0004-opentofu-http-state-backend #decision #state

Guide `guide/` 2 pages

OpenTofu infrastructureGuide

Managing infrastructure with OpenTofu: SQLite HTTP state backend, plan diffs, CEL policies, and sealed outputs.

guide/opentofu #guide #opentofu #state #drift

Provision-to-converge handoffsGuide

Chaining OpenTofu apply and Ansible playbook executions into a single atomic, resumable ledger workflow.

guide/handoffs #guide #handoffs #ansible #convergence

Operations `operations/` 5 pages

Ansible-first bootstrapGuide

The handoff mirrored: the ansible play first and then the tofu apply, as one ledger workflow with a manual credential handoff between them.

operations/ansible-first-bootstrap #operations #ansible #handoff

Gating tofu plans with policyGuide

Writing CEL policies over a plan, denying a dangerous plan at seal so its apply refuses, and routing an apply through the approval gate.

operations/plan-policy #operations #policy

Offline dependency cachesGuide

Vendoring ansible collections and OpenTofu providers so a run does not depend on Galaxy or the tofu registry being reachable.

operations/offline-caches #operations #offline #ansible

Sealed tofu outputs as run-secretsGuide

A sensitive output sealed into the envelope and bound to an env name, so the play receives it without anything copied by hand.

operations/sealed-tofu-outputs #operations #secrets

Terraform to Ansible inventory handoffGuide

Chaining a tofu apply to an ansible play as one ledger workflow, with the workspace declared non-sensitive outputs becoming the play inventory.

operations/terraform-ansible-handoff #operations #ansible #handoff

All tags

#adhoc 1 #age 1 #agents 1 #alerts 1 #ansible 9 #api 4 #approvals 2 #architecture 6 #assessment 1 #auth 3 #automation 2 #backup 3 #bootstrap 2 #branches 1 #bubbletea 1 #cel 1 #changelog 1 #checks 5 #cli 5 #commands 1 #configuration 1 #containers 5 #contributing 6 #convergence 1 #credentials 2 #css 1 #debugging 1 #decision 22 #deferred 3 #dependencies 2 #deployment 1 #design 8 #dev 2 #drift 2 #encryption 1 #errors 1 #execution 2 #exitcodes 1 #failures 1 #flags 1 #gallery 1 #gates 1 #git 2 #governance 1 #guide 10 #handoff 2 #handoffs 1 #hooks 3 #internals 1 #invariants 1 #inventory 1 #json 1 #lanes 1 #lima 1 #lipgloss 1 #llm 1 #mcp 4 #metrics 1 #migrations 1 #mobile 3 #monitoring 1 #naming 1 #netgroups 1 #notifications 1 #ntfy 1 #offline 4 #opentofu 1 #operations 29 #packages 1 #packaging 3 #pairing 2 #platform 1 #playbook 1 #playbooks 1 #policy 1 #probes 2 #provisioning 1 #qr 1 #quadlet 1 #queue 1 #quickstart 1 #reactive 4 #reboot 1 #recovery 3 #reference 3 #release 1 #remote 1 #replication 2 #rollback 1 #sandbox 2 #sbom 2 #schema 1 #screenshots 1 #secrets 4 #security 7 #serve 4 #setup 2 #site 1 #sops 1 #sources 3 #sqlite 1 #ssh 1 #state 3 #store 1 #superseded 1 #templ 1 #terminal 1 #terraform 8 #testing 1 #threat-model 1 #tokens 2 #toolchain 2 #tui 2 #ui 1 #upcoming 1 #verification 1 #versioning 1 #web 3 #webhooks 3 #workflow 1 #worktrees 1 #yaml 1