• Cloud
• Terraform

Cloud/Terraform

• Links Cloud/Terragrunt , Cloud/Terraform/ForLoop, https://acloudguru.com/blog/engineering/the-ultimate-terraform-cheatsheet

• Training: Hashicorp https://play.instruqt.com/public

• https://blog.gruntwork.io/how-to-manage-terraform-state-28f5697e68fa

Reasons Terraform sucks

1. 2025 - Can't from a resource from azurerm to azapi - data plane vs control plane

2. 2024 - Hashicorp killed it being open, split into OpenTofu

3. New era of continious reconciliation - k8s - AzureOperatorV2,

Terraform Cloud

• On local machine can debug with remotestate.tf file.

  • remotestate.tf

    terraform {
      backend "remote" {
        hostname     = "app.terraform.io"
        organization = "MyOrg"
        workspaces {
    
          name = "<workspace-name-in-tf-cloud>"
        }
      }
    }

Use RBAC for Azure blob, not storage keys

• Add  storage_use_azuread = true  to provider block e.g.

  # Configure the Microsoft Azure Provider
  provider "azurerm" {
    features {}
    # storage_use_azuread  
    # - This enables RBAC instead of access keys
    # - requires that the TFC SPN has Storage roles: Storage Blob Data Owner, Storage Blob Data Contributor.
    # - Files & Tables do not supported authentication with Azure AD.
    storage_use_azuread  = true # This enables RBAC instead of access keys
    # use_oidc             = true # If you want to use OpenID Connect
  }

Terraform git source

source = "git@bitbucket.org:twgnz/is-az-tf-module-storage.git?ref=53...b27"

tfwsitch Terraform switch

• 2020- Install/switch with https://github.com/warrensbox/terraform-switcher/releases

  • Download the linux_64 bit tgz
  • sudo chown pieter /usr/local/bin
  • unzip and copy to /usr/local/bin tfswitch_202012_v0.9.934
    • tar -xvvzf terraform-switcher_0.9.934_linux_amd64.tar.gz
    • cp tfswitch /usr/local/bin/tfswitch_202012_v0.9.934
  • run tfswitch and select terraform version

Graph Terragrunt/Terraform

• terragrunt/terraform graph

  • get dot tool  apt install graphviz 

•  terragrunt graph | tee /dev/tty | dot -Tsvg -o graph-$(date -I) 

CategoryTerraform