December 20, 2021 at 09:34 PM PST

With AWS SSO in place, I started using aws-vault locally for #terraform and AWS CLI. I learned about this tool at work. No IAM access keys with inline IAM policies! SSO + assume role for administrator access! #security #win

permalink

September 21, 2020 at 07:37 AM PDT

As of last night, all hyperbo.la AWS infrastructure is torn down. github.com/hyperbola/hyperbola/pull/111 #aws #terraform #devops #hypstatic

permalink

September 19, 2020 at 06:45 PM PDT

hyperbola is deployed to GitHub Pages now! Executed via DNS cutover with terraform. Now to destroy the old infrastructure in AWS. #github #hypstatic #aws #terraform #hypstatic

permalink

September 15, 2020 at 06:06 AM PDT

The terraform config for this project is on 0.12 and I have no desire to update it to 0.13. #fail #terraform #automation #hypstatic

permalink

November 4, 2018 at 03:11 PM PST

Add in some manual #terraform state edits and deleting things in the #aws console and we're recovered #fail #win

permalink

November 4, 2018 at 02:59 PM PST

Undeployable manifested as healthz returning 502 when adding a new instance to the ALB, marking it as unhealthy and timing out #terraform

permalink

October 28, 2018 at 12:04 AM PDT

I added code block and syntax highlighting to my new #blog. Planning on using it for an upcoming post about #terraform.

permalink

August 21, 2018 at 09:18 PM PDT

That was easy! hyperbola running on t3s now. #aws #terraform #win

permalink

April 13, 2018 at 05:29 PM PDT

for frklft.tires, I stopped using #terraform for managing the static content of the site. It now lives outside of my terraform code in a public directory, published explicitly with a make target #win

permalink

November 10, 2017 at 06:37 PM PST

welp that didn't last long. CloudFlare only queries a subset of NS records to check for liveness and has determined that I no longer use CloudFlare. Working on purging them from #terraform and registrar now #fail

permalink

November 5, 2017 at 09:31 PM PST

Even more cost savings: dynamically provisioned bastion cloudformation stack #terraform #aws

permalink

August 22, 2017 at 09:42 PM PDT

#terraform is now a package manager. Great. #fail. For some reason plugin downloads hang if the download gets an IPV6 edge node in their CDN.

permalink

August 16, 2017 at 08:17 PM PDT

thinking of removing dependency on #cloudflare. currently only used for hyperbo.la DNS. Email records are the scary part. #terraform makes this mostly easy

permalink

July 24, 2017 at 10:18 PM PDT

4. problem: https is hard. solution: ACM + #terraform + ALB + CloudFront

permalink

July 22, 2017 at 02:55 AM PDT

my #terraform life became much easier by using name_prefix instead of name. name and name_prefix parameters were never interpolated. Instead, use interpolation in tags. In practice this means config can change without rebuilding the world #win

permalink

July 22, 2017 at 02:54 AM PDT

I initially went with the unclustered variants of elasticache and rds. Once I wrapped my head around the topology, #redis cluster mode and #aurora were much easier to work with in #terraform

permalink

July 22, 2017 at 02:52 AM PDT

buliding the #aws infra took about 30 commits, two #terraform destroys, and two terraform code rewrites. some fun bits in the following posts

permalink

July 2, 2017 at 11:40 AM PDT

Converted wiki from ELB to ALB this morning ... took a couple of hours. modified #terraform config and updated #ansible ... also converted from Let's Encrypt to ACM. github.com/hyperbola/hyperbola-tools/commit/23fb9a7 #win

permalink

May 13, 2017 at 01:37 AM CDT

Migrated terraform state from a private github repo to a private, encrypted S3 bucket. State infra is bulkheaded from main app and protected with prevent_destroy lifecycle #win #terraform #aws

permalink

November 26, 2016 at 03:27 PM CST

bastion is now in an ASG with an automatically bound (with user data) elastic IP. Yay fault-tolerant infra! #win #aws #terraform

permalink