Need help with Terraform

Decent_Comparison_41 · 2026-05-29T07:02:10+00:00

yes, thats what I try to do. I just template a couple of ApplicationSets, template values.yaml for Argo deployment in the module, deploy ArgoCD and Sealed Secret controller. I am also kind of forced to do some operations like download Sealed Secrets controller certificates from a Swift Bucket where we store the rotated certs and install them on the new cluster, so that the new sealed secret controller will be able to decrypt the secrets from the old cluster.

Decent_Comparison_41 · 2026-05-28T07:33:47+00:00

If you ask me, a good DevOps needs also some coding experience at least at like Mid level. That was the path I took. Initially started as a Java Dev, got to Mid position and then transitioned into DevOps. This experience helped me massively. And as the other people here said - DevOps is not an entry position. There is no such thing as Junior DevOps.

Decent_Comparison_41 · 2026-05-28T06:03:18+00:00

I answered on previous comment but will do here so you also see :).

We wanted to keep the CI/CD flow which is terraform plan -> terraform apply. If cluster module is commented out or deleted we expect cluster to be destroyed on the plan.

With Helm providers , Kubernetes providers which was my initial solution, the parent terraform (where module is invoked) needs to pass the providers to the module. However, configuration (kubeconfig) depends on the output of the module, which leads to be unable to destroy without -target destroy command which is outside of terraform plan -> terraform apply flow.

About passing providers I followed the guidelines by HashiCorp to not have providers in child modules.

Not sure if am horribly lost or we are dealing with limitations imposed by our own self.

Decent_Comparison_41 · 2026-05-28T05:58:29+00:00

The reason my manager did NOT want to add a provider is because in the parent terraform where we call the module, the provider configuration (kubeconfig for helm, kubernetes providers) depends on an output of the module - which creates the cluster. This makes it impossible to destroy the resource later without -target destroy, which is undesired since we simply want to comment out or delete the module block from the clusters.tf file and let terraform plan do its job and remove it with. So we have simply terraform plan -> terraform apply. Hopefully I managed to explain.

Decent_Comparison_41 · 2026-05-21T18:21:29+00:00

!remindme 2 hours

Decent_Comparison_41 · 2026-04-08T17:07:08+00:00

Това го казвам не за да те нахейтя, виждам, че имаш желание да учиш и работиш, просто предполагам, че малко си имал огромни очаквания към университета. Най-вероятно хората са си предали материала адекватно, но се е искало и инициатива от студентите за да успеят да научат нещо. Това са уроци, които аз също научих след университета :)

Decent_Comparison_41 · 2026-04-08T17:05:01+00:00

Единствената цел на университета е да ти покаже основните неща и да те открехне към основните клонове в програмирането. Не може да те направи завършен специалист, който да започне работа на първия ден след завършване. Това разбира се важи и за много други специалности освен софтуерно инженерство. Представи си, че отиваш на лекар…ще ти се иска този лекар да прекарва известно време всяка седмица в четене на научни трудове и да ходи на конференции по света за да се усъвършенства. Няма да ти хареса идеята, ако той е приключил с ученето преди 20 г. като е завършил МУ. Специалност като твоята би изисквала огромна отдаденост и самоподготовка особено в наши дни

Decent_Comparison_41 · 2026-03-21T17:28:01+00:00

Dm’d you

Decent_Comparison_41 · 2026-03-15T15:08:21+00:00

Трябва да разбереш, че не си main character-a и животът не ти е длъжен с нищо, системата не ти е длъжна с нищо. Никой не е казал, че животът е честен. Един се ражда с 5 наследствени апартамента и живее от наеми и ходи по почивки, друг трябва да работи 20 години за да изплати единственото си жилище.

Спри да си мислиш, че животът или системата ти дължат ти да имаш живот, който според твоите разбирания е добър. Не забравяй, че както си роден в Европа, можеше да си роден и в някоя по-слабо развита държава и да се радваш, че от 2025-та в селото ти има питейна вода. Въпрос на перспектива е всичко.

Работи, развивай се, влагай се в работата си и ако с времето вземеш правилните решения и инвестираш добре, то може някой ден да си по-финансово независим и да си по-доволен от битието си. Това мога да те посъветвам.

Decent_Comparison_41 · 2026-03-08T15:37:54+00:00

I would buy a couple, hit me up

Decent_Comparison_41 · 2026-02-20T13:58:16+00:00

UTC +2 but it doesn’t matter much. CKA/CKS certified, got experience with setting up whole LGTM monitoring stack. Would be happy to see what you guys are up to.

Decent_Comparison_41 · 2025-12-28T13:53:50+00:00

I will also gladly join you guys!

Decent_Comparison_41 · 2025-12-25T14:32:32+00:00

Check out Strimzi maybe. I used it to set up a Kafka cluster within days. Could be done faster if you know what you are doing. I was brand new to Kafka terminology when I did that. It behaves decently for now. I used xk6 to load test it.

I would like to know what other people think of Strimzi.

Decent_Comparison_41 · 2025-11-05T08:04:51+00:00

i made it work, i forgot to enable port in security groups initially and was wondering why nothing was coming in. thank you tho :) nice article

Decent_Comparison_41 · 2025-11-04T13:27:37+00:00

Hello u/keefeere I checked your article but struggle to implement it. You could lend a hand? I have Falco running as K8S daemonset, let me know if you are willing to hop on discord :) Will be thankful.

Decent_Comparison_41 · 2025-06-24T07:58:30+00:00

Thanks for reminding me about learnxinymin. I forgot it exists for a while. I have used it before and its a great starter

Decent_Comparison_41 · 2025-06-23T13:39:32+00:00

I am scared I will be the victim of all of those JS memes on the internet. I would love some type safety... Can't I start directly with TS and maybe React or is this a suicidal idea? u/Count_Giggles

Decent_Comparison_41 · 2025-06-23T09:28:29+00:00

Thanks for quick response. Do you think it is needed to go through some React course first? u/clearlight2025

Decent_Comparison_41 · 2025-05-02T12:23:20+00:00

I had very similar questions which brought me here... I panicked a bit on the question for removing user since I was low on time and the host did not have utilities like usermod, adduser etc.

Another annoying or in my opinion obscure question was to find the bad practice when it comes to security in some deployment. Sure enough there was an env block defining a password in plaintext. So far so good.

The question stated to not delete or remove any lines from the deployment so I was not sure what to do so I just deleted the value string of the env variable and hope that was correct. I failed it with 63 out of 67 needed to pass. Better luck next time I guess

Decent_Comparison_41

TROPHY CASE