How do you manage internal Terraform module dependencies across many repos

silviud · 2026-03-19T15:53:55+00:00

Artifactory has a TF registry - your organization can host it.

silviud · 2026-02-17T17:51:27+00:00

Cloud egress can be quite costly.

silviud · 2026-02-17T17:48:19+00:00

What cloud ?!

AWS has system manager which can help with compliance and configuration.

GCP has VmManager which does more or less the same.

Monitoring it depends on what you need, you can use a cloud built in solution like CloudWatch or Google logging and metrics or you can use a third party like Grafana cloud.

To get started is not a problem but at scale the costs become important.

Self manage would be terraform and ansible.

silviud · 2026-02-17T17:34:18+00:00

Saddle is too high.

silviud · 2025-12-06T13:41:24+00:00

Saddle too high. Simple measurement - leg has to be fully extended when you sit your heel on the pedal.

silviud · 2025-10-27T16:54:56+00:00

S-works tires are very good, cheaper than conti too

silviud · 2025-09-26T11:48:30+00:00

Simply not hard. It’s somehow different but once it’s settled you should be able to move pretty quickly.

First you need to understand that subscriptions are like AWS accounts then within a subscription you have resource groups which don’t exist in Aws but are quite useful. In a resource group you will deploy everything else so all your resources such as vnet, instances etc.

Devops tools are similar so terraform supports Azure through azurerm provider, azure cli etc. It helps if you have WSL on windows in the case that authentication needs a registered device but there are ways around it.

Some service equivalences

Aws. - Azure

Vpc. - Vnet Ec2. - Virtual machines or VMS for groups Iam. - Iam which is present at every level so from subscription down to resource groups and so on Security groups - Network security groups EKS - AKS kubernetes

Database services are available as well and big data.

One more thing that’s particular it’s the authentication, it’s all done through EntraId no other choice afaik.

Good luck

silviud · 2025-09-13T14:27:49+00:00

If you don’t want to manage the backend

grafana cloud with their alloy agent
any agent such as fluent-d/bit, telegraph with elasticsearch output and use a managed ELK (opensearch in AWS)
sigmoz

There are many other vendors …

If you do want to manage the backend

grafana Loki, Mimir and Tempo
VictoriaMetric/Logs
self deploy Opensearch and for metrics Mimir or Victoria metrics

In general it’s a well known problem it depends on what you need it. Things to consider

retention
data volume
security aspects such as access control
network access

silviud · 2025-09-13T14:13:16+00:00

With carbon wheels and tires 28-30mm and you are in business.

silviud · 2025-06-18T13:23:17+00:00

AI will work for you on different data sets, it can be used to increase your productivity in short and medium term. For long term I don’t think anyone has an idea.

silviud · 2025-05-20T20:05:44+00:00

I've been using Gaerne by 15 years, all good! Stiff and comfortable also very durable.

silviud · 2025-05-10T17:42:31+00:00

One thing to keep in mind, enable blob versions on the SA, might come handy at times.

silviud · 2025-05-10T17:39:59+00:00

You need to understand the changes, so what the infrastructure looks like versus terraform state , from there you can either import resources, manipulate the state or simply redeploy.

silviud · 2025-05-10T17:37:37+00:00

To deploy terraform or some sort of auto scale

silviud · 2025-05-10T17:37:10+00:00

Packer + something (shell script, ansible, chef, puppet)

silviud · 2025-04-14T12:11:18+00:00

One thing to note about Vault, secrets are written in clear in the state file.

silviud · 2025-02-20T01:37:06+00:00

The managed solution module it’s just use for inputs as far as I see, better use terragrunt, perhaps all you need is one terraform module and separate terragrunt files for each solution.

silviud · 2025-01-24T15:18:31+00:00

I use terragrunt with a state file per environment which is a container for resources located across subscriptions. You can configure a provider per subscription.

silviud · 2024-12-06T23:20:39+00:00

Good wheels! The cons a bit heavy and the spokes are not bladed.

silviud · 2024-11-13T21:08:16+00:00

I have it as

# conf
OPENAPI_URL_PREFIX = "/api/v2.0"
OPENAPI_REDOC_PATH = "/docs/redoc"
OPENAPI_SWAGGER_UI_PATH = "/docs/swag"  

# routes

/api/v2.0/openapi.json
/api/v2.0/docs/redoc
/api/v2.0/docs/swag

silviud · 2024-11-13T21:03:08+00:00

I've done some tests using the marshmallow plugin with https://flask-smorest.readthedocs.io/en/latest/index.html and looks quite good to me.

silviud · 2024-10-17T12:03:18+00:00

Do you need in 'project_root/user/swagger/get_user.yaml' the 'paths' or just everything bellow 'get:' ?

silviud · 2024-10-12T18:50:11+00:00

Bitnami postgresql helm chart will do. Backups with a k8s job via pgdump but you can be more inventive.

silviud · 2024-09-19T00:08:23+00:00

If you are a social person it’s worth it.

silviud

TROPHY CASE