tag: Infrastructure-as-Code · 8 items
- Platform/SRE — Plan: New GA minor release of a core IaC tool with meaningful platform capabilities: import blocks inside modules, a store block for ephemeral/sensitive values across plan and apply, and on_failure modes for resource action triggers. No breaking changes or EOL deadline, but worth scheduling evaluation and adoption this quarter.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Plan: Two security fixes affect IaC workflows: credentials intended for an OCI registry origin can leak to HTTP redirect targets, and tofu init can be forced into high CPU/memory usage via crafted URLs from an attacker-controlled state backend or registry. Upgrade OpenTofu to 1.12.6 in your IaC toolchain this sprint; no KEV listing or confirmed active exploitation, but both issues are directly triggerable in adversarial environments.
- CI/CD — Plan: If tofu init runs in your pipelines against external module/provider registries or remote state backends, both the credential-leak and resource-exhaustion issues apply there too. Pin the OpenTofu version in your pipeline tooling to 1.12.6 as part of your next dependency update cycle.
- Leader — Skip
- Platform/SRE — Learn: A practical walkthrough integrating OpenTofu, GitLab CI/CD, and Argo CD into a unified IaC + GitOps platform pattern — useful design reference, but no GA capability change or deadline requiring action.
- CI/CD — Learn: Illustrates how to wire GitLab pipelines to OpenTofu provisioning and Argo CD deployments end-to-end; worth reviewing as a pipeline design reference, but nothing here forces a pipeline change.
- Leader — Skip
- Platform/SRE — Learn: Routine minor release of a common IaC tool; the parallel-install race condition fix and provider resolution improvements are worth noting for teams running Pulumi heavily, but no security issue or deadline makes this actionable today.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Plan: A semver major bump in a provider teams rely on for Azure IaC signals likely breaking changes; schedule a migration from AzureRM 4.x to 5.0 this quarter, validating existing configurations against the new Resource Provider registration behavior and opt-in preflight validation before upgrading production workspaces.
- CI/CD — Skip
- Leader — Skip
- Signals: GA announcement · major release (5.0)
- Platform/SRE — Learn: System Initiative is a collaborative, model-based IaC tool now open-sourced — worth evaluating as an alternative to Terraform/Pulumi, but no GA production readiness signal or deadline to act on.
- CI/CD — Skip
- Leader — Learn: An open-source release of a collaborative IaC platform is worth tracking as a potential build-vs-buy consideration, but there’s no licensing change, pricing event, or strategic forcing function requiring a decision now.
- Platform/SRE — Learn: Pre-release provider for scraping budget switch web UIs via Terraform — interesting pattern for home-lab or SMB infrastructure automation, but pre-GA status caps this at Learn and HRUI hardware is unlikely in production platform environments.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Learn: A survey of root module organization patterns for Terraform — useful for evaluating or refining IaC structure, but no operational change required today.
- CI/CD — Skip
- Leader — Skip