Safe Terraform auto-apply with conftest
Human review of Terraform plans doesn’t scale, and AI review isn’t deterministic enough for production. Here’s how we use conftest to auto-apply plans that meet an explicit, testable policy.
Ricard Bejarano – Site Reliability Engineer
Hey! I'm Ricard Bejarano. I'm a Site Reliability Engineer at Cisco and a homelabber by passion.
Latest posts
Advanced Terraform performance optimization
Terraform init, plan and apply have distinct performance bottlenecks. Here’s a breakdown of each phase, what makes it slow, and what you can do about it.
Speeding up Terraform caching with OverlayFS
The Terraform plugin cache does not support concurrent terraform inits. Here’s how we worked around that with OverlayFS.
terraform plan -light
A proposal for faster Terraform plans: terraform plan -light. Faster plan times without breaking up state.
A more mature take on stateless Terraform
Over a year ago I wrote a piece titled ‘Terraform should’ve remained stateless’. Here’s my self-critique of that post, with what I know now.
SMS phishing is way too easy
Impersonating someone in SMS texts is way too easy, we must change this to prevent social engineering fraud.
Find Jira issues faster with this browser shortcut
TL;DR: add your Jira projects as Google Chrome search engines so that you can quickly find issues by number.
Fixing cron jobs in macOS
macOS’ recent security developments prevent some cron jobs from performing their duties. This is how to fix it.
Hardening macOS
Quick and easy guide for securing macOS systems, for both laymen and security enthusiasts. Last updated for Tahoe.