toad.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
Mastodon server operated by David Troy, a tech pioneer and investigative journalist addressing threats to democracy. Thoughtful participation and discussion welcome.

Administered by:

Server stats:

274
active users

#terraform

3 posts3 participants0 posts today

New Open-Source Tool Spotlight 🚨🚨🚨

TerraSchema converts Terraform `.tf` files into JSON Schema (Draft-07) for variable validation. It handles types, defaults, and validation rules directly, making `.tfvars.json` file generation seamless. Install via `go` or binaries. #Terraform #JSONSchema

🔗 Project link on #GitHub 👉 github.com/HewlettPackard/terr

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️

Speculative plans in Terraform Cloud can open an attack path.🚨

On a Red Team engagement, we compromised a Terraform token with plan permissions. By adding a custom external data source, we ran code on the Terraform Cloud runner.

That exposed short-lived AWS and GCP credentials, letting us work outside the version control workflow.

Even VCS-backed workspaces do not stop this. The runner still holds the keys during a plan — and that is the risk.

Jack McBride explains the technique and how tighter token scopes and Sentinel allow lists can prevent it.

📌 pentestpartners.com/security-b

> You crazy son of a bitch, you actually did it.

Yes, I did it. I added a CI and (near) CD to my personal blog, and I wrote up some notes on the experience (given my slightly unusual tech stack) of App Engine (dynamic and static hosting) and Hugo.

I even quickly reached the conclusion that Terraform would reasonably have a place here give modern IAM ecosystem needs and prototyped what a WIF/OIDC Terraform configuration would look like.

matttproud.com/blog/posts/blog

matttproud.com (blog) · Behind the Scenes: CI and CD with this Web Site and Blog
More from mtp

Proxmox fully automated! From ClickOps to Code: Automated. Audited. Revisioned. Repeatable.

Starting from the base by automating:
- Cluster initialization
- Cluster join
- Storage Integration
- Proxmox Backup Server Integration
- SDN Networks (different ones for pros/dev)
- Guest Resources utilizing the cluster infrastructure

#Proxmox #PVE #Pbs #ProxmoxBackupServer #opensource #Automation #Ansible #python #devops #terraform #cicd #pipeline #cluster #nfs #iscsi

peertube.gyptazy.com/w/4cp7ddL

Replied in thread

@tom I don't... Enjoy working with Ansible.

I feel like it's a baller orchestration engine - need to make 150 AWS EC2 instances dance the Irish jig? Ansible's got you covered.

But when you start building complex cookbooks to build ana manage infrastructure, I feel like its abstractions are not well suited to that task at all and it tends to fall down hard.

#Pulumi or #Terraform are much better choices for that IMO.

Also, just so I'm not ignoring your suffering, sorry you're having to deal with this! Never fun when IaC goes awry :)

media2.giphy.com/media/v1.Y2lk

IT pros and #SysAdmins! Tired of late-night patching? Check out my new episode, GitOps for the Linux Administrator on The #ITGuyShow! Join me with #ChristianHernandez, a #Linux guy and #DevOps advocate, as we explore his journey from Solaris servers to #GitOps evangelism.

Learn: The true meaning of GitOps, a new mindset, tools like #ansible, #terraform, and #ArgoCD! Perfect for "lazy" admins valuing efficiency! Enhance your skills and transform infrastructure management: podcast.itguyeric.com/10

#Terraform is great because it is not simply for one provider/one cloud. You can target multiple clouds in the same Terraform configuration. It doesn't have to be multiple clouds, the more generic term is multiple providers (e.g. #Azure + Entra ID)

Read my article on using Terraform for multi-cloud over at #Spacelift spacelift.io/blog/terraform-mu

SpaceliftMulti-Cloud Provisioning and Management with TerraformLearn how to manage multi-cloud infrastructure with Terraform. Explore provisioning strategies, best practices, and real-world examples.

"Software trends have shifted dramatically — languages have come and gone, release cycles have shrunk from months to hours, architectures have evolved, and AI has taken the industry by storm. Yet the code that automates software deployment and infrastructure has remained largely unchanged.

“The state of infrastructure automation right now is roughly equivalent to the way the world looked before the CRM was invented,” says Jacob.

A skeptic might ask, why not use generative AI to do IaC? Well, according to Jacob, the issue is data — or rather, the lack of it. “Most people think LLMs are magic. They’re not. It’s a technology like anything else.”

LLM-powered agents need structured, relationally rich data to act — something traditional infrastructure tools don’t typically expose. System Initiative provides the high-fidelity substrate those models need, says Jacob. Therefore, System Initiative and LLMs could be highly complementary, bringing more AI into devops over time. “If we want that magical future, this is a prerequisite.”

System Initiative proposes a major overhaul to infrastructure automation. By replacing difficult-to-maintain configuration code with a data-driven digital model, System Initiative promises to both streamline devops and eliminate IaC-related headaches. But it still has gaps, like minimal cloud support, and few proven case studies.

There’s also the risk of locking into a proprietary execution model that replaces traditional IaC, which will be a hard pill for many organizations to swallow.

Still, that might not matter. If System Initiative succeeds, the use cases grow, and the digital-twin approach delivers the results, a new day may well dawn for devops."

infoworld.com/article/4021153/

InfoWorldCan System Initiative fix devops?System Initiative proposes a radical overhaul of infrastructure automation to address infrastructure-as-code chaos and longstanding devops toil.