Hacker News new | ask | show | jobs
Infrastructure as Code Is Not the Answer (lukeshaughnessy.medium.com)
2 points by pombo 1180 days ago
1 comments

so true. Anyone that's tried to debug 1000s of terraform lines with aws security groups know this 100%.
Half of the problem is that you are using Terraform.

If you were writing Bash or Python or Java programs to build out your infrastructure you'd have a fighting chance of them being possible to debug and maintain because you won't be fighting with a declarative system that has a structural mismatch with the domain. And those scripts are not likely to break going from JDK 8 to JDK 17 or Python 3.6 to 3.11. If they do it is because of some superficial change, not because they traded one structurally wrong model for another one.

All of those things like puppet are a problem instead of a solution. None of those things absolve you from understanding how to write bash scripts, but they do make you learn a complex model that doesn't quite fit the domain and then make you fight with that model to do the simplest things.

100% and it wasn't like picking Terraform was _my_ choice! Sometimes you are at a big company and they already have 1000s of Terraform files so you can:

1. Fight with leadership to get away from Terraform

2. Roll up selves and feel the Terraform pain with rest of team