Posts

TF vendor power - without the SaaS Terraform vendors sell plan and apply on pull requests, approvals, policy, drift checks and an audit trail, run on their servers with your cloud … Git is perfect for portable provenance Provenance is the record of why a change exists and who stands behind it. It belongs with the code. Anyone who clones a repo can ask why a line exists and … Fidelity matters for infrastructure-as-code Most cloud specs are JSON. Most IaC (infrastructure as code) is not. A typed config language approach for IaC preserves the lifecycle as a daemon that … chant dropped Temporal for fountain chant is a TypeScript toolchain for infrastructure. You declare resources as typed source. chant compiles them to the platform’s own spec. It also … Your infra abstractions are infecting your control plane Infrastructure abstractions are sexy. It’s alluring to think that you can encode your opinions once and nobody else ever has to think about them. … Solving the stress of infrastructure inheritance You just inherited a Terraform estate. The state file is the only thing telling you which resources are yours. choudoufu fixes that in place. It stamps … Down to earth infra dependencies Choudoufu gives you a model where dependencies come for free. One team’s stack reads what another team’s stack owns, straight from the cloud, … Adopt infrastructure without re-homing it Lots of us are familiar with the set of decisions faced when inheriting a Terraform estate. I build two infra toolchains that give you new choices in this … Infra tooling expectations in 2026 chant typed source many platforms choudoufu OpenTofu fork AWS or both your git forge GitHub · GitLab · Forgejo generated pipeline · gate in git your cloud … Terraform state at scale the easy way An RDBMS might seem like a cost effective way to centralize your Terraform state. The better choice is the “live” backend. It answers the same … The intoxicating mix of synthesis and execution When software engineers build infra toolchains they always mix synthesis with execution. It’s hard to resist when you carry a bag of golden hammers … Leave GitHub and take your CI with you Forge governance should be policy driven, and simple enough for anyone to setup. It also helps if you can carry the same pattern across forges in case you … Governance for GitHub, GitLab, and Forgejo Getting all your forge settings and repo configs aligned can take some effort. The forge wardens are here to help you: github-warden gitlab-warden … Invisible ownership is ridiculous Terraform has an ownership problem. From an org perspective, ownership is usually about who is accountable. This accountability gets encoded into … A plan preview for k8s with ownership kubectl can already dry-run an apply against the real API server and show you what it would produce. “chant kube apply” and “chant kube … knr-ops beats Crossplane on the token bill Token savings in IaC is so hot right now. It pays to understand which tools save you the most money and why. knr-ops beats Crossplane where the work … choudoufu cuts terralith optimization time in half choudoufu is a fork of OpenTofu with live markers. This blog takes a look at Cursor’s recent migration from Terraform to OpenTofu, and how it could … Good tools can survive great "culture" Culture rots. It’s perfectly normal and to some degree not preventable. It rots because it’s an honor system, and honor systems are only as … Tofu tastes better with live markers Outside of k8s, infra tooling generally has pretty specific way of looking at ownership. They keep a ledger, and if a resource is in the ledger, the tool … Terraform state has three pieces A state file does three jobs. It says which live resource an address refers to. It holds values the cloud has nowhere to put. And it records that an effect …