Posts

TypeScript is the right choice for infra Typed configuration languages are one fix for YAML hell. Pkl, CUE, and KCL give you types, value constraints, and a compiler. TypeScript solves the same … The long tail is a tail By definition a tail is the small, infrequent remainder. The long tail of spec-less APIs never touches chant. Here’s why. chant compiles a typed … Temporal and chant saw it coming A common line drawn about AI and infrastructure: “It changes how things get written, not how they get operated.” It casts the near term as a … The long road back to cloud native The sensible answer about Terraform and AI goes like this: the agent writes the HCL while Terraform keeps the governance and lifecycle that matter. William … An entire industry exists to fix Terraform This is what an industry of coping mechanisms looks like. One attempt to leave Terraform’s model outright was Winglang which compiled a new language … Configuration as code, and as data Brian Grant coined the Kubernetes Resource Model and argues that configuration should be data, not a program you run to find out what it is. chant agrees, … Honor the lower layer This post makes one narrow claim, one you should check rather than take on faith. Every tool sits on a lower layer. For infrastructure it is a … A lifecycle needs an orchestrator Terraform 1.14 shipped Actions, its biggest language change in years. An Action fires a provider operation when a resource gets created or updated or … Policy belongs left of the platform Everyone is shifting policy left. HashiCorp just shipped tfpolicy, a policy-as-code framework in HCL that moves the catch earlier than Sentinel ever did. … Your infra database is a road to hell The authoritative model Terraform made famous has always been a poor fit for teams just trying to automate a little infra. The state file is only its most … A release is a compile target Call something a compile target and you have said two things about it. It can be correct by construction, and it is cheap to produce. A compiler checks the … The apply verb you only get on Kubernetes Kubernetes made something uniform that people forget was ever a choice. Every service deploys the same way. A manifest describes the desired state. kubectl … Governance without the state file How easily can you prove that all your repositories have aligned configuration according to policy? Governance is easy when it comes to things people … A TypeScript compiler for Kubernetes manifests A GitOps pipeline on Kubernetes is full of tools. Reconcilers like Flux or Argo watch git and converge the cluster. Drift gets detected and alarmed while … The far-left IaC tool Everyone is shifting left. It’s the safest opinion in infrastructure, and most tools honor it by shifting left exactly one notch and calling it a … TypeScript vs Pkl for IaC Two tools have made the same uncommon choice. chant and formae both refuse the authoritative state file. Most infrastructure tools keep one. These two do … Which infrastructure tool actually keeps the spec? In the IaC world, who is spec native? Most infrastructure tools put a layer between you and the target spec. The layer is the product. It owns state and …