#terraform
grep -l "terraform" /portfolio/* · 5 entriesAn AI agent's plan that looked right and wasn't
AI agents are in my daily loop for infrastructure code. One produced a tidy change whose plan would have replaced a load balancer. The guardrails are why it didn't.
1 min readRules for AI agents touching infrastructure
AI agents are in the daily loop for triage, infrastructure code and postmortems. Writing the rules down as repo policy made using them safe and repeatable.
1 min readA Terragrunt plan that wanted to destroy production
A harmless-looking refactor produced a plan to destroy and recreate a production database. Reading the plan, not the summary line, caught it.
1 min readA Terraform state lock nobody released
Every Terraform run against production failed with a state lock error. A cancelled pipeline had left the lock behind, and the safe fix was checking before forcing it.
Infrastructure changes go through pull requests
Production infrastructure was changed in portals and over SSH. Moving it into code with reviewed pull requests made every change visible and reversible.
1 min read