digger VS cloud-nuke

Currently, Github Actions is de-facto the only fully supported CI platform in Digger, we’ve been building it as a CI-agnostic tool (https://github.com/diggerhq/digger) from get go. We keep getting requests to support more CI systems on our community slack and over Github issues (https://github.com/diggerhq/digger/issues/81).

Unlike other automation tools for Terraform, Digger doesn’t run jobs on the server; instead it uses your CI (like Actions) as a compute backend. This is more secure and also much cheaper if you use your own runners in your CI.

But each CI and each VCS is ever so slightly different; and we are now at a crossroads - Should we build support for more CI platforms, or more features for GitHub Actions? We’d love any thoughts/inputs!

We just had a user submit an issue and a PR to revert the changes we made earlier that remove the option to disable telemetry. We feel like it’s a fair ask to share usage data with authors of an open-source tool that’s early in the making; but the user’s viewpoint is also perfectly understandable. Are we in the wrong here?

https://github.com/diggerhq/digger/issues/1179

Surely we aren’t the first open-source company to face this dilemma. We don’t want to alienate the community; but losing visibility of usage doesn’t sound great either. Give people the “more privacy” button and most are going to press it. Is there a happy medium?

Detecting and managing drift in Terraform is a multifaceted process. The use of Terraform commands such as terraform refresh and terraform plan plays a critical role in identifying drifts. Additionally, periodic monitoring of the infrastructure using these commands can aid in early detection and prevention of larger issues. Tools like Digger and Terraform Cloud offer dedicated drift detection and remediation mechanisms. These tools provide continuous monitoring and notifications, enabling teams to stay informed about the state of their infrastructure.

Star us on GitHub | Check out Docs | Blog | Slack

I would be extremely grateful if you could give us a star & share your thoughts in the comments section below https://github.com/diggerhq/digger

Check Digger's repo on GitHub

Digger is an Open Source Infrastructure as Code management tool that helps orchestrate IaC such as Terraform & OpenTofu within GitHub Actions. Digger reuses compute used for application code so that you don't overpay for 3rd party managed compute for IaC. This approach eliminates the duplication of CI/CD infrastructure such as compute, jobs, and logs, and reduces security concerns by keeping sensitive data within the CI job. Digger's integration with existing CI systems offers scalability by leveraging on-demand compute resources and enhances security by confining data within the existing CI environment.

Digger is an Open Source IaC management platform that allows you to orchestrate terraform/OpenTofu in your CI/CD system. It helps you resue async jobs infrastructure with compute, orchestration, logs, etc of your existing CI. Digger also has a pro version built on top of Digger’s community edition. Digger’s “bring your own compute” ensures that users have private runners by defualt and don’t have to pay for it additionally. Digger pro gives team leads, managers and IaC practitioners dashboards, Drift Detection, RBAC via OPA policies and concurrency so they can help guide the team.

We have this issue filed by a user and cannot quite decide internally what to do about it. It is clear that allowing everyone who comments to trigger apply is problematic. And we have this covered by the RBAC via OPA feature that allows users to set granular rego policies for who can do what. But it can also be viewed as an overkill to introduce the whole policy-as-code setup for a basic restriction like this.

- https://gruntwork.io/ - https://github.com/gruntwork-io

After discussing the testing approaches suggested by the two IaC providers Terraform and Pulumi, in the next post we will take a look at the dedicated IaC testing providers takes on this topic. Here we will have a look at Gruntwork and Snyk. So, stay tuned if you are interessted!

Or your working on gruntwork.io company, this is the only the thing that makes ok all what you say here. However I believe they can make better product instead of angry chat on reddit without getting in details.

Like others have said, your infra might itself be the product.

Look at https://gruntwork.io.

They’ve made a lucrative business by selling infra scripts that others can use.

And their subscription model means they keep the scripts up to date.

Have been checking out terragrunt and terratest lately(part of https://gruntwork.io)

Gruntwork | Software Engineers (Principal, Staff) | 100% Remote/US time zones | Full-time | https://gruntwork.io/

We aim to improve humanity's most important invention: Software. Our product enables software teams to launch and maintain production-grade cloud infrastructure in days, not months. We create the building blocks that devs use to make launching in AWS with infrastructure as code 10x better.

We work with AWS, K8s, Terraform, Go, Typescript, and React/Next. We’re a small team (~20 people), but our clients include Toyota, Adobe, TicketMaster, Verizon, and lots of startups.

We are profitable, self-funded (no investors, no debt), pay salaries, equity, and bonuses according to transparent formulas, and are very focused on building a company we're proud of. We are 100% remote, with 2/3 of our team in the USA and 1/3 in Europe. We have company-wide in-person meetups every few months. We welcome applicants from all backgrounds.

Our measure of a successful Grunt is (1) think like an owner, (2) make impact, (3) communicate effectively, (4) be a good person. If this sounds like you, we're hiring!

- Principal Software Engineer

- Staff Software Engineer

Learn more at https://gruntwork.io/careers/

Most people hesitate to use cloud hosted offerings for development. First of all, most providers have a generous free tier for devs, which can get you started. Secondly I recommend using tools like cloudnuke to avoid paying for cloud resources you're not using.