Our great sponsors
-
Pulumi
Pulumi - Infrastructure as Code in any programming language. Build infrastructure intuitively on any cloud using familiar languages 🚀
-
-
WorkOS
The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
-
terraform-cdk
Define infrastructure resources using programming constructs and provision them using HashiCorp Terraform
I don’t really think IaC is there yet, as someone who has used terraform (and now pulumi) in production for some time.
My biggest gripe is that the feedback loop is fairly slow: planning often predicts valid config that fails in deployment. It doesn’t help that the process of planning is really slow (see https://github.com/pulumi/pulumi/issues/8872 it can take minutes for pulumi to plan changes if using azblob backend) with little incentive for teams like pulumi to investigate or fix unless you use their cloud. I get that pulumi is in the business of promoting their own cloud, but there are few (if any im aware of) IaC solutions not intrinsically tied to for-profit SaaS because it’s incredibly labor intensive to build consistent interfaces to several constantly changing cloud providers.
Terraform as a language is a bit clunky and feels not quite complete. For example, to accomplish if/else logic, you have to hack something like `count = var.is_foo ? 1 : 0`
More than the language syntax, getting any response from the hashicorp team on their official providers is like rolling the dice. If your bug or feature pr is a bit on the fringes and not in their sights, it can [sit for months](https://github.com/hashicorp/terraform-provider-aws/issues/1... without traction or even a non-automated response. With just the aws provider, there are [over 3000 issues](https://github.com/hashicorp/terraform-provider-aws/issues?q...) and nearly 400 open PRs. That team is understaffed or mismanaged. It has gotten marginally better over the last year or so, but generally speaking, Hashicorp doesn’t seem to care while they’re pouring all efforts into their own cloud.