Sergio Herrero
I'm Sergio Herrero. I write about platform engineering, SRE, Go, and infrastructure.
Latest writing
View all →-
Mutable vs. immutable infrastructure, and lifecycle in Terraform
What separates a mutable deployment from an immutable one, why Terraform replaces resources by default instead of modifying them, and how to change that behavior with create_before_destroy, prevent_destroy and ignore_changes.
- terraform
- iac
- lifecycle
- best-practices
-
Useful Terraform commands: validate, fmt, show, providers, output, refresh and graph
What each of these commands does, how to use them in practice, and which ones actually belong in a CI pipeline (and which do not).
- terraform
- iac
- ci
- best-practices
-
Connecting resources in Terraform with attributes and outputs
How to reference one resource's attribute from another, how the implicit dependency graph this creates works, and how to expose those values when the run finishes with output blocks.
- terraform
- iac
- gcp
- best-practices
About me
8+ years operating Kubernetes platforms at scale and building internal developer platforms. IaC with Terraform/KCC, observability, FinOps, and custom tooling in Go, Python, and Bash.