How We Stopped Terraform Drift from Surprising On-Call
KU
Kiril urbonas
11 months ago • 1 min read•Updated yesterday•4 views
A real story of removing console-only changes, adding drift detection, and getting Terraform back in charge.
Our worst incident of last year started with a simple question: “Why is there an EC2 instance we can't find in Terraform?”
```bash terraform plan -detailed-exitcode || echo "Drift detected" ```
Drift still happens, but on-call no longer learns about it at the worst possible moment.
Get the latest tutorials, guides, and insights on AI, DevOps, Cloud, and Infrastructure delivered directly to your inbox.
SLO-Based Monitoring for APIs. Practical guidance for reliable, scalable platform operations.
Declarative, Git-centric deployments with Argo CD. Directory layout, sync policies, and security.
Explore more articles in this category
How we shipped three schema migrations with zero customer impact. Expand-then-contract, dual-writes, and the rollback plan we never had to use — but tested anyway.
How we went from 200 alerts per week (most ignored) to 15 actionable alerts with clear runbooks and useful dashboards.
Practical patterns for Terraform modules at scale: versioning, composition, testing, and avoiding the monolith trap.
