A state bucket that defends itself
An OpenTofu state bucket that defends itself against corruption, deletion and its own operator, using lockfiles and prevent_destroy.
Categories
24 pages
infrastructure
The reusable AWS building blocks I lean on, all public: Terraform modules and tooling for bootstrapping an account, enforcing a security baseline and managing KMS-backed signing keys. Built for my own use, and yours.
The bootstrap that does almost nothing
An AWS bootstrap module that does exactly three things, and writes down what it deliberately does not do. Scope as a design decision.
A signing key needs somewhere to live
A checksum hosted beside your download stops accidents, not a compromised platform. Why the signing key has to live somewhere you control.
Pre-populating Neo4J using Kubernetes Init Containers and neo4j-admin import
Seed a Neo4j 4.x database inside a Kubernetes pod with an init container running neo4j-admin import, and fix the store-id and memory errors.
