Live data from Hacker News

Terraform Cloud Pricing Changes Sticker Shock

shavingtheyak.com

131–139 of 139 posts

Re: Terraform Cloud Pricing Changes Sticker Shock

#131
post #121

Earlier quoted context omitted.

In-house IT isn't up to the task of building systems that are infinitely scalable but as the price goes up lots and lots of shops are going to realize they don't need infinitely scalable, they need the scale they're at and have no reason to want to grow it. In-house IT is great at that.

And what is the ratio of services that need to scale infinitely to those that do not? At least if you are for example in more traditional internal software development?

Almost none do. Internal software never does. External-facing software only does if the intended user base is "the world".

Re: Terraform Cloud Pricing Changes Sticker Shock

#132
post #83

Earlier quoted context omitted.

In-house IT isn't up to the task of building systems that are infinitely scalable but as the price goes up lots and lots of shops are going to realize they don't need infinitely scalable, they need the scale they're at and have no reason to want to grow it. In-house IT is great at that.

I feel like people also haven’t updated their mental models from 20 years ago about what a small server can do. A Raspberry Pi 5 has more power than a huge NT back office server in the late 1990s or early 2000s. The cloud hid 20 years of progress more or less. Things got more powerful but cloud prices didn’t come down at the same rate. Cloud providers pocketed the difference. The void for on prem is mostly in the sof…

On a lark a made a Ceph cluster a couple of years ago with a dozen RPis, a dozen commodity 1TB USB drives, and a SO/HO switch and... it worked. Like, it was a joke project one afternoon but suddenly we had a 3X redundant 4TB S3 pool that was faster than our WAN connection and just took switching out a HD or RPi once a quarter or so whenever Nagios lit up that one had failed.

Re: Terraform Cloud Pricing Changes Sticker Shock

#133

Shameless plug: Co-founder of Terrateam[0] here. We have flat rate pricing with unlimited operations and users. Terraform Cloud pricing is absolutely crazy. [0]: https://terrateam.io

You don't seem to support monorepos, similarly to Atlantis and others, but a Terraform monorepo is a common practice, i.e. one PR could modify multiple workspaces.

Re: Terraform Cloud Pricing Changes Sticker Shock

#134

Just use Atlantis, it’s really great. My company switched from Terraform Cloud to maintaining an Atlantis instance and it made things so much smoother, and it’s OSS. https://www.runatlantis.io/

Maybe I'm missing something but although Atlantis seems great, you have to expose a webhook to the open internet that points to a service that has full admin access to your infra. If an attacker finds a security issue with Atlantis and decides to abuse it, you've basically given them admin access. For that exact reason Atlantis a prime target for vulnerability exploitation

Re: Terraform Cloud Pricing Changes Sticker Shock

#135
post #83

Earlier quoted context omitted.

I feel like people also haven’t updated their mental models from 20 years ago about what a small server can do. A Raspberry Pi 5 has more power than a huge NT back office server in the late 1990s or early 2000s. The cloud hid 20 years of progress more or less. Things got more powerful but cloud prices didn’t come down at the same rate. Cloud providers pocketed the difference. The void for on prem is mostly in the sof…

On a lark a made a Ceph cluster a couple of years ago with a dozen RPis, a dozen commodity 1TB USB drives, and a SO/HO switch and... it worked. Like, it was a joke project one afternoon but suddenly we had a 3X redundant 4TB S3 pool that was faster than our WAN connection and just took switching out a HD or RPi once a quarter or so whenever Nagios lit up that one had failed.

Yep, but companies need to pay tens or hundreds of thousands a month for AWS to run it for them.

I feel like we are ripe for another turn of the on-prem/off-prem wheel.

Then, of course, once it's all back on-prem we will once again have price gouging monopolies (probably in software) and someone will have the bright idea of moving everything to... what will they call it next time? Maybe "the grid" instead of "the cloud?"

Re: Terraform Cloud Pricing Changes Sticker Shock

#137

Just use Atlantis, it’s really great. My company switched from Terraform Cloud to maintaining an Atlantis instance and it made things so much smoother, and it’s OSS. https://www.runatlantis.io/

Maybe I'm missing something but although Atlantis seems great, you have to expose a webhook to the open internet that points to a service that has full admin access to your infra. If an attacker finds a security issue with Atlantis and decides to abuse it, you've basically given them admin access. For that exact reason Atlantis a prime target for vulnerability exploitation

You can put it behind something like cloudflare and make the url something that can't be guessed, but yeah it is not the best. I really wish github would publish a list of IPs it calls from.

Re: Terraform Cloud Pricing Changes Sticker Shock

#138

Kind of a shameless plug but it's hard not to with such a title. Make sure to check out Spacelift[0]. It’s a CI/CD specialized in Infra as Code. Terraform/OpenTofu are first-class citizens and it brings advanced customizability with cross-statefile dependencies, OPA-policies (not just for access control, but e.g. customizing your gitops flow) and others. The pricing is reasonable, too, and not per-resource. Generally…

Same games as with Terraform Cloud - no published Enterprise pricing!

Re: Terraform Cloud Pricing Changes Sticker Shock

#139
post #8
post #5

Hashicorp is one of the extreme examples. Terraform Cloud is an okay product at best, which went from expensive to very expensive. Moreover, they aggressively changed the Terraform license from open-source to BSL. So after the whole community contributed a lot of providers, they want to profit from that. You should use OpenTofu and buy IAC from one of the companies sponsoring full-time engineers on that project: Spac…

I would use opentofu but still waiting on cdktf https://github.com/opentofu/manifesto/issues/58

Yet, HashiCorp does not support CDKTF natively in their commercial product! It puts very little effort into CDKTF as it doesn't make any extra revenue. The only reason they did it was to offer an alternative to Pulumi.
Post reply on HN