Migrating from Ingress to Gateway API

It’s been a little while since I last published anything on my personal website but I have been creating quite a lot of content over on isovalent.com and posting a lot of Cilium updates on LinkedIn. Most of the content over there is long-form and there is a little feature I discovered this morning that […]

HCP Packer Part 3: Integration with Terraform Run Tasks

In this third post in my HCP Packer series (you can also read Part 1 (Getting Started with HCP Packer) and Part 2 (Building a Go Client for HCP Packer)), I am going to cover some new features that have only just come out, as part of the General Availability of HCP Packer. I had […]

Terraform and Splunk Part 3: Using the Terraform Provider for Splunk

This is the third post in my Terraform and Splunk series. After deploying Splunk with Terraform in Part 1 and setting up the Terraform Cloud integration in Splunk in Part 2, we are going to end this series for now by using Terraform to configure Splunk to monitor Terraform Cloud. For this, we are going […]

Terraform and Splunk Part 2: Setting up Splunk Dashboards and Searches with Terraform

This is Part 2 in a Terraform & Splunk Series. In Part 1, we deployed Splunk Enterprise using Terraform. The first part of my tests were actually based on Splunk Cloud as you can see from some of the screenshots below. Once I needed to use the Splunk APIs to configure Splunk with Terraform, I […]

Terraform and Splunk Part 1: Building a Splunk instance in AWS

As I work with global financial customers in my day job at HashiCorp, auditing and logging are topics that come up regularly. The vast majority of my customers would use Splunk as a log engine (Gartner-ly known as SIEM (Security Information and Event Management)) for a variety of use cases and HashiCorp partnered with Splunk […]

Policy-As-Code for Networking-As-Code

As much as I promote Terraform and other tools to automate and deploy infrastructure, I also begin to appreciate that the easier we make it for folks to deploy resources, the quicker it gets out of control. If you give a developer or an infrastructure operator the keys to the AWS account, then you might […]

Consume the HashiCorp Cloud Platform APIs with Go

In my previous post, I had a first look at HashiCorp Cloud Platform (HCP) Packer. At the end of the post, I suggested that the value of HCP Packer will be multiplied when integrated in an API-driven architecture. The examples I used were: vulnerability is detected on an image → API-driven process to check which […]

First look into… HCP Packer

Last week, HashiCorp announced the public beta for HCP Packer, a managed service for Packer. Packer might not be as well-known as some of the other HashiCorp tools but it’s universally used to build golden images and templates and it quietly powers a lot of what happens in the public cloud: on Azure…. ….but also […]

FortiManager Automation with Terraform

This is a short follow-up to the blog post I wrote about using Terraform with Fortigate. My customer wanted to leverage the Fortimanager and not the Fortigate directly to manage their Fortinet estate through Terraform (or rather, with Consul-Terraform-Sync). The provider for Fortimanager is actually pretty recent and was only released a few months ago. […]

Fortinet Automation with Terraform

One of my customers was telling me how security rules changes on their firewalls are taking far too long to be implemented: not just days but multiple weeks – and obviously that’s slowing down projects. They saw a demo of Consul Terraform Sync (CTS) and really liked the concept. CTS was something new for me […]