Terragrunt Stacks Feature Complete 🆕, Resilient DNS Client 🧱, Bicep vs. Terraform 🪐

Terragrunt Stacks, a feature designed to manage infrastructure configurations at scale, allows users to formally define combinations of units ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌  ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ 

Sign Up |Advertise|View Online TLDR Together With TLDR DevOps 2025-04-18 Smarter DevOps Starts with AI-Driven Orchestration (Sponsor) Bring Agentic AI into your DevOps workflows with Orkes Conductor. Predict build failures, auto-provision infra, manage certs, and detect anomalies — all from one powerful orchestration platform. 🔧 Smarter CI/CD ⚙️ Efficient infra provisioning 🔐 Automate certificate management 🚨 Proactive incident response Orchestrate humans, processes, and AI Agents in a single agentic workflow. 📘 Unlock the full potential of AI-powered DevOps — Read the whitepaper 📱 News & Trends The Road to 1.0: Terragrunt Stacks Feature Complete (5 minute read) Terragrunt Stacks, a feature designed to manage infrastructure configurations at scale, is now feature-complete and is in its final validation phase before general availability. Terragrunt Stacks allows users to formally define reusable combinations of units to launch new customers, environments, services, or other recurring patterns. Nomad 1.10 adds dynamic host volumes, extended OIDC support, and more (7 minute read) HashiCorp Nomad 1.10 features dynamic host volumes for flexible storage provisioning, expanded OIDC support with signed client assertions and Proof Key Code Exchange (PKCE), improved CLI to UI transition, and expanded upgrade testing. 🚀 Opinions & Tutorials Building a resilient DNS client for web-scale infrastructure (4 minute read) LinkedIn built a DNS Caching Layer (DCL), a high-performance, resilient DNS client cache deployed across its fleet, to replace the Name Service Cache Daemon (NSCD), which had scalability issues. DCL has been running for over a year, processing millions of queries per second and reducing DNS resolution latency to sub-millisecond levels, while also offering enhanced DNS visibility and proactive alerting. Just Throw It Into Postgres (5 minute read) Relational databases like Postgres are often more versatile than assumed—they can handle messy, unstructured, or evolving data formats just as effectively as neatly normalized schemas. Whether indexing Java code, storing thousands of SVG files, or logging sensor data, simply ingesting raw or semi-structured data into Postgres enables powerful querying and flexibility with minimal upfront structure. 🧑‍💻 Resources & Tools Leave Technical Debt Behind at Code Remix Summit in Miami (Sponsor) Code Remix is where software engineers, architects, and leadership come together in-person to explore how codebases can evolve with automation, AI, and community-driven solutions. Hosted by Moderne (creators of OpenRewrite) and featuring leaders from Spotify, Thoughtworks, Morgan Stanley, and others. Don't miss the hands-on Hack Track! Get your tickets AWS FinOps Dashboard (GitHub Repo) This CLI dashboard allows users to view AWS spending, service-level breakdowns, budget tracking, and EC2 instance summaries in their terminal. PV-migrate (GitHub Repo) PV-migrate, a CLI tool and kubectl plugin, facilitates the migration of data between Kubernetes PersistentVolumeClaims, addressing challenges such as resizing limitations, cross-namespace transfers, cloud provider migrations, and StorageClass changes. sqlc (GitHub Repo) sqlc generates type-safe code from SQL. 🎁 Miscellaneous The Economic Advantages of Fastly's Application Security Solutions (4 minute read) Fastly's Web Application and API Protection solutions boost security, enhance performance, and increase revenue for organizations by blocking non-organic traffic and improving application deployment. A Forrester study found a 235% ROI over three years, with benefits like increased conversions, productivity, and cost savings. A next-generation Certificate Transparency log built on Cloudflare Workers (15 minute read) Certificate Transparency (CT) helps ensure all website certificates are publicly visible and auditable, preventing dishonest certificate issuance. Cloudflare is open-sourcing a new Rust-based log design to improve CT log operations and support the growing WebPKI ecosystem. ⚡ Quick Links ⚒️Guide: How to securely replace VDI for all development workflows (Sponsor) Learn how Cloud Development Environments enable frictionless developer experience while having the same security benefits as Virtual Desktop Infrastructure (VDI). Just without all of the pain that comes with it. Amazon EKS Community Add-ons Catalog (2 minute read) Amazon EKS now offers a community add-ons catalog that simplifies the deployment and management of popular open-source Kubernetes add-ons directly through the EKS console, CLI, SDK, or infrastructure as code tools. Bicep vs. Terraform – Differences & Key Features Comparison (13 minute read) Terraform is cloud-agnostic with broad provider support and Bicep offers Azure-specific simplicity and integration - each caters to different deployment needs. What LLMs Can Do for SREs in Cloud Native Infrastructure (3 minute read) Large Language Models (LLMs) are beginning to integrate into Kubernetes platforms to enable intelligent automation at scale, helping SREs with real-time operations like failure remediation and performance anomaly resolution. Love TLDR? Tell your friends and get rewards! Share your referral link below with friends to get free TLDR swag! https://refer.tldr.tech/3b85ceef/10 Track your referrals here. Want to advertise in TLDR? 📰 If your company is interested in reaching an audience of devops professionals and decision makers, you may want to advertise with us. Want to work at TLDR? 💼 Apply here or send a friend's resume to jobs@tldr.tech and get $1k if we hire them! If you have any comments or feedback, just respond to this email! Thanks for reading, Kunal Desai & Martin Hauskrecht Manage your subscriptions to our other newsletters on tech, startups, and programming. Or if TLDR DevOps isn't for you, please unsubscribe.