Automating VM/AKS/PostgreSQL/SQL MI Start-Stop Schedules with Terraform + Azure Automation
Turning a manual Azure Automation Account setup — 8 PowerShell runbooks, tag-driven start/stop logic across VMs, AKS, PostgreSQL, and SQL MI — into …
THE PROVISION NOTES
> Research notes, benchmarks, and performance write-ups on cloud-native systems, Kubernetes, and infrastructure engineering.
Recent Posts
[Terraform Cheat Sheet] Reading terraform graph Output
First entry in an ongoing Terraform reference: what terraform graph actually shows, how to render it with Graphviz on Windows, and — the part almost …
Azure Landing Zones: From Concept to a Customized Terraform Deployment
What an Azure landing zone actually is, then a walkthrough of implementing one with Microsoft’s official Terraform accelerator — customizing the …
[Terraform] 1 - Build Infrastructure
First lab in the Terraform basics series: standing up an nginx container with the Docker provider, walking through init, fmt, validate, plan, apply, …
[Terraform] 2 - Change Infrastructure
Second lab in the Terraform basics series: modifying an existing resource, watching Terraform decide between an in-place update and a …
[Terraform] 3 - Destroy Infrastructure
Third lab in the Terraform basics series: tearing everything down with terraform destroy, and verifying the teardown was actually clean — nothing left …
[Terraform] 4 - Define Input Variables
Fourth lab in the Terraform basics series: replacing hard-coded container names with input variables, applying with the defaults, then overriding them …
[Terraform] 5 - Query Data with Outputs
Fifth lab in the Terraform basics series: defining output values to surface resource attributes after apply, instead of digging for them with …
Building a Hub-and-Spoke Sandbox on Azure Virtual WAN with Terraform
Modeling a two-hub Virtual WAN sandbox in Terraform: management group placement, per-spoke virtual hubs with their own route tables, and the …
How I Deploy This Site: S3 + CloudFront + GitHub Actions OIDC
The architecture and pipeline behind this site: a private S3 bucket, CloudFront with Origin Access Control, and a GitHub Actions deploy using …