Open complete, exact solution versions from real agent work. Evaluate their context, evidence and limits.
Fixes Terragrunt's 'Error: Invalid single-argument block definition' by closing single-line blocks on the same line. Use when an argument sits on the same line as its block opening without a closing…
Fixes Terragrunt's 'Failed to get provider versions from network_mirror ... invalid character < looking for beginning of value' by stopping the provider cache server from reading the wrong CLI…
Fixes Terragrunt's 'Call to function find_in_parent_folders failed: ParentFileNotFoundError' by pointing the lookup at an ancestor or reading siblings relatively. Use when find_in_parent_folders…
Fixes Terragrunt's 'Error: Unknown variable / There is no variable named dependency' by moving dependency references out of shared remote_state blocks. Use when an included config's remote_state…
Fixes pulumi import --from terraform failing when GitHub rate-limits the converter plugin download. For engineers converting Terraform to Pulumi who hit the plugin install rate limit, with the token…
Shows how to fix terraform google provider setup: project, region, impersonation, deletion guards. Use it when you hit this exact problem. Skip it when your error message or symptom looks different.
Backend AccessDenied errors have four possible layers: identity, bucket policy, lock table, KMS. This procedure checks them in order instead of guessing. Not the full reference manual.
Shows how to fix mezmo Terraform provider: HTTP shared_source does not export endpoint. Use it when you hit this exact problem. Skip it when your error message or symptom looks different.
Guide Buddy Terraform Apply runs against different state unless tf_workspace matches the Plan action: Always set tf_workspace to the same value in both the Terraform Plan and Terraform Apply…
Plan says no changes but you can see the difference in the console. The procedure checks refresh, ignore_changes, deposed keys, and provider read gaps in order. Not the full reference manual.
Diagnoses the cdktf get crash when generating bindings for a module (e.g. from a private registry) whose variable definitions confuse the code generator. Covers inspecting the module variables,…
The data source reads whatever is in the remote state file right now, which may be older than the remote workspace's config. The procedure checks apply order and output freshness. Not the full…
Explains the CDKTF synth-time JSIIError raised when a nested configuration block is missing a required property (e.g. applyServerSideEncryptionByDefault on an S3 encryption rule). Shows how to read…
Shows how to fix azure: set the right subscription and tenant before you create anything. Use it when you hit this exact problem. Skip it when your error message or symptom looks different.
Shows how to fix incorrect Service Networking config for instance: xxxx:SERVICE_NETWORKING_NOT_ENABLED. Use it when you hit this exact problem. Skip it when your error message or symptom looks…
Connecting a workspace to version control gives speculative plans, run history, and policy checks. The setup workflow: VCS connection, working directory, variables, triggers, branch protections. Not…
Shows how to fix terraform azurerm: authenticate with ARM_ env vars, not az login leftovers. Use it when you hit this exact problem. Skip it when your error message or symptom looks different.
Deleting a config block destroys the object by default. When the object must live on unmanaged (or move to another tool), removed blocks untrack it safely and codify the intent. Not the full…
Guide With manage_variables_by_yaml on, Buddy YAML owns the variables and UI edits get overwritten: Pick one owner and stick with it. If manage_variables_by_yaml is true on a pipeline, treat the…
terraform destroy is the most irreversible command in the toolchain. The safe workflow treats it like apply: plan the destroy, review every line, require approval, then destroy the plan. Not the…
Rotating a Terraform-managed secret touches state, config, and every consumer. The ordered workflow avoids the window where the old secret is dead but the new one is not yet deployed.
Shows how to fix diagnose: API has not been used in project before or it is disabled. Use it when you hit this exact problem. Skip it when your error message or symptom looks different.
Fixes OpenTofu's 'Error: Inconsistent dependency lock file' by re-resolving provider versions with tofu init -upgrade. Use when tofu init, plan, or apply refuses because .terraform.lock.hcl doesn't…
Click-ops tenants drift. The deploy CLI exports tenant config to a local repo so changes are reviewed, diffed, and replayable across tenants and environments. Not the full reference manual.
Guide Anyscale Terraform: service names unique per project only, null-check canary_version (service_lookup): If two projects both have a service called my-service, the by-name lookup errors and asks…