13 ms·
I'm hoping that Infracost doesn't need the entire state file shipped to an outside service/server, like the one mentioned here does. State files should be cons
by mikegreen 6y ago
I'm hoping that Infracost doesn't need the entire state file shipped to an outside service/server, like the one mentioned here does.
State files should be considered secret....
$ terraform state pull | curl -s -X POST -H "Content-Type: application/json" -d @- https://cost.modules.tf/
- aliscott 6y agoAgree, state files can contain sensitive information. We parse the Terraform client side and only send the details to the API that are needed to determine the price, i.e. the instance type, region, etc.
- dastx 6y agoThey have a jq script[0] that removes everything but the necessary data for the cost estimation. [0] https://github.com/antonbabenko/terraform-cost-estimation/blob/master/terraform.jq https://github.com/antonbabenko/terraform-cost-estimation/bl...