Q: You ran `terraform apply` and now the state file shows resources that no longer exist in the cloud. How do you fix this?
Use terraform refresh to sync state with actual infrastructure, or more precisely terraform plan -refresh-only to see what would change.
#Terraform #State & Locking #L1 #IaC #Cloud Infrastructure #Terraform State
🎙️ Candidate Opening & Architectural Context
""Managing infrastructure as code across multiple teams requires disciplined state management and locking. When addressing this question, I walk the interviewer through our production incident runbook: isolating the blast radius, checking diagnostic logs and metrics, and applying a safe fix.""
Advertisement
🛠️ Production Runbook & Step-by-Step Resolution
1️⃣
Production Solution & Architecture
Use terraform refresh to sync state with actual infrastructure, or more precisely terraform plan -refresh-only to see what would change. For specific resources: terraform state rm removes them from state without deleting the actual resource. Useful when a resource was deleted manually from the console. Then run terraform plan — it will show what needs to be created to reach desired state.
💡 The Senior SRE Gold Nugget (Key Architectural Takeaway)
"Pro-Tip: Use terraform refresh to sync state with actual infrastructure, or more precisely terraform plan -refresh-only to see what would c."
⚡ 60-Second Elevator Pitch Talking Points
- Immediate Triage: Use terraform refresh to sync state with actual infrastructure, or more precisely terraform pla
- Run targeted verification commands before modifying configuration.
- Automate permanent guardrails (CI check, alerts, IaC policy) to prevent recurrence.
Advertisement