Q: What is a Terraform workspace and what are its limitations?
Workspaces let you maintain multiple state files for the same configuration. terraform workspace new staging creates a staging workspace ...
#Terraform #Workspaces & CI/CD #L2 #IaC #Cloud Infrastructure #S3
🎙️ Candidate Opening & Architectural Context
""Managing infrastructure as code across multiple teams requires disciplined state management and locking. When addressing this question, I walk the interviewer through our production incident runbook: isolating the blast radius, checking diagnostic logs and metrics, and applying a safe fix.""
Advertisement
🛠️ Production Runbook & Step-by-Step Resolution
1️⃣
Initial Diagnostics & Root Cause Analysis
Workspaces let you maintain multiple state files for the same configuration. terraform workspace new staging creates a staging workspace with its own state.
- All workspaces use the same code — config differences between environments are hard (you'd use
terraform.workspacevariable conditionals, which gets messy). - Same backend — all workspace state files are in the same S3 bucket, just different keys.
- No access control — you can't restrict who applies to production workspace vs dev workspace.
2️⃣
Remediation & Permanent Safeguards
Limitations: Use workspaces for: small teams, temporary environments, exactly-same-config use cases. Don't use workspaces for: production vs staging (different configs, different access controls).
- Better alternative for multiple environments: separate directories/modules, not workspaces.
💡 The Senior SRE Gold Nugget (Key Architectural Takeaway)
"Pro-Tip: All workspaces use the same code — config differences between environments are hard (you'd use terraform.workspace variable condit."
⚡ 60-Second Elevator Pitch Talking Points
- All workspaces use the same code — config differences between environments are hard (you'd use te...
- Same backend — all workspace state files are in the same S3 bucket, just different keys.
- No access control — you can't restrict who applies to production workspace vs dev workspace.
Advertisement