Hacker News Reader

Yes, that’s exactly what we want. Things like Terraform also permit this via provisioners, and CloudFormation permits it via execution of lambda functions. Almost any non trivial infrastructure requires it.

View on HN

With Terraform you can statically analyze the infrastructure definition with some guarantees of determinism etc. Arbitrary execution is allowed, as you say, but only in well-contained places, such as local_exec.

How can this work if, say, TypeScript is used as the definition language?

What degree of determinism do you actually have if provisioners can execute Turing complete code?

It's a bit like how Rust limits dangerous operations to unsafe blocks

Reply on news.ycombinator.com