Exploring the echoes reverberating through time left by the technology of yesterday as we embrace the technology of tomorrow.

A vast data center hall under construction with translucent dollar-sign symbols glowing in the air
Cloud

Stargate, $500B, and what the bill is actually for

The Stargate announcement was a number, a podium, and a four-year horizon. Underneath those there's an actual procurement plan worth understanding, and one that exists in tension with what got proven the day before.

Sid Smith Sid Smith 4 min read
Hero image for: The DeepSeek-R1 reality check, one week later
AI

The DeepSeek-R1 reality check, one week later

A week ago, an open-source reasoning model erased about a trillion dollars of market cap. Most of the takes from week one are already wrong. Here's what actually changed.

Sid Smith Sid Smith 4 min read
Cloud waste at the IaC layer: catching it before merge
Cloud

Cloud waste at the IaC layer: catching it before merge

Most cloud-bill surprises were visible at PR time. The plan output knows the resource shape, the region, the size, and what the cloud charges for it, and you can read that out of the plan-json before anything ships. Here's the pattern, what it catches, and what it can't.

Sid Smith Sid Smith 9 min read
HashiCorp and IBM: what the acquisition changes for IaC users
Cloud

HashiCorp and IBM: what the acquisition changes for IaC users

IBM announced a $6.4B acquisition of HashiCorp on April 24. The honest read is that this confirms the BSL-era trajectory more than it changes it. Here's what's likely, what's uncertain, what stays the same for current Terraform users in the short term, and what to actually watch.

Sid Smith Sid Smith 6 min read
GKE clusters via Terraform: the variables that actually matter
Cloud

GKE clusters via Terraform: the variables that actually matter

Most GKE-via-Terraform modules expose every knob the API has, then bury the few that matter. Here's the split I've landed on after a year of customer demos, what to parameterize per environment, what to hardcode and forget, and the regional-vs-zonal trade-off nobody likes to talk about.

Sid Smith Sid Smith 7 min read
Provider version pinning: the audit nobody runs until something breaks
Cloud

Provider version pinning: the audit nobody runs until something breaks

Provider version pinning is one of those Terraform topics nobody thinks about until the CI runner picks up a new minor release at 2 a.m. and a hundred plans go red. Here's the audit pattern I run for customers, the trap on both sides, and the constraint style I land on by default.

Sid Smith Sid Smith 6 min read
Plan output as data: what terraform plan -json actually enables
Cloud

Plan output as data: what terraform plan -json actually enables

Most Terraform pipelines treat plan output as text, paste it in a PR, hope the reviewer reads it. The JSON form is structured data, and once you treat it that way, cost preview, policy gates, drift attribution, and change-risk scoring become engineering problems.

Sid Smith Sid Smith 9 min read
OIDC for Terraform CI/CD: kill the access keys
Cloud

OIDC for Terraform CI/CD: kill the access keys

Long-lived AWS access keys in GitHub Actions secrets are the wrong default. OIDC federation gives every workflow a scoped, short-lived role assumption with no secret to leak. The trust-policy shape, the GitHub Actions wiring, and the gotchas that make it harder than the blog posts suggest.

Sid Smith Sid Smith 9 min read