A Targeted tofu plan Said '2 to add'. The Unscoped Apply Replaced Both Production Servers

Thu, 29 Oct 2026 08:30:00 +0530

On 28 October a small project called event-junkie published a postmortem for a production outage of about 40 minutes. The change that caused it was meant to add two DNS records. The operator ran tofu plan -target=hcloud_zone_rrset.redirect and got 2 to add, 0 to change, 0 to destroy. Then they ran tofu apply without -target. The apply planned the whole stack, reported 5 to add, 3 to destroy, and replaced both production servers.

Terraform on Kuldeep Pisda

A Targeted tofu plan Said '2 to add'. The Unscoped Apply Replaced Both Production Servers