Week 9 · Kubernetes & Terraform · about 3 minutes
What you will be able to do
Put Helix VPC and model config in separate Terraform modules so swapping a model does not rewrite the network.
The idea
Modules bound blast radius. Network changes rarely; model endpoints change often. Split them.
Reviewers can approve a model module diff without re-auditing the VPC.
module "network" { source = "./modules/network" }
module "model" { source = "./modules/model"
endpoint = var.model_endpoint
}If everything is one file, every change is a network change.
Key takeaways
- Network module stays quiet.
- Model module moves fast.
- Root only composes.
Part of the Forward Deployed Engineer roadmap. New to the role? Start with what a Forward Deployed Engineer does.