Quick Notes97 words
Implementing a configuration management strategy — quick notes
Configuration strategy — quick notes
| Concept | Detail |
|---|---|
| Loop | Define → apply → audit → remediate |
| Machine Configuration modes | Audit (report) and remediate (converge) |
| Safe rollout | Start audit-only, learn the estate, then remediate |
| Mutable | Converge drift on long-lived machines |
| Immutable | Rebuild from image — drift cannot accumulate |
| Secrets | Key Vault, referenced at apply time — never in the definition |
Trap: configuration in source control + secret in the file = secret in git history, permanently.