There are many guides on the Internet for getting started with Terraform and even setting up remote state. There seems however to be very few (if any) that suggest ways of setting it up in a scalable way. Normally, in such guides the remote state is statically declared in the Terraform code. This forbids the code to be easily re-used for different environments without duplicating it all.

Whilst using Kubernetes over the past few months, one challenge I repeatedly faced was to get secrets - such as passwords, SSH keys or certificate keys - securely into applications running on Kubernetes.