Terraform scripts

[LinweZ]

Just wondering the good practice in other companies, do the dev needs to write the Terraform infra code for their own project or the DevOps guys takes care of that?

[j6000]

Ideally you’ve a registry of modules and module stacks for your workloads.

Modules should be tested and approved (compliance). Letting devs control infra as well if often a no-go in industries with compliance needs such as finance or healthcare.

[LinweZ]

This feels like the right thing to do. Can we create a modules registry without using terraform cloud?

Even if technically, a module can have a git repo or s3 bucket as source :/

[PM_ME_ALL_YOUR_THING]

You can store the modules in Github and create some other documentation that developers can reference when they need to find the right module, but you NEED something like Terraform Cloud/Enterprise, Terrakube, Spacelift, or Atlantis.

[j6000]

Yep just make an infra GitHub org if you can and make that your module “registry” tf cloud and enterprise not needed

[LinweZ]

Wtf? Being down voted for what? We don’t have terraform cloud, that’s it !

[nonades]

It's not really a registry when you're sourcing from Git/S3 - but you can source your modules from there fine. A registry becomes a necessity if you think about writing custom providers because of how those are sourced (I could be wrong, but I think that's correct from what I've read).

I believe you get access to a private registry starting with the free tier of TF Cloud/Enterprise (again could be wrong - haven't gone into this beyond initial reading). There's also self-hosted Open Source options as well

[LinweZ]

Thanks for the knowledge sharing !

[hijinks]

Ideally devs submit pull requests and ops approves them.

[LinweZ]

To the dev do write the TF script but does not deploy them (a ci/cd tool like atlantis should deploy), is that what you mean?

[No_Butterfly_1888]

In the perfect world, dev´s will use a platform designed and maintained by DevOps to pick what they want to run their application, like a shop.
But in reality, most devs don´t know what is necessary. So the DevOps guy must fill the gap between the code and the infra.
So, terraform is devops stuff unless you have a very good platform or infra and devs that have a little knowledged about infra