Terraform Module Lifecycle: From First Variable to a Release Teams Can Trust
Terraform module lifecycle for platform teams: design, test, review, release, consume and deprecate modules on Azure so every version is one teams can trust.
TERRAFORM
Terraform Module Testing as Governance: The Part That Actually Enforces the Rules
Over the last few weeks this series has built up a fair set of rules. Module boundaries decide what each module is responsible for. Calling conventions decide how those modules get pinned, what goes in and what comes out. Pinned sources, typed inputs, validated variables, outputs treated as a contract, providers passed down rather than … Read more
Terraform Calling Conventions: How Your Modules Should Actually Talk to Each Other
Terraform module source, pinning, inputs and outputs: the calling conventions that let platform teams change modules on Azure without breaking every consumer.
Terraform Repo Structure: Module Repos & Golden Paths Explained
Terraform repo structure explained: how module repos, golden paths, and consumer repos combine to build a governed, reusable Azure platform.
Your Terraform Provider Is Pinned. It’s Still Waiting to Break You
I want to talk about the gap between the Terraform you wrote on day one and the Terraform you’re still running two years later, because that gap is where most of the pain in a mature platform actually lives. Not in the initial build. In everything that happens to your modules and providers after nobody’s … Read more
Drift Isn’t a Detection Problem, It’s an Ownership Problem
Terraform drift ownership is what actually closes out drift, not detection. Here’s how to assign it, respond to it, and stop it reopening.
What Your Pipeline Can Actually Catch: Building the AI Code Scanning Layer
AI tools generate code fast. Your pipeline needs to catch what they get wrong. Here’s how to build a scanning layer across IaC, containers, and application code.
GitHub Actions and Terraform on Azure: A Production Pipeline
Learn how to build a production-grade Terraform pipeline on GitHub Actions with OIDC authentication, self-hosted runners, composite actions, gated approvals, and drift detection on Azure.
Custom GitHub Actions for Platform Engineers
Learn how to build composite GitHub Actions that standardise deployments across teams. A practical guide for platform engineers, with a real Azure OIDC login action walkthrough.
5 Common Terraform Mistakes in Azure (And How to Fix Them)
Learn how to avoid common mistakes within your Terraform code and modules