Skip to content

appvia/terranetes-controller

GPL license GitHub go.mod Go version of a Go module GoReportCard example CodeQL

TERRANETES CONTROLLER

The Terranetes Controller manages the life cycles of a terraform resource, allowing developers to self-serve dependencies in a controlled manner.

There's a number of open source controllers you could use that will run Terraform in Kubernetes. All of them deliver the developer outcome, however, none address the "consequences" of delivering that outcome in the first place; the risks, costs, security implications, the general lack of checks and balances. What sets the Terranetes controller apart is its opinion we first enable the platform team to deliver the outcome in a safe environment before it can be self-served by developers. Providing platform engineers with all the knobs, dials and levers to control and mitigate those risks is the key differentiator for Terranetes controller.

Documentation can be found at https://terranetes.io

Architecture

FEATURES

DEVELOPERS

PLATFORM ENGINEERS

  • Keep cloud credentials secure
    • Restrict credentials provider use via namespace and label selectors
    • Don't expose credentials within a user's namespace
  • Define Guardrails around use
    • Restrict to known module sources
    • Validate resource requests against Checkov policies
    • Automatically inject default configuration based on labels

GETTING STARTED

View the getting started guide at https://terranetes.io