No items found.
Continuous Delivery & GitOps
On-demand Webinar
On-demand Webinar

Lessons from Platform Engineering at Scale | Harness Resource

Architecting Enterprise-Grade GitOps with OpenTofu: Lessons from Platform Engineering at ScaleAs platform engineering teams scale Infrastructure as Code (IaC), they face a key architectural challenge: balancing developer autonomy with centralized security, compliance, and control. While GitOps offers a declarative model for infrastructure management, adopting it at scale often reveals gaps in traditional tooling—especially when using open-source IaC like Terraform.

In this webinar, Rohit Reddy from Harness shares patterns, design lessons, and insights from building a GitOps-first IaC platform using OpenTofu—the open-source Terraform fork backed by the Linux Foundation. Learn how teams can evolve from ad hoc scripts to policy-driven workflows integrated into the delivery lifecycle.

What You’ll Learn:

  • Trade-offs between GitOps, imperative IaC, and event-driven provisioning
  • Designing modular, auditable IaC repositories for scale
  • Building policy-as-code for security, cost, and compliance
  • Lessons from adopting and running OpenTofu in production
  • Inside Harness’ GitOps IaC architecture: policy engines, workflows, feedback loops

‍

Published
January 1, 2024

Guide on its way

Check your inbox — your playbook is ready.

You're all set

Check your inbox — your download is on the way.

Redirect link

Continuous Delivery & GitOps

Redirect link

What you'll learn

Key Takeaways

OpenTofu Provides an Open-Source Terraform Alternative

Backed by the CNCF, OpenTofu emerged as a drop-in replacement for Terraform after its license change. Organizations should evaluate migrating sooner rather than later while compatibility remains high.

Infrastructure Drift Requires Careful Management

While pure GitOps automatically remediates drift, infrastructure changes often require human oversight. Alerting operators to review drift before remediation helps prevent overriding intentional patches.

Decorate Pull Requests to Empower Reviewers

Reviewing infrastructure code changes can be difficult and risky. Automatically adding security scan results, cost implications, and execution plans directly to pull requests makes the review process safer and more efficient.

Enforce Guardrails With Policy as Code

Infrastructure as code requires dedicated pipelines to run automated linting and security scans. Integrating tools like Open Policy Agent ensures that non-compliant resources or excessive costs are blocked before deployment.

Transition to Developer Self-Service for Infrastructure

Moving away from ticket-driven operations prevents cloud teams from becoming bottlenecks. Providing developers with pre-approved module registries enables faster delivery and better responsiveness to business needs.