Fully SaaS-Based DevOps with Terraform Cloud and GitLab
summary
Shows a fully SaaS DevOps flow that glues GitLab CI/CD to Terraform Cloud Workspaces and Vault GCP secrets engine using private GitLab runners in GKE, with Sentinel policy-as-code enforcing allowed VM types. Demo actually provisions a GCP VM running a visitor-count app, Sentinel blocks an oversized machine type (policy fail), an authorized override triggers terraform apply, and later terraform destroy succeeds. Claims reproducible, versioned IaC and dynamic short‑lived GCP creds; repo and CI spec are public.
AI-written summary · about
chapters (8)
- 0:00Introduction and speakers
- 2:09Terraform Cloud and GitLab overview
- 3:44Demo setup and pipeline overview
- 7:11Running the CI/CD pipeline
- 10:23Sentinel policy enforcement
- 15:14Sentinel policy deep dive
- 18:03Vault integration details
- 20:35Key takeaways and recap
related talks
25mSecure Your Terraform Deploys in GitLab-CI with HashiCorp Vault
38mDynamically deploying your Terraform code with GitLab CI
14mInfrastructure as Code IaC
29mEphemeral Cloud Infrastructure for Acceptance Tests with Terraform Enterprise & GitLab
13mOrchestration to Delivery: Integrating GitLab with HashiCorp Terraform, Packer, Vault, and Waypoint.
30mProduction-Ready Infrastructure + DevOps Workflows in 5 Minutes with Terraform + GitLab
27mOptimizing Terraform integration inside GitLab CI/CD pipelines
15mTerraform, GitOps & Kubernetes: manage infrastructure & aas