HLDModulesOrchestration
v1.2 is unreleased — see v1.1 for the current stable release.
Orchestration
Cloud resource lifecycle management via IaC templates and multi-cloud workflows.
Orchestration
The Orchestration module is the IaC automation engine of the MCM platform. It allows users to provision, update, and delete cloud resources across multiple providers using Terraform-compatible templates and workflows.
What It Does
- Allow users to create, update, and delete cloud resources (EC2, disks, internet gateways, etc.).
- Provide a catalogue of pre-defined Stacks to stand up entire infrastructure blueprints across multiple clouds.
- Allow users to create their own custom Stacks using natural language, a visual blueprint canvas, or uploaded Terraform files.
- Manage live deployments as Workspaces with drift detection, execution history, and variable management.
Use-Cases
- Cloud Resource Lifecycle Management: Create/update/delete VMs, storage, databases, networks.
- Account Onboarding Flows: Automate IAM role creation, policy attachment, landing-zone setup.
- Multi-Step Infrastructure Workflows: e.g. Create VPC → provision VM → attach disk → configure security group.
- Approval-Based Infrastructure Changes: MSP/DevOps approval steps before applying a Terraform plan.
- Self-Service Infrastructure Catalog: Developers request a resource → workflow provisions it automatically.
- Remediation Automation: Auto-fix misconfigurations such as non-compliant security groups or missing tags.
- Cross-Cloud Orchestration: Provision resources across AWS, Azure, and GCP with a single workflow.
Open-Source Tools
| Tool | Purpose |
|---|---|
| OpenTofu | Canonical Terraform-compatible IaC tool used in the MCM resource coverage matrix |
| Terraform | Declarative IaC for multi-cloud provisioning |
| Pulumi | Programmatic IaC (TypeScript / Python / Go) |
| Crossplane | Kubernetes-native cloud resource management via CRDs |
| Argo Workflows | Orchestration of multi-step infrastructure provisioning tasks |
| Temporal.io | Durable long-running workflow orchestration |
| Ansible | Configuration management and provisioning |
Provider Support
Supported
AWS
Azure
Not Supported
GCP
GitHub
Docker Hub
Ubuntu- Docker
Target Cloud Platforms
- Public clouds: AWS, Azure, GCP
- Private infrastructure: VMware, Nutanix, OpenStack, OpenShift
Terraform Workflow
Core Concepts
| Concept | Description |
|---|---|
| Stack | A reusable IaC template (Terraform blueprint) with parameterised variables. Defines what to provision. |
| Workspace | A live deployment created from a Stack. Holds actual cloud resources, state, and execution history. |
See Stacks and Workspaces for full details.
Roadmap
| Sprint | Deliverable |
|---|---|
| 1 | Workspace CRUD, Terraform file CRUD, init / validate / plan / apply |
| 2 | Scheduled apply for Terraform files |
| 3 | Stack support — parameterised templates with user-provided variables |
| 4 | Orchestration dashboard |