logoalt Hacker News

mhitzatoday at 1:57 PM1 replyview on HN

The images really detract from the subject.

I've used to do something like this, on a smaller scale and dubbed it "organization as code". As long as you have good enough providers for Terraform/Pulumi you can declaratively specify a lot of the interconnected stuff in a company.

I built this around GitHub as the indentity provider as my interest was declaratively defining repository access control, while also being able to use users public ssh keys to (re)provision services to get them access automatically.


Replies

captn3m0today at 2:39 PM

I've done the same thing and I would not call it anywhere near org-as-code either. An organization is much more than a list of responsibilities, people, and compliance requirements.

For the latter, we already have policy-as-code tooling that actually works.

show 1 reply