Managing Terraform Enterprise With 2000+ Workspaces at Discover Financial
summary
Discover runs Terraform Enterprise on AWS to manage 2000+ workspaces and their state files, using EC2, RDS read replicas and S3 cross‑region replication for DR. Jenkins pipelines generate plans, scan for encryption and policy violations, and only then apply; EC2 creation triggers a Chef cookbook to deploy the TFE app. A custom Python TFE SDK automates org/team/workspace creation with LDAP groups, supports cold storage archiving to S3 and full recovery, and uses versioning to avoid breaking pipelines.
AI-written summary · about
chapters (12)
- 0:00Introduction to talk
- 1:26Terraform Enterprise overview
- 2:30Disaster recovery setup
- 4:17Deployment automation pipeline
- 7:27Monthly infrastructure refresh
- 8:56Single org multi-team structure
- 12:07Team onboarding process
- 14:16Managing workspace creation
- 17:02Workspace cold storage process
- 19:28Cold storage recovery
- 20:32TFE SDK dependency management
- 21:56Key takeaways and conclusion
related talks
29mInfinity and beyond: Scaling Terraform for the global enterprise
31mTerraform Structure & Enablement
14mHow Global Discovery tribe approaches Infrastructure Changes at scale
35mTerraform-Powered Platform-as-a-Service
31mCommodified IaC using Terraform Cloud
25mScaling Terraform at
28mSurviving migration madness - Humana's move from Terraform Enterprise to Terraform Cloud
25mRebuilding Infrastructure (as Code)