How We Built a Multi-Cloud Terraform Orchestrator: The TerraX Architecture

Short summary

TerraX is a multi-cloud infrastructure orchestrator with centralized credential management and state isolation across AWS, GCP, Azure, and Cloudflare. It pairs a Spring Boot backend with stateless Go agents for sandboxed Terraform/OpenTofu execution and chains provisioning runs with script functions via a workflow engine. Key innovations include server-side kubeconfig generation and dynamic variable resolution for cross-step output passing.

• •Four-layer architecture: Angular frontend, Spring Boot backend managing state/credentials/RBAC, Go agent providing sandboxed execution, and OpenTofu/Terraform engine
• •Workflow engine chains infrastructure provisioning with script functions using dynamic variable resolution (ref:var, ref:provider, ref:function) for multi-step automation
• •Stateless agent design enables horizontal scaling; kubeconfig generation eliminates cloud CLI dependencies via server-side API calls (AWS SDK, GCP Container API, Azure ARM)

Generated with AI, which can make mistakes.