Introduction
Why CloudDeploy, how the capstone is structured, and what you’ll have built by the end. Open →
CloudDeploy
Build CloudDeploy, the infrastructure capstone. Provision the same platform on AWS, GCP, and Azure with Terraform and Terragrunt, stand up EKS, GKE, and AKS, and deploy ShopMicro for real — with Datadog observability, Keycloak identity, and GrowthBook feature flags, all shipped by CI/CD.
What you’ll build
Section titled “What you’ll build”Setup & Tooling
Terraform, Terragrunt, the AWS/GCP/Azure CLIs, and the modules/ + live/ repo layout. Open →
Terraform Foundations
Providers, resources, state, and variables — a first resource on each cloud. Open →
Terragrunt & Remote State
Keep config DRY, with remote state backends and locking across a live/ tree. Open →
Networking
Build reusable VPC/VNet modules — subnets, routing, and security per cloud. Open →
Managed Kubernetes
Provision EKS, GKE, and AKS with node pools and a kubeconfig per cloud. Open →
Identity & IAM
Cloud IAM with least privilege — IRSA, Workload Identity, and Managed Identity. Open →
Managed Data
Provision managed Postgres — RDS, Cloud SQL, and Azure Database. Open →
Deploying ShopMicro
Deploy the ShopMicro Helm chart onto each cluster, with ingress and per-cloud config. Open →
Observability (Datadog)
Wire the Datadog agent for metrics, traces, and logs, with dashboards and monitors. Open →
Identity (Keycloak)
Deploy Keycloak, a realm and OIDC client, and put auth at the ShopMicro gateway. Open →
Feature Flags (GrowthBook)
Deploy GrowthBook and gate a ShopMicro feature behind a flag. Open →
CI/CD
Ship with GitHub Actions — terragrunt plan on PR, apply and deploy on merge, across clouds. Open →
Multi-cloud in Practice
Manage drift and state, watch cost, tear down cleanly — and weigh the honest trade-offs. Open →
Wrap-up
Review what you built, the trade-offs, and where to take CloudDeploy next. Open →