November changelog: Runtimes & OIDC cloud credentials, plus imports with Claude Code & opencode

Read more

Bring us one real infrastructure change.

We’ll work through how it should reach production: approved infrastructure, permissions, policy, dependencies, approvals, execution, and audit. Then we’ll show you that path in Massdriver.

We start from your existing Terraform, OpenTofu, and Helm wherever possible, and if you stop, you keep the code.

How the working session works

🎯

Choose a real change

Bring one infrastructure change your team actually makes, with the environment it lands in. A small, common change is a better test than a showcase.

🧑‍⚖️

Define who may request it

Decide which people, CI jobs, workflows, or agents can ask for the change, in which environments, and which requests need an approver.

📦

Start from your IaC

We use your existing Terraform, OpenTofu, and Helm wherever possible, so the session tests your modules and not a demo stack.

🛤️

Encode the approved path

Massdriver turns those modules and rules into a governed catalog entry and path. The first version is often ready within one business day.

🔍

Run the change through it

Watch the request go through policy, permissions, dependency checks, and approval, then execute with platform-held credentials and leave an audit record.

☁️

Prove it in your cloud

Where it makes sense, run the same flow in your own cloud account and inspect the plans, diffs, policy results, and audit trail yourself. Every resource stays your IaC in a registry you control.

Who to bring

Bring the people who own the change today. Invite security when the change or the risk calls for it.

🧑‍🔧

The engineer who makes the change

The person who maintains the modules and reviews the plans knows where the change stalls and what it depends on.

🗂️

The platform lead

Whoever decides what is approved, who can request it, and which changes need an approver.

🔒

Security, when the change warrants it

For production data, regulated workloads, or agent-initiated changes, bring the person who signs off on production access. For a routine change, they can review the audit record afterward.

🏢

Self-hosted or VPC requirements

Massdriver can run inside your cloud account, so credentials, state, and audit records stay inside your boundary.

Book a Working Session

Tell us about the change you want to bring, who or what requests it today, and where it stalls or slips past review.