---
title: "From deploy to destroy: Introducing full stack infrastructure orchestration | Mission Infrastructure Newsletter"
---

Integrating deployment with Day 2 operations, plus news of the year’s biggest events, useful insights into Golden Paths and more ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­    ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­  

| View in browser Happy November 🥧   Is AI flooding your deployment pipelines, putting unsustainable pressure on your provisioning and wreaking havoc on your Day 2 workflows? In this edition of Mission Infrastructure, we bring you From Deploy to Destroy: Full-Stack Infrastructure Orchestration, a webinar that will show you how Spacelift is supporting platform teams by moving beyond IaC to connect provisioning and day 2 operations and extend automation and governance across the entire infrastructure lifecycle. We’ll be at all the big events (more below), so you can see the full-stack infrastructure orchestration model in action. Plus, get all our latest product updates and our most popular recent articles. Webinar 💻 From Deploy to Destroy: Full-Stack Infrastructure Orchestration Huge effort has been invested into refining how infrastructure gets deployed. But the same can’t be said for what happens after deployment. Once the first apply finishes, drift, incidents, configuration changes, access requests, and resources created outside of code accumulate, and most still run on ad-hoc scripts without visibility or guardrails. Teams need a better framework for managing infrastructure across its lifecycle.   In this session, Spacelift Technical Product Marketing Manager Tim Davis and Spacelift Product Manager Damian Drewnik explore how infrastructure orchestration is evolving beyond infrastructure as code to connect provisioning and day 2 operations, and to extend automation and governance across the entire lifecycle. Spacelift SVP of Product Jonah Kowall will address the failings in today’s automations and how you can ensure visibility, guardrails, and safe AI access to the full infrastructure lifecycle.   --\> Register here missionCTRL 🎙️ GitOps: or how we learned to stop worrying and love the process Check out episode three of the podcast, where guest Tim Davis and hosts Emin Alemdar and Joey Stout break down what GitOps governance really is and the gulf between teams who believe they’re doing GitOps and teams who actually are.   Subscribe on YouTube, Apple Podcasts, or wherever you get your podcasts. Events 🗓️ KubeCon + OpenTofu Day North America 2026 November 9 – 12, 2026 Salt Lake City, Utah     Meet with Spacelift at Booth #202 to see how full stack infrastructure orchestration can help your platform team keep up with developers shipping at AI speed, from day 1 provisioning to day 2 operations, without loosening a single guardrail.   Don’t miss IaCConf Connect Salt Lake City Join us at Bad Caddy when day one of KubeCon finishes, and enjoy a lively evening of sports simulators and refreshments. Connect with the IaC community, unwind and kick off KubeCon week in style.   --\> Register here   Join us for OpenTofu Day on November 9! Meet the Spacelift team and OpenTofu maintainer Christian Mesh, who will be speaking on Symbol Libraries at 5:15 pm in Grand Ballroom H. Ask about migration, compare notes with other OpenTofu users, and discover exciting new developments. Microsoft Ignite November 17– 20, 2026 San Francisco, California     Ignite is where Microsoft unveils its AI and cloud roadmap and showcases what’s shipping. We’ll be at Booth #1738, so drop by to see how you can keep your developers safely accelerating at AI speed.   --\> Book a meeting here AWS re:Invent November 30 – December 04 , 2026 Las Vegas     Meet us at Booth #1390 to see how Spacelift keeps your infrastructure moving at AI speed while maintaining your security and governance controls. Drop by for demos, swag and to meet the team. For deeper, 1:1 discussion, schedule time in our meeting room on the Expo floor.   --\> Schedule a meeting   Spacelift + Topgolf Las Vegas Tuesday, December 1 Join us for an evening at Topgolf Las Vegas! Swing a few clubs and swap stories with other platform engineers and DevOps folks over a taco bar.   --\> Register early to save your spot!   5 Questions Your IaC Can’t Answer Wednesday, December 2 Don’t miss the Spacelift team’s lightning talk at AWS re:Invent. In just 20 minutes, we’ll cover five questions Terraform, OpenTofu, and CloudFormation leave unanswered, from where your run time goes to whether an AI agent can be trusted with an apply.   --\> Add it to your calendar New Articles — Top Picks AI in Platform Engineering: When Agents Join Your Platform AI agents are both a new class of platform user and a new type of workload. They need the same paths through a different interface, as well as their own identity, permissions, budgets, and audit trail. In this article, Ioannis Moustakis explores what agents need from a platform and how to adopt agent-driven workflows while maintaining control.   --\> Read the article How to Build Golden Paths in Platform Engineering One of the core building blocks of platform engineering, Golden Paths allow a set of common workflows to be self-served through automation and templates, without the need for human intervention. In this article, Ioannis Moustakis outlines how to design and run Golden Paths, particularly in an age of agentic AI.   --\> Read the article How to Run an IaC Platform POC: What to Test in Two Weeks Two weeks is enough for an IaC platform POC, but only if you decide what you are judging before day one. In this article, Flavius Dinu discusses the most common reasons IaC POCs fail, which POC prerequisites you need before you start, the two-week IaC platform POC plan, what to actually test, and how to compare platforms after the POC.   --\> Read the article Atlantis at Scale: How It Works and Where It Breaks Atlantis works well for running terraform apply from a laptop. However, once your organization starts growing, your repo count expands, and multiple people open PRs at the same time, it doesn’t work quite so well. In this article, Flavius Dinu explores Atlantis, where it starts to break as you scale, what a serious production deployment looks like, and when you should move to something else.   --\> Read the article Read more blog posts Product Updates 🚀 Spacelift Flows Automates Day 2 Operations Flows is a new element of the Spacelift platform that brings the same rigor, observability, and control to Day 2 operations as we brought to IaC. Visual workflow automation built for platform and DevOps teams, it puts things like alerts, incident response, and cleanup on an event-based canvas with a step-by-step execution trail. When a run fails, you replay the whole flow or only the part that broke.   --\> Learn more Breaking Change: TF\_VAR\_spacelift\_run\_trigger now reported correctly for Pull Request events We have made a change that may affect you. Tracked runs that are created when a pull request is merged now record the commit as their trigger. Runs from Push events already behaved this way. Before this change was made, these tracked runs had no recorded trigger, so TF\_VAR\_spacelift\_run\_trigger fell back to git. It now reports vcs/commit.   The purpose of this change is to fix downstream stacks in a dependency chain, skipping their run when the upstream stack had no output changes. Who’s affected: You will only be affected if your hooks or Terraform/OpenTofu code check the TF\_VAR\_spacelift\_run\_trigger variable for git. You will need to make sure they are updated to accept vcs/commit as well.   --\> Learn more Action Needed: Switch private workers to HTTP long-polling before January 1st, 2027 We are changing how your private workers talk to Spacelift. Currently, they do so over an MQTT queue, which means an additional endpoint to allow through your firewall and an additional moving part between Spacelift and your workers. To simplify this, HTTP long-poll will replace MQTT for server-to-worker communication on January 1st, 2027. Workers will only need outbound HTTPS on port 443 configured, simplifying your network rules and removing worker-iot.spacelift.io from your allow list.   What does this mean for you? If you're using private workers, you'll need to switch to HTTP long-polling. If you only use Spacelift's public workers, you don't need to do anything.   --\> Learn more Get Started with Spacelift Ready to start your journey to IaC orchestration? Schedule a demo or explore yourself with a Spacelift free trial. Book a demo Start for free About  •  Terms of service  •  Contact Spacelift, Inc., 541 Jefferson Ave STE 100, Redwood City, California 94063 Unsubscribe Manage preferences |
| --- |