This is a transformation of Adrian Colyer's Checklist to turn it into a working model for a cloud transformation. The assumption is that the original checklist can suffice for any services that are deployed on the build pipeline, but the question to answer here is about how the environment is provisioned, deployed, monitored and governed in such a way as to fit the architecture implicit in the service checklist.
- Config is supplied via environment variables.
- Anything that doesn't vary between deploys should not be externalised.
- Deployment orchestrator should supply config as it deploys a service
- Secrets should never be supplied as config
- Desired deployment state should be declaratively described in code in a VCS.