cicd-infra-init · diff

git:20260708.e42b71f to git:20260911.3a0a7c8

2 added, 2 removed. Audit A to A.

---

name: "cicd-infra-init"

description: "Scaffold IaC directory with tiered structure (foundation/platform/app)"

---

# /cicd-infra-init - Scaffold Infrastructure as Code

Generate a tiered IaC directory structure for your project.

## Instructions

1. **Check for existing IaC** by running detection:

```bash

- PYTHONPATH="$CPP_DIR/lib:$PYTHONPATH" python3 -m lib.cicd infra-init --path "$(pwd)" --json

+ PYTHONPATH="$CPP_DIR:$PYTHONPATH" uv run --project "$CPP_DIR" python -m lib.cicd infra-init --path "$(pwd)" --json

```

2. **If no `.claude/cicd.yml` exists**, ask the user for:

- IaC provider: terraform (default), pulumi, or bicep

- Cloud provider: aws (default), azure, or gcp

- Remote state backend type (s3, azure-storage, gcs)

- Tagging conventions (managed-by, repo, owner)

3. **If `.claude/cicd.yml` exists** with an `infrastructure` section, use those settings.

4. **Generate the scaffold:**

```bash

- PYTHONPATH="$CPP_DIR/lib:$PYTHONPATH" python3 -m lib.cicd infra-init --path "$(pwd)" --write

+ PYTHONPATH="$CPP_DIR:$PYTHONPATH" uv run --project "$CPP_DIR" python -m lib.cicd infra-init --path "$(pwd)" --write

```

5. **Report what was created** and suggest next steps.

## Three-Tier Model

- **foundation/** - Run once, touch rarely. DNS zones, resource groups, networking, identity. Manual approval gates.

- **platform/** - Shared services. Container registries, key vaults, shared databases. Less frequent deploys.

- **app/** - Application-specific infrastructure. Deployed with application CI/CD.

## Configuration

Add to `.claude/cicd.yml`:

```yaml

infrastructure:

provider: terraform

cloud: aws

state_backend:

type: s3

bucket: my-tf-state

lock: true

tagging:

managed-by: terraform

repo: my-project

owner: platform-team

tiers:

foundation:

approval_required: true

separate_credentials: true

platform:

approval_required: false

app:

approval_required: false

```

## Related

- `/cicd-infra-discover` - Audit existing cloud resources

- `/cicd-infra-pipeline` - Generate CI/CD pipelines with approval gates