This directory contains whitepapers related to Azure DevOps, CI/CD, Terraform automation, and monitoring solutions.
Author: Randy Bordeaux | Version: 1.0 | Date: January 2026
Comprehensive guide for designing and implementing enterprise-grade multi-stage CI/CD pipelines in Azure DevOps and GitHub Actions. Covers pipeline architecture, stage orchestration, deployment strategies, security patterns, monitoring with DORA metrics, performance optimization, and cost management.
Key Topics:
- Multi-stage pipeline topology and orchestration patterns
- Environment isolation and approval gates
- Azure DevOps YAML and GitHub Actions workflows
- Security with OIDC, service principals, and Key Vault
- Network architecture with self-hosted agents
- High availability and disaster recovery
- Monitoring with KQL queries and DORA metrics
- Performance optimization and cost strategies
Author: Randy Bordeaux | Version: 1.0 | Date: January 2026
Best practices for writing maintainable, reusable YAML pipelines in Azure DevOps. Covers template design, parameterization, variable management, and pipeline organization patterns.
Author: Randy Bordeaux | Version: 1.0 | Date: January 2026
Guidance on managing build artifacts, container images, and package feeds within Azure DevOps pipelines. Includes artifact retention policies and Azure Artifacts integration.
Author: Randy Bordeaux | Version: 1.0 | Date: January 2026
Implementation strategies for deployment gates, manual approvals, and automated quality gates in Azure DevOps pipelines to ensure safe production deployments.
Author: Randy Bordeaux | Version: 1.0 | Date: January 2026
Comprehensive guide for automating Terraform workflows within Azure DevOps and GitHub Actions. Covers pipeline design, state management, security, and operational best practices.
Author: Randy Bordeaux | Version: 1.0 | Date: January 2026
Deep dive into Terraform state management using Azure Storage backends, including state locking, encryption, versioning, and disaster recovery strategies.
Author: Randy Bordeaux | Version: 1.0 | Date: January 2026
Strategies for detecting and remediating infrastructure drift in Azure environments using Terraform and automated pipelines. Includes detection tools, remediation workflows, and governance policies.
Author: Randy Bordeaux | Version: 1.0 | Date: January 2026
Best practices for securing CI/CD pipelines with Azure Key Vault integration, service principal management, OIDC authentication, and secrets rotation strategies.
Author: Randy Bordeaux | Version: 1.0 | Date: January 2026
Consolidated security controls for Azure DevOps and GitHub Actions pipelines: identity hardening, secretless execution, policy as code, supply-chain protection, monitoring, and incident response playbooks.
Author: Randy Bordeaux | Version: 1.0 | Date: January 2026
Implementation guide for integrating Azure Policy, Terraform Sentinel, and Open Policy Agent (OPA) into CI/CD pipelines for automated compliance validation.
DevOps and monitoring patterns are also covered in:
- Operationalizing Azure Monitoring & Observability
- Well-Architected Terraform on Azure — CI/CD integration
- AKS Architecture Briefs — Monitoring
Please see the main CONTRIBUTING.md for guidelines on submitting whitepapers to this category.
All whitepapers in this directory follow these standards:
- Metadata Header: Author, version, date, Azure services
- Infrastructure as Code: Terraform configurations with AzureRM provider
- Azure CLI Examples: Operational commands and automation scripts
- KQL Queries: Log Analytics and monitoring queries
- Mermaid Diagrams: Architecture and workflow visualizations
- Production Ready: All code examples are tested and production-grade
Last Updated: August 2026
Maintained By: Randy Bordeaux