Skip to content
Slipwaydocs

Terraform and OpenTofu

Plan, approve and apply Terraform or OpenTofu roots as a deployment.

At a glance

Section titled “At a glance”
Category Infrastructure as code
Authentication Backend credentials via workload identity or secrets
Provider id terraform

What it does

Section titled “What it does”
  • Plan output attached to the deployment
  • Manual approval gate between plan and apply
  • Drift check on a schedule

Set up

Section titled “Set up”
  1. Install terraform or tofu on the runner pool (or use the provided image).
  2. Create an Infrastructure of kind terraform and set the working directory and workspace.
  3. Give the runner identity access to the state backend and target accounts.
  4. Add a manual gate so a human reviews the plan before apply.

Configuration

Section titled “Configuration”

Illustrative configuration. Non-secret settings are stored as integration config; credentials are stored as encrypted Slipway secrets and referenced by name.

infrastructure:
  kind: terraform
  config:
    tool: opentofu            # terraform | opentofu
    working_dir: infra/prod
    workspace: prod
    var_files: [prod.tfvars]
Section titled “Related”