TerraApprove is a tool that can be integrated in a CI/CD pipeline and can be used to reduce the risk of applying a Terraform plan that can cause undesired changes. All the resources that require special attention (e.g. stateful resources) can be tagged with a decorator. TerraApprove will then check if the plan contains any of these resources and will produce an output that can be used to decide if the plan can be applied with -auto-approve or if manual approval is required.

See here for the list of supported features.

TerraApprove is a project created to experiment with new technologies (e.g. GitHub Copilot, devcontainers) and project management activities on something that is a little more than a toy project.

The folder structure is as follows:

.
├── artifacts # Contains the artifacts (executables, ...) of the project
├── configurations # Contains example of .terraapprove configurations
├── core # Contains the source code of the application
├── e2e-tests # Contains e2e tests based on bats
└── examples # Contains examples of how the application can be used

The project can be built using the following command:

cd core
yarn install
yarn generate:artifacts

Tag a commit, push it to the main branch and manually run the GitHub Action "Build and Publish Artifact" specifying the tag.

git tag -a vX.Y.Z -m "Release vX.Y.Z"
git push origin vX.Y.Z