Terraform Rules

Public rules

• terraform_binary — bazel run wrapper for any terraform subcommand.
• terraform_module — declares a .tf module with providers and deps.
• terraform_external_module — supplies a module fetched from outside the workspace (git, private hosts) to deps.
• terraform_provider — declares a provider built in the repo. Registry providers come from a deps tag's hub instead.
• terraform_test — runs Terraform's HCL native test framework, reporting each run block as a JUnit test case.
• terraform_plan_test — runs a real plan and keeps it as a reviewable test output; needs network.
• terraform_validate_test / aspect — terraform validate as a Bazel test/aspect.
• terraform_fmt_test / aspect — terraform fmt -check as a Bazel test/aspect.
• terraform_providers_lock — bazel run updater that writes .terraform.lock.hcl with the toolchain engine; nothing needs installing on the host.
• terraform_providers_lock_test — fails when the lock file and the required_providers blocks disagree.

Module extensions

• extensions — terraform: toolchain and deps tags.