GitOps for Terraform
Run Terraform through pull requests with policy enforcement, cost estimates, and drift detection. Powered by Terrateam.
GitOps Workflows
PR-based Terraform automation powered by Terrateam. Production-ready today.
- ✓ PR-based plan/apply
- ✓ Policy & cost gates
- ✓ Drift detection
- ✓ RBAC & audit trails
Control Plane
Kubernetes-style reconciliation for Terraform. In development with design partners.
- ○ Auto-reconciliation
- ○ Event-driven execution
- ○ Desired state convergence
- ○ Real-time cloud events
Terraform doesn't belong in your terminal
Running terraform apply from laptops is a recipe for disaster. No audit trail. No review process. No guardrails. Just hope.
You need infrastructure changes to flow through the same process as code: pull requests, reviews, approvals, and a clear history of who changed what and why.
Orchestration makes Terraform a first-class citizen of your Git workflow.
Infrastructure changes through pull requests
Open a PR, see the plan, get approval, merge to apply
Open PR
Push your .tf changes to a branch and open a pull request
Auto Plan
Orchestration runs terraform plan and posts results as a PR comment
Review
Team reviews the plan, cost estimate, and policy checks
Merge to Apply
Approve and merge—Orchestration applies the changes
Enterprise controls, native to your VCS
⛨ Policy enforcement
Run OPA/Conftest policies on every plan. Block non-compliant changes before they reach production.
$ Cost estimates
See the dollar impact of every change with Infracost integration. Set cost thresholds that require additional approval.
◔ Drift detection
Scheduled scans detect when infrastructure drifts from code. Get notified and remediate before it becomes a problem.
⚙ RBAC & CODEOWNERS
Control who can apply changes to which directories. Automatic approval routing based on file ownership.
⎇ Monorepo support
Built for complex monorepos with hundreds of workspaces. Tag queries let you target specific directories.
⬡ PR comments
Plan output, cost estimates, and policy results posted directly to your pull request. Review everything in one place.
Configuration as code
Define your workflows in YAML. Version controlled, reviewable, auditable.
# Apply policies to enforce team-based gatekeeping
apply_requirements:
checks:
- tag_query: "dir:environments/production/**"
approved:
enabled: true
any_of: ["team:platform"]
- tag_query: "iam in dir"
approved:
enabled: true
all_of: ["team:security"]
# Enable cost estimation in PRs
cost_estimation:
enabled: true
currency: "USD"
# Custom workflow with policy enforcement
workflows:
- tag_query: "dir:environments/production/**"
plan:
- type: init
- type: plan
- type: conftest
Works with your tools
Ready for GitOps?
Orchestration is available now. Move Terraform into your Git workflow.
Stategraph Orchestration is powered by Terrateam. As we expand the Stategraph product suite, Terrateam becomes Stategraph Orchestration—same great platform, now part of a unified infrastructure stack.
Learn more about Terrateam →