Orchestration

GitOps for Terraform

Run Terraform through pull requests with policy enforcement, cost estimates, and drift detection. Powered by Terrateam.

Available Now

GitOps Workflows

PR-based Terraform automation powered by Terrateam. Production-ready today.

  • PR-based plan/apply
  • Policy & cost gates
  • Drift detection
  • RBAC & audit trails
Coming Soon

Control Plane

Kubernetes-style reconciliation for Terraform. In development with design partners.

  • Auto-reconciliation
  • Event-driven execution
  • Desired state convergence
  • Real-time cloud events

Terraform doesn't belong in your terminal

Running terraform apply from laptops is a recipe for disaster. No audit trail. No review process. No guardrails. Just hope.

You need infrastructure changes to flow through the same process as code: pull requests, reviews, approvals, and a clear history of who changed what and why.

Orchestration makes Terraform a first-class citizen of your Git workflow.

Infrastructure changes through pull requests

Open a PR, see the plan, get approval, merge to apply

1

Open PR

Push your .tf changes to a branch and open a pull request

2

Auto Plan

Orchestration runs terraform plan and posts results as a PR comment

3

Review

Team reviews the plan, cost estimate, and policy checks

4

Merge to Apply

Approve and merge—Orchestration applies the changes

Enterprise controls, native to your VCS

Policy enforcement

Run OPA/Conftest policies on every plan. Block non-compliant changes before they reach production.

$ Cost estimates

See the dollar impact of every change with Infracost integration. Set cost thresholds that require additional approval.

Drift detection

Scheduled scans detect when infrastructure drifts from code. Get notified and remediate before it becomes a problem.

RBAC & CODEOWNERS

Control who can apply changes to which directories. Automatic approval routing based on file ownership.

Monorepo support

Built for complex monorepos with hundreds of workspaces. Tag queries let you target specific directories.

PR comments

Plan output, cost estimates, and policy results posted directly to your pull request. Review everything in one place.

Configuration as code

Define your workflows in YAML. Version controlled, reviewable, auditable.

.terrateam/config.yml
# Apply policies to enforce team-based gatekeeping
apply_requirements:
  checks:
    - tag_query: "dir:environments/production/**"
      approved:
        enabled: true
        any_of: ["team:platform"]
    - tag_query: "iam in dir"
      approved:
        enabled: true
        all_of: ["team:security"]

# Enable cost estimation in PRs
cost_estimation:
  enabled: true
  currency: "USD"

# Custom workflow with policy enforcement
workflows:
  - tag_query: "dir:environments/production/**"
    plan:
      - type: init
      - type: plan
      - type: conftest

Works with your tools

Terraform OpenTofu Terragrunt CDKTF Pulumi

Ready for GitOps?

Orchestration is available now. Move Terraform into your Git workflow.

Stategraph Orchestration is powered by Terrateam. As we expand the Stategraph product suite, Terrateam becomes Stategraph Orchestration—same great platform, now part of a unified infrastructure stack.

Learn more about Terrateam →