TerraCiTerraform Pipeline Generator

Dependency-aware CI pipelines for Terraform/OpenTofu monorepos — GitLab CI & GitHub Actions, with cost estimation and policy checks

Get Started

View on GitHub

Dependency Graph

Parses terraform_remote_state to build a DAG. Topological sort ensures correct execution order across modules.

How it works

Parallel Execution

Builds a job DAG. Independent jobs run in parallel — only dependent jobs wait.

See pipeline structure

Changed-Only Mode

Detects modified files via git diff. Generates pipelines only for affected modules and their dependents.

Git integration

Policy Checks

Enforce compliance with OPA policies on every plan. Block or warn on violations — results appear in MR comments.

Configure policies

Cost Estimation

Estimate monthly AWS costs from terraform plans. See before/after diffs per module in MR comments.

Configure costs

OpenTofu Ready

First-class support for both Terraform and OpenTofu. Switch with a single config option.

Configure

Quick Start

bash

# Install
brew install edelwud/tap/terraci

# Initialize & generate (GitLab)
terraci init
terraci generate -o .gitlab-ci.yml

# Initialize & generate (GitHub Actions)
terraci init --provider github
terraci generate -o .github/workflows/terraform.yml

# Only changed modules
terraci generate --changed-only --base-ref main

How It Works

mermaid

flowchart LR
  subgraph repo["Your Repo"]
    r1["vpc/"]
    r2["eks/"]
    r3["rds/"]
  end
  subgraph terraci["TerraCi"]
    t1["Discover"] --> t2["Parse"] --> t3["Sort"] --> t4["Generate"]
  end
  subgraph ci["CI Pipeline"]
    g1["plan vpc"] --> g2["apply vpc"]
    g2 --> g3["plan eks + rds"]
    g3 --> g4["apply eks + rds"]
  end
  repo --> terraci --> ci

Full configuration reference →