Proposal: terraform apply patterns from GitHub - #11
Draft
pollenjp wants to merge 1 commit into
Draft
Conversation
Provides decision matrix and 5 example patterns: GH Actions+OIDC (AWS/GCP), Atlantis, Terraform Cloud VCS, and self-hosted runner. https://claude.ai/code/session_018YgUzbAgW2sVwfwQToMtnD
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
GitHub から
terraform applyを実行する方法のアイディア提案集をterraform-github-apply-2026-05-02/配下に追加。README.md… パターン比較表 + 推奨パターン (GH Actions + OIDC + Environments + PR-driven)docs/decision-matrix.md… 選択フローチャートexamples/01-actions-oidc-aws/… 推奨: AWS + OIDC + plan/apply role 分離examples/02-actions-oidc-gcp/… GCP + Workload Identity Federationexamples/03-atlantis/… PR コメント駆動 (atlantis plan/apply)examples/04-tfc-vcs/… Terraform Cloud VCS 連携 + Dynamic Credentialsexamples/05-self-hosted-runner/… VPC 内ランナー (private endpoint 用)推奨
通常用途は GitHub Actions + OIDC + GitHub Environments の Required reviewers が長寿命キーレスで運用しやすい。
PR コメントで全部完結させたい / 中央集約したい場合は Atlantis、規制要件が強い場合は Terraform Cloud + Sentinel を選ぶ。
Test plan
README.mdのパターン比較・選択指針が要件に合っているか確認vars.AWS_PLAN_ROLE_ARN等) を洗い出すworkflow_dispatch緊急 apply) を追加するか検討https://claude.ai/code/session_018YgUzbAgW2sVwfwQToMtnD
Generated by Claude Code