Many repos

One place that keeps every repo's settings and policy alike.

Works

• A control repo holds the shared settings and opens a pull request in each repo that changes
• A single project works without a control repo, from its own terragucci.yml
• One estate page lists every project with its roots and last applies
• A new module version rolls out to every repo that pins it, a wave of pull requests at a time

Differs

Nothing beyond what the other pages describe.

First step

Govern many repos

You can count on

• A plan note on every pull request
• Gated applies of the plans you approved
• No overlapping or stale applies
• Re-plan from a comment
• Scheduled drift checks
• OIDC roles, one to plan, one to apply
• Policy on every plan
• An audit trail in your bucket
• Secrets kept out of notes and logs
• Your state backend, as is
• Your own runners
• Your forge's sign-in and permissions

Then read

Tasks

Govern many reposControl repo in TerraformEvery project, one pageRoll out a module

Background

Control repo

Details

terragucci.yml keys