HashiCorp Terraform

HashiCorp Terraform
Name	Terraform
Developer	HashiCorp
Initial release	2014
Latest release	1.6 (example)
Programming language	Go
License	Mozilla Public License 2.0
Website	HashiCorp

HashiCorp Terraform is an open-source infrastructure as code tool created to provision, manage, and version infrastructure resources. It enables declarative configuration, orchestration across cloud platforms, and collaboration among operators, developers, and security teams. Terraform integrates with major cloud providers, enterprise platforms, and a broad ecosystem of tools for continuous delivery, compliance, and observability.

Overview

Terraform was introduced by HashiCorp to codify infrastructure across providers including Amazon Web Services, Microsoft Azure, Google Cloud Platform, Oracle Cloud Infrastructure, IBM, VMware, OpenStack, Alibaba Cloud, DigitalOcean, Heroku, and Red Hat. It competes and interoperates with configuration and orchestration projects such as Ansible, Chef, Puppet, SaltStack, Kubernetes, Docker, OpenShift, Rancher, Cloud Foundry, and Terraform Enterprise-adjacent offerings. The project has influenced and been influenced by practices from DevOps, Site Reliability Engineering, and platforms like GitHub, GitLab, Bitbucket, Jenkins, CircleCI, Travis CI, and Azure DevOps. Terraform’s development and adoption intersect with standards and communities including CNCF, OpenStack Foundation, Apache Software Foundation, Linux Foundation, Cloud Native Computing Foundation, and various industry consortia.

Architecture and Components

Terraform's architecture separates configuration, plugins, state, and execution. Core components interact with provider plugins authored to integrate with vendors like Amazon Web Services, Microsoft Azure, Google Cloud Platform, VMware, Oracle Cloud, Alibaba Cloud, DigitalOcean, Cloudflare, Fastly, Akamai, Cisco, Juniper, Fortinet, and Palo Alto Networks. The execution plan, graph, and apply phases align with orchestration tools such as Nomad, Consul, Vault, Istio, Envoy, Linkerd, and Helm. Integrations and adapters exist for observability stacks like Prometheus, Grafana, Datadog, New Relic, Splunk, Elasticsearch, and OpenTelemetry. The plugin model parallels patterns used by HashiCorp Consul, HashiCorp Vault, and HashiCorp Nomad.

Configuration Language and Workflow

Terraform configurations are written in HashiCorp Configuration Language influenced by formats used by projects such as JSON and HCL (HashiCorp Configuration Language). Typical workflows integrate with source control systems like GitHub, GitLab, Bitbucket, and Azure Repos and CI/CD providers including Jenkins, CircleCI, Travis CI, GitHub Actions, GitLab CI/CD, and Azure Pipelines. Plan and apply steps are often reviewed alongside change management from organizations such as ITIL, COBIT, or project management tools like Jira Software, Trello, Asana, and ServiceNow. Collaboration patterns borrow from case studies at Netflix, Airbnb, Spotify, Uber, Lyft, Twitter, and Facebook.

Providers and Modules

A provider ecosystem supports integrations with enterprise vendors like Amazon Web Services, Microsoft Azure, Google Cloud Platform, VMware, Oracle, Alibaba Cloud, IBM Cloud, Salesforce, SAP, ServiceNow, GitHub, GitLab, HashiCorp Vault, Kubernetes, Cloudflare, Akamai, Fastly, Cloudflare, Okta, Ping Identity, CrowdStrike, Tenable, Splunk, and Datadog. Reusable modules are published and consumed via registries resembling services provided by Terraform Registry, GitHub Packages, Artifactory, Nexus Repository Manager, and private registries run by enterprises like Capital One, Goldman Sachs, Siemens, General Electric, Siemens Healthineers, Pfizer, Johnson & Johnson, and Procter & Gamble. Module design patterns take inspiration from projects such as AWS CDK, Pulumi, Serverless Framework, CloudFormation, ARM templates, and Google Deployment Manager.

State Management and Backends

Terraform persists state to backends that include Amazon S3, Google Cloud Storage, Microsoft Azure Blob Storage, Consul, HashiCorp Vault, PostgreSQL, MySQL, Redis, and object stores used by providers like OCI Object Storage. Remote backends and locking mechanisms integrate with services such as DynamoDB, Etcd, Zookeeper, and HashiCorp Consul to prevent concurrent modifications like patterns used by Kubernetes and Nomad. Backup, audit, and compliance practices reference controls from ISO/IEC 27001, SOC 2, HIPAA, PCI DSS, and enterprise governance from companies such as Microsoft Corporation, Amazon.com, Inc., Google LLC, and IBM.

Security and Governance

Security practices around Terraform involve secrets management with HashiCorp Vault, identity providers such as Okta, Azure Active Directory, Google Identity, Ping Identity, and Keycloak. Policy-as-code frameworks like Open Policy Agent, Sentinel, OPA, Chef InSpec, and Kubernetes OPA Gatekeeper are used for governance, along with compliance tooling from Palo Alto Networks, CrowdStrike, Tenable, Check Point Software Technologies, and McAfee. RBAC and audit logging integrate with platforms including Splunk, Datadog, Elasticsearch, Sumo Logic, and New Relic to meet regulatory requirements enforced by GDPR, CCPA, HIPAA, and PCI DSS.

Adoption and Ecosystem

Terraform is widely adopted across enterprises, startups, public sector bodies, and research institutions such as NASA, European Space Agency, MIT, Stanford University, Harvard University, UCLA, University of Cambridge, and corporations like Netflix, Airbnb, Spotify, Uber, Lyft, Twitter, Facebook, Shopify, Salesforce, Adobe Inc., Intel Corporation, NVIDIA, Dell Technologies, HP Inc., Siemens, General Electric, and Siemens Healthineers. The community contributes through forums, conferences, and events including HashiConf, KubeCon, DevOpsDays, AWS re:Invent, Google Cloud Next, Microsoft Ignite, VMworld, OpenInfra Summit, RSA Conference, and Black Hat USA. The broader ecosystem includes commercial offerings, third-party tools, managed services, and training providers such as HashiCorp Certified: Terraform Associate, training from Coursera, Udemy, Pluralsight, A Cloud Guru, and consulting from firms like Accenture, Deloitte, PwC, KPMG, Capgemini, ThoughtWorks, and Infosys.

Category:Infrastructure as code