Terraform (software)

Terraform (software)
Name	Terraform
Developer	HashiCorp
Initial release	2014
Programming language	Go
License	MPL 2.0 (core), Business Source License (enterprise features)
Website	hashicorp.com/products/terraform

Terraform (software) Terraform is an open-source infrastructure as code tool created to provision, change, and version cloud and on-premises resources. It enables declarative configuration and orchestration across multiple providers, supporting reproducible deployments and collaboration for teams in enterprises, startups, and research institutions.

Overview

Terraform implements declarative infrastructure as code patterns popularized by Amazon Web Services, Google Cloud, Microsoft Azure, OpenStack, and VMware. The tool uses a graph-based planner and an execution engine to create, update, and destroy resources across services such as EC2, S3, Cloud Storage, Azure Resource Manager, and vSphere. Organizations including Capital One, Spotify, Slack Technologies, The New York Times, and Salesforce have publicly discussed using it alongside orchestration tools like Kubernetes, Docker, Consul, and Nomad. Terraform competes in the infrastructure automation space with products from Red Hat, Pulumi, Ansible, Chef Software, and Puppet.

History and development

Terraform was introduced by HashiCorp during the rise of cloud-native architecture and infrastructure automation, contemporaneous with projects like Kubernetes, Prometheus, Envoy (software), and etcd. Early development occurred alongside HashiCorp tools such as Vagrant, Packer, Vault (software), and Consul (service mesh). The project gained adoption through community contributions on platforms like GitHub and discussions at conferences including HashiConf, KubeCon, CloudNativeCon, and AWS re:Invent. Notable milestones include the introduction of the HashiCorp Configuration Language, support for the Terraform Registry, and enterprise-oriented features that paralleled initiatives from Google Cloud Next and Microsoft Ignite.

Architecture and components

Terraform’s core is implemented in Go (programming language) and separates a platform-agnostic engine from provider plugins, aligning with plugin architectures used by VS Code extensions and gRPC-based systems. Key components include the CLI, state management, graph planner, and providers. State is typically stored in backends such as AWS S3, Google Cloud Storage, Azure Blob Storage, Consul (software), or HashiCorp Consul, and integrated with locking solutions like DynamoDB and remote execution platforms such as Terraform Cloud and Terraform Enterprise. The provider model allows adapters to services from Oracle Cloud Infrastructure, Alibaba Cloud, DigitalOcean, Heroku, and Cloudflare. Terraform integrates with CI/CD systems like Jenkins, GitHub Actions, GitLab CI/CD, CircleCI, and Azure Pipelines.

Configuration language and syntax

Terraform configurations are authored in HashiCorp Configuration Language (HCL), a declarative syntax inspired by JSON and designed for human readability and machine parsing. HCL includes constructs for resources, modules, variables, outputs, data sources, and provisioners; these map to APIs offered by platforms such as AWS Lambda, Google Cloud Functions, Azure Functions, and Cloud Run. HCL files coexist with JSON and integrate with templating engines and policy frameworks like Open Policy Agent and Sentinel from HashiCorp. Language features enable interpolation, conditionals, loops, and type constraints used in tandem with linters and formatters for projects hosted on GitHub, Bitbucket, and GitLab.

Providers and ecosystem

Terraform’s extensible provider ecosystem encompasses vendors and services across the cloud-native and enterprise landscape. Official and community providers support Amazon Web Services, Google Cloud Platform, Microsoft Azure, Kubernetes, Docker, VMware vSphere, Oracle Cloud Infrastructure, Alibaba Cloud, DigitalOcean, Cloudflare, GitHub, Okta, PagerDuty, Datadog, New Relic, HashiCorp Vault, Cloud Foundry, and OpenStack. The Terraform Registry functions similarly to package registries such as npm, PyPI, and Maven Central, enabling reuse of modules for patterns like network topologies, security groups, identity and access management, load balancers, and autoscaling. Companies integrate Terraform with service meshes like Istio, observability stacks including Prometheus and Grafana, and secrets managers from AWS Secrets Manager and Azure Key Vault.

Use cases and workflows

Common workflows use Git-centric practices such as GitOps popularized by Weaveworks and Flux (software): authors author HCL in repositories hosted on GitHub, create pull requests, and run plan/apply steps in CI systems such as Jenkins or GitLab CI/CD. Use cases include multi-cloud deployments across AWS, Azure, and Google Cloud, infrastructure provisioning for Kubernetes clusters using providers like kops and kubeadm, self-service platforms for developer environments in enterprises like Netflix and Airbnb, and reproducible environments for research institutions collaborating with CERN or universities. Terraform is also used to manage DNS via Cloudflare, CDNs via Fastly, and identity via Okta and Active Directory integration.

Limitations and security considerations

Terraform’s model introduces considerations around state sensitivity, drift detection, and secrets management. Storing state in backends like AWS S3 or Google Cloud Storage requires encryption, access control via AWS IAM or Google IAM, and locking using tools such as DynamoDB or Consul (software) to prevent concurrency issues. The provider-based model can lag behind service APIs, raising concerns similar to those discussed at KubeCon and in advisories from vendors such as Amazon Web Services and Microsoft. Security controls often incorporate HashiCorp Vault, policy-as-code with Open Policy Agent or Sentinel and scanning tools used by Snyk and SonarQube. Compliance and audit workflows integrate with Splunk, ELK Stack, Datadog, and governance frameworks adopted by enterprises like Capital One and Goldman Sachs.

Category:Infrastructure as code