terraform-test

Hands-on Terraform and Packer training that runs on your own machine: libvirt/KVM VMs, local providers and mocks, no cloud account or credit card needed. From first resource to modules, testing, policy as code and HCP Terraform

Oasis is an open-source mutation testing framework for Terraform and OpenTofu. It evaluates the quality of Infrastructure-as-Code (IaC) test suites by introducing semantic faults (mutants) and measuring test detection rates.

Samples to showcase how to improve Terraform configuration quality

A Terraform module that provides a unified interface for running different test frameworks within Terraform test.

Before/after: a deliberately flawed AWS Terraform setup for a fictional startup, each risk fixed in its own commit with a policy check that fails before and passes after. Plain-English review report. Fully offline.

Reusable Terraform module for a secure-by-default Azure storage account via an opinionated tiered input surface — shared keys disabled, TLS 1.2 floor, default-Deny firewall, versioning with a cost-bounding lifecycle policy.

Reusable Terraform modules (naming, VPC network, secure S3) with secure defaults, tflint and native terraform test on mocked providers - no cloud credentials needed

Production-minded Terraform modules for AKS and EKS (VNet/VPC, private clusters, IRSA/Workload ID, KMS, private endpoints) with mock-provider terraform tests, tflint and checkov in CI - zero cloud cost.

Proof of Concept implementation for master thesis "Quantitative Cost Assessment of IaC Testing"

Terraform for Google Cloud Run (staging and production) and a GitHub Actions deploy set up for Workload Identity Federation, no service-account keys. Packages the open-source PDF chatbot. Tested offline; never applied to a live project.

This is repo-2

Azure hub-and-spoke landing zone built on Azure Verified Modules, with policy-as-code guardrails and Terraform unit tests that run without an Azure account

AWS half of a hands-on DevOps lab: Terraform, EKS, RDS, ALB/WAF and GitHub OIDC, verified by a harness that needs no cloud account.

Terraform import test: 9-lives

Azure half of a hands-on DevOps lab: Terraform, AKS, PostgreSQL Flexible Server, Application Gateway for Containers/WAF and GitHub OIDC, verified by a harness that needs no cloud account.

DevOps lab v2, Google Cloud infrastructure: Terraform, GKE Autopilot, Cloud SQL via Private Service Connect, Cloud Armor, Workload Identity Federation; harness-verified, educational