Purpose
This checklist verifies the configuration is ready for an apply.
Run through every item before invoking terraform apply,
especially in production.
Checklist
- The plan was reviewed by a second engineer. (critical)
- The saved plan file matches the change ticket. (critical)
- The state lock is not held by another operation. (critical)
- The apply is using the saved plan (not
-auto-approve). (critical) - The maintenance window is open (if production). (warn)
- The backup or snapshot of critical resources is taken. (critical)
- The rollback procedure is documented and accessible. (critical)
- The on-call engineer is reachable. (warn)
- The audit log is configured to capture the apply. (warn)
- The monitoring signals are configured to alert on anomalies. (warn)
Verification
The checklist is complete when every item is checked. A
critical item unchecked is a blocker. The apply is not safe to
proceed.
Escalation
If a critical item cannot be satisfied, escalate to the engineering manager or the change manager.