Purpose
This checklist verifies the configuration is ready for a plan.
Run through every item before invoking terraform plan, especially
in production.
Checklist
- Backend is reachable and state is locked to the correct environment. (critical)
- Credentials are scoped to the correct account / project / subscription. (critical)
- Configuration is in Git and matches the change ticket. (critical)
- Lockfile (
.terraform.lock.hcl) is up to date. (warn) - Required Terraform version matches the recorded version. (warn)
- Change ticket is approved by the change manager. (critical)
- Maintenance window is scheduled (if production). (warn)
- Rollback procedure is documented in the change ticket. (critical)
- Real-world resources are reachable for refresh. (warn)
- Backup or snapshot of critical resources is taken. (critical)
Verification
The checklist is complete when every item is checked. A
critical item unchecked is a blocker. A warn item unchecked
is a delay.
Escalation
If a critical item cannot be satisfied, escalate to the engineering manager or the change manager.