terraform-test

Create a .tftest.hcl file in a tests/ directory with at least one run block containing a command (plan or apply) and assert blocks with conditions and error messages. Run it with the terraform test CLI command.

command = plan validates logic without creating real infrastructure, making tests fast and free. command = apply (the default) creates real resources for integration testing and destroys them automatically in reverse run block order.

Use command = plan to validate logic only, or add mock_provider blocks (Terraform 1.7.0+) with mock_resource and mock_data defaults to simulate provider behavior without credentials or API calls.

No. Terraform test files only support local module paths and public or private registry modules. Git, HTTP, and other remote sources must be cloned locally or published to a registry first.

Use the expect_failures attribute in a run block listing the checkable objects (such as var.name) that should fail validation. The test passes when those objects report errors as expected.

Run blocks sharing a state file can conflict. Use separate modules for automatic state isolation, set distinct state_key attributes, or use mock providers to isolate tests from shared state.