Terrateam

Terrateam pulls Terraform and OpenTofu changes into the code review that already gates everything else. Open a pull request and the plan arrives as a comment, then apply from the same thread once it is approved, so shipping infrastructure no longer depends on who has credentials on their laptop. Terrateam and Stategraph have merged into one platform, where Terrateam runs as Stategraph Orchestration and existing setups keep working unchanged.

Workflows are declared in a .terrateam/config.yml file and run on GitHub or GitLab. The other half of the platform, Infrastructure as a Database, keeps Terraform state as a dependency graph in PostgreSQL rather than one JSON blob behind one lock, so plans are scoped to the subgraph a change touches and independent changes commit at the same time. Neither half requires the other.

The orchestration side covers the review loop end to end.

• Automatic plans: every pull request gets a plan posted as a comment before anyone merges.
• Routed approvals: applies run from the pull request, with reviewers assigned through CODEOWNERS.
• Policy enforcement: OPA and Rego, Conftest and Checkov block non-compliant changes before production.
• Cost estimates: spending shows up in review, with thresholds that demand an extra approval.
• Drift detection: scheduled runs catch changes made outside the workflow.
• Tag-based configuration: the same setup covers ten workspaces or ten thousand, in a monorepo or many repos.

Terragrunt, CDKTF and Pulumi are supported alongside the two main binaries. Self-hosting is a Docker Compose setup wizard, and the hosted service is free for small teams.