Pipelines uses an "apply after merge" approach. This means that while multiple PRs are proposing changes to the same resources, there’s only ever a single source of truth for the infrastructure that will be provisioned (the Infrastructure as Code on the deploy branch e.g. main). During initial implementation we guide teams to using features of their SCM platform to enforce branch protection rules that ensure that plans are recent and applies are predictable.
Terragrunt Pipelines
is an out-of-the-box, best practices, secure CI/CD pipeline, built for Terragrunt, by the creators of Terragrunt.
Terragrunt Drift Detection
regularly compares your live cloud resources to your IaC and automatically opens pull requests to eliminate infrastructure drift.
Terragrunt Patcher
is a dependency management tool that keeps your OpenTofu/Terraform modules up to date, even through breaking changes.
