Your First Terraform Pipeline on Azure

Click-ops works until the second environment. Here is the smallest pipeline that gives you reviewable, repeatable infrastructure.

Remote state

Store state in a storage account with locking. Never commit terraform.tfstate.

Plan on every pull request

Post the plan as a PR comment. Reviewers should see exactly what will change before it changes.

Apply only from main

Humans approve; the pipeline applies. Nobody runs terraform apply from a laptop.

terraform fmt -check
terraform validate
terraform plan -out=tfplan

Start small. Add modules once you've repeated yourself twice.