OpenTofu root module for GitHub organization infrastructure.
Use a feature branch and open a pull request rather than pushing directly to
main. A push to main can invoke apply after tests pass and configured
environment gates approve it. Do not push any branch unless explicitly
requested.
Pre-commit configuration is centralized at
https://raw.githubusercontent.com/makeitworkcloud/images/main/tfroot-runner/pre-commit-config.yaml. The root
.pre-commit-config.yaml is generated and ignored; do not edit it.
For local development, run:
make testThis refreshes the generated config from the canonical source on every run and replaces it only when the content changed.
This repo uses the shared opentofu.yml workflow from shared-workflows. Jobs
run natively on arc-tf; the runner pod already uses the tfroot-runner image,
so the workflow does not start a nested container. The shared workflow fetches
the canonical pre-commit config at runtime; this repository does not provide a
tracked copy.
"manifest unknown" error: The tfroot-runner:latest image doesn't exist in GHCR. Check if the images repo Build workflow succeeded.
Pre-commit failures: If hooks fail unexpectedly, the canonical config may
have changed. Re-run make test to refresh it and run the checks.
images- Contains tfroot-runner image and canonical pre-commit configshared-workflows- Contains the reusable OpenTofu workflow