Terraducktel¶
Self-hosted Terraform and Helm orchestration with a human approval gate.
Terraducktel imports modules from a Git repository and runs them through a
consistent, audited pipeline — plan → policy scan → cost estimate → human
approval → apply — against your own cloud accounts. It runs on Docker Compose,
costs nothing to license, and depends on no SaaS.
Back to the project site Source on GitHub
Where to start¶
-
Stand up a local stack, connect a Git repository, import your first workspace and take it through a run.
-
Drive workspaces and runs from a terminal, CI, or an AI agent — with approval gates you can enforce rather than remember.
-
Services, the run lifecycle, state handling, multi-tenancy and where the trust boundaries sit.
-
Every HTTP endpoint, with auth, scoping and payloads.
The idea¶
Most Terraform automation makes one of two trades: run everything by hand and accept that it drifts and nobody can audit it, or fully automate and accept that a bad plan applies itself at 3am.
Terraducktel keeps the pipeline automated and the decision manual. Every apply stops at an approval gate showing exactly what will change. What differs from a CI job that pauses is that the pause is a first-class object: it has a diff, a policy result, a cost estimate, an audit trail, and an operator who owns it.
The CLI extends that to unattended callers by turning the review into
a condition — --max-destroy 0 refuses a plan that would delete anything,
rather than trusting whoever is watching to notice.