⚠️ This tool is experimental and under development. It's not recommended for any use right now, however, any suggestion/help is very welcomed.

A specialized wrapper for the Terraform binary that enables selective provider proxying. This tool allows you to intercept and modify Terraform provider configurations on-the-fly, making it particularly useful for testing, development, and specific deployment scenarios. Or in case you're in corporation that puts proxy in front of everything 😄

tf-proxy acts as an intermediary between your Terraform commands and the actual Terraform binary. It intercepts provider configurations, creates temporary overrides for specific providers (like AWS), and ensures clean removal of these overrides after Terraform operations complete.

sequenceDiagram
    participant user
    participant tf-proxy
    participant terraform
    participant filesystem

    user ->> tf-proxy: Runs "tf-proxy"
    filesystem  ->> tf-proxy: Read all provider resources
    tf-proxy ->> filesystem: Create override for aws providers
    filesystem -->> tf-proxy: Override file created
    tf-proxy ->> terraform: Call Terraform binary with given  args
    terraform -->> tf-proxy: Terraform command completes
    tf-proxy ->> filesystem: Remove _override file
    filesystem -->> tf-proxy: Override file removed
    tf-proxy -->> user: Workflow completed

The tool can be configured using a YAML configuration file. This file should be placed in ~/.tf-proxy.yaml directory.

# Default proxy to use when no specific proxy is defined for a provider
default_proxy: "http://proxy.example.com:8080"

# Provider-specific configurations
providers:
  # AWS provider configuration
  aws:
    type: "provider"  # Specifies this is a provider configuration
    proxy: "http://aws-proxy.example.com:8080"  # Optional: specific proxy for AWS

  # S3 backend configuration
  s3:
    type: "backend"  # Specifies this is a backend configuration for state management
    proxy: "http://s3-proxy.example.com:8080"  # Optional: specific proxy for S3 state backend

  # Google provider configuration (empty configuration defaults to default_proxy and "provider" type)
  google:

• default_proxy: Default proxy URL to use when no specific proxy is defined for a provider

For each provider/backend:

• type: Specifies whether this is a "provider" or "backend" configuration
  • Valid values: "provider" or "backend"
• proxy: (Optional) Specific proxy URL for this provider/backend
  • If not specified, the default_proxy will be used

Use tf-proxy just like you would use the Terraform binary:

# Basic usage
tf-proxy init
tf-proxy plan
tf-proxy apply

# With additional arguments
tf-proxy plan -var="environment=prod"