Mon, 01 Jan 0001 00:00:00 +0000

terraform-execution Specification

Purpose

Provide reusable Bazel rules that acquire pinned Terraform providers and run Terraform with declared configuration, executable, and provider inputs.

Requirements

Requirement: Verified provider acquisition

The provider module extension SHALL download immutable HTTPS archives with mandatory SHA256 integrity through Bazel repository fetching. It SHALL select one version for each canonical provider source across the extension graph.

Scenario: Conflicting provider versions

WHEN declarations select different versions of the same provider source
THEN extension resolution fails before provider repositories are created.

Scenario: Verified archive

WHEN a provider archive is fetched
THEN Bazel verifies the declared integrity and exposes its canonical source, version, platform, and packed filesystem-mirror path.

Requirement: Declared provider execution

Terraform rules SHALL place selected provider archives in runfiles using the packed filesystem-mirror layout. The runner SHALL configure only that mirror for provider installation and SHALL preserve the declared Terraform executable.