01
VCS-driven runs
Trigger plans and applies from your repository workflow.
Pattern 04
TFC Workspace
VCS-driven Terraform Cloud workspaces with optional OIDC dynamic credentials.
What you get
02
Dynamic credentials
Use short-lived cloud credentials instead of workspace secrets.
03
Team controls
Separate plan and apply access with predictable workspace defaults.
Start here
Add the module to your configuration and customize only what you need.
main.tf
module "workspace" {
source = "pomo-studio/workspace/tfe"
version = "~> 1.1"
name = "my-app-prod"
organization = "example-org"
vcs_repo = "pomo-studio/my-app"
github_app_installation_id = "ghain-abc123"
}Key inputs
- name
- organization
- vcs_repo
- github_app_installation_id
- role_arn
Useful outputs
- workspace_id
- workspace_name
- workspace_url
Built with
- Terraform Cloud
- GitHub
- OIDC
- Terraform