1# Terraform adapter
2 
3Multi-cloud, existing TF state, organization standardized on Terraform.
4 
5## Templates
6 
7Emit three code files to [`examples/terraform/`](../../examples/terraform/README.md):
8- `main.tf` — provider, RG, VNet, subnet, NSG (SSH allow), public IP, NIC, Linux VM
9- `variables.tf` — typed input variables with defaults
10- `outputs.tf` — `vm_id`, `public_ip`
11 
12Always emit `examples/terraform/README.md` (Plan Card, prereqs, quickstart, variables table, outputs, cleanup). When the user requests a PR (Mode C), the same README becomes the PR body.
13 
14## Deploy
15 
16```bash
17terraform init
18terraform plan  -var "vm_name={vmName}" -var "admin_public_key=$(cat ~/.ssh/id_rsa.pub)" \
19                -var "subscription_id=$AZ_SUB" -var "resource_group_name={resourceGroup}"
20terraform apply -var "vm_name={vmName}" -var "admin_public_key=$(cat ~/.ssh/id_rsa.pub)" \
21                -var "subscription_id=$AZ_SUB" -var "resource_group_name={resourceGroup}"
22```
23 
24## VMSS
25 
26Replace `azurerm_linux_virtual_machine` with `azurerm_linux_virtual_machine_scale_set` (or Windows variants). Add `instances`, `upgrade_mode = "Manual" | "Automatic" | "Rolling"`. NIC moves inline inside the scale set resource via `network_interface { ip_configuration { ... } }`.
27 
28## Notes
29- Provider version pinned to `~> 4.0` — bump deliberately, not implicitly.
30- `admin_public_key` is `sensitive = true`; don't print it.
31- `zone` is `""` by default (regional); to pin, pass `"1"`, `"2"`, or `"3"`.
32- Pre-check quota with `compute_vm_check-quota` before `terraform apply`.
33