Question

A team is collaborating on a Terraform project stored in Git. After one developer runs 'terraform init' locally, a '.terraform.lock.hcl' file is generated. The team lead wants to ensure every team member and the CI pipeline install exactly the same provider versions and verified checksums. What is the recommended practice regarding this file?

Accepted Answer

Commit the '.terraform.lock.hcl' file to version control so all collaborators and CI use the same recorded provider versions and hashes

Answer

Add '.terraform.lock.hcl' to '.gitignore' because it is regenerated on every 'terraform init' and should never be shared

Answer

Commit the entire '.terraform' directory to version control so the downloaded provider binaries are shared across the team

Answer

Manually copy the lock file into the 'terraform' block of each configuration so versions are enforced in code