feat: support default workspace in tf plan/apply/refresh

[oycyc]

Summary

• task tf:{plan,apply,refresh} with no args runs against the default workspace without -var-file; -- <env> preserves the named-workspace flow.
• Motivation: with the backend role now split into READONLY/READWRITE (no default), task tf:* is the supported entry point and needs to handle default-workspace modules.
  • previously I could do tofu apply and it applies against the default workspace.
  • but now the backend role is REQUIRED, and Taskfiles determines it and sets it as env var
  • now I need to apply against default workspaces using Taskfiles (aka task t:tf:apply (default) vs task t:tf:apply -- prod)

PROOF OF VALIDATION

[coderabbitai]

📝 Walkthrough

Walkthrough

This PR modifies lib/tf/Taskfile.yml to enhance flexibility in Terraform/OpenTofu task execution. The setup task variable TF_ARGS now intelligently parses CLI arguments—flags starting with - pass through as-is, while other arguments are treated as Terraform options. The tf:plan, tf:apply, and tf:refresh tasks were updated to support optional workspace usage: preconditions now allow missing tfvars files when no workspace is specified, and commands conditionally apply workspace selection and -var-file arguments only when a workspace is configured. This enables both default workspace workflows (without environment-specific tfvars) and explicit workspace-with-tfvars workflows from the same task definitions.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

Possibly related PRs

• masterpointio/taskit#40: Both PRs modify Terraform/OpenTofu task definitions in lib/tf/Taskfile.yml by changing command templates and preconditions for tf:plan, tf:apply, and tf:refresh.
• masterpointio/taskit#38: Both PRs update lib/tf/Taskfile.yml command templates for the same three Terraform tasks with different behavioral changes.
• masterpointio/taskit#35: Both PRs modify Terraform task flows to improve workspace handling during plan/apply/refresh operations.

Suggested reviewers

• gberenice

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The PR title clearly summarizes the main change: adding support for default workspace usage in Terraform task operations (plan/apply/refresh).
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feat/tf-default-workspace-support

Tip

💬 Introducing Slack Agent: The best way for teams to turn conversations into code.

Slack Agent is built on CodeRabbit's deep understanding of your code, so your team can collaborate across the entire SDLC without losing context.

• Generate code and open pull requests
• Plan features and break down work
• Investigate incidents and troubleshoot customer tickets together
• Automate recurring tasks and respond to alerts with triggers
• Summarize progress and report instantly

Built for teams:

• Shared memory across your entire org—no repeating context
• Per-thread sandboxes to safely plan and execute work
• Governance built-in—scoped access, auditability, and budget controls

One agent for your entire SDLC. Right inside Slack.

👉 Get started

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}