kitchen-terraform 2.1.0 → 3.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 9c484cfa1fce45ee648ee3e184937331b74e2d92
-  data.tar.gz: 6feb2f68cf8e842426720b8a4f5b036243529e9f
+SHA256:
+  metadata.gz: 8a3511bbc6d10c08da856558d9f41949651cb0e38db183909d0f46ae885e6cdc
+  data.tar.gz: dc2fdad8698f10114a5adfce900a60f2d203eef807350d71810a63e1958a8315
 SHA512:
-  metadata.gz: 2add7730329949a50da2911e2fd05868f67c7a2dab984aa68343f49c2bfd956a23174378907801bca3a17fc597dda7eebfb9344fbc4bbb3c55d0d5e5e1c1fa6e
-  data.tar.gz: e67c2f15793a4a0dde35df3b24228228fec45af008b3d202d96cc294c365b8d4e079fc544af00d6a1b6ceab0ec9cbefc6270c8996586854ac0b5b2a2dd5faa97
+  metadata.gz: 378c750cd2ddd73a30b04d3518a0f40d9fa01e4080d5a1014115793a51f999773c056cc46b908ca364e32780975792d77d0982b2d170316a9ec47bc63e043719
+  data.tar.gz: 1fd8130d68184e45c1cffa8ee5fffebdd6bf2364eb24963b92411ed6ad64dc68bf9110b8d3add81bcfa1023df8b90c03b2e649d9b9a53a46321c755d0d934e18

data/README.md

@@ -6,21 +6,26 @@
 [![Build Status Master](https://travis-ci.org/newcontext-oss/kitchen-terraform.svg?branch=master)](https://travis-ci.org/newcontext-oss/kitchen-terraform)
 [![Test Coverage](https://codeclimate.com/github/newcontext-oss/kitchen-terraform/badges/coverage.svg)](https://codeclimate.com/github/newcontext-oss/kitchen-terraform/coverage)
 
-kitchen-terraform is a set of [Test Kitchen] plugins for testing
-[Terraform configuration].
+kitchen-terraform is a set of
+[Test Kitchen](http://kitchen.ci/index.html) plugins for testing
+[Terraform configuration](https://www.terraform.io/docs/configuration/index.html)
+.
 
 ## Requirements
 
-- [Ruby] **(~> 2.2)**
+- [Ruby](https://www.ruby-lang.org/en/index.html) **(~> 2.2)**
 
-- [Bundler] **(~> 1.12)**
+- [Bundler](https://bundler.io/index.html) **(~> 1.12)**
 
-- [Terraform] **(~> 0.10.2)**
+- [Terraform](https://www.terraform.io/index.html)
+  **(>= 0.10.2, < 0.12.0)**
 
 ## Installation
 
-kitchen-terraform is packaged as a cryptographically signed [Ruby gem]
-which means it can be [installed with Bundler].
+kitchen-terraform is packaged as a cryptographically signed
+[Ruby gem](http://guides.rubygems.org/what-is-a-gem/index.html) which
+means it can be
+[installed with Bundler](https://bundler.io/index.html#getting-started).
 
 ### Adding kitchen-terraform to a Terraform project
 
@@ -29,7 +34,7 @@ Gemfile:
 
 ```rb
 source "https://rubygems.org/" do
-  gem "kitchen-terraform", "~> 2.0"
+  gem "kitchen-terraform", "~> 3.0"
 end
 ```
 
@@ -42,38 +47,30 @@ bundle install
 ## Usage
 
 kitchen-terraform provides three Test Kitchen plugins which must be used
-together in the [Test Kitchen configuration] in order to successfully
-test Terraform configuration:
-
-- a [driver] that creates and destroys [Terraform state];
-
-- a [provisioner] that applies changes to existing Terraform state;
-
-- a [verifier] that verifies the state and behaviour of resources in the
-  Terraform state.
-
-Refer to the [gem documentation] for more information about
-kitchen-terraform's design and behaviour.
-
-Refer to the [Getting Started README] for a detailed walkthrough of
-setting up and using kitchen-terraform.
-
-Refer to the [examples directory] for example Terraform projects using
-various [Terraform providers].
-
-[Bundler]: https://bundler.io/index.html
-[Getting Started README]: https://github.com/newcontext-oss/kitchen-terraform/blob/master/examples/aws_provider/getting_started.md
-[Ruby Gem]: http://guides.rubygems.org/what-is-a-gem/index.html
-[Ruby]: https://www.ruby-lang.org/en/index.html
-[Terraform configuration]: https://www.terraform.io/docs/configuration/index.html
-[Terraform providers]: https://www.terraform.io/docs/configuration/providers.html
-[Terraform state]: https://www.terraform.io/docs/state/index.html
-[Terraform]: https://www.terraform.io/index.html
-[Test Kitchen configuration]: https://docs.chef.io/config_yml_kitchen.html
-[Test Kitchen]: http://kitchen.ci/index.html
-[driver]: http://www.rubydoc.info/gems/kitchen-terraform/Kitchen/Driver/Terraform
-[examples directory]: https://github.com/newcontext-oss/kitchen-terraform/blob/master/examples
-[gem documentation]: http://www.rubydoc.info/gems/kitchen-terraform/index
-[installed with Bundler]: https://bundler.io/index.html#getting-started
-[provisioner]: http://www.rubydoc.info/gems/kitchen-terraform/Kitchen/Provisioner/Terraform
-[verifier]: http://www.rubydoc.info/gems/kitchen-terraform/Kitchen/Verifier/Terraform
+together in the
+[Test Kitchen configuration](https://docs.chef.io/config_yml_kitchen.html)
+in order to successfully test Terraform configuration:
+
+- a [driver](http://www.rubydoc.info/github/newcontext-oss/kitchen-terraform/Kitchen/Driver/Terraform)
+  that creates and destroys
+  [Terraform state](https://www.terraform.io/docs/state/index.html);
+
+- a [provisioner](http://www.rubydoc.info/github/newcontext-oss/kitchen-terraform/Kitchen/Provisioner/Terraform)
+  that applies changes to existing Terraform state;
+
+- a [verifier](http://www.rubydoc.info/github/newcontext-oss/kitchen-terraform/Kitchen/Verifier/Terraform)
+  that verifies the state and behaviour of resources in the Terraform
+  state.
+
+Refer to the [gem documentation](http://www.rubydoc.info/github/newcontext-oss/kitchen-terraform/)
+for more information about kitchen-terraform's design and behaviour.
+
+Refer to the
+[Getting Started Tutorial](https://newcontext-oss.github.io/kitchen-terraform/tutorials/amazon_provider_ec2.html)
+for a detailed walkthrough of setting up and using kitchen-terraform.
+
+Refer to the
+[tutorials](https://newcontext-oss.github.io/kitchen-terraform/tutorials)
+for example Terraform projects using various
+[Terraform providers](https://www.terraform.io/docs/configuration/providers.html)
+.

data/lib/kitchen/{terraform/client.rb → driver.rb}

@@ -14,10 +14,9 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-require "kitchen/terraform"
+require "kitchen"
 
-# The namespace for functions that wrap the Terraform command-line interface (CLI) commands.
-#
-# @see https://www.terraform.io/docs/commands/index.html Terraform CLI
-module ::Kitchen::Terraform::Client
+# This is the namespace for Test Kitchen driver plugins. This namespace is already defined in Test Kitchen but YARD
+# requires it to be redefined here in order to include documenation from the Kitchen::Terraform namespace.
+module Kitchen::Driver
 end

data/lib/kitchen/driver/terraform.rb

@@ -15,73 +15,159 @@
 # limitations under the License.
 
 require "dry/monads"
-require "fileutils"
 require "json"
-require "kitchen"
-require "kitchen/terraform/clear_directory"
-require "kitchen/terraform/client/command"
-require "kitchen/terraform/client/options"
+require "kitchen/driver/base"
+require "kitchen/errors"
 require "kitchen/terraform/client_version_verifier"
 require "kitchen/terraform/config_attribute/backend_configurations"
 require "kitchen/terraform/config_attribute/color"
 require "kitchen/terraform/config_attribute/command_timeout"
-require "kitchen/terraform/config_attribute/directory"
 require "kitchen/terraform/config_attribute/lock_timeout"
 require "kitchen/terraform/config_attribute/parallelism"
 require "kitchen/terraform/config_attribute/plugin_directory"
-require "kitchen/terraform/config_attribute/state"
+require "kitchen/terraform/config_attribute/root_module_directory"
 require "kitchen/terraform/config_attribute/variable_files"
 require "kitchen/terraform/config_attribute/variables"
-require "kitchen/terraform/config_attribute/verify_plugins"
-require "kitchen/terraform/create_directories"
 require "kitchen/terraform/configurable"
+require "kitchen/terraform/shell_out"
 
-# The kitchen-terraform driver is the bridge between Test Kitchen and Terraform.
+# The driver is the bridge between Test Kitchen and Terraform. It manages the
+# {https://www.terraform.io/docs/state/index.html state} of the Terraform root module by shelling out and running
+# Terraform commands.
 #
-# It manages the state of the configured root Terraform module by invoking its workflow in a constructive or destructive
-# manner.
+# === Commands
 #
-# === Test Kitchen Configuration
+# The following command-line commands are provided by the driver.
 #
-# The configuration of the driver is used to control the behaviour of the Terraform Client commands.
+# ==== kitchen create
 #
-# More information about the available configuration attributes is located with the respective modules.
+# A Test Kitchen instance is created through the following steps.
 #
-# Test Kitchen configuration is defined in +.kitchen.yml+ and optionally overridden in +.kitchen.local.yml+.
+# ===== Initializing the Terraform Working Directory
 #
-# ==== Example
+#   terraform init \
+#     -input=false \
+#     -lock=true \
+#     -lock-timeout=<lock_timeout>s \
+#     [-no-color] \
+#     -upgrade \
+#     -force-copy \
+#     -backend=true \
+#     [-backend-config=<backend_configurations.first> ...] \
+#     -get=true \
+#     -get-plugins=true \
+#     [-plugin-dir=<plugin_directory>] \
+#     -verify-plugins=true \
+#     <root_module_directory>
+#
+# ===== Creating a Test Terraform Workspace
+#
+#   terraform workspace <new|select> kitchen-terraform-<instance>
+#
+# ==== kitchen destroy
+#
+# A Test Kitchen instance is destroyed through the following steps.
+#
+# ===== Initializing the Terraform Working Directory
+#
+#   terraform init \
+#     -input=false \
+#     -lock=true \
+#     -lock-timeout=<lock_timeout>s \
+#     [-no-color] \
+#     -force-copy \
+#     -backend=true \
+#     [-backend-config=<backend_configurations.first>...] \
+#     -get=true \
+#     -get-plugins=true \
+#     [-plugin-dir=<plugin_directory>] \
+#     -verify-plugins=true \
+#     <root_module_directory>
+#
+# ===== Selecting the Test Terraform Workspace
+#
+#   terraform workspace <select|new> kitchen-terraform-<instance>
+#
+# ===== Destroying the Terraform State
+#
+#   terraform destroy \
+#     -force \
+#     -lock=true \
+#     -lock-timeout=<lock_timeout>s \
+#     -input=false \
+#     [-no-color] \
+#     -parallelism=<parallelism> \
+#     -refresh=true \
+#     [-var=<variables.first>...] \
+#     [-var-file=<variable_files.first>...] \
+#     <root_module_directory>
+#
+# ===== Selecting the Default Terraform Workspace
+#
+#   terraform workspace select default
+#
+# ===== Deleting the Test Terraform Workspace
+#
+#   terraform workspace delete kitchen-terraform-<instance>
+#
+# === Shelling Out
+#
+# {include:Kitchen::Terraform::ShellOut}
+#
+# === Configuration Attributes
+#
+# The configuration attributes of the driver control the behaviour of the Terraform commands that are run. Within the
+# {http://kitchen.ci/docs/getting-started/kitchen-yml Test Kitchen configuration file}, these attributes must be
+# declared in the +driver+ mapping along with the plugin name.
 #
 #   driver:
-#     name: "terraform"
-#     backend_configurations:
-#       argument_name: "argument_value"
-#     command_timeout: 1000
-#     color: false
-#     directory: "/directory/containing/terraform/configuration"
-#     lock_timeout: 2000
-#     parallelism: 2
-#     plugin_directory: "/plugin/directory"
-#     state: "/terraform/state"
-#     variable_files:
-#       - "/first/terraform/variable/file"
-#       - "/second/terraform/variable/file"
-#     variables:
-#       variable_name: "variable_value"
-#     verify_plugins: false
-#
-# @see ::Kitchen::Terraform::Client::Command
-# @see ::Kitchen::Terraform::ConfigAttribute::BackendConfigurations
-# @see ::Kitchen::Terraform::ConfigAttribute::CommandTimeout
-# @see ::Kitchen::Terraform::ConfigAttribute::Color
-# @see ::Kitchen::Terraform::ConfigAttribute::Directory
-# @see ::Kitchen::Terraform::ConfigAttribute::LockTimeout
-# @see ::Kitchen::Terraform::ConfigAttribute::Parallelism
-# @see ::Kitchen::Terraform::ConfigAttribute::PluginDirectory
-# @see ::Kitchen::Terraform::ConfigAttribute::State
-# @see ::Kitchen::Terraform::ConfigAttribute::VariableFiles
-# @see ::Kitchen::Terraform::ConfigAttribute::Variables
-# @see ::Kitchen::Terraform::ConfigAttribute::VerifyPlugins
-# @see http://kitchen.ci/docs/getting-started/kitchen-yml Test Kitchen: .kitchen.yml
+#     name: terraform
+#     a_configuration_attribute: some value
+#
+# ==== backend_configurations
+#
+# {include:Kitchen::Terraform::ConfigAttribute::BackendConfigurations}
+#
+# ==== color
+#
+# {include:Kitchen::Terraform::ConfigAttribute::Color}
+#
+# ==== command_timeout
+#
+# {include:Kitchen::Terraform::ConfigAttribute::CommandTimeout}
+#
+# ==== root_module_directory
+#
+# {include:Kitchen::Terraform::ConfigAttribute::RootModuleDirectory}
+#
+# ==== lock_timeout
+#
+# {include:Kitchen::Terraform::ConfigAttribute::LockTimeout}
+#
+# ==== parallelism
+#
+# {include:Kitchen::Terraform::ConfigAttribute::Parallelism}
+#
+# ==== plugin_directory
+#
+# {include:Kitchen::Terraform::ConfigAttribute::PluginDirectory}
+#
+# ==== variable_files
+#
+# {include:Kitchen::Terraform::ConfigAttribute::VariableFiles}
+#
+# ==== variables
+#
+# {include:Kitchen::Terraform::ConfigAttribute::Variables}
+#
+# @example Describe the create command
+#   kitchen help create
+# @example Create a Test Kitchen instance
+#   kitchen create default-ubuntu
+# @example Describe the destroy command
+#   kitchen help destroy
+# @example Destroy a Test Kitchen instance
+#   kitchen destroy default-ubuntu
 # @version 2
 class ::Kitchen::Driver::Terraform < ::Kitchen::Driver::Base
   kitchen_driver_api_version 2
@@ -98,337 +184,318 @@ class ::Kitchen::Driver::Terraform < ::Kitchen::Driver::Base
 
   include ::Kitchen::Terraform::ConfigAttribute::CommandTimeout
 
-  include ::Kitchen::Terraform::ConfigAttribute::Directory
-
   include ::Kitchen::Terraform::ConfigAttribute::LockTimeout
 
   include ::Kitchen::Terraform::ConfigAttribute::Parallelism
 
   include ::Kitchen::Terraform::ConfigAttribute::PluginDirectory
 
-  include ::Kitchen::Terraform::ConfigAttribute::State
+  include ::Kitchen::Terraform::ConfigAttribute::RootModuleDirectory
 
   include ::Kitchen::Terraform::ConfigAttribute::VariableFiles
 
   include ::Kitchen::Terraform::ConfigAttribute::Variables
 
-  include ::Kitchen::Terraform::ConfigAttribute::VerifyPlugins
-
   include ::Kitchen::Terraform::Configurable
 
-  # The driver invokes its workflow in a constructive manner by applying changes to the Terraform state.
+  # Applies changes to the state by selecting the test workspace, updating the dependency modules, validating the root
+  # module, applying the state changes, and retrieving the state output.
+  #
+  # @return [::Dry::Monads::Either] the result of the action.
+  def apply
+    apply_run_workspace_select_instance
+      .bind do
+        apply_run_get
+      end
+      .bind do
+        apply_run_validate
+      end
+      .bind do
+        apply_run_apply
+      end
+      .bind do
+        apply_run_output
+      end
+  end
+
+  # Creates a Test Kitchen instance by initializing the working directory and creating a test workspace.
   #
-  # @example
-  #   `kitchen help create`
-  # @example
-  #   `kitchen create suite-name`
-  # @note The user must ensure that different suites utilize separate Terraform state files if they are to run
-  #       the create action concurrently.
   # @param _state [::Hash] the mutable instance and driver state.
   # @raise [::Kitchen::ActionFailed] if the result of the action is a failure.
-  # @see ::Kitchen::Driver::Terraform#run_apply
-  # @see ::Kitchen::Driver::Terraform#workflow
   def create(_state)
-    workflow do
-      run_apply
-    end
+    create_run_init
+      .bind do
+        create_run_workspace_new_instance
+          .or do
+            create_run_workspace_select_instance
+          end
+      end
+      .or do |failure|
+        raise(
+          ::Kitchen::ActionFailed,
+          failure
+        )
+      end
   end
 
-  # The driver invokes its workflow in a destructive manner by destroying the Terraform state and removing the instance
-  # directory.
+  # Destroys a Test Kitchen instance by initializing the working directory, selecting the test workspace,
+  # deleting the state, selecting the default workspace, and deleting the test workspace.
   #
-  # @example
-  #   `kitchen help destroy`
-  # @example
-  #   `kitchen destroy suite-name`
-  # @note The user must ensure that different suites utilize separate Terraform state files if they are to run
-  #       the destroy action concurrently.
   # @param _state [::Hash] the mutable instance and driver state.
   # @raise [::Kitchen::ActionFailed] if the result of the action is a failure.
-  # @see ::Kitchen::Driver::Terraform#remove_instance_directory
-  # @see ::Kitchen::Driver::Terraform#run_destroy
-  # @see ::Kitchen::Driver::Terraform#workflow
   def destroy(_state)
-    workflow do
-      run_destroy.bind do
-        remove_instance_directory
+    destroy_run_init
+      .bind do
+        destroy_run_workspace_select_instance
+          .or do
+            destroy_run_workspace_new_instance
+          end
       end
-    end
-  end
-
-  # The driver parses the Terraform Client output subcomannd output as JSON.
-  #
-  # @return [::Dry::Monads::Either] the result of parsing the output.
-  # @see ::Kitchen::Terraform::Client::Command.Output
-  # @see ::JSON.parse
-  def output
-    run_output
-      .bind do |output|
-        Try ::JSON::ParserError do
-          ::JSON.parse output
-        end
-          .to_either
+      .bind do
+        destroy_run_destroy
       end
-      .or do |error|
-        Left "parsing Terraform client output as JSON failed\n#{error}"
+      .bind do
+        destroy_run_workspace_select_default
+      end
+      .bind do
+        destroy_run_workspace_delete_instance
+      end
+      .or do |failure|
+        raise(
+          ::Kitchen::ActionFailed,
+          failure
+        )
       end
   end
 
-  # The driver verifies that the client version is supported.
+  # Verifies that the Terraform version available to the driver is supported.
   #
   # @raise [::Kitchen::UserError] if the version is not supported.
-  # @see ::Kitchen::Terraform::Client::Command.version
-  # @see ::Kitchen::Terraform::ClientVersionVerifier#verify
   def verify_dependencies
-    run_version
+    ::Kitchen::Terraform::ShellOut
+      .run(
+        command: "version",
+        logger: logger
+      )
       .bind do |output|
         ::Kitchen::Terraform::ClientVersionVerifier
           .new
           .verify version_output: output
       end
-      .bind do |verified_client_version|
-        Right logger.warn verified_client_version
-      end
       .or do |failure|
         raise(
           ::Kitchen::UserError,
           failure
         )
       end
+      .bind do |verified_client_version|
+        logger.warn verified_client_version
+      end
   end
 
   private
 
-  # The driver creates the instance directory or clears it of Terraform configuration if it already exists.
-  #
   # @api private
-  # @return [::Dry::Monads::Either] the result of creating or clearing the instance directory.
-  # @see ::KItchen::Terraform::ClearDirectory.call
-  # @see ::Kitchen::Driver::Terraform#instance_directory
-  # @see ::Kitchen::Terraform::CreateDirectories.call
-  def prepare_instance_directory
-    ::Kitchen::Terraform::CreateDirectories
-      .call(
-        directories: [instance_directory]
+  def apply_run_apply
+    ::Kitchen::Terraform::ShellOut
+      .run(
+        command:
+          "apply " \
+            "-lock=true " \
+            "#{config_lock_timeout_flag} " \
+            "-input=false " \
+            "-auto-approve=true " \
+            "#{config_color_flag} " \
+            "#{config_parallelism_flag} " \
+            "-refresh=true " \
+            "#{config_variables_flags} " \
+            "#{config_variable_files_flags} " \
+            "#{config_root_module_directory}",
+        duration: config_command_timeout,
+        logger: logger
       )
-      .bind do |created_directories|
-        logger.debug created_directories
-        ::Kitchen::Terraform::ClearDirectory
-          .call(
-            directory: instance_directory,
-            files: [
-              "*.tf",
-              "*.tf.json"
-            ]
-          )
-      end
-      .bind do |cleared_directory|
-        Right logger.debug cleared_directory
-      end
   end
 
-  # The driver removes the instance directory.
-  #
   # @api private
-  # @see ::FileUtils.remove_dir
-  # @see ::Kitchen::Driver::Terraform#instance_directory
-  def remove_instance_directory
-    Try do
-      ::FileUtils.remove_dir instance_directory
-    end
-      .to_either
+  def apply_run_get
+    ::Kitchen::Terraform::ShellOut
+      .run(
+        command: "get -update #{config_root_module_directory}",
+        duration: config_command_timeout,
+        logger: logger
+      )
   end
 
-  # Runs a Terraform Client command shell out with the default logger and the configured timeout.
-  #
   # @api private
-  # @param result [::Dry::Monads::Either] the result of a shell out creation
-  # @return [::Dry::Monads::Either] the result of running the shell out
-  def run(result:)
-    result
-      .bind do |shell_out|
-        ::Kitchen::Terraform::Client::Command
-          .run(
-            logger: logger,
-            shell_out: shell_out,
-            timeout: config_command_timeout
-          )
+  def apply_run_output
+    ::Kitchen::Terraform::ShellOut
+      .run(
+        command: "output -json",
+        duration: config_command_timeout,
+        logger: logger
+      )
+      .bind do |output|
+        Try ::JSON::ParserError do
+          ::JSON.parse output
+        end
+          .to_either
+          .or do |error|
+            Left "Parsing Terraform output as JSON failed: #{error}"
+          end
       end
   end
 
-  # Runs the Terraform Client apply subcommand.
-  #
   # @api private
-  # @return [::Dry::Monads::Either] the result of the apply subcommand.
-  # @see ::Kitchen::Terraform::Client::Command.apply
-  def run_apply
-    run(
-      result:
-        ::Kitchen::Terraform::Client::Command
-          .apply(
-            options:
-              ::Kitchen::Terraform::Client::Options
-                .new
-                .enable_lock
-                .lock_timeout(duration: config_lock_timeout)
-                .disable_input
-                .enable_auto_approve
-                .maybe_no_color(toggle: !config_color)
-                .parallelism(concurrent_operations: config_parallelism)
-                .enable_refresh
-                .state(path: config_state)
-                .state_out(path: config_state)
-                .vars(keys_and_values: config_variables)
-                .var_files(paths: config_variable_files),
-            working_directory: instance_directory
-          )
-    )
+  def apply_run_workspace_select_instance
+    ::Kitchen::Terraform::ShellOut
+      .run(
+        command: "workspace select kitchen-terraform-#{instance.name}",
+        duration: config_command_timeout,
+        logger: logger
+      )
   end
 
-  # Runs the Terraform Client destroy subcommand.
-  #
   # @api private
-  # @return [::Dry::Monads::Either] the result of the destroy subcommand.
-  # @see ::Kitchen::Terraform::Client::Command.destroy
-  def run_destroy
-    run(
-      result:
-        ::Kitchen::Terraform::Client::Command
-          .destroy(
-            options:
-              ::Kitchen::Terraform::Client::Options
-                .new
-                .enable_lock
-                .lock_timeout(duration: config_lock_timeout)
-                .disable_input
-                .maybe_no_color(toggle: !config_color)
-                .parallelism(concurrent_operations: config_parallelism)
-                .enable_refresh
-                .state(path: config_state)
-                .state_out(path: config_state)
-                .vars(keys_and_values: config_variables)
-                .var_files(paths: config_variable_files)
-                .force,
-            working_directory: instance_directory
-          )
-    )
+  def apply_run_validate
+    ::Kitchen::Terraform::ShellOut
+      .run(
+        command:
+          "validate " \
+            "-check-variables=true " \
+            "#{config_color_flag} " \
+            "#{config_variables_flags} " \
+            "#{config_variable_files_flags} " \
+            "#{config_root_module_directory}",
+        duration: config_command_timeout,
+        logger: logger
+      )
   end
 
-  # Runs the Terraform Client init subcommand.
-  #
   # @api private
-  # @return [::Dry::Monads::Either] the result of the init subcommand.
-  # @see ::Kitchen::Terraform::Client::Command.init
-  def run_init
-    run(
-      result:
-        ::Kitchen::Terraform::Client::Command
-          .init(
-            options:
-              ::Kitchen::Terraform::Client::Options
-                .new
-                .disable_input
-                .enable_lock
-                .lock_timeout(duration: config_lock_timeout)
-                .maybe_no_color(toggle: !config_color)
-                .upgrade
-                .from_module(source: config_directory)
-                .enable_backend
-                .force_copy
-                .backend_configs(keys_and_values: config_backend_configurations)
-                .enable_get
-                .maybe_plugin_dir(path: config_plugin_directory)
-                .verify_plugins(toggle: config_verify_plugins),
-            working_directory: instance_directory
-          )
-    )
+  def create_run_init
+    ::Kitchen::Terraform::ShellOut
+      .run(
+        command:
+          "init " \
+            "-input=false " \
+            "-lock=true " \
+            "#{config_lock_timeout_flag} " \
+            "#{config_color_flag} " \
+            "-upgrade " \
+            "-force-copy " \
+            "-backend=true " \
+            "#{config_backend_configurations_flags} " \
+            "-get=true " \
+            "-get-plugins=true " \
+            "#{config_plugin_directory_flag} " \
+            "-verify-plugins=true " \
+            "#{config_root_module_directory}",
+        duration: config_command_timeout,
+        logger: logger
+      )
   end
 
-  # Runs the Terraform Client output subcommand.
-  #
   # @api private
-  # @return [::Dry::Monads::Either] the result of the init subcommand.
-  # @see ::Kitchen::Terraform::Client::Command.output
-  def run_output
-    run(
-      result:
-        ::Kitchen::Terraform::Client::Command.output(
-          options:
-            ::Kitchen::Terraform::Client::Options
-              .new
-              .json
-              .state(path: config_state),
-          working_directory: instance_directory
-        )
-    )
+  def create_run_workspace_new_instance
+    ::Kitchen::Terraform::ShellOut
+      .run(
+        command: "workspace new kitchen-terraform-#{instance.name}",
+        duration: config_command_timeout,
+        logger: logger
+      )
   end
 
-  # Runs the Terraform Client validate subcommand.
-  #
   # @api private
-  # @return [::Dry::Monads::Either] the result of the validate subcommand.
-  # @see ::Kitchen::Terraform::Client::Command.validate
-  def run_validate
-    run(
-      result:
-        ::Kitchen::Terraform::Client::Command
-          .validate(
-            options:
-              ::Kitchen::Terraform::Client::Options
-                .new
-                .enable_check_variables
-                .maybe_no_color(toggle: !config_color)
-                .vars(keys_and_values: config_variables)
-                .var_files(paths: config_variable_files),
-            working_directory: instance_directory
-          )
-    )
+  def create_run_workspace_select_instance
+    ::Kitchen::Terraform::ShellOut
+      .run(
+        command: "workspace select kitchen-terraform-#{instance.name}",
+        duration: config_command_timeout,
+        logger: logger
+      )
   end
 
-  # Runs the Terraform Client version subcommand.
-  #
   # @api private
-  # @return [::Dry::Monads::Either] the result of the version subcommand.
-  # @see ::Kitchen::Terraform::Client::Command.version
-  def run_version
-    run result: ::Kitchen::Terraform::Client::Command.version(working_directory: config.fetch(:kitchen_root))
+  def destroy_run_destroy
+    ::Kitchen::Terraform::ShellOut
+      .run(
+        command:
+          "destroy " \
+            "-force " \
+            "-lock=true " \
+            "#{config_lock_timeout_flag} " \
+            "-input=false " \
+            "#{config_color_flag} " \
+            "#{config_parallelism_flag} " \
+            "-refresh=true " \
+            "#{config_variables_flags} " \
+            "#{config_variable_files_flags} " \
+            "#{config_root_module_directory}",
+        duration: config_command_timeout,
+        logger: logger
+      )
   end
 
-  # Memoizes the path to the Test Kitchen suite instance directory at `.kitchen/kitchen-terraform/<suite>-<platform>`.
-  #
   # @api private
-  # @return [::String] the path to the Test Kitchen suite instance directory.
-  def instance_directory
-    @instance_directory ||= instance_pathname filename: "/"
+  def destroy_run_init
+    ::Kitchen::Terraform::ShellOut
+      .run(
+        command:
+          "init " \
+            "-input=false " \
+            "-lock=true " \
+            "#{config_lock_timeout_flag} " \
+            "#{config_color_flag} " \
+            "-force-copy " \
+            "-backend=true " \
+            "#{config_backend_configurations_flags} " \
+            "-get=true " \
+            "-get-plugins=true " \
+            "#{config_plugin_directory_flag} " \
+            "-verify-plugins=true " \
+            "#{config_root_module_directory}",
+        duration: config_command_timeout,
+        logger: logger
+      )
   end
 
-  # 1. Prepares the instance directory
-  # 2. Executes `terraform init` in the instance directory
-  # 3. Executes `terraform validate` in the instance directory
-  # 4. Executes a provided subcommand in the instance directory
-  #
   # @api private
-  # @raise [::Kitchen::ActionFailed] if the result of the action is a failure.
-  # @see ::Kitchen::Driver::Terraform#prepare_instance_directory
-  # @see ::Kitchen::Driver::Terraform#run_init
-  # @see ::Kitchen::Driver::Terraform#run_validate
-  # @yieldreturn [::Dry::Monads::Either] the result of a Terraform Client subcommand.
-  def workflow
-    prepare_instance_directory
-      .bind do
-        run_init
-      end
-      .bind do
-        run_validate
-      end
-      .bind do
-        yield
-      end
-      .or do |failure|
-        raise(
-          ::Kitchen::ActionFailed,
-          failure
-        )
-      end
+  def destroy_run_workspace_delete_instance
+    ::Kitchen::Terraform::ShellOut
+      .run(
+        command: "workspace delete kitchen-terraform-#{instance.name}",
+        duration: config_command_timeout,
+        logger: logger
+      )
+  end
+
+  # @api private
+  def destroy_run_workspace_new_instance
+    ::Kitchen::Terraform::ShellOut
+      .run(
+        command: "workspace new kitchen-terraform-#{instance.name}",
+        duration: config_command_timeout,
+        logger: logger
+      )
+  end
+
+  # @api private
+  def destroy_run_workspace_select_default
+    ::Kitchen::Terraform::ShellOut
+      .run(
+        command: "workspace select default",
+        duration: config_command_timeout,
+        logger: logger
+      )
+  end
+
+  # @api private
+  def destroy_run_workspace_select_instance
+    ::Kitchen::Terraform::ShellOut
+      .run(
+        command: "workspace select kitchen-terraform-#{instance.name}",
+        duration: config_command_timeout,
+        logger: logger
+      )
   end
 end