| terraform_version | Workspace Terraform version. This can be either an exact version or a version constraint (like ~> 1.0.0). | — | 1 |
| terraform_token | Terraform Cloud token. | yes | — |
| terraform_host | Terraform Cloud host. | — | app.terraform.io |
| terraform_organization | Terraform Cloud organization. | yes | — |
| tfe_provider_version | Terraform Cloud provider version. | — | 0.30.2 |
| name | Name of the workspace. Becomes a prefix if workspaces are passed (`${name}-${workspace}`). | — | ${{ github.event.repository.name }} |
| description | Terraform Cloud workspace description | — | ${{ github.event.repository.description }} |
| tags | YAML encoded list of tag names applied to all workspaces | — | "" |
| workspace_tags | YAML encoded map of workspace names to a list of tag names, which are applied to the specified workspace | — | "" |
| runner_terraform_version | Terraform version used in GitHub Actions to manage the workspace and related resources. | — | 1.1.8 |
| workspaces | YAML encoded list of workspace names. | — | "" |
| backend_config | YAML encoded backend configurations. | — | — |
| apply | Whether to apply the proposed Terraform changes. | yes | — |
| import | Whether to import existing matching resources from the Terraform Cloud organization. | — | true |
| variables | YAML encoded variables to apply to all workspaces. | — | "" |
| workspace_variables | YAML encoded map of variables to apply to specific workspaces, with each key corresponding to a workspace. | — | "" |
| vcs_type | Terraform VCS type (e.g., "github"). Superseded by `vcs_token_id`. If neither are passed, no VCS integration is added. | no | — |
| vcs_token_id | Terraform VCS client token ID. Takes precedence over `vcs_name`. If neither are passed, no VCS integration is added. | — | — |
| vcs_repo | Repository identifier for a VCS integration. | — | ${{ github.repository }} |
| vcs_ingress_submodules | Whether to allow submodule ingress. | — | false |
| working_directory | A relative path that Terraform will execute within. Defaults to the root of your repository. | — | — |
| agent_pool_id | ID of an agent pool to assign to the workspace. If passed, execution_mode is set to "agent". | — | — |
| execution_mode | Execution mode to use for the workspace. | — | remote |
| global_remote_state | Whether all workspaces in the organization can access the workspace via remote state. | — | false |
| remote_state_consumer_ids | Comma separated list of workspace IDs to allow read access to the workspace outputs. | — | "" |
| auto_apply | Whether to set auto_apply on the workspace or workspaces. | — | true |
| queue_all_runs | Whether the workspace should start automatically performing runs immediately after creation. | — | — |
| speculative_enabled | Whether the workspace allows speculative plans. | — | — |
| ssh_key_id | SSH key ID to assign the workspace. | — | — |
| file_triggers_enabled | Whether to filter runs based on the changed files in a VCS push. | — | — |
| remote_states | YAML encoded remote state blocks to configure in the workspace. | — | — |
| team_access | YAML encoded teams and their associated permissions to be granted to the created workspaces. | no | — |
| allow_workspace_deletion | Whether to allow workspaces to be deleted. If enabled, workspace state may be irrecoverably deleted. | — | false |
| run_triggers | YAML encoded list of either workspace IDs or names that, when applied, trigger runs in all the created workspaces (max 20) | — | — |
| workspace_run_triggers | A YAML encoded map of workspaces to workspace IDs or names, which like `run_triggers`, will trigger a run for the associated workspace when the source workspace is ran | — | — |
| notification_configuration | A YAML encoded map of notification settings applied to all created workspaces | — | — |