CNCF-hosted Co-located Events North America 2024

Developers often face challenges in reusing code and infrastructure across different projects, leading to duplication of effort and slower time-to-market. Platform engineering aims to solve this by providing a shared, standardized platform with reusable assets, automation, and governance, enabling faster development and delivery of applications.

Explore how OpenTofu Controller, in conjunction with Fluxv2 and GitOps principles, enables a seamless integration of infrastructure and application resources within a Kubernetes environment. We will dive into a real-world use case, showcasing the deployment of a multi-tenant SaaS platform on Kubernetes using OpenTofu Controller and Helm to consistently package reusable assets and deploy both application definitions and infrastructure components through a Git-centric workflow.

An overview of the history of OpenTofu and how highly competitive actors can come together to build a strong ecosystem and community with the right push.

How do you channel the outrage after a rug pull on an Open Source project into a successful fork and community? A situation developers and companies are faced with all too often these days. How did a group of companies which are direct and fierce competitors kick off this project? This talk offers an inside perspective into the challenges faced by OpenTofu over the past year and what paths we are taking to overcome them.

Today, there are three primary methods to manage your OpenTofu configurations and state across different environments (dev, int, prod): using separate configurations for each environment, leveraging workspaces, and employing the backend-config flag. I

n this talk, we'll explore the pros and cons of each approach and how the new Static Evaluation feature impacts and enhances these methods.

Additionally, we'll discuss versioning of OpenTofu modules, highlighting how the Static Evaluation feature simplifies the process and brings greater flexibility to module management. Join us to gain insights into optimizing your OpenTofu workflows and maximizing the full potential of Static Evaluation.

Come learn about an exciting OpenTofu migration that my team and I executed on for one of our client's. We migrated our client, Power Digital Marketing, off of Terraform and Terraform Cloud and onto OpenTofu and Spacelift. This successful migration has some wildly successful outcomes with a 10x reduction in upcoming costs and a 10x decrease in the time it took for creating new client infrastructure through Power Digital's TF based process.

This talk will help attendees understand the benefits of OpenTofu, how to think about migrating, showcase a real-life example of Tofu in the wild, and further solidify that OpenTofu can be used successfully in production for big, mission-critical workloads.

In this presentation, we will cover how we built an internal Infrastructure as Code (IaC) Platform to support a growing user base with over 2,070 applications managing 46,430 workspaces. It is our goal to explore what it means to enable an IaC tool like OpenTofu in a way that promotes security and compliance while also offering quick and easy self-service solutions. We will also discuss how we are enabling existing Terraform users to use OpenTofu, and the strategies implemented to facilitate a seamless transition. Finally, we will highlight what kind of applications, provider/module catalogs, and observability tools that platform teams should consider when creating a developer centric ecosystem for OpenTofu. Attendees will take away a concrete road map for enabling OpenTofu across many different teams within an enterprise.

The core developers in attendance will introduce themselves and briefly talk about their experience working on OpenTofu. We will then open the floor for questions related to all aspects of OpenTofu development.

The problem: when managing OpenTofu configurations, a lot of manual work is involved. Will this update delete something it shouldn't? Was that cloud VM over-provisioned? Does this new resource follow the required naming convention?

The solution: set policies for OpenTofu state changes with policy-as-code, using Open Policy Agent (OPA).

In this session, attendees will:
- see how OPA's Rego policy language can prevent unwanted changes to their infrastructure
- learn how OpenTofu can inform OPA policy bundles to create dynamic policies
- watch a demo of an IaC deployment pipeline with policy enforcement and policy updates.

In modern infrastructure management, Terraform and now it's open source fork, OpenTofu, has emerged as a leading tool for Infrastructure as Code (IaC), enabling efficient and reproducible infrastructure deployments.

This talk explores two distinct approaches to integrating OpenTofu into your deployment pipeline: the approve-before-merge approach using Atlantis and the traditional continuous deployment (CD) strategy where changes are applied post-merge.

We’ll delve into the workflows, benefits, and challenges of each method, examining how they handle collaboration, ensure compliance, and manage deployment risks. Attendees will gain insights into choosing the right strategy for their teams, balancing speed and safety in their Terraform deployments.