CNCF-hosted Co-located Events North America 2024

Come learn about an exciting OpenTofu migration that my team and I executed on for one of our client's. We migrated our client, Power Digital Marketing, off of Terraform and Terraform Cloud and onto OpenTofu and Spacelift. This successful migration has some wildly successful outcomes with a 10x reduction in upcoming costs and a 10x decrease in the time it took for creating new client infrastructure through Power Digital's TF based process.

This talk will help attendees understand the benefits of OpenTofu, how to think about migrating, showcase a real-life example of Tofu in the wild, and further solidify that OpenTofu can be used successfully in production for big, mission-critical workloads.

In this presentation, we will cover how we built an internal Infrastructure as Code (IaC) Platform to support a growing user base with over 2,070 applications managing 46,430 workspaces. It is our goal to explore what it means to enable an IaC tool like OpenTofu in a way that promotes security and compliance while also offering quick and easy self-service solutions. We will also discuss how we are enabling existing Terraform users to use OpenTofu, and the strategies implemented to facilitate a seamless transition. Finally, we will highlight what kind of applications, provider/module catalogs, and observability tools that platform teams should consider when creating a developer centric ecosystem for OpenTofu. Attendees will take away a concrete road map for enabling OpenTofu across many different teams within an enterprise.

The problem: when managing OpenTofu configurations, a lot of manual work is involved. Will this update delete something it shouldn't? Was that cloud VM over-provisioned? Does this new resource follow the required naming convention?

The solution: set policies for OpenTofu state changes with policy-as-code, using Open Policy Agent (OPA).

In this session, attendees will:
- see how OPA's Rego policy language can prevent unwanted changes to their infrastructure
- learn how OpenTofu can inform OPA policy bundles to create dynamic policies
- watch a demo of an IaC deployment pipeline with policy enforcement and policy updates.

In modern infrastructure management, Terraform and now it's open source fork, OpenTofu, has emerged as a leading tool for Infrastructure as Code (IaC), enabling efficient and reproducible infrastructure deployments.

This talk explores two distinct approaches to integrating OpenTofu into your deployment pipeline: the approve-before-merge approach using Atlantis and the traditional continuous deployment (CD) strategy where changes are applied post-merge.

We’ll delve into the workflows, benefits, and challenges of each method, examining how they handle collaboration, ensure compliance, and manage deployment risks. Attendees will gain insights into choosing the right strategy for their teams, balancing speed and safety in their Terraform deployments.