Kubernetes Podcast from Google - Episode Summary: "OpenTofu, with Ohad Maislish"

Release Date: August 6, 2024

Introduction

In this episode of the Kubernetes Podcast from Google, hosts Abdel Sghiouar and Kaslin Fields delve into the evolving landscape of infrastructure as code (IaC) with a special focus on OpenTofu. The episode features an insightful conversation with Ohad Maislish, CEO and co-founder of Envzero, and a pivotal figure behind the OpenTofu project. Throughout the discussion, Abdel and Kaslin explore the origins, development, and future prospects of OpenTofu within the Kubernetes and broader cloud-native ecosystems.

News Highlights

Before diving into the guest interview, Abdel and Kaslin share the latest updates from the Kubernetes community:

1. Kubernetes Version 1.31 Removals and Major Changes

   • Abdel (00:32): "The Kubernetes Removals and Major Changes blog for version 1.31 is out, with the release expected in the second week of August. The blog highlights two deprecations and four removals."
   • Key updates include the removal of previously integrated cloud provider features and two storage volume plugins, with Container Storage Interface (CSI) drivers recommended as replacements.
   • Kaslin (00:32): "Make sure you check out the blog for an overview of the deprecations and removals in Kubernetes version 1.31 and watch out for feature blogs diving deeper into 1.31 over the coming weeks."

2. GKE Extended Support

   • Abdel (01:20): "Announced GKE Extended Support users can benefit from an additional 10 months of security patches to their Kubernetes clusters, which fall out of upstream standard support period of one year."
   • This extended support comes at an additional cost of $0.05 per hour plus a $0.01 management fee charged by GKE.

3. Cloud Native Computing Foundation (CNCF) Update

   • Kaslin (01:39): "The Cloud Native Computing foundation announced Bob Killen has joined as a Senior Technical Program Manager."
   • Bob Killen is recognized for his contributions to Kubernetes SIG Contributor Experience and his friendship with the podcast hosts.

4. Microsoft Azure Container Storage

   • Abdel (02:00): "The CNCF Microsoft announced the general availability of Microsoft Azure Container Storage, a platform-managed Container native storage service."
   • This service introduces Storage Pools, offering an abstraction layer between persistent volumes and various backend storage options.

5. Cloud Native Glossary in Turkish

   • Kaslin (02:31): "The Cloud Native Glossary is now available in Turkish. The community worked for over eight months to translate around 20 pages of the Glossary to Turkish, a language spoken by over 100 million people around the world."

Interview with Ohad Maislish

Introduction to Ohad

Kaslin (02:31) warmly welcomes Ohad Maislish to the show, highlighting his dual roles:

• CEO and Co-founder of Envzero, an IaC management platform.
• Co-founder and supporter of OpenTofu, an open-source project under the Linux Foundation.

Ohad (02:57): "I'm one of the co-founders of the famous Open Source project and a new Open Source project less than a year named OpenTofu, backed by the Linux Foundation."

Background and Origins of OpenTofu

Kaslin (07:21) prompts Ohad to elaborate on OpenTofu.

Ohad (07:32) outlines the genesis of OpenTofu:

• Infrastructure as Code Evolution: The shift from manual provisioning (e.g., clicking buttons in AWS or GCP) to code-based infrastructure management.
• Terraform Fork: In August 2023, HashiCorp changed Terraform's licensing from an open-source license to a business license with limitations. This decision prompted Ohad and others to fork Terraform, leading to the creation of OpenTofu.

Ohad (08:22): "OpenTofu is a fork of the Terraform project and it continues to have its own features with compatibility or almost full compatibility with the Terraform project."

Relationship with Linux Foundation and CNCF

Kaslin (04:26) seeks clarity on OpenTofu's association with the Linux Foundation and CNCF.

Ohad (04:27) explains:

• CNCF is a sub-foundation within the larger Linux Foundation.
• OpenTofu is currently managed by the Linux Foundation with plans to join CNCF, pending license compatibility ("we forked an MPL license, the default in the CNCF is Apache license").

Ohad (05:25): "Linux foundation is a very big foundation and has several sub-foundations. The most known obviously is the CNCF, but it's not the only one."

Community and Company Support

Kaslin (10:44) inquires about the support OpenTofu has garnered.

Ohad (11:14) details the backing:

• Supportive Companies: Envzero, Harness, Spacelift, Scalyr, and Gruntwork are among the companies dedicating developers to OpenTofu.
• Community Contributions: Beyond corporate support, a vibrant community contributes daily, enhancing the project's robustness.

Ohad (11:14): "We have full-time employees that do nothing but coding, OpenTofu and Code and Pull request."

Project Maturity and Releases

Kaslin (12:43) asks about OpenTofu's maturity and recent releases.

Ohad (13:45) provides a roadmap:

• Version 1.6: Released in January 2024, aligning closely with Terraform 1.6.
• Version 1.7: Released in late April or early May 2024, introduced state encryption, addressing a top-voted Terraform issue.
• Version 1.8: Release candidate available in late July 2024, featuring early evaluation of variables within modules.

Ohad (13:59): "OpenTofu 1.7 includes the long awaited state encryption... we just released the Release candidate for 1.8."

User Adoption and Feedback

Kaslin (16:54) inquires about user adoption.

Ohad (17:08) shares encouraging metrics:

• Community Engagement: Thousands of users active on Slack, numerous stars on GitHub (~22k).
• Recognition from AWS: AWS acknowledged OpenTofu in their support for the Valkey project, highlighting its "vendor-neutral community-led" approach.

Ohad (18:35): "We have great developers from the community that contribute code on a daily basis... user adoption is growing."

Open Source Governance and Process

Kaslin (20:23) explores the project's governance.

Ohad (22:27) emphasizes:

• Guidance from Linux Foundation and Gruntwork: Adopted best practices for open governance and community engagement.
• Community-Driven Development: Regular Requests for Proposals (RFPs) and active discussions ensure that community needs shape the project's direction.

Ohad (22:27): "We would not be where we are if it wasn't for them [Linux Foundation and Gruntwork]."

Getting Involved

Kaslin (24:07) asks how listeners can contribute or learn more.

Ohad (24:39) provides resources:

• Website: opentofu.org
• GitHub Repository: Featuring extensive documentation and contribution guidelines.
• Slack Workspace: Active channels for discussion, support, and collaboration.

Ohad (24:39): "opentofu.org, the Slack workspace and definitely the GitHub project that I didn't mention but I think already has like 22 or something. Thousand stars."

OpenTofu Day Events at Kubecon

Kaslin (25:26) inquires about OpenTofu's involvement in Kubecon events.

Ohad (25:46) highlights:

• OpenTofu Days: Held alongside Kubecon, providing deep dives and sessions on infrastructure as code.
• Collaboration with Atlantis Project: Demonstrates integration with tools like Atlantis, enhancing GitOps workflows.

Ohad (26:54): "Atlantis was a great session in Kubecon and... other projects start supporting OpenTofu."

Future Plans and Innovations

Kaslin (27:39) asks about forthcoming features and project trajectory.

Ohad (20:23) states:

• Continuous Innovation: Upcoming versions will introduce more unique features beyond governance and licensing.
• Community-Driven Priorities: Future developments are heavily influenced by community feedback and needs.

Ohad (20:23): "We have an open discussion about the requests... it's like a baby that grew into, I don't know, a man or a woman and now walking, talking thing."

Hosts' Reflections and Additional Insights

After the interview, Abdel and Kaslin share their personal viewpoints:

• Abdel's Perspective:

  • Abdel (30:00): "I have been wanting to actually talk to somebody about OpenTofu for a while."
  • Expresses mixed feelings about Terraform, preferring alternatives like Pulumi or Bash scripts.

• Kaslin's Thoughts:

  • Kaslin (29:25) acknowledges familiarity with Terraform but appreciates the evolution of IaC tools.
  • Enthusiastic about the expanding ecosystem and the role of OpenTofu in offering alternatives.

• Discussion on Open Source Forks:

  • The hosts reflect on the significance of projects like OpenTofu and Valkey, emphasizing the strength and adaptability of the open-source community.

Conclusion

The episode underscores the dynamic nature of the infrastructure as code landscape, highlighting OpenTofu as a robust, community-driven alternative to Terraform. Ohad Maislish's insights reveal a project poised for significant growth, supported by both corporate backing and a passionate open-source community. Listeners interested in contributing or learning more are encouraged to visit opentofu.org, join the Slack workspace, or explore the GitHub repository. Additionally, upcoming OpenTofu Day events at Kubecon offer opportunities for deeper engagement and learning.

Kaslin (38:08) wraps up: "If you're interested in learning more about how OpenTofu enables infrastructure as code open source, make sure you check out the website, the Slack and the GitHub repo and we'll have those links in the show notes."

Notable Quotes

• Ohad (07:32): "OpenTofu is a fork of the Terraform project and it continues to have its own features with compatibility or almost full compatibility with the Terraform project."

• Ohad (11:14): "We have full-time employees that do nothing but coding, OpenTofu and Code and Pull request."

• Ohad (13:45): "OpenTofu 1.7 includes the long awaited state encryption... we just released the Release candidate for 1.8."

• Ohad (17:08): "We see that the community really really wants to influence the architecture or the future of that project."

• Ohad (22:27): "We would not be where we are if it wasn't for [Linux Foundation and Gruntwork]."

Resources

• OpenTofu Website: opentofu.org
• OpenTofu GitHub Repository: GitHub - OpenTofu
• OpenTofu Slack Workspace: Accessible via the OpenTofu website
• AWS Valkey Announcement: Referenced in the show notes

For more detailed discussions and updates, listeners are encouraged to visit the podcast's official website at kubernetespodcast.com and follow the hosts on Twitter @KubernetesPod.