Version 1.7 of the OpenTofu project has been released, continuing the development of the open-source codebase for configuration management and infrastructure automation for Terraform. OpenTofu is being developed under the auspices of the Linux Foundation using an open management model with participation from a community formed by companies and enthusiasts interested in the project (161 companies and 792 individual developers have announced support for the project). The project's code is written in Go and is distributed under the MPL 2.0 license.
The fork was created in response to HashiCorp's transition of its products to the proprietary BSL 1.1 license, which restricts the use of the code in cloud systems that compete with HashiCorp's products and services. The change in licensing is explained by the desire to maintain funding for its developments in the face of the inability of traditional licensing models to counteract companies that parasitize on HashiCorp's open-source projects to create their own commercial cloud products without participating in joint development.
The platform can be used to build, modify, and version infrastructure according to the infrastructure-as-code concept, where system configurations are described in a high-level domain-specific language and processed similarly to code. OpenTofu supports the construction of a resource graph that defines all relationships between resources for efficient parallelization of operations on resources and for making changes with consideration of dependencies.
OpenTofu also allows the generation of an execution plan based on a given configuration, enabling the assessment of actions on the infrastructure before they are actually applied. Complex changes to infrastructure can be made automatically, with minimal administrator involvement, helping to avoid many errors caused by human factors. Meanwhile, the administrator can fully track what exactly will be changed and in what order, using the provided execution plan and resource graph.
Among the changes in version OpenTofu 1.7:
- Möjlighet att skydda viktiga tillstÄndsdata med hjÀlp av end-to-end-kryptering. Krypteringen gör det möjligt att förhindra obehörig Ätkomst till dessa data nÀr man anvÀnder osÀkra lagringsbackends. Lösenord för kryptering kan anges med hjÀlp av miljövariabler eller nyckelhanteringssystem som AWS KMS, GCP KMS och OpenBao.
- Stöd för dynamiska funktioner som definieras av leverantören. Denna möjlighet gör det möjligt för leverantören att erbjuda inte bara resurser, utan Àven funktioner för anvÀndning i OpenTofu-koden. Dessutom kan funktioner definieras dynamiskt av leverantören beroende pÄ anvÀndarens konfiguration. Stöd för den presenterade funktionen har redan lagts till i experimentella leverantörer för Lua och Go.
- Deklarativa raderingsoperationer har implementerats, vilket gör det möjligt att markera en resurs för borttagning frÄn tillstÄndsfilen men behÄlla den i den skapade infrastrukturen.
- Möjlighet att anvÀnda 'for_each'-loopar i block som genomför import för att förenkla importen av flera typiska resurser.
KĂ€lla: opennet.ru
