OpenTofu Workshop – Overview
Overview
This workshop covers the path from fundamentals to advanced IaC operations and security hardening. Its structure follows the Kubernetes workshop: reference documents, four workshop levels, exercises, assessments, solutions, official sources and 31 practical examples.
The focus is realistic OpenTofu practice:
- understand HCL, root modules, providers, resources, data sources, variables and outputs
- reason about plan, apply, state, backend and locking
- apply modules, dependencies, refactoring, import and tests safely
- design CI/CD, TACOS, policy as code, drift and promotion
- assess state security, secrets, provider pinning, supply chain and least privilege
- structure incident response for state issues, drift and credential leaks
Quickstart
# Workshop content is provided through the Orthevs Academy.
chmod +x scripts/provision_opentofu.sh
./scripts/provision_opentofu.sh --dry-run
Then check local tooling:
tofu version || true
git --version
python3 --version
Learning Path
| Level | Focus | Workshop | Exercises | Assessment |
|---|---|---|---|---|
| 01 | Fundamentals | Fundamentals Workshop | Fundamentals Exercises | Fundamentals Assessment |
| 02 | Intermediate | Intermediate Workshop | Intermediate Exercises | Intermediate Assessment |
| 03 | Professional | Professional Workshop | Professional Exercises | Professional Assessment |
| 04 | Advanced Security | Advanced Security Workshop | Advanced Security Exercises | Advanced Security Assessment |
Documentation
Examples
The examples are listed in examples/README.md. Every example contains a main description, a German detail page, an English detail page, validatable HCL/JSON/policy artifacts and a run.sh that creates a local IaC lab under work/.
Security Rule
OpenTofu state can contain sensitive data. Do not use real cloud credentials, production backends or real secret values in this workshop. Example configurations are meant for local structure and review exercises.
Official Sources and Scope
The material is aligned with public OpenTofu documentation. Cloud providers, TACOS platforms, policy engines and secret tools are mentioned only where they explain common OpenTofu workflows. Example artifacts are not instructions to execute against production cloud accounts.
- OpenTofu: https://opentofu.org/
- OpenTofu Language Documentation: https://opentofu.org/docs/language/
- Provider Requirements: https://opentofu.org/docs/language/providers/requirements/
- State: https://opentofu.org/docs/language/state/
- Backend Configuration: https://opentofu.org/docs/language/settings/backends/configuration/
- OpenTofu v1.x Compatibility Promises: https://opentofu.org/docs/language/v1-compatibility-promises/
- OpenTofu at CNCF: https://www.cncf.io/projects/opentofu/
- Linux Foundation: Getting Started with OpenTofu: https://training.linuxfoundation.org/express-learning/getting-started-with-opentofu-lfel1009/
- Linux Foundation Certification Catalog: https://training.linuxfoundation.org/certification-catalog/
License
See LICENSE.md.