czhujer / tf-controller

A GitOps Terraform controller for Kubernetes

Weave GitOps Terraform Controller

Weave GitOps Terraform Controller (aka Weave TF-controller) is a controller for Flux to reconcile Terraform resources in the GitOps way. With the power of Flux together with Terraform, TF-controller allows you to GitOps-ify infrastructure, and application resources, in the Kubernetes and Terraform universe, at your own pace.

"At your own pace" means you don't need to GitOps-ify everything at once.

TF-controller offers many GitOps models:

1. GitOps Automation Model: GitOps your Terraform resources from the provision steps to the enforcement steps, like a whole EKS cluster.
2. Hybrid GitOps Automation Model: GitOps parts of your existing infrastructure resources. For example, you have an existing EKS cluster. You can choose to GitOps only its nodegroup, or its security group.
3. State Enforcement Model: You have a TFSTATE file, and you'd like to use GitOps enforce it, without changing anything else.
4. Drift Detection Model: You have a TFSTATE file, and you'd like to use GitOps just for drift detection, so you can decide to do things later when a drift occurs.

Quickstart and documentation

To get started check out this guide on how to GitOps your Terraform resources with TF-controller and Flux.

Check out the documentation for a list of features and use cases.

Roadmap

Q3 2022

• Performance
• Scalability
• Interop with Notification controller's Events and Alert
• Validation webhooks for the planning stage

Q4 2022

• Selectable Terraform versions
• CLI to GitOpsify existing Terraform workflows
• Cloud cost estimation
• CRD wrappers for Terraform modules

Q1 2023

• Enhanced security (the lockdown mode)
• External drift detector
• Typesafety for custom backends
• v1alpha2 API

Q2 2023

• Write back and show plan in PRs
• ARM64 & Gravitron support
• Containerd compatibility

Q3 2023

• v1beta1 API (stabilization)