opentofu

Name: opentofu
Author: oakoss

github.com/oakossCloud & DevOps20141 installsUpdated 10w ago

About opentofu

opentofu is a skill for declaratively managing cloud infrastructure with HCL, intended for infrastructure engineers and cloud resource workflows. It covers planning, provisioning, state management, and encryption, and also includes IaC references for Pulumi.

Key features

01Manages infrastructure declaratively with HCL
02Plans, applies, and destroys resources
03Manages remote state and workspaces
04Reuses infrastructure configuration through modules
05References Pulumi projects and automation patterns

Use cases

01Provisioning multi-cloud resources
02Isolating state across environments
03Bringing existing resources under management
04Reviewing infrastructure changes in CI/CD

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/oakoss/agent-skills --skill opentofu

After installing, type/opentofuin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

references/

cicd-integration.md

hcl-fundamentals.md

import-migration.md

modules.md

pulumi-sdk.md

pulumi-stacks.md

state-encryption.md

state-management.md

variables-outputs.md

workspaces.md

Details

From the project README

OpenTofu

Overview

OpenTofu is an open-source infrastructure as code tool that uses HCL (HashiCorp Configuration Language) to declaratively manage cloud infrastructure. It is a community-driven fork of Terraform, fully compatible with existing Terraform providers and modules, with exclusive features like native state encryption. Pulumi provides an alternative IaC approach using general-purpose languages (TypeScript, Python, Go) instead of HCL.

When to use: Managing cloud infrastructure declaratively, provisioning multi-cloud resources, enforcing infrastructure consistency across environments, encrypting state at rest (OpenTofu), using familiar programming languages for IaC (Pulumi).

When NOT to use: One-off scripts better suited to CLI tools, application-level configuration management (use Ansible/Chef), container orchestration logic (use Kubernetes manifests), simple static hosting (use platform-native tools).

Quick Reference

Pattern	Tool / Command	Key Points
Initialize project	`tofu init`	Downloads providers, initializes backend
Preview changes	`tofu plan`	Shows diff without applying
Apply changes	`tofu apply`	Provisions/updates resources
Destroy resources	`tofu destroy`	Tears down managed infrastructure
Import resource	`tofu import <addr> <id>`	Brings existing resource under management
State encryption	`terraform.encryption` block	OpenTofu-exclusive, AES-GCM with key providers
Remote backend	`backend "s3"` / `backend "gcs"`	Store state in cloud storage with locking
Workspaces	`tofu workspace new <name>`	Isolated state per environment
Module usage	`module "name" { source = "..." }`	Reusable infrastructure components
Output values	`output "name" { value = ... }`	Expose values for other configs or CI
Variable files	`terraform.tfvars` / `-var-file`	Environment-specific variable overrides
Pulumi new project	`pulumi new typescript`	Scaffold TypeScript IaC project
Pulumi preview	`pulumi preview`	Shows planned changes
Pulumi deploy	`pulumi up`	Provisions/updates resources
Pulumi config	`pulumi config set key value`	Stack-scoped configuration
Pulumi secrets	`pulumi config set --secret key val`	Encrypted config values
Pulumi stacks	`pulumi stack select <name>`	Switch between environments
Automation API	`LocalWorkspace.createOrSelectStack()`	Programmatic stack management

Common Mistakes

Mistake	Correct Pattern
Storing state locally in team environments	Configure remote backend (S3, GCS, Azure Blob) with state locking
Hardcoding provider credentials in HCL	Use environment variables or provider-specific auth chains
Using `tofu apply` without reviewing plan	Run `tofu plan -out=plan.tfplan` then `tofu apply plan.tfplan`
Editing state manually	Use `tofu state mv`, `tofu state rm`, or `tofu import`
Ignoring `.terraform.lock.hcl`	Commit lock file for reproducible provider versions
Using `count` for complex conditional resources	Prefer `for_each` with maps for stable resource addressing
Sharing one workspace for all environments	Use separate workspaces or backend config per environment
Putting secrets in `terraform.tfvars`	Use `sensitive = true` variables, vault, or environment variables
Pulumi: creating resources outside component classes	Wrap related resources in ComponentResource for reuse
Pulumi: not awaiting async operations	Ensure all resource operations complete before stack export
Skipping `tofu plan` in CI/CD	Always plan and require approval before apply in pipelines
Not using `-target` carefully	Prefer full plans; `-target` can leave state inconsistent

Delegation

Infrastructure pattern discovery: Use Explore agent
IaC code review: Use Task agent
Drift detection analysis: Use Task agent

If the amazon-web-services skill is available, delegate AWS resource patterns to it. If the docker skill is available, delegate container infrastructure patterns to it. If the github-actions skill is available, delegate CI/CD pipeline patterns to it.

References

Comments

Markdown supported

Details

Author: oakoss
Repository: oakoss/agent-skills
Category: Cloud & DevOps
Installs: 141
GitHub stars: 20

Report

More skills

All skills

lark-apps

open.feishu.cn

732.0k

Develop and host Miaoda (Spark/Miaoda) apps: app creation, local full-stack development, cloud generation and iteration, creative design (UI mockups / interactive prototypes / wireframes / landing pages / dashboards / slide decks / visual exploration), integration of AI-related capabilities, Feishu platform capabilities, or other external capabilities; log/Trace/monitoring metric/PV/UV queries; environment variable management; app collaborators and collaboration permissions; app roles and members; and automation triggers (scheduled / record changes / Webhook / Feishu approvals). Use when users want to develop or create a system, tool, platform, or app; develop locally or in the cloud, modify, deploy, publish, launch, or get a shareable link; create a page or website with HTML and deploy it to Miaoda; design, create a mockup, prototype, wireframe, PPT, deck, or visual exploration; or mention Miaoda/Spark/Miaoda apps (links like `/app/app_xxx` or `/page/<token>`, runtime domains like *.aiforce.cloud), app databases, app file storage, open API Keys, visibility, app collaborators/developer permissions, app roles/role members, production logs, API request volume, error volume, latency, traffic, environment variables, or setting up automation tasks, scheduled triggers, or approval-triggered automation for Miaoda apps. Not for regular cloud drive file uploads (lark-drive), Feishu document editing (lark-doc), or native slide creation (lark-slides).

azure-prepare

github.com/microsoft

571.7k

Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure.

wizard

github.com/mattpocock

571.5k

Generate an interactive bash wizard that walks a human through steps only they can perform. Use when provisioning infrastructure, setting up credentials or CI secrets, walking an unfamiliar third-party dashboard, or running a one-off migration or cutover. Don't invoke this for steps the agent can perform itself.

azure-ai

github.com/microsoft

571.2k

Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybrid search, speech-to-text, text-to-speech, transcription, OCR. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, OCR, convert text to speech.