opentofu-provisioning-workflow-skill

OpenTofu Provisioning Workflow

What I do

I guide you through complete Infrastructure as Code (IaC) development workflows using OpenTofu. I help you:

• Resource Provisioning: Create, update, and manage infrastructure resources
• Lifecycle Management: Handle resource creation, modification, and deletion
• State Management: Maintain and troubleshoot Terraform state
• Best Practices: Apply IaC best practices from OpenTofu and Terraform documentation
• Dependency Management: Handle resource dependencies and ordering
• Validation and Planning: Ensure infrastructure changes are safe and predictable

When to use me

Use this skill when you need to:

• Create new infrastructure resources (VPCs, EC2, databases, etc.)
• Update existing infrastructure configurations
• Plan and preview infrastructure changes before applying
• Troubleshoot state issues or drift
• Implement infrastructure best practices and patterns
• Manage complex resource dependencies
• Perform safe infrastructure updates and rollbacks

Prerequisites

• OpenTofu CLI installed: Install from https://opentofu.org/docs/intro/install/
• Provider Configured: Complete opentofu-provider-setup skill first for provider authentication and state backend configuration
• Provider Authentication: Valid credentials for your cloud provider
• Understanding of HCL: HashiCorp Configuration Language basics
• State Backend: Remote state backend configured (S3, Azure Storage, GCS)

Steps

Step 1: Define Resources

Create main.tf with your infrastructure resources:

# Example: AWS EC2 instance
resource "aws_instance" "web_server" {
  ami           = var.ami_id
  instance_type = var.instance_type

  tags = {
    Name        = "WebServer"
    Environment = var.environment
  }

  # User data script
  user_data = <<-EOF
              #!/bin/bash
              yum update -y
              yum install -y httpd
              systemctl start httpd
              EOF
}

# Example: VPC and Subnet
resource "aws_vpc" "main" {
  cidr_block           = var.vpc_cidr
  enable_dns_hostnames = true
  enable_dns_support   = true

  tags = {
    Name = "${var.project_name}-vpc"
  }
}

resource "aws_subnet" "public" {
  vpc_id                  = aws_vpc.main.id
  cidr_block              = var.public_subnet_cidr
  map_public_ip_on_launch = true
  availability_zone       = var.availability_zone

  tags = {
    Name = "${var.project_name}-public-subnet"
  }
}