The foundational guide to infrastructure as code in 2026 — the declarative model and why the state file is the hard part, the Terraform BUSL license change and the OpenTofu fork, real configuration and workflow, remote state and locking after the DynamoDB era, modules, the broader landscape from Pulumi to Crossplane, and the failure modes nobody warns you about.
Iac
-
Infrastructure as Code in 2026: Terraform, OpenTofu, and the State You Have to Manage -
Terraform vs OpenTofu vs Pulumi in 2026 A three-way comparison of the infrastructure-as-code tools that actually matter in 2026: the Terraform/OpenTofu fork that split one tool into two, and Pulumi's bet that real programming languages beat a config DSL. The architectural differences honestly, the state story, where each genuinely wins, and what is worth migrating.
-
OpenTofu vs Terraform: The Fork One Year In The Terraform and OpenTofu fork, one year on — what HashiCorp's BSL relicensing actually changed, how the two tools have diverged since, and how to decide which one to standardize on for the next decade.
-
Trivy: Container and IaC Vulnerability Scanning A complete guide to Trivy — scanning container images, filesystems, Terraform, Kubernetes clusters, and generating SBOMs with a single tool.
-
Crossplane: Infrastructure as Kubernetes — Composites, Providers, and Replacing Terraform A comprehensive guide to Crossplane — the Kubernetes-native control plane for infrastructure. Covers providers, managed resources, composite resource definitions, compositions, claims, RBAC, and running a production platform that lets developers self-serve cloud resources safely.