The OpenTofu project has published a policy for working with the provider registry

At the end of August, the project developers OpenTofu made a decision restrict access to your registry for Russian IP addresses and remove Russian cloud service providers from the GitHub repository, such as Yandex Cloud, Cloud.ru, Rustack Cloud Platform, VK Cloud and others.

​​The OpenTofu team explained their actions by the need to comply with international sanctions against Russia, and the project’s technical lead provided links to security policy and meeting summary Technical Steering Committee (TSC) dated August 20, 2024at which the decision was made.

For two months, the OpenTofu team did not provide detailed explanations regarding their actions, which raised many questions from the community. Discussions regarding the future of the registry were held in closed meetings, and information regarding the registry was not available to a wider audience.

Today, after another weekly meeting held by the technical steering committee, the OpenTofu team presented the long-awaited registry policy. This policy should be the primary guideline for the continued acceptance or removal of providers from OpenTofu registry.

As noted in the meeting summaries Technical Steering Committee (TSC) dated October 15, 2024 And Technical Steering Committee (TSC) dated October 22, 2024the technical lead of the project is ready to answer questions regarding the policy for existing issues and pull requests on GitHub, including official Slack project. However, at this time the team does not intend to take any action on previously implemented steps, including returning removed providers to the registry.

Similar Posts

Leave a Reply

Your email address will not be published. Required fields are marked *