HashiCorp silently amend Terraform Registry TOS

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

Our great sponsors
  • WorkOS - The modern identity platform for B2B SaaS
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • SaaSHub - Software Alternatives and Reviews
  • roadmap

  • Not the OP, but I suspect HN has trimmed the anchor link.

    > https://github.com/opentffoundation/roadmap/issues/24#issuec...

    That's the comment that made the issue clear -- specifically TOS were amended for https://registry.terraform.io to state:

    > You may download providers, modules, policy libraries and/or other Services or Content from this website __solely for use with, or in support of, HashiCorp Terraform.__

    ie., it looks like the intent is "You can't use OpenTF with registry.terraform.io".

    IMO, that feels a little petty. But, I guess if OpenTF is taking a position of "Use us instead of Terraform", then they shouldn't expect to get the usage of Hashicorps infra.

  • terraform-provider-openstack

    Terraform OpenStack provider

  • Even though this will likely prevent OpenTF from connecting to registry.terraform.io to get plugins, the source code for most (all?) plugins is still open source and actually stored on GitHub (e.g. https://github.com/terraform-provider-openstack/terraform-pr...).

    More work for OpenTF to get up and running, but also feels reasonable that HashiCorp wouldn't allow connecting to their service.

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo
  • Even though this will likely prevent OpenTF from connecting to registry.terraform.io to get plugins, the source code for most (all?) plugins is still open source and actually stored on GitHub (e.g. https://github.com/terraform-provider-openstack/terraform-pr...).

    More work for OpenTF to get up and running, but also feels reasonable that HashiCorp wouldn't allow connecting to their service.

  • terraform-provider-sops

    A Terraform provider for reading Mozilla sops files

  • "https://github.com/carlpett/terraform-provider-sops/releases..."

  • para

    Para - community plugin manager and a "swiss army knife" for Terraform/Terragrunt - just 1 tool to facilitate all your workflows. (by paraterraform)

  • It's... effort consuming, but is doable and more like a 1-time effort.

    A while ago I built an alternative plugin manager for Terraform (https://github.com/paraterraform/para) and explored the idea of distributed indices (where you just host a file in the repo as seen in https://github.com/ashald/terraform-provider-stateful/blob/m...).

    So at the end of the day, it's either about the effort to inventory the current registry and find sources that are available, or do this on an ongoing as-needed basis (eg something like para would allow an index to be hosted in a github repo managed with PRs).

  • terraform-provider-stateful

    Generic abstract stateful resources to manage arbitrary objects by executing arbitrary commands

  • It's... effort consuming, but is doable and more like a 1-time effort.

    A while ago I built an alternative plugin manager for Terraform (https://github.com/paraterraform/para) and explored the idea of distributed indices (where you just host a file in the repo as seen in https://github.com/ashald/terraform-provider-stateful/blob/m...).

    So at the end of the day, it's either about the effort to inventory the current registry and find sources that are available, or do this on an ongoing as-needed basis (eg something like para would allow an index to be hosted in a github repo managed with PRs).

  • terraform-provider-airbyte

    Terraform Provider for Airbyte API

  • In my mind the analagous behaviour would be if the golang checksum database added in license terms that stated "you need to abide by a BSL to use data from this service". What that actually would mean is so nebulous that it feels threatening.

    [0] Source: https://registry.terraform.io/v1/providers/airbytehq/airbyte...

    [1] Source: https://github.com/airbytehq/terraform-provider-airbyte/tree... gzipped : ~300 resources, ~300 data sources

    (NB: in airbyte's case the TF Provider was generated from a ~150Kb OpenAPI spec via https://speakeasyapi.dev: implying docs could be compressed even more)

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • speakeasy

    Speakeasy CLI - Enterprise developer experience for your API (by speakeasy-api)

  • In my mind the analagous behaviour would be if the golang checksum database added in license terms that stated "you need to abide by a BSL to use data from this service". What that actually would mean is so nebulous that it feels threatening.

    [0] Source: https://registry.terraform.io/v1/providers/airbytehq/airbyte...

    [1] Source: https://github.com/airbytehq/terraform-provider-airbyte/tree... gzipped : ~300 resources, ~300 data sources

    (NB: in airbyte's case the TF Provider was generated from a ~150Kb OpenAPI spec via https://speakeasyapi.dev: implying docs could be compressed even more)

  • terraform-provider-aws

    The AWS Provider enables Terraform to manage AWS resources.

  • https://github.com/hashicorp/terraform-provider-aws/issues/3...

    The size is what you get when you add every single AWS Go client into one binary.

    Each service client like 1-2MB. But when you have 200 services....

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts