/goal /ultracode-workflows [HYB-3] DESIGN the OpenTofu multi-cloud substrate contract #36

New issue

Closed

opened 2026-07-01 02:03:48 +00:00 by plat · 1 comment

plat commented

2026-07-01 02:03:48 +00:00

Owner

Track/Wave: HYB-3 · Wave backlog · Size S
Repos: mitosis-docs
Depends on: none

Why

Nothing to build now, but germinate/lib.sh must stay cloud-blind so future Hetzner/AWS/GCP/Azure modules never require touching germination logic.

Scope

A design note (no code) fixing the contract each future substrate// OpenTofu module must satisfy: produce (a) a reachable kubeconfig, (b) a domain bound to the cluster, (c) registries.yaml pre-seeded before k3s starts, (d) declared inbound posture (tunnel-only vs public-IP+ACME). Record OpenTofu chosen over SST/CFN/Effect and why (HCL, ~3,900 providers incl. Hetzner/Cloudflare, existing k3s modules to lift; SST is AWS/serverless-shaped and really Pulumi underneath; CFN is AWS-only; Effect is not an IaC tool).

Acceptance

A reviewed/merged contract doc; no code changes required to close.

Notes

Backlog — design only.

Part of the First Client Deploy → Governance roadmap. The owning agent may recurse into its own subagent team (ultracode workflow) if the task warrants. Honor the seam-serialization: land on a shared seam by rebase, and don't start a seam position until the prior one has merged.

**Track/Wave:** `HYB-3` · Wave **backlog** · Size **S** **Repos:** `mitosis-docs` **Depends on:** none ## Why Nothing to build now, but germinate/lib.sh must stay cloud-blind so future Hetzner/AWS/GCP/Azure modules never require touching germination logic. ## Scope A design note (no code) fixing the contract each future substrate/<provider>/ OpenTofu module must satisfy: produce (a) a reachable kubeconfig, (b) a domain bound to the cluster, (c) registries.yaml pre-seeded before k3s starts, (d) declared inbound posture (tunnel-only vs public-IP+ACME). Record OpenTofu chosen over SST/CFN/Effect and why (HCL, ~3,900 providers incl. Hetzner/Cloudflare, existing k3s modules to lift; SST is AWS/serverless-shaped and really Pulumi underneath; CFN is AWS-only; Effect is not an IaC tool). ## Acceptance A reviewed/merged contract doc; no code changes required to close. ## Notes **Backlog — design only.** --- *Part of the **First Client Deploy → Governance** roadmap. The owning agent may recurse into its own subagent team (ultracode workflow) if the task warrants. Honor the seam-serialization: land on a shared seam by rebase, and don't start a seam position until the prior one has merged.*

plat added this to the Client Deploy → Governance Roadmap milestone

2026-07-01 02:03:48 +00:00

plat added the

horizon:backlog

goal

roadmap

labels

2026-07-01 02:03:48 +00:00

plat referenced this issue

2026-07-01 02:05:20 +00:00

[ROADMAP] First Client Deploy → Governance — tracker #47

plat referenced this issue from a commit

2026-07-01 02:15:13 +00:00

HYB-3: OpenTofu multi-cloud substrate contract (design)

plat referenced this issue

2026-07-01 02:15:27 +00:00

HYB-3: OpenTofu multi-cloud substrate contract (design) — plat/mitosis#36 #48

plat referenced this issue

2026-07-02 02:21:34 +00:00

[ROADMAP] First Client Deploy → Governance — tracker #47

plat added the

operator-decision

label

2026-07-06 14:52:17 +00:00

plat referenced this issue

2026-07-06 14:52:45 +00:00

[ROADMAP] First Client Deploy → Governance — tracker #47

plat commented

2026-07-06 15:47:45 +00:00

Author

Owner

Design merged: PR #48 landed docs/proposals/opentofu-multicloud-substrate.md — the four-output substrate contract (kubeconfig, bound domain, pre-seeded registries.yaml, declared inbound posture) keeping germinate cloud-blind, and the OpenTofu-over-SST/CFN rationale. Acceptance ("a reviewed/merged contract doc; no code") satisfied.

Design merged: PR #48 landed `docs/proposals/opentofu-multicloud-substrate.md` — the four-output substrate contract (kubeconfig, bound domain, pre-seeded registries.yaml, declared inbound posture) keeping germinate cloud-blind, and the OpenTofu-over-SST/CFN rationale. Acceptance ("a reviewed/merged contract doc; no code") satisfied.

plat closed this issue

2026-07-06 15:47:46 +00:00