Resources
Guides, use cases, and feature docs
Everything you need to evaluate, adopt, and operate OrchesTerra across your infrastructure teams.
Definitions
What drift, governance, and OpenTofu actually mean.
- Infrastructure driftInfrastructure drift is the gap between what your Terraform or OpenTofu files declare and what actually exists in AWS, Azure, GCP, or OCI. Here is what causes it, why it matters, and how teams classify it.
- Terraform vs OpenTofuTerraform and OpenTofu share HCL, state, and most providers. They differ in license, release cadence, and who you trust to ship the binary. Here is how to choose — and when a migration is actually worth it.
- IaC governanceIaC governance is the set of rules, reviews, and identity controls that decide who can change cloud infrastructure, what a plan is allowed to do, and how exceptions expire. It is not a style guide for Terraform.
- Detect Terraform driftDetect Terraform drift by refreshing state, saving a plan, and classifying the diff — then add cloud inventory for resources Terraform does not manage. A practical scan loop you can run in CI.
- AI for infrastructure as codeAI can draft Terraform, explain a plan, and classify drift. It should not skip review, invent cloud APIs, or apply without a saved plan. What is useful today — and what still needs a human.
- Visual TerraformA visual Terraform workflow turns a repository or diagram into a topology you can review, then into a real plan file. The diagram is a lens. The plan is the source of truth.
Use Cases
View all →Use case
Repository to Infrastructure
Generate deployment-ready Terraform/OpenTofu from your repository, including dependencies, IAM, and governed policy checks.
Use case
Drift Reconciliation
Continuously detect infrastructure drift across Terraform/OpenTofu and connected clouds, then reconcile safely via governed workflows.
Use case
Governed Approval Workflows
Require informed review for risky infrastructure changes, combining diffs, policy results, and approval routing.
Features
View all →Feature
Repository Intelligence
Discover services, dependencies, and topology from your repositories to generate accurate IaC and governed plans.
Feature
Terraform / OpenTofu Generation
Generate deployment-ready Terraform or OpenTofu from repository-derived topology, aligned to governance and review workflows.
Feature
Drift Detection & Reconciliation
Detect configuration drift and unmanaged resources across clouds, then reconcile with governed plans.
Blog
View all →Kubernetes
Karpenter Disruption: Consolidation, Budgets, and Why Pods Go Pending at 3am
How Karpenter decides to replace nodes, how disruption budgets interact with PDBs, and the settings that stop consolidation from evicting production at the worst time.
2026-09-08 · 4 min read
Kubernetes
Kyverno Policies That Teams Will Actually Keep Enabled
Validate, mutate, and generate with Kyverno without turning every deploy into a 403 — policy types, failure actions, exceptions, and a starter set for platform clusters.
2026-09-07 · 4 min read
Terraform
terraform test: Unit-Test Modules Without a Second CI Language
How to write terraform test files that catch module regressions in plan — run blocks, assert, mock providers, and when you still need Terratest.
2026-09-06 · 3 min read
Platform evaluation
See OrchesTerra on your infrastructure
Request access to generate architecture from a repository, review the plan, and run governed reconciliation across AWS, Azure, GCP, and OCI.