Sounds very top-down. Thing is if you have custom opentofu modules, how would that compile that in?

I tend to agree - this will work for a "standard" application web/app/db but as soon as you start doing anything remotely platform specific it won't work. E.g. k8s manages secrets and certs differently to compose etc.

[flagged]