IBM completed its acquisition of HashiCorp on February 27, 2025, paying $35 per share in cash in a transaction valued at $6.4 billion. Terraform's license had already changed in August 2023, so IBM did not create the licensing controversy, but IBM's ownership gave teams another reason to revisit a question they had postponed: who do we want controlling a critical layer of our infrastructure stack?
Then Pulumi made that question easier to act on. There is one date correction worth making at the outset: Pulumi's original Terraform/OpenTofu/HCL announcement was published December 18, 2025; January 17, 2026 is the publication date of Mark Silvester's InfoQ coverage, which described HCL execution through the Pulumi engine and Terraform state hosted in Pulumi Cloud. By August 4, 2026, Pulumi was describing both its Terraform backend and HCL support as generally available.
That distinction matters because Pulumi Terraform HCL support in 2026 is not one migration feature. Pulumi now gives you multiple paths: keep the Terraform or OpenTofu CLI and move only the state backend to Pulumi Cloud; run HCL as a first-class Pulumi language on the Pulumi engine; coexist with Terraform-managed infrastructure; or perform a deeper conversion into Pulumi's other supported languages. Pulumi itself explicitly said the HCL feature was not intended simply as a lift-and-shift migration mechanism.
Meanwhile, OpenTofu shipped version 1.12.0 on May 14, 2026 and version 1.12.5 on July 21, while Fidelity Investments published a detailed account of a large Terraform-to-OpenTofu migration in October 2025. Those are more useful decision inputs than anonymous market-share graphics or vendor-star counts.
So the useful question is not simply “should I migrate from Terraform to Pulumi?” It is: what problem are you solving, which layer actually has to move, what happens to existing state, and how much operational risk are you buying in exchange for licensing independence or language flexibility?
This guide answers that as an infrastructure as code migration decision, not another Terraform-vs-Pulumi feature chart.
What IBM's HashiCorp Acquisition Actually Changed
IBM closed the HashiCorp transaction on February 27, 2025, after agreeing to acquire the company for $35 per share in cash, representing a $6.4 billion enterprise value. Terraform therefore sits inside IBM rather than an independent HashiCorp as teams make their 2026 architecture and contract decisions.
What IBM did not do was suddenly change Terraform from an open-source project into a Business Source License product. HashiCorp made that licensing move in August 2023, roughly 18 months before the IBM acquisition closed.
That timeline changes how I would frame an IBM HashiCorp Terraform 2026 architecture review.
Before IBM completed the deal | After IBM completed the deal |
HashiCorp operated independently; Terraform had already moved to the BSL in 2023 | Terraform and HashiCorp's commercial products sit under IBM ownership |
OpenTofu already existed as an independently governed Terraform-compatible project | OpenTofu's Linux Foundation stewardship gives teams a clearly separate governance path |
Pulumi competed primarily through its programming-language approach and separate engine | Pulumi now explicitly markets Terraform/OpenTofu state support and HCL interoperability to HashiCorp customers |
Changing tools normally implied a larger migration conversation | Pulumi can now separate “change the backend” from “rewrite the IaC” |
IBM ownership therefore matters mostly as a vendor-governance and future commercial-dependency variable. It does not by itself prove that Terraform has become technically weaker, that its existing configurations stopped working, or that you should start migrating state on Monday morning.
If your organization already accepts Terraform's license, has a negotiated HashiCorp agreement, receives support that it values, and has hundreds of stable modules, the acquisition may change almost nothing operationally. Replacing a mature IaC estate only because an acquisition made the engineering team uncomfortable can create more risk than the acquisition itself.
The acquisition matters more when it compounds an existing concern. That concern might involve licensing, pricing, commercial concentration, product-roadmap control, or a strategic requirement to build on independently governed open-source infrastructure.
That is the difference between this discussion and a general article about why Infrastructure as Code tools like Terraform are leading the way in 2026. The relevant question here is not whether IaC matters; it is whether the control plane, license, state backend, and execution engine you already use still fit your risk model after the ownership change.
Why the BSL License Change Still Matters in 2026
HashiCorp's Business Source License change remains relevant because IBM's acquisition did not reverse it. HashiCorp's current licensing FAQ defines the sensitive use case around creating a “competitive offering” that significantly overlaps the capabilities of HashiCorp's commercial products; ordinary internal use is not equivalent to that restriction.
That nuance matters. Saying “Terraform cannot be used commercially” would be wrong; the licensing concern centers far more specifically on organizations whose products or services compete with HashiCorp offerings.
For most DevOps teams, therefore, the BSL question is not an immediate runtime problem. It is a governance question: are you comfortable making a long-term infrastructure dependency around software whose source license gives its vendor restrictions that a conventional permissive or copyleft open-source license would not?
OpenTofu exists as the most direct Terraform Business Source License alternative for teams whose answer is no. The OpenTofu project describes itself as a community-driven IaC tool under Linux Foundation stewardship and aims to preserve Terraform-compatible workflows and configurations.
Pulumi addresses a different problem. It does not merely offer “Terraform without the BSL”; it offers another IaC engine and platform, with general-purpose programming languages plus HCL, while now also letting teams retain Terraform/OpenTofu code and state workflows during a transition.
That difference, license independence versus language/platform flexibility, should drive the rest of your decision.
Pulumi's January 2026 Move: Native Terraform and OpenTofu Support
The January 2026 story requires precise dating.
Mark Silvester's InfoQ article was published January 17, 2026, and reported Pulumi's native support for Terraform, OpenTofu, and HCL. Pulumi's own announcement, however, is dated December 18, 2025, so January 17 should not be presented as Pulumi's original announcement date.
That correction does not weaken the 2026 significance. InfoQ reported that Pulumi could execute HCL through the Pulumi engine while hosting Terraform state in Pulumi Cloud, and explicitly connected the competitive positioning to organizations reconsidering HashiCorp following IBM's acquisition.
At the time of InfoQ's January coverage, the article described the capabilities as being in private beta with general availability expected in Q1 2026. Pulumi's August 4, 2026 update now says that Pulumi Cloud as a Terraform backend and HCL in Pulumi IaC are GA, so the relevant question in August is no longer merely whether the feature will ship.
The biggest mistake would be treating those capabilities as one thing.
Pulumi option in 2026 | What changes | What can stay |
Pulumi Cloud as Terraform/OpenTofu backend | State hosting, governance/control plane | Terraform/OpenTofu CLI and HCL resource configuration |
HCL as a Pulumi language | Execution moves to Pulumi's engine | HCL syntax and Terraform-provider ecosystem can remain relevant |
Terraform/Pulumi coexistence | New components can move incrementally | Existing Terraform-managed layers can stay in place |
Full Pulumi conversion | Language, execution model and state can change | Underlying cloud resources do not necessarily need recreation if migration is performed correctly |
Pulumi's Terraform backend documentation is particularly important because it removes one of the false binaries from this debate. You can configure Pulumi Cloud as a Terraform-compatible remote backend, migrate state, and continue using the Terraform or OpenTofu CLI for plan/apply/destroy operations.
That means your first move does not have to be “rewrite 140 modules into TypeScript.” You could change the state/control-plane layer while leaving the configuration language and CLI alone, then evaluate further migration separately.
Pulumi's HCL mode represents a larger change. Pulumi's migration documentation says you can use runtime: hcl to run .tf files on the Pulumi engine, while its Terraform bridge supplies provider interoperability.
That is not the same thing as secretly embedding the Terraform executable behind a different UI. The execution semantics belong to Pulumi, which means I would still test provider behavior, lifecycle behavior, imports, aliases/moves, module assumptions, CI/CD integrations and no-op plans before calling an existing estate compatible.
Pulumi CEO Joe Duffy summarized the language position this way:
“The L in HCL and YAML stands for ‘language,’ and we’ve always had a ‘come one, come all’ mindset.”
Joe Duffy, quoted by InfoQ
The more important sentence for migration planning appears in Pulumi's own announcement: its HCL support was explicitly not presented as the lift-and-shift mechanism. Pulumi points to backend support, coexistence, state references, Terraform modules and conversion/import workflows as distinct approaches.
In other words, “Pulumi runs HCL” lowers migration friction, but it does not eliminate architecture decisions.
The "Escape Hatch" Credit Program: What It Actually Offers
Pulumi also attacked the financial side of switching.
Its public announcement says organizations can apply credits already purchased from HashiCorp toward Pulumi usage until their next HashiCorp renewal, with the stated objective of avoiding a period in which a company pays for both platforms. Pulumi paired that offer with a modernization workshop and an ROI exercise.
That is unusually direct competitive positioning. Pulumi did not merely launch HCL support and let customers draw their own conclusions; its post directly referenced HashiCorp “an IBM Company” contracts and structured an incentive around the contract-renewal window.
For a procurement-heavy enterprise, this may affect when a pilot makes sense even if it does not determine whether Pulumi is technically right. A contract expiring in six months gives you a natural decision gate for a non-production proof of concept, compatibility audit and cost comparison.
Do not model the public offer as a guaranteed dollar-for-dollar rebate without obtaining written commercial terms. The announcement explains the principle, but organization-specific eligibility, credit calculation and contractual conditions beyond the public language must be confirmed directly with Pulumi before you put savings into a migration business case.
OpenTofu's 2026 Release Cadence: the Fork Keeps Shipping
If your primary concern is Terraform's licensing and governance rather than HCL itself, OpenTofu vs Pulumi in 2026 is a very different comparison from Pulumi vs Terraform five years ago.
OpenTofu is not sitting at the version created immediately after Terraform's license change. The project released OpenTofu 1.12.0 on May 14, 2026, adding features including dynamic prevent_destroy, import by resource identity and provider-installation improvements.
As of August 13, 2026, GitHub lists v1.12.5 as the latest release. The release was published July 21, 2026 and contains security and bug fixes for the 1.12 line.
Release | Date | Relevant evidence |
OpenTofu 1.12.0 | May 14, 2026 | Dynamic prevent_destroy, import by resource identity, provider-installation improvements |
OpenTofu 1.12.1–1.12.4 | 2026 patch line | Iterative fixes after 1.12.0 |
OpenTofu 1.12.5 | July 21, 2026 | Latest release shown by GitHub as of this research; security and bug fixes |
A project that keeps shipping feature releases and patch releases gives an infrastructure team materially stronger evidence than “the fork still has a repository.”
It still does not eliminate long-term risk. OpenTofu and Terraform can diverge as each adds features, state semantics, provider behavior or language constructs, so “drop-in replacement” should never become “we do not need a test plan.”
OpenTofu's own migration documentation says that it aims to maintain Terraform configuration compatibility but still tells teams to back up state and code, install OpenTofu, initialize and verify configuration, then test with a small change.
That is the sensible definition of compatibility: migration friction can be low, but operational validation remains mandatory.
For larger estates, OpenTofu documents an additional wrinkle that should get a platform engineer's attention. Where multiple root configurations exchange values through terraform_remote_state, the project recommends mapping the dependency graph and migrating in an order that keeps state consumers compatible during the transition.
That is exactly why the IaC tool itself is only part of your migration surface. CI pipelines, reusable modules, provider locks, policy checks, secrets, remote-state consumers, service catalogs, drift tooling and access control can represent more work than replacing terraform with tofu.
For context on how Terraform sits beside the rest of a modern deployment stack, Refonte's article on the broader 2026 toolset covering Kubernetes, Jenkins, Docker, Helm, and Terraform covers the surrounding tools. The migration-specific issue here is how those integrations behave when the IaC command, state location or execution engine changes.
Fidelity Investments Actually Moved to OpenTofu: Here's What That Signals
The strongest named enterprise evidence in this research is the Fidelity OpenTofu migration story published October 6, 2025.
OpenTofu's article identifies David Jackson, VP of Cloud Automation and Tooling at Fidelity Investments, and describes a footprint of more than 2,000 applications, 50,000 state files, more than four million cloud resources, and upwards of 4,000 state-file updates per day across Terraform/OpenTofu.
Fidelity said Terraform's licensing changes triggered a broader internal conversation, after which the organization evaluated OpenTofu's governance and technical compatibility. The team did not jump directly to an estate-wide CLI cutover: it ran a production-grade proof of concept covering the surrounding pipeline, artifact and governance machinery.
The most useful migration lesson may be organizational rather than technical. Fidelity's account says centrally maintained shared pipelines and reusable modules let the platform team change IaC behavior once and propagate it across dependent projects; the organization reported reaching 70% adoption before the CLI switch and later making OpenTofu the default for new deployments.
That signals three things:
An organization with a genuinely large Terraform footprint can execute a Terraform-to-OpenTofu migration.
Standardized pipelines and modules drastically change the economics of migration.
A serious migration program includes governance, communication, testing and enablement, not just binary replacement.
It does not establish that enterprises generally are leaving Terraform.
The article comes from the OpenTofu project itself, although it attributes the detailed account to a named Fidelity executive and includes a disclaimer separating OpenTofu from Fidelity. Treat it as a credible named implementation story, but not as independent market-share research.
That is the standard I would use throughout this space. One verifiable migration beats 20 unattributed charts when you want to know whether a path is technically possible, but one migration cannot tell you whether that path is the dominant market choice.
What the 2024 HashiCorp Cloud Strategy Survey Still Tells Us
HashiCorp's 2024 State of Cloud Strategy Survey remains the most recent edition I could verify in HashiCorp's indexed survey material as of August 13, 2026.
HashiCorp commissioned Forrester Consulting for the fourth annual edition, covering 1,194 technology practitioners and decision-makers at large organizations. HashiCorp's own summary describes “almost 1,200” respondents, while the underlying Forrester study gives the precise sample.
The data relevant to a 2026 migration discussion is less about Terraform popularity than operational maturity.
2024 finding | Why it matters to an IaC migration |
66% increased cloud infrastructure spending | Tool changes occur inside a growing cost base, so migration economics matter |
91% reported wasted cloud spending | Better IaC does not automatically produce cost discipline |
Only 8% qualified as highly cloud-mature | Most organizations still have process/governance weaknesses around automation |
75% rated automation tooling important or very important to operationalizing strategy | IaC/control-plane choices carry organization-wide consequences |
There is also a fact-check correction to make against a figure that circulates in summaries of this survey.
Research correction: I could not verify the claim that 79% of 2024 respondents were operating multi-cloud from the primary Forrester study. The report's multicloud implementation measure shows 62%, while the 79% figure I found in the paper relates to an uptime/reliability benefit rather than the multicloud-adoption measure.
That is exactly the type of number inflation a careful infrastructure analysis should catch. A statistic that sounds plausible is not interchangeable with the statistic the primary report actually measured.
The same caution applies to Terraform/OpenTofu/Pulumi “market-share” percentages, repository-star comparisons, provider-download totals and IaC market-size estimates circulating through aggregator sites. For that reason, this guide does not quote a Terraform-vs-OpenTofu-vs-Pulumi market-share percentage: no directly attributable Gartner, Forrester or named-vendor research source supporting one was established during this review.
Repository popularity can answer a repository question. It cannot, by itself, tell you what percentage of production infrastructure a tool manages.
Why a Newer Edition Matters More Now Than It Did in 2024
I also could not confirm a standalone 2025 or 2026 HashiCorp State of Cloud Strategy Survey edition during this research.
Targeted searches of HashiCorp's site surfaced the 2024 fourth annual report, while a June 12, 2025 HashiCorp article still referenced the nearly 1,200 respondents and 8% high-maturity result from that survey rather than introducing a new annual dataset.
That does not prove HashiCorp will never publish another edition, nor does a search-result absence prove that no unpublished or differently named research exists. It means the latest verifiable annual edition is 2024, and using a supposed 2025/2026 update without locating the actual report would be irresponsible.
The gap matters more after the ownership transition because 2024 respondents answered before IBM completed its February 2025 acquisition. Licensing had already changed, but vendor ownership, commercial packaging and competitive responses such as Pulumi's HCL support had not reached their current state.
Before republishing those 2024 figures as “the state of IaC in 2026,” check HashiCorp's research library directly. They remain useful context, not a substitute for fresh 2026 evidence.
Three Realistic Paths Forward: How to Choose
For most established Terraform users, there are three credible paths, not two.
Path | Best fit if... | Main advantage | Real tradeoff |
Stay on Terraform | Your current stack, license position, support and costs are acceptable | Lowest migration risk and no state/tooling change | Continued dependency on IBM/HashiCorp product, licensing and commercial decisions |
Adopt Pulumi's HCL bridge | You want a new control plane or broader language options without an immediate rewrite | Lets you separate state-backend migration, HCL execution and full conversion into different stages | Adds Pulumi platform and engine dependencies and requires compatibility testing |
Move to OpenTofu | Open governance and Terraform compatibility are your main priorities | Lowest conceptual change for Terraform-oriented teams while moving away from HashiCorp's BSL code line | No HashiCorp/IBM vendor support; future divergence from Terraform must be managed |
The first decision variable is whether you have an actual problem.
If your team has no license conflict, no contract problem, no roadmap problem and no desire to use another language model, staying on Terraform is not cowardice. It is often the lowest-risk engineering decision because migration risk must be justified by a measurable benefit.
If your pain centers on open governance and BSL exposure, OpenTofu provides the cleaner answer. You preserve the HCL mental model and a high degree of Terraform compatibility while changing the project's governance lineage.
If your pain centers on language flexibility, a different platform/control plane, or gradual coexistence, Pulumi is more interesting. Pulumi's 2026 model lets you leave Terraform/OpenTofu code in place, migrate state hosting separately, consume Terraform modules, run HCL on the Pulumi engine, or progressively introduce TypeScript, Python, Go, .NET, Java or YAML.
That makes the should I migrate from Terraform to Pulumi question easier if you break it into smaller questions:
Do we want to replace the state backend?
Do we want to replace the execution engine?
Do we want to replace HCL?
Do we want to replace existing modules and providers?
Do we need to change all four at once?
Usually, the answer to the fifth question should be no.
A backend-only move has a different blast radius from moving an existing HCL estate onto the Pulumi engine. A full HCL-to-TypeScript conversion has another blast radius again.
This is also why “Pulumi supports Terraform now” should not turn into “there is no migration anymore.” The new interoperability features give you more intermediate states, which is valuable, but each intermediate state needs ownership, observability and a documented operating model.
What a Migration Actually Requires: Practical Steps
I would run an infrastructure migration in explicit phases rather than starting with production state.
Start with inventory. Identify every root module, backend, workspace, state file, provider version, lock file, shared module, CI runner, policy check and terraform_remote_state dependency. OpenTofu's documentation specifically warns that interdependent configurations require additional migration planning.
Freeze your baseline. Before changing the backend or CLI, produce a clean plan, record the Terraform/OpenTofu/provider versions and store a state backup somewhere protected from the migration process itself.
OpenTofu's migration guide explicitly begins with backing up state and code. Pulumi's backend guide likewise instructs users to pull a state backup before changing backend configuration.
Map dependencies before migration order. A monorepo with one state file is straightforward compared with 40 independently deployed roots that read each other's remote outputs.
OpenTofu's guidance for interdependent configurations recommends building the dependency graph and migrating in an order that avoids leaving Terraform consumers reading state that may contain OpenTofu-specific changes.
Pilot something real but expendable. A sandbox that provisions one S3 bucket proves little; a lower environment that exercises the same CI pipeline, module registry, identity model, policies and remote-state dependencies as production tells you much more.
Fidelity followed that logic by taking its proof of concept through a production-grade internal IaC application and surrounding pipeline rather than testing only trivial resource creation.
Require a no-op comparison. After migrating state or changing tooling, your first objective is not “successful apply.” Your first objective is a plan that proposes no unintended infrastructure changes.
Pulumi's Terraform-backend documentation explicitly tells users to run terraform plan or tofu plan after state migration and expect no changes.
Create an actual rollback procedure. “We have a backup” is not a rollback procedure unless someone has tested how to restore it, which CLI version to use, how to restore backend credentials and how to prevent two systems from writing state concurrently.
HashiCorp's own state-command documentation warns about coordination because mismatches between configuration and state can lead Terraform to plan destruction and recreation.
That is why, from a practitioner's perspective, state management is the blast-radius center of this whole decision. The syntax is rarely the frightening part; losing the authoritative relationship between logical resource addresses and real production resources is.
Pulumi's new backend support actually reinforces this point. For state stored in common backends, its documentation presents a backend migration workflow around backup, configuration change, terraform init -migrate-state, and verification; HCP Terraform state requires a different export/push path.
Do not let an AI agent improvise that runbook in production.
Spacelift's 2026 State of Infrastructure Automation report surveyed 406 IT decision-makers and platform engineering leaders in April 2026. It found 93% had experienced at least one AI-caused infrastructure incident, while its AI Maturity Index classified only 19% as having the governance foundations associated with the “Pioneer” group; the survey also reported that 78% used AI to generate IaC/HCL without thorough review.
That report did not study Terraform-to-Pulumi or Terraform-to-OpenTofu state migrations, so it should not be cited as evidence that these migrations fail 93% of the time. Its relevant lesson is narrower: infrastructure automation is already moving faster than review and governance at surveyed organizations, which is a terrible backdrop for an unreviewed state migration.
A practical pilot gate looks like this:
State backup independently verified.
Terraform/OpenTofu and provider versions pinned.
Dependency graph documented.
Baseline plan captured.
Target-tool plan reviewed by two humans.
No unexpected destroy/recreate actions.
CI/CD credentials and locks validated.
Rollback rehearsed.
Production migration scheduled under a change window appropriate to your organization.
That checklist matters more than whichever logo won your comparison spreadsheet.
Skills Priority Order for DevOps Engineers Navigating This Decision
For DevOps engineer IaC skills in 2026, I would rank migration-related competency like this:
Priority | Skill | Why |
Must | Terraform state-management fundamentals | Every path depends on knowing what state represents and how changes affect real resources |
Must | Ability to separate verified dated facts from vendor/aggregator claims | Architecture decisions can outlive the news cycle for years |
Should | Pulumi's engine/language model versus Terraform/OpenTofu HCL model | Needed to judge whether Pulumi solves a real engineering problem |
Should | Low-risk migration and rollback design | Compatibility claims do not replace controlled testing |
Good | Practical understanding of the BSL restriction | Helps distinguish a real licensing issue from generic anxiety |
Good | AI/IaC governance and review controls | Spacelift's 2026 results show the operational consequences of automation outrunning governance |
State comes first because every meaningful option in this article touches it.
Terraform state links configuration addresses to remote infrastructure. Pulumi similarly maintains stack state so its engine can determine how declared infrastructure differs from recorded infrastructure, and Pulumi warns that out-of-band changes can produce unexpected results until state is refreshed appropriately.
A DevOps engineer who understands those fundamentals can learn the syntax differences between tools. An engineer who knows three IaC syntaxes but treats state as a mysterious JSON file is the person I would least want running the migration.
The role boundary matters too. Platform teams increasingly own shared infrastructure abstractions, module catalogs and paved roads, while DevOps responsibilities can span CI/CD and operations; the article on the difference between a platform engineer and a DevOps engineer role covers that distinction in more detail.
For this decision, the title on your badge matters less than whether someone owns the state model, migration sequencing, CI/CD integration, governance controls and rollback from end to end.
Common Mistakes, Certifications, and Career Signals
The tooling news has career implications, but they are easy to overstate.
Current job listings do provide evidence that infrastructure employers value familiarity with more than one IaC ecosystem. For example, a current Fanatics senior platform engineering posting asks for experience with frameworks such as Terraform, Pulumi or CloudFormation, while a Webflow infrastructure posting accepts experience with Terraform, Pulumi, Ansible or similar tooling.
That does not establish “multi-IaC-tool engineer” as a standardized job category. Nor did this research find enough direct employer evidence to claim that the exact phrase “Terraform migration experience” has become a widespread hiring keyword.
What employers can reasonably infer from real migration work is more useful: you understand existing systems, compare risk, preserve state, design rollback and avoid replacing stable infrastructure for fashion.
Migrating Because of the News, Not Because of an Actual Pain Point
The most avoidable mistake is deciding that IBM buying HashiCorp automatically requires an exit.
The acquisition closed on February 27, 2025, but Terraform's BSL shift occurred in August 2023. If your organization has used Terraform successfully throughout both events and cannot identify a concrete license, cost, support, architecture or language problem, the migration business case starts weak.
Use a simple test:
Problem: What specifically hurts today?
Target state: Which option removes that problem?
Cost: What engineering time, vendor cost and operational risk does the change add?
Evidence: What pilot result proves the target is better?
Exit: What happens if the migration fails or the new vendor changes direction?
“IBM owns it now” answers none of those.
There are perfectly valid strategic policies requiring independently governed open-source foundations. There are equally valid organizations that prefer an enterprise vendor relationship and consider IBM ownership neutral or beneficial.
Architecture governance exists to turn those preferences into explicit criteria rather than emotional reactions.
Treating One Named Migration as Proof of a Market-Wide Shift
The Fidelity story deserves attention precisely because it is named and detailed.
Fidelity's reported footprint, more than 2,000 applications, 50,000 state files and four million resources, makes its migration far more informative than an anonymous testimonial. Its description of shared pipelines, modules, governance alignment and a staged rollout provides practical lessons another platform team can test.
But one case study is still one case study.
OpenTofu published the article, not an independent market research firm. Fidelity's participation and named executive make it credible evidence that the migration happened as described, but the story cannot establish what percentage of enterprises plan to follow.
The same skepticism should apply to Pulumi case studies and HashiCorp customer stories. Vendor case studies answer, “Can this approach work for a named customer?” They do not answer, “What is the industry's market share?”
For this reason, I would reject an infrastructure strategy deck that claims “everyone is moving to OpenTofu” or “Terraform still has X% market share” unless the author can show the underlying research methodology.
Certifications and Portfolio Signals Worth Having
HashiCorp's certification catalog continues to offer the Terraform Associate (004) certification in 2026 and also lists a higher-level Terraform Authoring and Operations Professional certification.
The Associate credential still has value if you move toward OpenTofu or Pulumi because Terraform fundamentals force you to understand providers, state, modules, workflow and declarative infrastructure. I would not describe the credential as a Pulumi or OpenTofu certification, but the underlying IaC reasoning is transferable.
During this research, I found official Pulumi tutorials and learning resources but no current official Pulumi certification exam comparable to HashiCorp's Terraform Associate, and I found no OpenTofu certification program advertised on OpenTofu's official site. That should be treated as a point-in-time research finding as of August 13, 2026 rather than a guarantee that neither vendor will launch one later.
For an experienced candidate, I would value a migration portfolio artifact more highly than another multiple-choice badge.
A strong lab case study could include:
A Terraform environment with remote state and at least two dependent modules.
A clean baseline plan.
State and configuration backups.
One OpenTofu migration and one Pulumi-backend experiment.
Before-and-after no-op plans.
A documented incompatibility or failed test rather than pretending everything worked.
A rollback procedure.
A short architecture decision record explaining why you would choose one path for production.
That tells an interviewer you can make an infrastructure as code migration decision, not merely memorize commands.
What This Means for DevOps Engineer Salaries and Demand in 2026
DevOps salary figures also benefit from a primary-source check rather than a rounded “$115K–$145K everywhere” claim.
As of August 1, 2026, Salary.com reports an average U.S. DevOps Engineer salary of $134,600, with a 25th–75th percentile range of about $122,134–$142,411. SalaryExpert's July 23, 2026 U.S. estimate is lower at about $116,196, illustrating how methodology changes the answer.
Indeed currently surfaces a substantially broader U.S. range, roughly $86,456 to $205,927, rather than a number I would combine blindly with the other two into a false-precision “industry average.”
Senior compensation also needs precision. Salary.com currently reports about $160,534 for Senior DevOps Engineer and $187,297 for Lead DevOps Engineer; its DevOps Principal Engineer average is about $151,900, with its 90th percentile near $165,846.
So I would not publish “senior/principal roles average $165K–$250K+” as a general U.S. fact. Compensation above $200,000 certainly appears in location-specific Indeed ranges and can occur through equity or high-paying employers, but the sources reviewed here do not support $250,000+ as a generic national senior/principal base-salary average.
The career signal relevant to this article is narrower: current employer postings explicitly mention alternative IaC frameworks such as Terraform, Pulumi and CloudFormation, which gives engineers a reason to understand tool tradeoffs rather than tie their identity to one syntax.
For a fuller compensation discussion rather than turning this migration article into another salary guide, use Refonte Learning's dedicated roadmap material later in the article.
Self-Study vs. a Structured DevOps Program: An Honest Comparison
You can learn Terraform state, OpenTofu migration and Pulumi experimentation independently. There is no technical requirement to enroll in a training program before you can build a safe lab.
What self-study often lacks is not information but sequencing. State management makes more sense after Linux, Git and basic cloud concepts; production IaC makes more sense when you also understand CI/CD; and infrastructure migration risk makes more sense when you have operated containers, monitoring and deployment pipelines together.
I would avoid claiming that self-study “takes exactly 6–12 months” or that a program makes someone “job-ready in exactly three months.” I did not find a defensible independent benchmark that would support those universal timelines, and Refonte's three-month duration is a program duration, not an employment guarantee.
A more honest comparison looks like this:
Factor | Self-study | Structured DevOps Engineering Program |
Time to a working Terraform pipeline | Depends heavily on prior Linux/cloud experience; no universal benchmark | Terraform appears as a dedicated curriculum module inside a 3-month program |
CI/CD integration | You must design your own learning sequence and labs | Dedicated CI/CD curriculum |
Cloud breadth | Easy to remain focused on one provider unless you deliberately expand | Program lists AWS, Azure and GCP |
Container context | Must be integrated separately | Docker and Kubernetes appear in the curriculum |
Portfolio structure | Scope and documentation depend on you | Program includes a capstone project |
Credential | None unless you pursue external certifications | Training Certificate + Certificate of Internship on completion |
Pulumi/OpenTofu instruction | Freely available through vendor docs and labs | Not listed in the Refonte curriculum; hands-on IaC tool named by the program is Terraform |
The distinction matters.
The strongest foundation for choosing between Terraform, Pulumi and OpenTofu is not memorizing all three CLIs at once. It is understanding declarative provisioning, resource dependencies, providers, remote state, state locking, plans, drift, version control and CI/CD integration well enough to identify what changes when the tool changes.
That is why Terraform remains a reasonable training tool even for an engineer who may ultimately work with OpenTofu or Pulumi. OpenTofu intentionally maintains substantial Terraform compatibility, while Pulumi's current interoperability features are designed specifically around existing Terraform/HCL estates.
For a broader view of progression beyond this migration decision, Refonte's DevOps engineer career path and salary guide covers career sequencing separately.
The Refonte Learning DevOps Engineering Program
The Refonte Learning DevOps Engineering Program runs for three months, online, with a stated commitment of 12–14 hours per week. Its page describes eligibility as being engaged in bachelor's or postgraduate studies and lists DevOps Engineer, Cloud Engineer and Site Reliability Engineer as career outcomes.
Its nine curriculum areas are:
Introduction to DevOps
Linux Fundamentals and Scripting
Version Control with Git & GitHub
Continuous Integration & Continuous Deployment
Containerization with Docker & Kubernetes
Infrastructure as Code with Terraform
Cloud Platforms: AWS, Azure, GCP
Monitoring and Logging Tools
Capstone Project
Those modules appear directly on the current program page.
The IaC wording is important for this article: the program names Terraform specifically. It does not list Pulumi or OpenTofu in the curriculum, so it would be misleading to claim that students receive direct Pulumi or OpenTofu instruction.
The defensible connection is foundational. Terraform teaches you to reason about desired infrastructure, providers, provisioning and state, the concepts you need before you can intelligently evaluate whether OpenTofu compatibility or Pulumi's alternative engine gives your organization enough benefit to justify migration.
The wider toolset listed on the program page includes Docker, Kubernetes, Jenkins, Terraform, Git/GitHub, AWS, Azure, GCP, Prometheus and Grafana. The page's FAQ also names these technologies as core DevOps tools.
The named mentor is MSc Oskar Eriksson, Department of Software Engineering. Refonte's page describes him as having more than 10 years of experience across software engineering, full-stack development, cloud computing, DevOps and software optimization.
Upon successful completion, Refonte says participants receive a Training Certificate and Certificate of Internship. The page says outstanding performers may also receive a Letter of Recommendation, Certificate of Appreciation and prizes.
The program's current admission information states:
Program detail | Published information |
Duration | 3 months |
Weekly commitment | 12–14 hours |
Format | Online / virtual training-and-internship structure |
Prerequisite | Working toward a bachelor's or higher-level degree |
Career outcomes listed | DevOps Engineer, Cloud Engineer, Site Reliability Engineer |
One-time fee | $300 |
Installments | $204 + $98, totaling $302 |
The program page also displays marketing figures of “$102.5K+” starting compensation and “100K+” annual jobs for DevOps. Those figures do not show an independent labor-market methodology on the program page, so this article does not treat them as verified salary or job-opening statistics; the independently sourced 2026 salary data above is more appropriate for that purpose.
Readers looking for a wider career view can use the full 2026 DevOps engineer skills, salary, and roadmap breakdown, while this article stays focused on IaC migration judgment.
The practical value of the program in this context is therefore specific: it teaches Terraform and the surrounding DevOps stack from which state-management and provisioning judgment can be developed; it should not be presented as a Pulumi or OpenTofu course.
For the curriculum, eligibility and enrollment details, see the Refonte Learning DevOps Engineering Program.
FAQ: People Also Ask
Why did Pulumi add native Terraform/HCL support in 2026?
Pulumi positioned its Terraform, OpenTofu and HCL interoperability directly toward organizations with large existing Terraform estates and explicitly referenced dissatisfaction following IBM's acquisition of HashiCorp. One date nuance matters: Pulumi's original announcement was December 18, 2025; InfoQ published its widely cited coverage on January 17, 2026. By August 4, 2026, Pulumi described HCL and its Terraform backend as generally available.
Did IBM's acquisition of HashiCorp change Terraform's license?
No. HashiCorp announced Terraform's move to the Business Source License in August 2023, well before IBM completed the HashiCorp acquisition on February 27, 2025. IBM ownership changes the vendor-governance context, but it did not create the BSL change.
Has any major company actually migrated away from Terraform?
Yes. Fidelity Investments participated in a named public OpenTofu account published October 6, 2025 describing its Terraform-to-OpenTofu migration. Fidelity reported a Terraform/OpenTofu estate spanning more than 2,000 applications, 50,000 state files and four million cloud resources, but the case should be treated as evidence that a large-enterprise migration is viable, not proof of a market-wide exodus from Terraform.
Is OpenTofu still actively maintained in 2026?
Yes. OpenTofu released 1.12.0 on May 14, 2026, including dynamic prevent_destroy and import by resource identity, and GitHub lists 1.12.5, released July 21, as the latest version as of August 13, 2026. The 1.12.5 release contains security and bug fixes.
Should I migrate from Terraform because of the IBM acquisition alone?
No. First identify a concrete licensing, cost, support, governance or feature problem that migration would solve. If your Terraform estate works, your organization accepts the BSL and IBM/HashiCorp relationship, and a new platform produces no measurable benefit, ownership anxiety alone rarely justifies putting production state through a migration.
Does the Refonte Learning DevOps Engineering Program teach Pulumi or OpenTofu?
No. The current curriculum names “Infrastructure as Code with Terraform” and does not list Pulumi or OpenTofu. Its relevant value for this decision is learning Terraform-centered provisioning and state-management fundamentals that transfer to evaluating other IaC approaches; direct Pulumi and OpenTofu instruction should not be claimed.
IBM's $6.4 billion HashiCorp acquisition and Terraform's pre-existing BSL create a legitimate governance question, but they do not create an automatic engineering requirement to migrate. Pulumi deliberately targeted that uncertainty with Terraform/OpenTofu backend support, HCL support and its HashiCorp-contract “escape hatch.”
OpenTofu is an actively shipping alternative, not a frozen protest fork. Version 1.12.0 arrived May 14, 2026, version 1.12.5 followed July 21, and Fidelity provides a credible named example of a large organization executing the migration.
Your real decision driver should be the problem you need to solve. Licensing and independent governance point more naturally toward OpenTofu; mixed languages and gradual platform migration strengthen Pulumi's case; no material pain point usually strengthens the case for leaving a stable Terraform estate alone.
State-management competence matters more than which logo wins. A safe migration depends on backups, dependency mapping, clean plans, locking, controlled CI/CD changes, staged pilots and tested rollback, not on whether the destination command is terraform, tofu or pulumi.
For engineers who want the Terraform-based Infrastructure-as-Code and state-management foundation needed to evaluate Terraform, Pulumi or OpenTofu intelligently, the Refonte Learning DevOps Engineering Program is the structured starting point described in its current curriculum.
