OpenTofu is a drop-in replacement for Terraform, so aside from changing the binary, it only needs some minor adjustments.
All secrets are automatically generated and synced with External Secrets, so there are (almost?) no cases where I have a Kubernetes Secret YAML on disk. Additionally, k8s-at-home is deprecated.
Just run static checks in pre-commit, we have Terratest for validate
