License exception for Terraform Provider SDK

[stefanprodan]

Any CNCF project that offers a Terraform Provider for installation purposes imports the following Hashicorp Go packages (MPL 2.0):

github.com/hashicorp/terraform-plugin-docs
github.com/hashicorp/terraform-plugin-framework
github.com/hashicorp/terraform-plugin-framework-timeouts
github.com/hashicorp/terraform-plugin-framework-validators
github.com/hashicorp/terraform-plugin-go
github.com/hashicorp/terraform-plugin-log
github.com/hashicorp/terraform-plugin-sdk
github.com/hashicorp/terraform-plugin-testing

For the Flux project we offer such a provider here https://github.com/fluxcd/terraform-provider-flux. Harbor, AthenZ and potentially many more CNCF projects maintain such providers.

Given that several Hashicorp Go packages are already in the CNCF exceptions list, I propose we add the Terraform Provider SDK ones as well.

xref:

• https://github.com/cncf/foundation/issues/617
• https://github.com/fluxcd/flux2/issues/4156

[imjasonh]

https://github.com/ko-build/terraform-provider-ko

[leogr]

+1

A Falco side project (https://github.com/falcosecurity/kilt) makes use of:

• github.com/hashicorp/terraform-plugin-framework
• github.com/hashicorp/terraform-plugin-go

[mkilchhofer]

@amye is there already an ETA for this decision?

Argoproj is also waiting on that decision to continue with:

• https://github.com/oboukili/terraform-provider-argocd/issues/323

[krook]

On March 21, 2024, the Governing Board approved an exception to allow CNCF projects to use these dependencies under MPL-2.0, so long as they are used in unmodified form by linking to the dependency at build time.

[stefanprodan]

Great news, thanks @krook