I highly appreciate what Terraform does for me and the whole industry. I also think sometimes why i don't like it very much and how i would make it different.

I highly appreciate what Terraform does for me and the whole industry. I also think sometimes why i don't like it very much and how i would make it different. How the state is handled, including potential secrets in it, is just frustrating. Having root secrets for your whole setup exposed/unsecure is bad. The state is relativly fragile and cumbersome to clean up or fix. I also can't grasp that tf even needs a state and the cloud providers can't return the current state just fast enough. Only a lightweight cache would then be needed. And probably due to implementation details, plans show sometimes changes when there would be no changes necessary. For me its a good tradeoff to use terraform for setting up a k8s environment and then handling everything with ArgoCD. Google Connector is a very great thought: you create a k8s resource and the cloud provider executes it for you on their cloud. No terraform needed anymore at all.