components/opentofu 3.11.0

on GitLab

Changelog

[!tip]
Please review the changelog carefully to make use of the latest
and greatest features and to spot any deprecations or removals

that may cause a breaking change for your specific use case.

Added (6 changes)

• Add rootless images to news section
  
• Support GITLAB_TOFU_REGISTRY, GITLAB_TOFU_REGISTRY_USER and... by @j.krefting (merge request)
  
• Allow to set mirrors for github.com via inputs for air-gapped environments by @rbinder-vg (merge request)
  
• Support custom CAs via GITLAB_TOFU_CUSTOM_CA environment variable by @rbinder-vg (merge request)
  
• Build and publish rootless job image by @jack1902 (merge request)
  
• Add id_tokens-related inputs for fetch-mr-plan in validate-plan-apply template by @albang (merge request)
  

Changed (2 changes)

• Deprecate GITLAB_TOFU_TOKEN in favor of GITLAB_TOFU_MR_PLAN_TOKEN by @j.krefting (merge request)
  
• Do not install tofu binary as symlink by @gfiasco88 (merge request)
  

Development (1 change)

• Add buildah debug option (merge request)
  

Other (9 changes)

• Merge branch 'feat/improve_token_naming' into 'main' (merge request)
  
• Merge branch 'feature/172-integration-tests' into 'main' (merge request)
  
• Merge branch 'feat/improve_oci_authentication' into 'main' (merge request)
  
• Merge branch 'feature/172-use-rootless-image' into 'main' (merge request)
  
• Merge branch 'marlonm-resolve183' into 'main' (merge request)
  
• Merge branch 'feature/172-publish-rootless-image' into 'main' (merge request)
  
• Merge branch 'buildah-debug' into 'main' (merge request)
  
• Merge branch 'marlonm-resolve182' into 'main' (merge request)
  
• Merge branch 'add-detect-drift-tests' into 'main' (merge request)
  

See the CHANGELOG.md file for the entire history.

Usage

You can use the OpenTofu CI/CD component from the CI/CD catalog using:

include:
  - component: gitlab.com/components/opentofu/full-pipeline@3.11.0
    inputs:
      opentofu_version: 1.10.6

stages: [validate, test, build, deploy, cleanup]

See the README.md for more usage examples.

Available OpenTofu versions

This release is available with the following OpenTofu versions:

• 1.10.6
  
• 1.10.5
  
• 1.10.0
  
• 1.9.3
  
• 1.8.11
  
• 1.7.10
  

Available GitLab OpenTofu images

This release deployed the following gitlab-opentofu images:

• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofulatest-debian
  
  • (digest: sha256:00e392a894b7eb39dce44d25fd847e2885caa6b42b59b54c39779a1589440ae2)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofulatest-debian-rootless
  
  • (digest: sha256:a103273c34d3018df01815301fb761f1e785188365ff15ee219f91fa2a304c2d)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofulatest-alpine
  
  • (digest: sha256:56480c0eb5a387dbd42d8e5d7bb2d73fbd7ee713b883b77f256f58eecc2162d3)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofulatest-alpine-rootless
  
  • (digest: sha256:fde409fa8a009550543994bfdebf5020b884fba362ccdc5e56e935ad1a3f5cc0)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.9.3-debian
  
  • (digest: sha256:8ec503c8f5cf73723d35a83c1ea806df621284461c1fdd6626635d3329bdee71)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.9.3-debian-rootless
  
  • (digest: sha256:435e24eb2227b9bc5e98d20934d712073d7a0794c2be8c3f2449f131d9eadb75)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.9.3-alpine
  
  • (digest: sha256:4db84b74ec4f0dcf13eb168cff650c57c9db264ca99396f014911ebcad0441f7)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.9.3-alpine-rootless
  
  • (digest: sha256:71f5f4c42cea08e42282f62260c828f4985be2b87cc738046977f28d108065fc)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.8.11-debian
  
  • (digest: sha256:27a1f4ba33258241171b3553a068e0ee279f3a03c93d612982da7e04c19fda1e)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.8.11-debian-rootless
  
  • (digest: sha256:a42302945fcefc55b0f79c1124be5ad26b41a4878a861ec249f29628edc24943)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.8.11-alpine
  
  • (digest: sha256:b0ad0164a874deba520012a33f23e439246793809d0f47d3918fb523d63933e6)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.8.11-alpine-rootless
  
  • (digest: sha256:b549e9b23292420ab328d26692ed4cc7ac330f1c2e51b2c31dbfd251b86f9eaa)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.7.10-debian
  
  • (digest: sha256:09c748992fc74325a1c99d460ff5d9f4800656037e034d9148faabcfea7136ab)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.7.10-debian-rootless
  
  • (digest: sha256:52703ff30d79574afcc86df463a130550c953d19dfcc0ec3e4e4c2c46e4ee0d2)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.7.10-alpine
  
  • (digest: sha256:d475dded1d2c8accafe89c887fa4f1b29a957779f48997938124eff18162f98c)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.7.10-alpine-rootless
  
  • (digest: sha256:73d1e3100b4b92def6088fc3a3926d26bb07d71a41759b7deb807d4c9ce7cd3d)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.6-debian
  
  • (digest: sha256:00e392a894b7eb39dce44d25fd847e2885caa6b42b59b54c39779a1589440ae2)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.6-debian-rootless
  
  • (digest: sha256:a103273c34d3018df01815301fb761f1e785188365ff15ee219f91fa2a304c2d)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.6-alpine
  
  • (digest: sha256:56480c0eb5a387dbd42d8e5d7bb2d73fbd7ee713b883b77f256f58eecc2162d3)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.6-alpine-rootless
  
  • (digest: sha256:fde409fa8a009550543994bfdebf5020b884fba362ccdc5e56e935ad1a3f5cc0)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.5-debian
  
  • (digest: sha256:320aad92c8fb71c18d26c88b71443d36883d9048e607b5b533bccadeb7538699)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.5-debian-rootless
  
  • (digest: sha256:25a2cfc7111cd74b3c609a355199c43081dd356f0268e8407d68df90966f66b6)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.5-alpine
  
  • (digest: sha256:2421520e1d9ebb442cfef80ecfa51f4d75797b189cf839fbef60ec5f9225ad6b)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.5-alpine-rootless
  
  • (digest: sha256:665f26cdda343ad09081a263678bd6da2278a5d907f1a78aab1d9a2c69dc2e63)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.0-debian
  
  • (digest: sha256:a499279c8c7c815df0d1ed30e4ec0c06b53557921f94633820ceb9c51a56e73d)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.0-debian-rootless
  
  • (digest: sha256:a21aca37b162849a0c7a95a92be0aee530fa71dc6a28808d51c59301f9d1172c)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.0-alpine
  
  • (digest: sha256:5c7a7a7f3b7b93db43cad90114aaefafc9b087a1c3a361bc4c7fa6a9523d7e0a)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.0-alpine-rootless
  
  • (digest: sha256:5306732c76bdd7f2a27dd6fd0fb761a43c3795a87fee4615c5d14d671fadd52c)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-debian
  
  • (digest: sha256:00e392a894b7eb39dce44d25fd847e2885caa6b42b59b54c39779a1589440ae2)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-debian-rootless
  
  • (digest: sha256:a103273c34d3018df01815301fb761f1e785188365ff15ee219f91fa2a304c2d)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-alpine
  
  • (digest: sha256:56480c0eb5a387dbd42d8e5d7bb2d73fbd7ee713b883b77f256f58eecc2162d3)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-alpine-rootless
  
  • (digest: sha256:fde409fa8a009550543994bfdebf5020b884fba362ccdc5e56e935ad1a3f5cc0)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofulatest-debian
  
  • (digest: sha256:00e392a894b7eb39dce44d25fd847e2885caa6b42b59b54c39779a1589440ae2)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofulatest-debian-rootless
  
  • (digest: sha256:a103273c34d3018df01815301fb761f1e785188365ff15ee219f91fa2a304c2d)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofulatest-alpine
  
  • (digest: sha256:56480c0eb5a387dbd42d8e5d7bb2d73fbd7ee713b883b77f256f58eecc2162d3)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofulatest-alpine-rootless
  
  • (digest: sha256:fde409fa8a009550543994bfdebf5020b884fba362ccdc5e56e935ad1a3f5cc0)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.9.3-debian
  
  • (digest: sha256:8ec503c8f5cf73723d35a83c1ea806df621284461c1fdd6626635d3329bdee71)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.9.3-debian-rootless
  
  • (digest: sha256:435e24eb2227b9bc5e98d20934d712073d7a0794c2be8c3f2449f131d9eadb75)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.9.3-alpine
  
  • (digest: sha256:4db84b74ec4f0dcf13eb168cff650c57c9db264ca99396f014911ebcad0441f7)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.9.3-alpine-rootless
  
  • (digest: sha256:71f5f4c42cea08e42282f62260c828f4985be2b87cc738046977f28d108065fc)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.8.11-debian
  
  • (digest: sha256:27a1f4ba33258241171b3553a068e0ee279f3a03c93d612982da7e04c19fda1e)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.8.11-debian-rootless
  
  • (digest: sha256:a42302945fcefc55b0f79c1124be5ad26b41a4878a861ec249f29628edc24943)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.8.11-alpine
  
  • (digest: sha256:b0ad0164a874deba520012a33f23e439246793809d0f47d3918fb523d63933e6)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.8.11-alpine-rootless
  
  • (digest: sha256:b549e9b23292420ab328d26692ed4cc7ac330f1c2e51b2c31dbfd251b86f9eaa)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.7.10-debian
  
  • (digest: sha256:09c748992fc74325a1c99d460ff5d9f4800656037e034d9148faabcfea7136ab)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.7.10-debian-rootless
  
  • (digest: sha256:52703ff30d79574afcc86df463a130550c953d19dfcc0ec3e4e4c2c46e4ee0d2)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.7.10-alpine
  
  • (digest: sha256:d475dded1d2c8accafe89c887fa4f1b29a957779f48997938124eff18162f98c)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.7.10-alpine-rootless
  
  • (digest: sha256:73d1e3100b4b92def6088fc3a3926d26bb07d71a41759b7deb807d4c9ce7cd3d)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.10.6-debian
  
  • (digest: sha256:00e392a894b7eb39dce44d25fd847e2885caa6b42b59b54c39779a1589440ae2)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.10.6-debian-rootless
  
  • (digest: sha256:a103273c34d3018df01815301fb761f1e785188365ff15ee219f91fa2a304c2d)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.10.6-alpine
  
  • (digest: sha256:56480c0eb5a387dbd42d8e5d7bb2d73fbd7ee713b883b77f256f58eecc2162d3)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.10.6-alpine-rootless
  
  • (digest: sha256:fde409fa8a009550543994bfdebf5020b884fba362ccdc5e56e935ad1a3f5cc0)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.10.5-debian
  
  • (digest: sha256:320aad92c8fb71c18d26c88b71443d36883d9048e607b5b533bccadeb7538699)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.10.5-debian-rootless
  
  • (digest: sha256:25a2cfc7111cd74b3c609a355199c43081dd356f0268e8407d68df90966f66b6)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.10.5-alpine
  
  • (digest: sha256:2421520e1d9ebb442cfef80ecfa51f4d75797b189cf839fbef60ec5f9225ad6b)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.10.5-alpine-rootless
  
  • (digest: sha256:665f26cdda343ad09081a263678bd6da2278a5d907f1a78aab1d9a2c69dc2e63)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.10.0-debian
  
  • (digest: sha256:a499279c8c7c815df0d1ed30e4ec0c06b53557921f94633820ceb9c51a56e73d)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.10.0-debian-rootless
  
  • (digest: sha256:a21aca37b162849a0c7a95a92be0aee530fa71dc6a28808d51c59301f9d1172c)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.10.0-alpine
  
  • (digest: sha256:5c7a7a7f3b7b93db43cad90114aaefafc9b087a1c3a361bc4c7fa6a9523d7e0a)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-opentofu1.10.0-alpine-rootless
  
  • (digest: sha256:5306732c76bdd7f2a27dd6fd0fb761a43c3795a87fee4615c5d14d671fadd52c)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-debian
  
  • (digest: sha256:00e392a894b7eb39dce44d25fd847e2885caa6b42b59b54c39779a1589440ae2)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-debian-rootless
  
  • (digest: sha256:a103273c34d3018df01815301fb761f1e785188365ff15ee219f91fa2a304c2d)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-alpine
  
  • (digest: sha256:56480c0eb5a387dbd42d8e5d7bb2d73fbd7ee713b883b77f256f58eecc2162d3)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-alpine-rootless
  
  • (digest: sha256:fde409fa8a009550543994bfdebf5020b884fba362ccdc5e56e935ad1a3f5cc0)
    

The images are available for the following platforms:

• linux/amd64
  
• linux/arm64
  

And with the follow base OS images:

• alpine, use base_os: alpine input to use it (default).
  
• debian, use base_os: debian input to use it.
  

And with either the root user (default) or gitlab-tofu user (rootless images).
The rootless images have the -rootless suffix.

The images have been signed with cosign and can be verified with the following command:

cosign verify \
  "registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-alpine" \
  --certificate-identity "https://gitlab.com/components/opentofu//.gitlab-ci.yml@refs/tags/3.11.0" \
  --certificate-oidc-issuer "https://gitlab.com"

The image_digest input can be used to strictly pull by the image digest.
The image_digest input value needs to have the format of @<type>:<hash>
where <type>:<hash> is the digest value from the images list above.

[!note]
When using the component with the inputs version and opentofu_version,
then the image tag is constructed with the following pattern: <version>-opentofu<opentofu_version>.

Read more about versioning and releases here.