components/opentofu 3.11.0-rc1

on GitLab

Changelog

[!tip]
Please review the changelog carefully to make use of the latest
and greatest features and to spot any deprecations or removals

that may cause a breaking change for your specific use case.

Added (5 changes)

• Support GITLAB_TOFU_REGISTRY, GITLAB_TOFU_REGISTRY_USER and... by @j.krefting (merge request)
  
• Allow to set mirrors for github.com via inputs for air-gapped environments by @rbinder-vg (merge request)
  
• Support custom CAs via GITLAB_TOFU_CUSTOM_CA environment variable by @rbinder-vg (merge request)
  
• Build and publish rootless job image by @jack1902 (merge request)
  
• Add id_tokens-related inputs for fetch-mr-plan in validate-plan-apply template by @albang (merge request)
  

Changed (2 changes)

• Deprecate GITLAB_TOFU_TOKEN in favor of GITLAB_TOFU_MR_PLAN_TOKEN by @j.krefting (merge request)
  
• Do not install tofu binary as symlink by @gfiasco88 (merge request)
  

Development (1 change)

• Add buildah debug option (merge request)
  

Other (9 changes)

• Merge branch 'feat/improve_token_naming' into 'main' (merge request)
  
• Merge branch 'feature/172-integration-tests' into 'main' (merge request)
  
• Merge branch 'feat/improve_oci_authentication' into 'main' (merge request)
  
• Merge branch 'feature/172-use-rootless-image' into 'main' (merge request)
  
• Merge branch 'marlonm-resolve183' into 'main' (merge request)
  
• Merge branch 'feature/172-publish-rootless-image' into 'main' (merge request)
  
• Merge branch 'buildah-debug' into 'main' (merge request)
  
• Merge branch 'marlonm-resolve182' into 'main' (merge request)
  
• Merge branch 'add-detect-drift-tests' into 'main' (merge request)
  

See the CHANGELOG.md file for the entire history.

Usage

You can use the OpenTofu CI/CD component from the CI/CD catalog using:

include:
  - component: gitlab.com/components/opentofu/full-pipeline@3.11.0-rc1
    inputs:
      opentofu_version: 1.10.6

stages: [validate, test, build, deploy, cleanup]

See the README.md for more usage examples.

Available OpenTofu versions

This release is available with the following OpenTofu versions:

• 1.10.6
  
• 1.10.5
  
• 1.10.0
  
• 1.9.3
  
• 1.8.11
  
• 1.7.10
  

Available GitLab OpenTofu images

This release deployed the following gitlab-opentofu images:

• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofulatest-debian
  
  • (digest: sha256:8416ac69af61087e583186c48c92737c180aeabb12d13d3c56eb2e6c39c7a9de)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofulatest-debian-rootless
  
  • (digest: sha256:d405ce4680b24201fca4e0280f90aa6f6fdc584a4088beb2c2d3e2535d953423)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofulatest-alpine
  
  • (digest: sha256:56480c0eb5a387dbd42d8e5d7bb2d73fbd7ee713b883b77f256f58eecc2162d3)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofulatest-alpine-rootless
  
  • (digest: sha256:42d5b92631a8fbd4e4a5304e82a4a84e9a2bf77becabfd3da948f8818e449b05)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.9.3-debian
  
  • (digest: sha256:b2929a43bb224032714f4a3b6f504cd0bf911b86085f3bb8859d5d316c437299)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.9.3-debian-rootless
  
  • (digest: sha256:a52205f8e2ac18566686c3ef434855659bc1059c5258d5012f8313c5c5096840)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.9.3-alpine
  
  • (digest: sha256:4db84b74ec4f0dcf13eb168cff650c57c9db264ca99396f014911ebcad0441f7)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.9.3-alpine-rootless
  
  • (digest: sha256:71f5f4c42cea08e42282f62260c828f4985be2b87cc738046977f28d108065fc)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.8.11-debian
  
  • (digest: sha256:8d2b49eab8862826bc299b8a96a56b99d4343f6214af29d24f7677c44d0aedf7)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.8.11-debian-rootless
  
  • (digest: sha256:fb961233c88faefe5acab1ddf1f80b9ec06681dee144586dfb01219037ea7544)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.8.11-alpine
  
  • (digest: sha256:b0ad0164a874deba520012a33f23e439246793809d0f47d3918fb523d63933e6)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.8.11-alpine-rootless
  
  • (digest: sha256:b549e9b23292420ab328d26692ed4cc7ac330f1c2e51b2c31dbfd251b86f9eaa)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.7.10-debian
  
  • (digest: sha256:fbfe4d15d390590834606e4edad6851b43b0c2fe969d0c1166c2b6968a409f8f)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.7.10-debian-rootless
  
  • (digest: sha256:dea651d114fd8b64bbccb8a6d25b4ba1d80a3857cc0ea144a06b80a61d95882c)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.7.10-alpine
  
  • (digest: sha256:d475dded1d2c8accafe89c887fa4f1b29a957779f48997938124eff18162f98c)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.7.10-alpine-rootless
  
  • (digest: sha256:73d1e3100b4b92def6088fc3a3926d26bb07d71a41759b7deb807d4c9ce7cd3d)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.6-debian
  
  • (digest: sha256:8416ac69af61087e583186c48c92737c180aeabb12d13d3c56eb2e6c39c7a9de)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.6-debian-rootless
  
  • (digest: sha256:d405ce4680b24201fca4e0280f90aa6f6fdc584a4088beb2c2d3e2535d953423)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.6-alpine
  
  • (digest: sha256:56480c0eb5a387dbd42d8e5d7bb2d73fbd7ee713b883b77f256f58eecc2162d3)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.6-alpine-rootless
  
  • (digest: sha256:42d5b92631a8fbd4e4a5304e82a4a84e9a2bf77becabfd3da948f8818e449b05)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.5-debian
  
  • (digest: sha256:93df1a2e4e248d4811bea3d31137b830e9d3bd45deecd0f99017ac5c4da82d6c)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.5-debian-rootless
  
  • (digest: sha256:2d7ebae9fef1acd15fd4477e009f4443e40f6cedc63cb1317820802e4e338280)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.5-alpine
  
  • (digest: sha256:4b273005395a9be08822ff7521b49a9d445b89fd4ad230fa8439f06418c4bfcb)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.5-alpine-rootless
  
  • (digest: sha256:665f26cdda343ad09081a263678bd6da2278a5d907f1a78aab1d9a2c69dc2e63)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.0-debian
  
  • (digest: sha256:b587805f2c31b54c9f86355cbcef1fc09f5903e13517e65f19cd60f2e25c9cea)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.0-debian-rootless
  
  • (digest: sha256:b959536cb88d7280e1bc3f1956032e2aaa8d2bb2b5bab5cf8e13699ec555aa93)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.0-alpine
  
  • (digest: sha256:d52b75946e68142f5ea91e4c932a96713f5e73836be18e76fb9c6cd5531cc953)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.0-alpine-rootless
  
  • (digest: sha256:07fab73b3ce29eda3eb1551bd124b14ec7f4c64de429989efdbd8795875ab765)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-debian
  
  • (digest: sha256:8416ac69af61087e583186c48c92737c180aeabb12d13d3c56eb2e6c39c7a9de)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-debian-rootless
  
  • (digest: sha256:d405ce4680b24201fca4e0280f90aa6f6fdc584a4088beb2c2d3e2535d953423)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-alpine
  
  • (digest: sha256:56480c0eb5a387dbd42d8e5d7bb2d73fbd7ee713b883b77f256f58eecc2162d3)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-alpine-rootless
  
  • (digest: sha256:42d5b92631a8fbd4e4a5304e82a4a84e9a2bf77becabfd3da948f8818e449b05)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofulatest-debian
  
  • (digest: sha256:8416ac69af61087e583186c48c92737c180aeabb12d13d3c56eb2e6c39c7a9de)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofulatest-debian-rootless
  
  • (digest: sha256:d405ce4680b24201fca4e0280f90aa6f6fdc584a4088beb2c2d3e2535d953423)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofulatest-alpine
  
  • (digest: sha256:56480c0eb5a387dbd42d8e5d7bb2d73fbd7ee713b883b77f256f58eecc2162d3)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofulatest-alpine-rootless
  
  • (digest: sha256:42d5b92631a8fbd4e4a5304e82a4a84e9a2bf77becabfd3da948f8818e449b05)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.9.3-debian
  
  • (digest: sha256:b2929a43bb224032714f4a3b6f504cd0bf911b86085f3bb8859d5d316c437299)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.9.3-debian-rootless
  
  • (digest: sha256:a52205f8e2ac18566686c3ef434855659bc1059c5258d5012f8313c5c5096840)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.9.3-alpine
  
  • (digest: sha256:4db84b74ec4f0dcf13eb168cff650c57c9db264ca99396f014911ebcad0441f7)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.9.3-alpine-rootless
  
  • (digest: sha256:71f5f4c42cea08e42282f62260c828f4985be2b87cc738046977f28d108065fc)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.8.11-debian
  
  • (digest: sha256:8d2b49eab8862826bc299b8a96a56b99d4343f6214af29d24f7677c44d0aedf7)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.8.11-debian-rootless
  
  • (digest: sha256:fb961233c88faefe5acab1ddf1f80b9ec06681dee144586dfb01219037ea7544)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.8.11-alpine
  
  • (digest: sha256:b0ad0164a874deba520012a33f23e439246793809d0f47d3918fb523d63933e6)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.8.11-alpine-rootless
  
  • (digest: sha256:b549e9b23292420ab328d26692ed4cc7ac330f1c2e51b2c31dbfd251b86f9eaa)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.7.10-debian
  
  • (digest: sha256:fbfe4d15d390590834606e4edad6851b43b0c2fe969d0c1166c2b6968a409f8f)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.7.10-debian-rootless
  
  • (digest: sha256:dea651d114fd8b64bbccb8a6d25b4ba1d80a3857cc0ea144a06b80a61d95882c)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.7.10-alpine
  
  • (digest: sha256:d475dded1d2c8accafe89c887fa4f1b29a957779f48997938124eff18162f98c)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.7.10-alpine-rootless
  
  • (digest: sha256:73d1e3100b4b92def6088fc3a3926d26bb07d71a41759b7deb807d4c9ce7cd3d)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.10.6-debian
  
  • (digest: sha256:8416ac69af61087e583186c48c92737c180aeabb12d13d3c56eb2e6c39c7a9de)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.10.6-debian-rootless
  
  • (digest: sha256:d405ce4680b24201fca4e0280f90aa6f6fdc584a4088beb2c2d3e2535d953423)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.10.6-alpine
  
  • (digest: sha256:56480c0eb5a387dbd42d8e5d7bb2d73fbd7ee713b883b77f256f58eecc2162d3)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.10.6-alpine-rootless
  
  • (digest: sha256:42d5b92631a8fbd4e4a5304e82a4a84e9a2bf77becabfd3da948f8818e449b05)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.10.5-debian
  
  • (digest: sha256:93df1a2e4e248d4811bea3d31137b830e9d3bd45deecd0f99017ac5c4da82d6c)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.10.5-debian-rootless
  
  • (digest: sha256:2d7ebae9fef1acd15fd4477e009f4443e40f6cedc63cb1317820802e4e338280)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.10.5-alpine
  
  • (digest: sha256:4b273005395a9be08822ff7521b49a9d445b89fd4ad230fa8439f06418c4bfcb)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.10.5-alpine-rootless
  
  • (digest: sha256:665f26cdda343ad09081a263678bd6da2278a5d907f1a78aab1d9a2c69dc2e63)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.10.0-debian
  
  • (digest: sha256:b587805f2c31b54c9f86355cbcef1fc09f5903e13517e65f19cd60f2e25c9cea)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.10.0-debian-rootless
  
  • (digest: sha256:b959536cb88d7280e1bc3f1956032e2aaa8d2bb2b5bab5cf8e13699ec555aa93)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.10.0-alpine
  
  • (digest: sha256:d52b75946e68142f5ea91e4c932a96713f5e73836be18e76fb9c6cd5531cc953)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-opentofu1.10.0-alpine-rootless
  
  • (digest: sha256:07fab73b3ce29eda3eb1551bd124b14ec7f4c64de429989efdbd8795875ab765)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-debian
  
  • (digest: sha256:8416ac69af61087e583186c48c92737c180aeabb12d13d3c56eb2e6c39c7a9de)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-debian-rootless
  
  • (digest: sha256:d405ce4680b24201fca4e0280f90aa6f6fdc584a4088beb2c2d3e2535d953423)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-alpine
  
  • (digest: sha256:56480c0eb5a387dbd42d8e5d7bb2d73fbd7ee713b883b77f256f58eecc2162d3)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-alpine-rootless
  
  • (digest: sha256:42d5b92631a8fbd4e4a5304e82a4a84e9a2bf77becabfd3da948f8818e449b05)
    

The images are available for the following platforms:

• linux/amd64
  
• linux/arm64
  

And with the follow base OS images:

• alpine, use base_os: alpine input to use it (default).
  
• debian, use base_os: debian input to use it.
  

And with either the root user (default) or gitlab-tofu user (rootless images).
The rootless images have the -rootless suffix.

The images have been signed with cosign and can be verified with the following command:

cosign verify \
  "registry.gitlab.com/components/opentofu/gitlab-opentofu:3.11.0-rc1-alpine" \
  --certificate-identity "https://gitlab.com/components/opentofu//.gitlab-ci.yml@refs/tags/3.11.0-rc1" \
  --certificate-oidc-issuer "https://gitlab.com"

The image_digest input can be used to strictly pull by the image digest.
The image_digest input value needs to have the format of @<type>:<hash>
where <type>:<hash> is the digest value from the images list above.

[!note]
When using the component with the inputs version and opentofu_version,
then the image tag is constructed with the following pattern: <version>-opentofu<opentofu_version>.

Read more about versioning and releases here.