all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe6b:3490
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: 23a9762a-15be-41cd-b349-1a8e298528ca
        host_id: 25afcdcd4b24cc9d1766f11f81549380a3029030a455889bb61ec093
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe6b:3490
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.0.110
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.193.109
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe6b:3490
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job yamllint explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#59>'
      - '<Job yamllint explicit: None implied: None source: osism/terraform-base/.zuul.yaml@main#13>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 3d3893eb765b4fc3bdcbe44a7e93f9fc
      build_refs:
      - branch: main
        change: '95'
        change_message: "chore(deps): update dependency opentofu/opentofu to v1.11.1\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [opentofu/opentofu](https://redirect.github.com/opentofu/opentofu) | minor
          | `1.10.6` -> `1.11.1` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>opentofu/opentofu
          (opentofu/opentofu)</summary>\n\n### [`v1.11.1`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.11.1)\n\n[Compare
          Source](https://redirect.github.com/opentofu/opentofu/compare/v1.11.0-rc2...v1.11.1)\n\nBUG
          FIXES:\n\n- Fixed regression where import validation would incorrectly flag
          variables used in for\\_each statements within import blocks ([#&#8203;3564](https://redirect.github.com/opentofu/opentofu/pull/3564))\n-
          Fixed lifecycle enabled serialization in plan file ([#&#8203;3566](https://redirect.github.com/opentofu/opentofu/pull/3566))\n-
          Fixed regression when validating import.id expressions ([#&#8203;3567](https://redirect.github.com/opentofu/opentofu/pull/3567))\n\n**Full
          Changelog**: <https://github.com/opentofu/opentofu/compare/v1.11.0...v1.11.1>\n\n###
          [`v1.11.0`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.11.0)\n\n[Compare
          Source](https://redirect.github.com/opentofu/opentofu/compare/v1.10.8...v1.11.0-rc2)\n\n###
          OpenTofu 1.11.0\n\nWe're proud to announce that OpenTofu 1.11.0 is now officially
          available! \U0001F389\n\n#### Highlights\n\nThis release cycle introduces
          major new capabilities and integrations:\n\n##### Ephemeral Values and Write
          Only Attributes\n\nEphemeral resources allow you to work with confidential
          data, temporary credentials, and transient infrastructure without persisting
          them to your state.\n\n```hcl\nephemeral \"aws_secretsmanager_random_password\"
          \"password\" {\n\n}\n\nresource \"kubernetes_secret_v1\" \"credentials\"
          {\n  metadata {\n    name = \"admin\"\n    namespace = \"my-app\"\n  }\n
          \ data_wo = {\n    username = \"admin\"\n    password = ephemeral.aws_secretsmanager_random_password.password.random_password\n
          \ }\n\n  data_wo_revision = 1\n  type = \"kubernetes.io/basic-auth\"\n}\n```\n\n#####
          The `enabled` Meta-Argument\n\nIf you want to conditionally deploy a resource,
          you no longer have to use `count = var.create_my_resource ? 1 : 0`, you
          can now add the new `enabled` meta-argument to your resource to conditionally
          deploy it.\n\n```hcl\nresource \"aws_instance\" \"web\" {\n  ami           =
          \"ami-12345\"\n  instance_type = \"t3.micro\"\n\n  lifecycle {\n    enabled
          = var.create_instance  # Simple boolean condition\n  }\n}\n```\n\n#### Compatibility
          Notes\n\n- macOS: Requires macOS 12 Monterey or later\n\n- **Azure Backend
          (`azurerm`)**:\n  - The `endpoint` and `ARM_ENDPOINT` configuration options
          are no longer supported\n  - The `msi_endpoint` and `ARM_MSI_ENDPOINT` options
          are no longer supported\n  - The `environment` and `metadata_host` arguments
          are now mutually exclusive\n\n- **issensitive() Function**: Now correctly
          returns unknown results when evaluating unknown values. Code that previously
          relied on the incorrect behavior may need updates.\n\n- **Testing with Mocks**:
          Mock values generated during testing now strictly adhere to provider schemas.
          Test configurations with invalid mock values will need to be corrected.\n\n-
          **S3 Module Installation**: When installing module packages from Amazon
          S3 buckets using S3 source addresses OpenTofu will use the same credentials
          as the AWS CLI and SDK.\n\n- **TLS and SSH Security**:\n  - SHA-1 signatures
          are no longer accepted for TLS or SSH connections\n  - SSH certificates
          must comply with the `draft-miller-ssh-cert-03` specification\n\n#### Reference\n\n-
          [Full Changelog](https://redirect.github.com/opentofu/opentofu/blob/v1.11/CHANGELOG.md)\n-
          [Blog Post](https://opentofu.org/blog/opentofu-1-11-0)\n\nThank you for
          your continued support and testing of the OpenTofu project!\n\n### [`v1.10.8`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.10.8)\n\n[Compare
          Source](https://redirect.github.com/opentofu/opentofu/compare/v1.10.7...v1.10.8)\n\nSECURITY
          ADVISORIES:\n\nThis release contains fixes for some security advisories
          related to previous releases in this series.\n\n- Incorrect handling of
          excluded subdomain constraint in conjunction with TLS certificates containing
          wildcard SANs\n\n  This release incorporates the upstream fixes for [GO-2025-4175](https://pkg.go.dev/vuln/GO-2025-4175).\n\n-
          Excessive CPU usage when reporting error about crafted TLS certificate with
          many hostnames\n\n  This release incorporates the upstream fixes for [GO-2025-4155](https://pkg.go.dev/vuln/GO-2025-4155).\n\n**Full
          Changelog**: <https://github.com/opentofu/opentofu/compare/v1.10.7...v1.10.8>\n\n###
          [`v1.10.7`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.10.7)\n\n[Compare
          Source](https://redirect.github.com/opentofu/opentofu/compare/v1.10.6...v1.10.7)\n\nSECURITY
          ADVISORIES:\n\nThis release contains fixes for some security advisories
          related to previous releases in this series.\n\n- `tofu init` in OpenTofu
          v1.10.6 and earlier could potentially use unbounded memory if there is a
          direct or indirect dependency on a maliciously-crafted module package distributed
          as a \"tar\" archive.\n\n  This would require the attacker to coerce a root
          module author to depend (directly or indirectly) on a module package they
          control, using the HTTP, Amazon S3, or Google Cloud Storage source types
          to refer to a tar archive.\n\n  This release incorporates the upstream fixes
          for [CVE-2025-58183](https://www.cve.org/CVERecord?id=CVE-2025-58183).\n\n-
          When making requests to HTTPS servers, OpenTofu v1.10.6 and earlier could
          potentially use unbounded memory or crash with a \"panic\" error if TLS
          verification involves an excessively-long certificate chain or a chain including
          DSA public keys.\n\n  This affected all outgoing HTTPS requests made by
          OpenTofu itself, including requests to HTTPS-based state storage backends,
          module registries, and provider registries. For example, an attacker could
          coerce a root module author to depend (directly or indirectly) on a module
          they control which then refers to a module or provider from an attacker-controlled
          registry. That mode of attack would cause failures in `tofu init`, at module
          or provider installation time.\n\n  Provider plugins contain their own HTTPS
          client code, which may have similar problems. OpenTofu v1.10.7 cannot address
          similar problems within provider plugins, and so we recommend checking for
          similar advisories and fixes in the provider plugins you use.\n\n  This
          release incorporates upstream fixes for [CVE-2025-58185](https://www.cve.org/CVERecord?id=CVE-2025-58185),
          [CVE-2025-58187](https://www.cve.org/CVERecord?id=CVE-2025-58187), and [CVE-2025-58188](https://www.cve.org/CVERecord?id=CVE-2025-58188).\n\nBUG
          FIXES:\n\n- Fix crash in tofu test when using deprecated outputs ([#&#8203;3249](https://redirect.github.com/opentofu/opentofu/pull/3249))\n-
          Fix missing provider functions when parentheses are used ([#&#8203;3402](https://redirect.github.com/opentofu/opentofu/pull/3402))\n-
          `for_each` inside `dynamic` blocks can now call provider-defined functions.
          ([#&#8203;3429](https://redirect.github.com/opentofu/opentofu/issues/3429))\n\n**Full
          Changelog**: <https://github.com/opentofu/opentofu/compare/v1.10.6...v1.10.7>\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
          tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR
          and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/osism/terraform-base).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTkuNCIsInVwZGF0ZWRJblZlciI6IjQyLjQyLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/osism/terraform-base/pull/95
        commit_id: d93fe7e44dbcc1f6e8420e1bff7efa370778194f
        patchset: d93fe7e44dbcc1f6e8420e1bff7efa370778194f
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/terraform-base
          name: osism/terraform-base
          short_name: terraform-base
        src_dir: src/github.com/osism/terraform-base
        topic: null
      buildset: 19d0824ff75c403aa47678af54a1a04b
      buildset_refs:
      - branch: main
        change: '95'
        change_message: "chore(deps): update dependency opentofu/opentofu to v1.11.1\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [opentofu/opentofu](https://redirect.github.com/opentofu/opentofu) | minor
          | `1.10.6` -> `1.11.1` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>opentofu/opentofu
          (opentofu/opentofu)</summary>\n\n### [`v1.11.1`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.11.1)\n\n[Compare
          Source](https://redirect.github.com/opentofu/opentofu/compare/v1.11.0-rc2...v1.11.1)\n\nBUG
          FIXES:\n\n- Fixed regression where import validation would incorrectly flag
          variables used in for\\_each statements within import blocks ([#&#8203;3564](https://redirect.github.com/opentofu/opentofu/pull/3564))\n-
          Fixed lifecycle enabled serialization in plan file ([#&#8203;3566](https://redirect.github.com/opentofu/opentofu/pull/3566))\n-
          Fixed regression when validating import.id expressions ([#&#8203;3567](https://redirect.github.com/opentofu/opentofu/pull/3567))\n\n**Full
          Changelog**: <https://github.com/opentofu/opentofu/compare/v1.11.0...v1.11.1>\n\n###
          [`v1.11.0`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.11.0)\n\n[Compare
          Source](https://redirect.github.com/opentofu/opentofu/compare/v1.10.8...v1.11.0-rc2)\n\n###
          OpenTofu 1.11.0\n\nWe're proud to announce that OpenTofu 1.11.0 is now officially
          available! \U0001F389\n\n#### Highlights\n\nThis release cycle introduces
          major new capabilities and integrations:\n\n##### Ephemeral Values and Write
          Only Attributes\n\nEphemeral resources allow you to work with confidential
          data, temporary credentials, and transient infrastructure without persisting
          them to your state.\n\n```hcl\nephemeral \"aws_secretsmanager_random_password\"
          \"password\" {\n\n}\n\nresource \"kubernetes_secret_v1\" \"credentials\"
          {\n  metadata {\n    name = \"admin\"\n    namespace = \"my-app\"\n  }\n
          \ data_wo = {\n    username = \"admin\"\n    password = ephemeral.aws_secretsmanager_random_password.password.random_password\n
          \ }\n\n  data_wo_revision = 1\n  type = \"kubernetes.io/basic-auth\"\n}\n```\n\n#####
          The `enabled` Meta-Argument\n\nIf you want to conditionally deploy a resource,
          you no longer have to use `count = var.create_my_resource ? 1 : 0`, you
          can now add the new `enabled` meta-argument to your resource to conditionally
          deploy it.\n\n```hcl\nresource \"aws_instance\" \"web\" {\n  ami           =
          \"ami-12345\"\n  instance_type = \"t3.micro\"\n\n  lifecycle {\n    enabled
          = var.create_instance  # Simple boolean condition\n  }\n}\n```\n\n#### Compatibility
          Notes\n\n- macOS: Requires macOS 12 Monterey or later\n\n- **Azure Backend
          (`azurerm`)**:\n  - The `endpoint` and `ARM_ENDPOINT` configuration options
          are no longer supported\n  - The `msi_endpoint` and `ARM_MSI_ENDPOINT` options
          are no longer supported\n  - The `environment` and `metadata_host` arguments
          are now mutually exclusive\n\n- **issensitive() Function**: Now correctly
          returns unknown results when evaluating unknown values. Code that previously
          relied on the incorrect behavior may need updates.\n\n- **Testing with Mocks**:
          Mock values generated during testing now strictly adhere to provider schemas.
          Test configurations with invalid mock values will need to be corrected.\n\n-
          **S3 Module Installation**: When installing module packages from Amazon
          S3 buckets using S3 source addresses OpenTofu will use the same credentials
          as the AWS CLI and SDK.\n\n- **TLS and SSH Security**:\n  - SHA-1 signatures
          are no longer accepted for TLS or SSH connections\n  - SSH certificates
          must comply with the `draft-miller-ssh-cert-03` specification\n\n#### Reference\n\n-
          [Full Changelog](https://redirect.github.com/opentofu/opentofu/blob/v1.11/CHANGELOG.md)\n-
          [Blog Post](https://opentofu.org/blog/opentofu-1-11-0)\n\nThank you for
          your continued support and testing of the OpenTofu project!\n\n### [`v1.10.8`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.10.8)\n\n[Compare
          Source](https://redirect.github.com/opentofu/opentofu/compare/v1.10.7...v1.10.8)\n\nSECURITY
          ADVISORIES:\n\nThis release contains fixes for some security advisories
          related to previous releases in this series.\n\n- Incorrect handling of
          excluded subdomain constraint in conjunction with TLS certificates containing
          wildcard SANs\n\n  This release incorporates the upstream fixes for [GO-2025-4175](https://pkg.go.dev/vuln/GO-2025-4175).\n\n-
          Excessive CPU usage when reporting error about crafted TLS certificate with
          many hostnames\n\n  This release incorporates the upstream fixes for [GO-2025-4155](https://pkg.go.dev/vuln/GO-2025-4155).\n\n**Full
          Changelog**: <https://github.com/opentofu/opentofu/compare/v1.10.7...v1.10.8>\n\n###
          [`v1.10.7`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.10.7)\n\n[Compare
          Source](https://redirect.github.com/opentofu/opentofu/compare/v1.10.6...v1.10.7)\n\nSECURITY
          ADVISORIES:\n\nThis release contains fixes for some security advisories
          related to previous releases in this series.\n\n- `tofu init` in OpenTofu
          v1.10.6 and earlier could potentially use unbounded memory if there is a
          direct or indirect dependency on a maliciously-crafted module package distributed
          as a \"tar\" archive.\n\n  This would require the attacker to coerce a root
          module author to depend (directly or indirectly) on a module package they
          control, using the HTTP, Amazon S3, or Google Cloud Storage source types
          to refer to a tar archive.\n\n  This release incorporates the upstream fixes
          for [CVE-2025-58183](https://www.cve.org/CVERecord?id=CVE-2025-58183).\n\n-
          When making requests to HTTPS servers, OpenTofu v1.10.6 and earlier could
          potentially use unbounded memory or crash with a \"panic\" error if TLS
          verification involves an excessively-long certificate chain or a chain including
          DSA public keys.\n\n  This affected all outgoing HTTPS requests made by
          OpenTofu itself, including requests to HTTPS-based state storage backends,
          module registries, and provider registries. For example, an attacker could
          coerce a root module author to depend (directly or indirectly) on a module
          they control which then refers to a module or provider from an attacker-controlled
          registry. That mode of attack would cause failures in `tofu init`, at module
          or provider installation time.\n\n  Provider plugins contain their own HTTPS
          client code, which may have similar problems. OpenTofu v1.10.7 cannot address
          similar problems within provider plugins, and so we recommend checking for
          similar advisories and fixes in the provider plugins you use.\n\n  This
          release incorporates upstream fixes for [CVE-2025-58185](https://www.cve.org/CVERecord?id=CVE-2025-58185),
          [CVE-2025-58187](https://www.cve.org/CVERecord?id=CVE-2025-58187), and [CVE-2025-58188](https://www.cve.org/CVERecord?id=CVE-2025-58188).\n\nBUG
          FIXES:\n\n- Fix crash in tofu test when using deprecated outputs ([#&#8203;3249](https://redirect.github.com/opentofu/opentofu/pull/3249))\n-
          Fix missing provider functions when parentheses are used ([#&#8203;3402](https://redirect.github.com/opentofu/opentofu/pull/3402))\n-
          `for_each` inside `dynamic` blocks can now call provider-defined functions.
          ([#&#8203;3429](https://redirect.github.com/opentofu/opentofu/issues/3429))\n\n**Full
          Changelog**: <https://github.com/opentofu/opentofu/compare/v1.10.6...v1.10.7>\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
          tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR
          and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/osism/terraform-base).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTkuNCIsInVwZGF0ZWRJblZlciI6IjQyLjQyLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/osism/terraform-base/pull/95
        commit_id: d93fe7e44dbcc1f6e8420e1bff7efa370778194f
        patchset: d93fe7e44dbcc1f6e8420e1bff7efa370778194f
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/terraform-base
          name: osism/terraform-base
          short_name: terraform-base
        src_dir: src/github.com/osism/terraform-base
        topic: null
      change: '95'
      change_message: "chore(deps): update dependency opentofu/opentofu to v1.11.1\n\nThis
        PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
        [opentofu/opentofu](https://redirect.github.com/opentofu/opentofu) | minor
        | `1.10.6` -> `1.11.1` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>opentofu/opentofu
        (opentofu/opentofu)</summary>\n\n### [`v1.11.1`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.11.1)\n\n[Compare
        Source](https://redirect.github.com/opentofu/opentofu/compare/v1.11.0-rc2...v1.11.1)\n\nBUG
        FIXES:\n\n- Fixed regression where import validation would incorrectly flag
        variables used in for\\_each statements within import blocks ([#&#8203;3564](https://redirect.github.com/opentofu/opentofu/pull/3564))\n-
        Fixed lifecycle enabled serialization in plan file ([#&#8203;3566](https://redirect.github.com/opentofu/opentofu/pull/3566))\n-
        Fixed regression when validating import.id expressions ([#&#8203;3567](https://redirect.github.com/opentofu/opentofu/pull/3567))\n\n**Full
        Changelog**: <https://github.com/opentofu/opentofu/compare/v1.11.0...v1.11.1>\n\n###
        [`v1.11.0`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.11.0)\n\n[Compare
        Source](https://redirect.github.com/opentofu/opentofu/compare/v1.10.8...v1.11.0-rc2)\n\n###
        OpenTofu 1.11.0\n\nWe're proud to announce that OpenTofu 1.11.0 is now officially
        available! \U0001F389\n\n#### Highlights\n\nThis release cycle introduces
        major new capabilities and integrations:\n\n##### Ephemeral Values and Write
        Only Attributes\n\nEphemeral resources allow you to work with confidential
        data, temporary credentials, and transient infrastructure without persisting
        them to your state.\n\n```hcl\nephemeral \"aws_secretsmanager_random_password\"
        \"password\" {\n\n}\n\nresource \"kubernetes_secret_v1\" \"credentials\" {\n
        \ metadata {\n    name = \"admin\"\n    namespace = \"my-app\"\n  }\n  data_wo
        = {\n    username = \"admin\"\n    password = ephemeral.aws_secretsmanager_random_password.password.random_password\n
        \ }\n\n  data_wo_revision = 1\n  type = \"kubernetes.io/basic-auth\"\n}\n```\n\n#####
        The `enabled` Meta-Argument\n\nIf you want to conditionally deploy a resource,
        you no longer have to use `count = var.create_my_resource ? 1 : 0`, you can
        now add the new `enabled` meta-argument to your resource to conditionally
        deploy it.\n\n```hcl\nresource \"aws_instance\" \"web\" {\n  ami           =
        \"ami-12345\"\n  instance_type = \"t3.micro\"\n\n  lifecycle {\n    enabled
        = var.create_instance  # Simple boolean condition\n  }\n}\n```\n\n#### Compatibility
        Notes\n\n- macOS: Requires macOS 12 Monterey or later\n\n- **Azure Backend
        (`azurerm`)**:\n  - The `endpoint` and `ARM_ENDPOINT` configuration options
        are no longer supported\n  - The `msi_endpoint` and `ARM_MSI_ENDPOINT` options
        are no longer supported\n  - The `environment` and `metadata_host` arguments
        are now mutually exclusive\n\n- **issensitive() Function**: Now correctly
        returns unknown results when evaluating unknown values. Code that previously
        relied on the incorrect behavior may need updates.\n\n- **Testing with Mocks**:
        Mock values generated during testing now strictly adhere to provider schemas.
        Test configurations with invalid mock values will need to be corrected.\n\n-
        **S3 Module Installation**: When installing module packages from Amazon S3
        buckets using S3 source addresses OpenTofu will use the same credentials as
        the AWS CLI and SDK.\n\n- **TLS and SSH Security**:\n  - SHA-1 signatures
        are no longer accepted for TLS or SSH connections\n  - SSH certificates must
        comply with the `draft-miller-ssh-cert-03` specification\n\n#### Reference\n\n-
        [Full Changelog](https://redirect.github.com/opentofu/opentofu/blob/v1.11/CHANGELOG.md)\n-
        [Blog Post](https://opentofu.org/blog/opentofu-1-11-0)\n\nThank you for your
        continued support and testing of the OpenTofu project!\n\n### [`v1.10.8`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.10.8)\n\n[Compare
        Source](https://redirect.github.com/opentofu/opentofu/compare/v1.10.7...v1.10.8)\n\nSECURITY
        ADVISORIES:\n\nThis release contains fixes for some security advisories related
        to previous releases in this series.\n\n- Incorrect handling of excluded subdomain
        constraint in conjunction with TLS certificates containing wildcard SANs\n\n
        \ This release incorporates the upstream fixes for [GO-2025-4175](https://pkg.go.dev/vuln/GO-2025-4175).\n\n-
        Excessive CPU usage when reporting error about crafted TLS certificate with
        many hostnames\n\n  This release incorporates the upstream fixes for [GO-2025-4155](https://pkg.go.dev/vuln/GO-2025-4155).\n\n**Full
        Changelog**: <https://github.com/opentofu/opentofu/compare/v1.10.7...v1.10.8>\n\n###
        [`v1.10.7`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.10.7)\n\n[Compare
        Source](https://redirect.github.com/opentofu/opentofu/compare/v1.10.6...v1.10.7)\n\nSECURITY
        ADVISORIES:\n\nThis release contains fixes for some security advisories related
        to previous releases in this series.\n\n- `tofu init` in OpenTofu v1.10.6
        and earlier could potentially use unbounded memory if there is a direct or
        indirect dependency on a maliciously-crafted module package distributed as
        a \"tar\" archive.\n\n  This would require the attacker to coerce a root module
        author to depend (directly or indirectly) on a module package they control,
        using the HTTP, Amazon S3, or Google Cloud Storage source types to refer to
        a tar archive.\n\n  This release incorporates the upstream fixes for [CVE-2025-58183](https://www.cve.org/CVERecord?id=CVE-2025-58183).\n\n-
        When making requests to HTTPS servers, OpenTofu v1.10.6 and earlier could
        potentially use unbounded memory or crash with a \"panic\" error if TLS verification
        involves an excessively-long certificate chain or a chain including DSA public
        keys.\n\n  This affected all outgoing HTTPS requests made by OpenTofu itself,
        including requests to HTTPS-based state storage backends, module registries,
        and provider registries. For example, an attacker could coerce a root module
        author to depend (directly or indirectly) on a module they control which then
        refers to a module or provider from an attacker-controlled registry. That
        mode of attack would cause failures in `tofu init`, at module or provider
        installation time.\n\n  Provider plugins contain their own HTTPS client code,
        which may have similar problems. OpenTofu v1.10.7 cannot address similar problems
        within provider plugins, and so we recommend checking for similar advisories
        and fixes in the provider plugins you use.\n\n  This release incorporates
        upstream fixes for [CVE-2025-58185](https://www.cve.org/CVERecord?id=CVE-2025-58185),
        [CVE-2025-58187](https://www.cve.org/CVERecord?id=CVE-2025-58187), and [CVE-2025-58188](https://www.cve.org/CVERecord?id=CVE-2025-58188).\n\nBUG
        FIXES:\n\n- Fix crash in tofu test when using deprecated outputs ([#&#8203;3249](https://redirect.github.com/opentofu/opentofu/pull/3249))\n-
        Fix missing provider functions when parentheses are used ([#&#8203;3402](https://redirect.github.com/opentofu/opentofu/pull/3402))\n-
        `for_each` inside `dynamic` blocks can now call provider-defined functions.
        ([#&#8203;3429](https://redirect.github.com/opentofu/opentofu/issues/3429))\n\n**Full
        Changelog**: <https://github.com/opentofu/opentofu/compare/v1.10.6...v1.10.7>\n\n</details>\n\n---\n\n###
        Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time (no
        schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
        **Automerge**: Disabled by config. Please merge this manually once you are
        satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
        tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR and
        you won't be reminded about this update again.\n\n---\n\n - [ ] <!-- rebase-check
        -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was
        generated by [Mend Renovate](https://mend.io/renovate/). View the [repository
        job log](https://developer.mend.io/github/osism/terraform-base).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTkuNCIsInVwZGF0ZWRJblZlciI6IjQyLjQyLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
      change_url: https://github.com/osism/terraform-base/pull/95
      child_jobs: []
      commit_id: d93fe7e44dbcc1f6e8420e1bff7efa370778194f
      event_id: 169ea450-d63d-11f0-98f5-9e9193535ab2
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/3d3893eb765b4fc3bdcbe44a7e93f9fc/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/3d3893eb765b4fc3bdcbe44a7e93f9fc/work/logs
        result_data_file: /var/lib/zuul/builds/3d3893eb765b4fc3bdcbe44a7e93f9fc/work/results.json
        src_root: /var/lib/zuul/builds/3d3893eb765b4fc3bdcbe44a7e93f9fc/work/src
        work_root: /var/lib/zuul/builds/3d3893eb765b4fc3bdcbe44a7e93f9fc/work
      include_vars: []
      items:
      - branch: main
        change: '95'
        change_message: "chore(deps): update dependency opentofu/opentofu to v1.11.1\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [opentofu/opentofu](https://redirect.github.com/opentofu/opentofu) | minor
          | `1.10.6` -> `1.11.1` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>opentofu/opentofu
          (opentofu/opentofu)</summary>\n\n### [`v1.11.1`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.11.1)\n\n[Compare
          Source](https://redirect.github.com/opentofu/opentofu/compare/v1.11.0-rc2...v1.11.1)\n\nBUG
          FIXES:\n\n- Fixed regression where import validation would incorrectly flag
          variables used in for\\_each statements within import blocks ([#&#8203;3564](https://redirect.github.com/opentofu/opentofu/pull/3564))\n-
          Fixed lifecycle enabled serialization in plan file ([#&#8203;3566](https://redirect.github.com/opentofu/opentofu/pull/3566))\n-
          Fixed regression when validating import.id expressions ([#&#8203;3567](https://redirect.github.com/opentofu/opentofu/pull/3567))\n\n**Full
          Changelog**: <https://github.com/opentofu/opentofu/compare/v1.11.0...v1.11.1>\n\n###
          [`v1.11.0`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.11.0)\n\n[Compare
          Source](https://redirect.github.com/opentofu/opentofu/compare/v1.10.8...v1.11.0-rc2)\n\n###
          OpenTofu 1.11.0\n\nWe're proud to announce that OpenTofu 1.11.0 is now officially
          available! \U0001F389\n\n#### Highlights\n\nThis release cycle introduces
          major new capabilities and integrations:\n\n##### Ephemeral Values and Write
          Only Attributes\n\nEphemeral resources allow you to work with confidential
          data, temporary credentials, and transient infrastructure without persisting
          them to your state.\n\n```hcl\nephemeral \"aws_secretsmanager_random_password\"
          \"password\" {\n\n}\n\nresource \"kubernetes_secret_v1\" \"credentials\"
          {\n  metadata {\n    name = \"admin\"\n    namespace = \"my-app\"\n  }\n
          \ data_wo = {\n    username = \"admin\"\n    password = ephemeral.aws_secretsmanager_random_password.password.random_password\n
          \ }\n\n  data_wo_revision = 1\n  type = \"kubernetes.io/basic-auth\"\n}\n```\n\n#####
          The `enabled` Meta-Argument\n\nIf you want to conditionally deploy a resource,
          you no longer have to use `count = var.create_my_resource ? 1 : 0`, you
          can now add the new `enabled` meta-argument to your resource to conditionally
          deploy it.\n\n```hcl\nresource \"aws_instance\" \"web\" {\n  ami           =
          \"ami-12345\"\n  instance_type = \"t3.micro\"\n\n  lifecycle {\n    enabled
          = var.create_instance  # Simple boolean condition\n  }\n}\n```\n\n#### Compatibility
          Notes\n\n- macOS: Requires macOS 12 Monterey or later\n\n- **Azure Backend
          (`azurerm`)**:\n  - The `endpoint` and `ARM_ENDPOINT` configuration options
          are no longer supported\n  - The `msi_endpoint` and `ARM_MSI_ENDPOINT` options
          are no longer supported\n  - The `environment` and `metadata_host` arguments
          are now mutually exclusive\n\n- **issensitive() Function**: Now correctly
          returns unknown results when evaluating unknown values. Code that previously
          relied on the incorrect behavior may need updates.\n\n- **Testing with Mocks**:
          Mock values generated during testing now strictly adhere to provider schemas.
          Test configurations with invalid mock values will need to be corrected.\n\n-
          **S3 Module Installation**: When installing module packages from Amazon
          S3 buckets using S3 source addresses OpenTofu will use the same credentials
          as the AWS CLI and SDK.\n\n- **TLS and SSH Security**:\n  - SHA-1 signatures
          are no longer accepted for TLS or SSH connections\n  - SSH certificates
          must comply with the `draft-miller-ssh-cert-03` specification\n\n#### Reference\n\n-
          [Full Changelog](https://redirect.github.com/opentofu/opentofu/blob/v1.11/CHANGELOG.md)\n-
          [Blog Post](https://opentofu.org/blog/opentofu-1-11-0)\n\nThank you for
          your continued support and testing of the OpenTofu project!\n\n### [`v1.10.8`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.10.8)\n\n[Compare
          Source](https://redirect.github.com/opentofu/opentofu/compare/v1.10.7...v1.10.8)\n\nSECURITY
          ADVISORIES:\n\nThis release contains fixes for some security advisories
          related to previous releases in this series.\n\n- Incorrect handling of
          excluded subdomain constraint in conjunction with TLS certificates containing
          wildcard SANs\n\n  This release incorporates the upstream fixes for [GO-2025-4175](https://pkg.go.dev/vuln/GO-2025-4175).\n\n-
          Excessive CPU usage when reporting error about crafted TLS certificate with
          many hostnames\n\n  This release incorporates the upstream fixes for [GO-2025-4155](https://pkg.go.dev/vuln/GO-2025-4155).\n\n**Full
          Changelog**: <https://github.com/opentofu/opentofu/compare/v1.10.7...v1.10.8>\n\n###
          [`v1.10.7`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.10.7)\n\n[Compare
          Source](https://redirect.github.com/opentofu/opentofu/compare/v1.10.6...v1.10.7)\n\nSECURITY
          ADVISORIES:\n\nThis release contains fixes for some security advisories
          related to previous releases in this series.\n\n- `tofu init` in OpenTofu
          v1.10.6 and earlier could potentially use unbounded memory if there is a
          direct or indirect dependency on a maliciously-crafted module package distributed
          as a \"tar\" archive.\n\n  This would require the attacker to coerce a root
          module author to depend (directly or indirectly) on a module package they
          control, using the HTTP, Amazon S3, or Google Cloud Storage source types
          to refer to a tar archive.\n\n  This release incorporates the upstream fixes
          for [CVE-2025-58183](https://www.cve.org/CVERecord?id=CVE-2025-58183).\n\n-
          When making requests to HTTPS servers, OpenTofu v1.10.6 and earlier could
          potentially use unbounded memory or crash with a \"panic\" error if TLS
          verification involves an excessively-long certificate chain or a chain including
          DSA public keys.\n\n  This affected all outgoing HTTPS requests made by
          OpenTofu itself, including requests to HTTPS-based state storage backends,
          module registries, and provider registries. For example, an attacker could
          coerce a root module author to depend (directly or indirectly) on a module
          they control which then refers to a module or provider from an attacker-controlled
          registry. That mode of attack would cause failures in `tofu init`, at module
          or provider installation time.\n\n  Provider plugins contain their own HTTPS
          client code, which may have similar problems. OpenTofu v1.10.7 cannot address
          similar problems within provider plugins, and so we recommend checking for
          similar advisories and fixes in the provider plugins you use.\n\n  This
          release incorporates upstream fixes for [CVE-2025-58185](https://www.cve.org/CVERecord?id=CVE-2025-58185),
          [CVE-2025-58187](https://www.cve.org/CVERecord?id=CVE-2025-58187), and [CVE-2025-58188](https://www.cve.org/CVERecord?id=CVE-2025-58188).\n\nBUG
          FIXES:\n\n- Fix crash in tofu test when using deprecated outputs ([#&#8203;3249](https://redirect.github.com/opentofu/opentofu/pull/3249))\n-
          Fix missing provider functions when parentheses are used ([#&#8203;3402](https://redirect.github.com/opentofu/opentofu/pull/3402))\n-
          `for_each` inside `dynamic` blocks can now call provider-defined functions.
          ([#&#8203;3429](https://redirect.github.com/opentofu/opentofu/issues/3429))\n\n**Full
          Changelog**: <https://github.com/opentofu/opentofu/compare/v1.10.6...v1.10.7>\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
          tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR
          and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/osism/terraform-base).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTkuNCIsInVwZGF0ZWRJblZlciI6IjQyLjQyLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/osism/terraform-base/pull/95
        commit_id: d93fe7e44dbcc1f6e8420e1bff7efa370778194f
        patchset: d93fe7e44dbcc1f6e8420e1bff7efa370778194f
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/terraform-base
          name: osism/terraform-base
          short_name: terraform-base
          src_dir: src/github.com/osism/terraform-base
        topic: null
      job: yamllint
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: d93fe7e44dbcc1f6e8420e1bff7efa370778194f
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: caa0df55ed55158f32903d317317ac95db4da6ce
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: a64f93b32b7293a3d1682b7ca7ccc6571471116d
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: caa0df55ed55158f32903d317317ac95db4da6ce
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/yamllint/run.yaml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_0/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_0/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_1/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_1/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_2/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_2/openinfra-zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/terraform-base
        name: osism/terraform-base
        short_name: terraform-base
        src_dir: src/github.com/osism/terraform-base
      projects:
        github.com/osism/terraform-base:
          canonical_hostname: github.com
          canonical_name: github.com/osism/terraform-base
          checkout: main
          checkout_description: zuul branch
          commit: f20c6fddba53d7846eab3fb73adf93f8c4876670
          name: osism/terraform-base
          required: false
          short_name: terraform-base
          src_dir: src/github.com/osism/terraform-base
      ref: refs/pull/95/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
