all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe05:389d
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      name: testbed-default
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: aa5c6d4a-245e-48d2-b6f4-e781331eb2f5
        host_id: d2c528664e1bd332192bb574345deb0c6c7158061222e4a6c036b5ef
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe05:389d
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.7.91
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.192.206
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe05:389d
        region: null
        slot: null
  vars:
    name: testbed-default
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job terraform-base-validate explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/terraform-base/.zuul.yaml@main#2>'
      - '<Job terraform-base-validate-testbed-default explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/terraform-base/.zuul.yaml@main#7>'
      - '<Job terraform-base-validate-testbed-default explicit: None implied: None
        source: osism/terraform-base/.zuul.yaml@main#13>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 9aa6b64c47574200bab1d41bd86962ba
      build_refs:
      - branch: main
        change: '103'
        change_message: "chore(deps): update dependency opentofu/opentofu to v1.12.0\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [opentofu/opentofu](https://redirect.github.com/opentofu/opentofu) | minor
          | `1.11.6` \u2192 `1.12.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>opentofu/opentofu
          (opentofu/opentofu)</summary>\n\n### [`v1.12.0`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.12.0)\n\n[Compare
          Source](https://redirect.github.com/opentofu/opentofu/compare/v1.11.8...v1.12.0-beta1)\n\n###
          OpenTofu 1.12.0\n\nWe're proud to announce that OpenTofu 1.12.0 is now officially
          available! \U0001F389\n\n#### Highlights\n\nThis release cycle introduces
          major new capabilities and integrations:\n\n##### Dynamic `prevent_destroy`\n\nOpenTofu
          v1.12.0 now allows `prevent_destroy` to be defined dynamically in terms
          of other values available elsewhere in the same module. For example:\n\n```hcl\nvariable
          \"prevent_destroy_database\" {\n  type    = bool\n  default = true\n}\n\nresource
          \"example_database\" \"example\" {\n  # ...\n\n  lifecycle {\n    prevent_destroy
          = var.prevent_destroy_database\n  }\n}\n```\n\n##### Provider Checksum Improvements\n\nThe
          default provider installation behavior in OpenTofu is designed to mostly
          \"just work\" by getting the needed providers installed and\nmaking the
          necessary changes to [the dependency lock file](https://opentofu.org/docs/language/files/dependency-lock/),
          but in previous versions\nfriction appeared for any teams using many of
          the non-default installation settings such as the shared provider plugin
          cache, or local mirrors of upstream providers.\n\nFor OpenTofu v1.12, OpenTofu
          Registry now provides a full set of official checksums in all of the checksum
          formats needed by other installation methods.\nThis means that after running
          `tofu init` the dependency lock file will immediately have all of the information
          required to successfully use a global\nplugin cache directory and to verify
          matching packages served from a local mirror, without needing to run `tofu
          providers lock` separately.\n\n##### Simultaneous Human-readable and Machine-readable
          Output\n\nMany OpenTofu commands support both human-oriented UI output and
          machine-readable JSON output, but previously those commands could be run
          with only one or the other.\nThis was bothersome for those implementing
          alternative UIs in terms of the machine-readable output because it meant
          they would need to implement all possible\nfeatures of the UI before their
          tool could actually be used.\n\nOpenTofu v1.12.0 introduces a new option
          `-json-into=FILENAME`, which produces the same output format that `-json`
          would have produced but sends that output\nto the given filename instead
          of to the standard output stream. The OpenTofu UI output then appears on
          the standard output stream as normal, so that\nsoftware interpreting the
          JSON output can behave as just a supplement to the normal UI rather than
          a complete replacement.\n\n##### New `destroy` lifecycle meta-argument\n\nThe
          new `destroy = false` lifecycle option for managed resources allows removing
          an object from the state without first destroying the remote object.\n\n####
          Deprecation Notices\n\n##### WinRM for Provisioners is Now Deprecated\n\nSome
          of the Go libraries that OpenTofu uses for WinRM connection support in provisioners
          have become unmaintained over time, and so unfortunately we are phasing\nout
          support for WinRM in OpenTofu starting with deprecation warnings in this
          release.\n\nIf your configuration includes a `connection` block with `type
          = \"winrm\"` then OpenTofu v1.12 will warn that this connection type is
          deprecated,\nbut provisioning should otherwise still work as it did before.\n\nWe
          intend to remove WinRM support completely in the forthcoming OpenTofu v1.13
          series, and so if you are currently relying on WinRM support we\nrecommend
          that you begin planning to migrate to using [OpenSSH for Windows](https://learn.microsoft.com/en-us/windows-server/administration/openssh/openssh_install_firstuse)
          instead.\n\n##### Phasing Out Support for 32-bit CPU Architectures\n\nWe
          are also planning to stop producing official releases for 32-bit CPU architectures
          (`386` and `arm`) in a future version of OpenTofu.\nSupport for 64-bit architectures
          (`amd64` and `arm64`) is unaffected.\n\nOpenTofu v1.12 does not include
          any changes to CPU support yet, but we expect that the official builds in
          the forthcoming v1.13 series will begin producing warnings\nwhen running
          on 32-bit CPU architectures, before we stop producing those packages altogether
          in a future release series.\n\n#### Compatibility Notes\n\n- macOS: Requires
          macOS 12 Monterey or later\n- The `OPENTOFU_USER_AGENT` environment variable,
          which allowed fully overriding the default User-Agent header on all HTTP
          requests, has been removed.\n- On Unix systems OpenTofu now considers the
          `BROWSER` environment variable as a possible override for the default behavior
          for launching a web browser.\n  If you run OpenTofu in a context where an
          environment variable of that name is already set, it may cause OpenTofu
          to now open a web browser in a different way than previous versions would
          have.\n  Unsetting that environment variable will restore the previous platform-specific
          behavior.\n\n#### Reference\n\n- [Full Changelog](https://redirect.github.com/opentofu/opentofu/blob/v1.12/CHANGELOG.md)\n-
          [Blog Post](https://opentofu.org/blog/opentofu-1-12-0)\n\nThank you for
          your continued support and testing of the OpenTofu project!\n\n### [`v1.11.8`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.11.8)\n\n[Compare
          Source](https://redirect.github.com/opentofu/opentofu/compare/v1.11.7...v1.11.8)\n\n####
          SECURITY ADVISORIES:\n\n- Previous releases in the v1.11 series could potentially
          take an excessive amount of time and send extraneous data to an HTTP2 server
          that specifies a maximum frame size of zero. This is now fixed. ([#&#8203;4094](https://redirect.github.com/opentofu/opentofu/issues/4094))\n\n
          \ An attacker that can coerce an operator to install a dependency from an
          attacker-controlled server could use this to cause unexpected resource consumption
          during `tofu init`.\n\n**Full Changelog**: <https://github.com/opentofu/opentofu/compare/v1.11.7...v1.11.8>\n\n###
          [`v1.11.7`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.11.7)\n\n[Compare
          Source](https://redirect.github.com/opentofu/opentofu/compare/v1.11.6...v1.11.7)\n\n####
          BUG FIXES:\n\n- When installing provider packages into a local cache directory,
          the installer will now return an error if a conflicting entry is already
          present in the cache that doesn't match the expected checksum. Previously
          OpenTofu would just silently write over the existing entry in that case.
          ([#&#8203;4082](https://redirect.github.com/opentofu/opentofu/pull/4082))\n\n**Full
          Changelog**: <https://github.com/opentofu/opentofu/compare/v1.11.6...v1.11.7>\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
          At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
          defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
          manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
          conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
          Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/terraform-base).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE3My42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
        change_url: https://github.com/osism/terraform-base/pull/103
        commit_id: e41f4aa6971e7ebc80454a4069c1c1a82aafd4d7
        patchset: e41f4aa6971e7ebc80454a4069c1c1a82aafd4d7
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/terraform-base
          name: osism/terraform-base
          short_name: terraform-base
        src_dir: src/github.com/osism/terraform-base
        topic: null
      buildset: 67a75934d1094965b85351b5c74848ed
      buildset_refs:
      - branch: main
        change: '103'
        change_message: "chore(deps): update dependency opentofu/opentofu to v1.12.0\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [opentofu/opentofu](https://redirect.github.com/opentofu/opentofu) | minor
          | `1.11.6` \u2192 `1.12.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>opentofu/opentofu
          (opentofu/opentofu)</summary>\n\n### [`v1.12.0`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.12.0)\n\n[Compare
          Source](https://redirect.github.com/opentofu/opentofu/compare/v1.11.8...v1.12.0-beta1)\n\n###
          OpenTofu 1.12.0\n\nWe're proud to announce that OpenTofu 1.12.0 is now officially
          available! \U0001F389\n\n#### Highlights\n\nThis release cycle introduces
          major new capabilities and integrations:\n\n##### Dynamic `prevent_destroy`\n\nOpenTofu
          v1.12.0 now allows `prevent_destroy` to be defined dynamically in terms
          of other values available elsewhere in the same module. For example:\n\n```hcl\nvariable
          \"prevent_destroy_database\" {\n  type    = bool\n  default = true\n}\n\nresource
          \"example_database\" \"example\" {\n  # ...\n\n  lifecycle {\n    prevent_destroy
          = var.prevent_destroy_database\n  }\n}\n```\n\n##### Provider Checksum Improvements\n\nThe
          default provider installation behavior in OpenTofu is designed to mostly
          \"just work\" by getting the needed providers installed and\nmaking the
          necessary changes to [the dependency lock file](https://opentofu.org/docs/language/files/dependency-lock/),
          but in previous versions\nfriction appeared for any teams using many of
          the non-default installation settings such as the shared provider plugin
          cache, or local mirrors of upstream providers.\n\nFor OpenTofu v1.12, OpenTofu
          Registry now provides a full set of official checksums in all of the checksum
          formats needed by other installation methods.\nThis means that after running
          `tofu init` the dependency lock file will immediately have all of the information
          required to successfully use a global\nplugin cache directory and to verify
          matching packages served from a local mirror, without needing to run `tofu
          providers lock` separately.\n\n##### Simultaneous Human-readable and Machine-readable
          Output\n\nMany OpenTofu commands support both human-oriented UI output and
          machine-readable JSON output, but previously those commands could be run
          with only one or the other.\nThis was bothersome for those implementing
          alternative UIs in terms of the machine-readable output because it meant
          they would need to implement all possible\nfeatures of the UI before their
          tool could actually be used.\n\nOpenTofu v1.12.0 introduces a new option
          `-json-into=FILENAME`, which produces the same output format that `-json`
          would have produced but sends that output\nto the given filename instead
          of to the standard output stream. The OpenTofu UI output then appears on
          the standard output stream as normal, so that\nsoftware interpreting the
          JSON output can behave as just a supplement to the normal UI rather than
          a complete replacement.\n\n##### New `destroy` lifecycle meta-argument\n\nThe
          new `destroy = false` lifecycle option for managed resources allows removing
          an object from the state without first destroying the remote object.\n\n####
          Deprecation Notices\n\n##### WinRM for Provisioners is Now Deprecated\n\nSome
          of the Go libraries that OpenTofu uses for WinRM connection support in provisioners
          have become unmaintained over time, and so unfortunately we are phasing\nout
          support for WinRM in OpenTofu starting with deprecation warnings in this
          release.\n\nIf your configuration includes a `connection` block with `type
          = \"winrm\"` then OpenTofu v1.12 will warn that this connection type is
          deprecated,\nbut provisioning should otherwise still work as it did before.\n\nWe
          intend to remove WinRM support completely in the forthcoming OpenTofu v1.13
          series, and so if you are currently relying on WinRM support we\nrecommend
          that you begin planning to migrate to using [OpenSSH for Windows](https://learn.microsoft.com/en-us/windows-server/administration/openssh/openssh_install_firstuse)
          instead.\n\n##### Phasing Out Support for 32-bit CPU Architectures\n\nWe
          are also planning to stop producing official releases for 32-bit CPU architectures
          (`386` and `arm`) in a future version of OpenTofu.\nSupport for 64-bit architectures
          (`amd64` and `arm64`) is unaffected.\n\nOpenTofu v1.12 does not include
          any changes to CPU support yet, but we expect that the official builds in
          the forthcoming v1.13 series will begin producing warnings\nwhen running
          on 32-bit CPU architectures, before we stop producing those packages altogether
          in a future release series.\n\n#### Compatibility Notes\n\n- macOS: Requires
          macOS 12 Monterey or later\n- The `OPENTOFU_USER_AGENT` environment variable,
          which allowed fully overriding the default User-Agent header on all HTTP
          requests, has been removed.\n- On Unix systems OpenTofu now considers the
          `BROWSER` environment variable as a possible override for the default behavior
          for launching a web browser.\n  If you run OpenTofu in a context where an
          environment variable of that name is already set, it may cause OpenTofu
          to now open a web browser in a different way than previous versions would
          have.\n  Unsetting that environment variable will restore the previous platform-specific
          behavior.\n\n#### Reference\n\n- [Full Changelog](https://redirect.github.com/opentofu/opentofu/blob/v1.12/CHANGELOG.md)\n-
          [Blog Post](https://opentofu.org/blog/opentofu-1-12-0)\n\nThank you for
          your continued support and testing of the OpenTofu project!\n\n### [`v1.11.8`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.11.8)\n\n[Compare
          Source](https://redirect.github.com/opentofu/opentofu/compare/v1.11.7...v1.11.8)\n\n####
          SECURITY ADVISORIES:\n\n- Previous releases in the v1.11 series could potentially
          take an excessive amount of time and send extraneous data to an HTTP2 server
          that specifies a maximum frame size of zero. This is now fixed. ([#&#8203;4094](https://redirect.github.com/opentofu/opentofu/issues/4094))\n\n
          \ An attacker that can coerce an operator to install a dependency from an
          attacker-controlled server could use this to cause unexpected resource consumption
          during `tofu init`.\n\n**Full Changelog**: <https://github.com/opentofu/opentofu/compare/v1.11.7...v1.11.8>\n\n###
          [`v1.11.7`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.11.7)\n\n[Compare
          Source](https://redirect.github.com/opentofu/opentofu/compare/v1.11.6...v1.11.7)\n\n####
          BUG FIXES:\n\n- When installing provider packages into a local cache directory,
          the installer will now return an error if a conflicting entry is already
          present in the cache that doesn't match the expected checksum. Previously
          OpenTofu would just silently write over the existing entry in that case.
          ([#&#8203;4082](https://redirect.github.com/opentofu/opentofu/pull/4082))\n\n**Full
          Changelog**: <https://github.com/opentofu/opentofu/compare/v1.11.6...v1.11.7>\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
          At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
          defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
          manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
          conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
          Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/terraform-base).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE3My42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
        change_url: https://github.com/osism/terraform-base/pull/103
        commit_id: e41f4aa6971e7ebc80454a4069c1c1a82aafd4d7
        patchset: e41f4aa6971e7ebc80454a4069c1c1a82aafd4d7
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/terraform-base
          name: osism/terraform-base
          short_name: terraform-base
        src_dir: src/github.com/osism/terraform-base
        topic: null
      change: '103'
      change_message: "chore(deps): update dependency opentofu/opentofu to v1.12.0\n\nThis
        PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
        [opentofu/opentofu](https://redirect.github.com/opentofu/opentofu) | minor
        | `1.11.6` \u2192 `1.12.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>opentofu/opentofu
        (opentofu/opentofu)</summary>\n\n### [`v1.12.0`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.12.0)\n\n[Compare
        Source](https://redirect.github.com/opentofu/opentofu/compare/v1.11.8...v1.12.0-beta1)\n\n###
        OpenTofu 1.12.0\n\nWe're proud to announce that OpenTofu 1.12.0 is now officially
        available! \U0001F389\n\n#### Highlights\n\nThis release cycle introduces
        major new capabilities and integrations:\n\n##### Dynamic `prevent_destroy`\n\nOpenTofu
        v1.12.0 now allows `prevent_destroy` to be defined dynamically in terms of
        other values available elsewhere in the same module. For example:\n\n```hcl\nvariable
        \"prevent_destroy_database\" {\n  type    = bool\n  default = true\n}\n\nresource
        \"example_database\" \"example\" {\n  # ...\n\n  lifecycle {\n    prevent_destroy
        = var.prevent_destroy_database\n  }\n}\n```\n\n##### Provider Checksum Improvements\n\nThe
        default provider installation behavior in OpenTofu is designed to mostly \"just
        work\" by getting the needed providers installed and\nmaking the necessary
        changes to [the dependency lock file](https://opentofu.org/docs/language/files/dependency-lock/),
        but in previous versions\nfriction appeared for any teams using many of the
        non-default installation settings such as the shared provider plugin cache,
        or local mirrors of upstream providers.\n\nFor OpenTofu v1.12, OpenTofu Registry
        now provides a full set of official checksums in all of the checksum formats
        needed by other installation methods.\nThis means that after running `tofu
        init` the dependency lock file will immediately have all of the information
        required to successfully use a global\nplugin cache directory and to verify
        matching packages served from a local mirror, without needing to run `tofu
        providers lock` separately.\n\n##### Simultaneous Human-readable and Machine-readable
        Output\n\nMany OpenTofu commands support both human-oriented UI output and
        machine-readable JSON output, but previously those commands could be run with
        only one or the other.\nThis was bothersome for those implementing alternative
        UIs in terms of the machine-readable output because it meant they would need
        to implement all possible\nfeatures of the UI before their tool could actually
        be used.\n\nOpenTofu v1.12.0 introduces a new option `-json-into=FILENAME`,
        which produces the same output format that `-json` would have produced but
        sends that output\nto the given filename instead of to the standard output
        stream. The OpenTofu UI output then appears on the standard output stream
        as normal, so that\nsoftware interpreting the JSON output can behave as just
        a supplement to the normal UI rather than a complete replacement.\n\n#####
        New `destroy` lifecycle meta-argument\n\nThe new `destroy = false` lifecycle
        option for managed resources allows removing an object from the state without
        first destroying the remote object.\n\n#### Deprecation Notices\n\n##### WinRM
        for Provisioners is Now Deprecated\n\nSome of the Go libraries that OpenTofu
        uses for WinRM connection support in provisioners have become unmaintained
        over time, and so unfortunately we are phasing\nout support for WinRM in OpenTofu
        starting with deprecation warnings in this release.\n\nIf your configuration
        includes a `connection` block with `type = \"winrm\"` then OpenTofu v1.12
        will warn that this connection type is deprecated,\nbut provisioning should
        otherwise still work as it did before.\n\nWe intend to remove WinRM support
        completely in the forthcoming OpenTofu v1.13 series, and so if you are currently
        relying on WinRM support we\nrecommend that you begin planning to migrate
        to using [OpenSSH for Windows](https://learn.microsoft.com/en-us/windows-server/administration/openssh/openssh_install_firstuse)
        instead.\n\n##### Phasing Out Support for 32-bit CPU Architectures\n\nWe are
        also planning to stop producing official releases for 32-bit CPU architectures
        (`386` and `arm`) in a future version of OpenTofu.\nSupport for 64-bit architectures
        (`amd64` and `arm64`) is unaffected.\n\nOpenTofu v1.12 does not include any
        changes to CPU support yet, but we expect that the official builds in the
        forthcoming v1.13 series will begin producing warnings\nwhen running on 32-bit
        CPU architectures, before we stop producing those packages altogether in a
        future release series.\n\n#### Compatibility Notes\n\n- macOS: Requires macOS
        12 Monterey or later\n- The `OPENTOFU_USER_AGENT` environment variable, which
        allowed fully overriding the default User-Agent header on all HTTP requests,
        has been removed.\n- On Unix systems OpenTofu now considers the `BROWSER`
        environment variable as a possible override for the default behavior for launching
        a web browser.\n  If you run OpenTofu in a context where an environment variable
        of that name is already set, it may cause OpenTofu to now open a web browser
        in a different way than previous versions would have.\n  Unsetting that environment
        variable will restore the previous platform-specific behavior.\n\n#### Reference\n\n-
        [Full Changelog](https://redirect.github.com/opentofu/opentofu/blob/v1.12/CHANGELOG.md)\n-
        [Blog Post](https://opentofu.org/blog/opentofu-1-12-0)\n\nThank you for your
        continued support and testing of the OpenTofu project!\n\n### [`v1.11.8`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.11.8)\n\n[Compare
        Source](https://redirect.github.com/opentofu/opentofu/compare/v1.11.7...v1.11.8)\n\n####
        SECURITY ADVISORIES:\n\n- Previous releases in the v1.11 series could potentially
        take an excessive amount of time and send extraneous data to an HTTP2 server
        that specifies a maximum frame size of zero. This is now fixed. ([#&#8203;4094](https://redirect.github.com/opentofu/opentofu/issues/4094))\n\n
        \ An attacker that can coerce an operator to install a dependency from an
        attacker-controlled server could use this to cause unexpected resource consumption
        during `tofu init`.\n\n**Full Changelog**: <https://github.com/opentofu/opentofu/compare/v1.11.7...v1.11.8>\n\n###
        [`v1.11.7`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.11.7)\n\n[Compare
        Source](https://redirect.github.com/opentofu/opentofu/compare/v1.11.6...v1.11.7)\n\n####
        BUG FIXES:\n\n- When installing provider packages into a local cache directory,
        the installer will now return an error if a conflicting entry is already present
        in the cache that doesn't match the expected checksum. Previously OpenTofu
        would just silently write over the existing entry in that case. ([#&#8203;4082](https://redirect.github.com/opentofu/opentofu/pull/4082))\n\n**Full
        Changelog**: <https://github.com/opentofu/opentofu/compare/v1.11.6...v1.11.7>\n\n</details>\n\n---\n\n###
        Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
        At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
        defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
        manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
        conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
        Close this PR and you won't be reminded about this update again.\n\n---\n\n
        - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
        box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
        View the [repository job log](https://developer.mend.io/github/osism/terraform-base).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE3My42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
      change_url: https://github.com/osism/terraform-base/pull/103
      child_jobs: []
      commit_id: e41f4aa6971e7ebc80454a4069c1c1a82aafd4d7
      event_id: 8bd89d30-4f90-11f1-91b3-5b2e051ecf62
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/9aa6b64c47574200bab1d41bd86962ba/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/9aa6b64c47574200bab1d41bd86962ba/work/logs
        result_data_file: /var/lib/zuul/builds/9aa6b64c47574200bab1d41bd86962ba/work/results.json
        src_root: /var/lib/zuul/builds/9aa6b64c47574200bab1d41bd86962ba/work/src
        work_root: /var/lib/zuul/builds/9aa6b64c47574200bab1d41bd86962ba/work
      include_vars: []
      items:
      - branch: main
        change: '103'
        change_message: "chore(deps): update dependency opentofu/opentofu to v1.12.0\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [opentofu/opentofu](https://redirect.github.com/opentofu/opentofu) | minor
          | `1.11.6` \u2192 `1.12.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>opentofu/opentofu
          (opentofu/opentofu)</summary>\n\n### [`v1.12.0`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.12.0)\n\n[Compare
          Source](https://redirect.github.com/opentofu/opentofu/compare/v1.11.8...v1.12.0-beta1)\n\n###
          OpenTofu 1.12.0\n\nWe're proud to announce that OpenTofu 1.12.0 is now officially
          available! \U0001F389\n\n#### Highlights\n\nThis release cycle introduces
          major new capabilities and integrations:\n\n##### Dynamic `prevent_destroy`\n\nOpenTofu
          v1.12.0 now allows `prevent_destroy` to be defined dynamically in terms
          of other values available elsewhere in the same module. For example:\n\n```hcl\nvariable
          \"prevent_destroy_database\" {\n  type    = bool\n  default = true\n}\n\nresource
          \"example_database\" \"example\" {\n  # ...\n\n  lifecycle {\n    prevent_destroy
          = var.prevent_destroy_database\n  }\n}\n```\n\n##### Provider Checksum Improvements\n\nThe
          default provider installation behavior in OpenTofu is designed to mostly
          \"just work\" by getting the needed providers installed and\nmaking the
          necessary changes to [the dependency lock file](https://opentofu.org/docs/language/files/dependency-lock/),
          but in previous versions\nfriction appeared for any teams using many of
          the non-default installation settings such as the shared provider plugin
          cache, or local mirrors of upstream providers.\n\nFor OpenTofu v1.12, OpenTofu
          Registry now provides a full set of official checksums in all of the checksum
          formats needed by other installation methods.\nThis means that after running
          `tofu init` the dependency lock file will immediately have all of the information
          required to successfully use a global\nplugin cache directory and to verify
          matching packages served from a local mirror, without needing to run `tofu
          providers lock` separately.\n\n##### Simultaneous Human-readable and Machine-readable
          Output\n\nMany OpenTofu commands support both human-oriented UI output and
          machine-readable JSON output, but previously those commands could be run
          with only one or the other.\nThis was bothersome for those implementing
          alternative UIs in terms of the machine-readable output because it meant
          they would need to implement all possible\nfeatures of the UI before their
          tool could actually be used.\n\nOpenTofu v1.12.0 introduces a new option
          `-json-into=FILENAME`, which produces the same output format that `-json`
          would have produced but sends that output\nto the given filename instead
          of to the standard output stream. The OpenTofu UI output then appears on
          the standard output stream as normal, so that\nsoftware interpreting the
          JSON output can behave as just a supplement to the normal UI rather than
          a complete replacement.\n\n##### New `destroy` lifecycle meta-argument\n\nThe
          new `destroy = false` lifecycle option for managed resources allows removing
          an object from the state without first destroying the remote object.\n\n####
          Deprecation Notices\n\n##### WinRM for Provisioners is Now Deprecated\n\nSome
          of the Go libraries that OpenTofu uses for WinRM connection support in provisioners
          have become unmaintained over time, and so unfortunately we are phasing\nout
          support for WinRM in OpenTofu starting with deprecation warnings in this
          release.\n\nIf your configuration includes a `connection` block with `type
          = \"winrm\"` then OpenTofu v1.12 will warn that this connection type is
          deprecated,\nbut provisioning should otherwise still work as it did before.\n\nWe
          intend to remove WinRM support completely in the forthcoming OpenTofu v1.13
          series, and so if you are currently relying on WinRM support we\nrecommend
          that you begin planning to migrate to using [OpenSSH for Windows](https://learn.microsoft.com/en-us/windows-server/administration/openssh/openssh_install_firstuse)
          instead.\n\n##### Phasing Out Support for 32-bit CPU Architectures\n\nWe
          are also planning to stop producing official releases for 32-bit CPU architectures
          (`386` and `arm`) in a future version of OpenTofu.\nSupport for 64-bit architectures
          (`amd64` and `arm64`) is unaffected.\n\nOpenTofu v1.12 does not include
          any changes to CPU support yet, but we expect that the official builds in
          the forthcoming v1.13 series will begin producing warnings\nwhen running
          on 32-bit CPU architectures, before we stop producing those packages altogether
          in a future release series.\n\n#### Compatibility Notes\n\n- macOS: Requires
          macOS 12 Monterey or later\n- The `OPENTOFU_USER_AGENT` environment variable,
          which allowed fully overriding the default User-Agent header on all HTTP
          requests, has been removed.\n- On Unix systems OpenTofu now considers the
          `BROWSER` environment variable as a possible override for the default behavior
          for launching a web browser.\n  If you run OpenTofu in a context where an
          environment variable of that name is already set, it may cause OpenTofu
          to now open a web browser in a different way than previous versions would
          have.\n  Unsetting that environment variable will restore the previous platform-specific
          behavior.\n\n#### Reference\n\n- [Full Changelog](https://redirect.github.com/opentofu/opentofu/blob/v1.12/CHANGELOG.md)\n-
          [Blog Post](https://opentofu.org/blog/opentofu-1-12-0)\n\nThank you for
          your continued support and testing of the OpenTofu project!\n\n### [`v1.11.8`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.11.8)\n\n[Compare
          Source](https://redirect.github.com/opentofu/opentofu/compare/v1.11.7...v1.11.8)\n\n####
          SECURITY ADVISORIES:\n\n- Previous releases in the v1.11 series could potentially
          take an excessive amount of time and send extraneous data to an HTTP2 server
          that specifies a maximum frame size of zero. This is now fixed. ([#&#8203;4094](https://redirect.github.com/opentofu/opentofu/issues/4094))\n\n
          \ An attacker that can coerce an operator to install a dependency from an
          attacker-controlled server could use this to cause unexpected resource consumption
          during `tofu init`.\n\n**Full Changelog**: <https://github.com/opentofu/opentofu/compare/v1.11.7...v1.11.8>\n\n###
          [`v1.11.7`](https://redirect.github.com/opentofu/opentofu/releases/tag/v1.11.7)\n\n[Compare
          Source](https://redirect.github.com/opentofu/opentofu/compare/v1.11.6...v1.11.7)\n\n####
          BUG FIXES:\n\n- When installing provider packages into a local cache directory,
          the installer will now return an error if a conflicting entry is already
          present in the cache that doesn't match the expected checksum. Previously
          OpenTofu would just silently write over the existing entry in that case.
          ([#&#8203;4082](https://redirect.github.com/opentofu/opentofu/pull/4082))\n\n**Full
          Changelog**: <https://github.com/opentofu/opentofu/compare/v1.11.6...v1.11.7>\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
          At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
          defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
          manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
          conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
          Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/terraform-base).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE3My42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
        change_url: https://github.com/osism/terraform-base/pull/103
        commit_id: e41f4aa6971e7ebc80454a4069c1c1a82aafd4d7
        patchset: e41f4aa6971e7ebc80454a4069c1c1a82aafd4d7
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/terraform-base
          name: osism/terraform-base
          short_name: terraform-base
          src_dir: src/github.com/osism/terraform-base
        topic: null
      job: terraform-base-validate-testbed-default
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: e41f4aa6971e7ebc80454a4069c1c1a82aafd4d7
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 58f24f5b479e15eb2d520850d27e3b1b6fc66aa6
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 038dd8b856c62af4433c8477c5cb3d0480847059
          trusted/project_2/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 0c74c57cedff2b36bb37ca68a5338d1c49991496
          untrusted/project_0/github.com/osism/terraform-base:
            canonical_name: github.com/osism/terraform-base
            checkout: main
            commit: fac5b5c61a409c2a8f2cce4c18079e1b30bb93d4
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 58f24f5b479e15eb2d520850d27e3b1b6fc66aa6
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 038dd8b856c62af4433c8477c5cb3d0480847059
          untrusted/project_3/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 0c74c57cedff2b36bb37ca68a5338d1c49991496
        playbooks:
        - path: untrusted/project_0/github.com/osism/terraform-base/playbooks/validate.yml
          roles:
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_1/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_1/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_2/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_2/openinfra-zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_3/zuul-jobs
            link_target: untrusted/project_3/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_3/zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/terraform-base
        name: osism/terraform-base
        short_name: terraform-base
        src_dir: src/github.com/osism/terraform-base
      projects:
        github.com/osism/terraform-base:
          canonical_hostname: github.com
          canonical_name: github.com/osism/terraform-base
          checkout: main
          checkout_description: zuul branch
          commit: fac5b5c61a409c2a8f2cce4c18079e1b30bb93d4
          name: osism/terraform-base
          required: false
          short_name: terraform-base
          src_dir: src/github.com/osism/terraform-base
      ref: refs/pull/103/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
