Migrate to OpenTofu

Author: pst

.github/workflows/main.yml

@@ -184,31 +184,31 @@ jobs:
         # GKE: set cluster_node_locations
         sed -i 's/cluster_node_locations = \[\]/cluster_node_locations = ["europe-west1-b", "europe-west1-c", "europe-west1-d"]/g' gke_zero_cluster.tf || true
 
-    - name: "Terraform init"
+    - name: "OpenTofu init"
       working-directory: ./kubestack-starter-${{ matrix.starter }}
       run: |
         docker run --rm \
           -v `pwd`:/infra \
           test-image:${{ github.sha }} \
-          terraform init
+          tofu init
 
-    - name: "Terraform workspace new ops"
+    - name: "OpenTofu workspace new ops"
       working-directory: ./kubestack-starter-${{ matrix.starter }}
       run: |
         docker run --rm \
           -v `pwd`:/infra \
           test-image:${{ github.sha }} \
-          terraform workspace new ops
+          tofu workspace new ops
 
-    - name: "Terraform validate"
+    - name: "OpenTofu validate"
       working-directory: ./kubestack-starter-${{ matrix.starter }}
       run: |
         docker run --rm \
           -v `pwd`:/infra \
           test-image:${{ github.sha }} \
-          terraform validate
+          tofu validate
 
-    - name: "Terraform plan"
+    - name: "OpenTofu plan"
       working-directory: ./kubestack-starter-${{ matrix.starter }}
       env:
         KBST_AUTH_AWS: ${{ secrets.KBST_AUTH_AWS }}
@@ -222,7 +222,7 @@ jobs:
           -v `pwd`:/infra \
           -v /var/run/docker.sock:/var/run/docker.sock \
           test-image:${{ github.sha }} \
-          terraform plan --target module.aks_zero --target module.eks_zero --target module.gke_zero
+          tofu plan --target module.aks_zero --target module.eks_zero --target module.gke_zero
 
   publish-image:
     runs-on: ubuntu-latest

Makefile

@@ -12,7 +12,7 @@ BUILD_CACHE_DIST := --cache-to type=registry,mode=max,ref=ghcr.io/kbst/terraform
 BUILD_OUTPUT := --output type=registry,push=${DOCKER_PUSH}
 BUILD_CACHE := --cache-to type=registry,mode=max,ref=ghcr.io/kbst/terraform-kubestack/dev:buildcache-${DOCKER_TARGET},push=${DOCKER_PUSH}
 else
-BUILD_PLATFORM := 
+BUILD_PLATFORM :=
 BUILD_OUTPUT := --output type=docker
 endif
 
@@ -57,24 +57,24 @@ build:
 validate: .init
 	docker exec \
 		test-container-$(GIT_SHA) \
-		entrypoint terraform validate
+		entrypoint tofu validate
 
 test: validate
 	docker exec \
 		test-container-$(GIT_SHA) \
-		entrypoint terraform apply --target module.aks_zero --target module.eks_zero --target module.gke_zero --input=false --auto-approve
+		entrypoint tofu apply --target module.aks_zero --target module.eks_zero --target module.gke_zero --input=false --auto-approve
 	docker exec \
 		test-container-$(GIT_SHA) \
-		entrypoint terraform apply --target module.eks_zero_nginx --input=false --auto-approve
+		entrypoint tofu apply --target module.eks_zero_nginx --input=false --auto-approve
 	docker exec \
 		test-container-$(GIT_SHA) \
-		entrypoint terraform apply --input=false --auto-approve
+		entrypoint tofu apply --input=false --auto-approve
 
 cleanup: .init
 	docker exec \
 		-ti \
 		test-container-$(GIT_SHA) \
-		entrypoint terraform destroy --input=false --auto-approve
+		entrypoint tofu destroy --input=false --auto-approve
 	$(MAKE) .stop-container
 
 shell: .check-container
@@ -106,7 +106,7 @@ shell: .check-container
 .init: .check-container
 	docker exec \
 		test-container-$(GIT_SHA) \
-		entrypoint terraform init
+		entrypoint tofu init
 	docker exec \
 		test-container-$(GIT_SHA) \
-		entrypoint terraform workspace select ops
+		entrypoint tofu workspace select ops

oci/Dockerfile

@@ -31,10 +31,8 @@ ARG KUBECTL_VERSION=v1.31.3
 # https://github.com/kubernetes-sigs/kustomize/releases
 ARG KUSTOMIZE_VERSION=v5.5.0
 
-# https://www.terraform.io/downloads.html
-# 1.5.x is the last OSS Terraform
-# do not update major or minor!
-ARG TERRAFORM_VERSION=1.5.7
+# https://github.com/opentofu/opentofu/releases
+ARG OPENTOFU_VERSION=1.11.5
 
 RUN echo "KUBECTL_VERSION: ${KUBECTL_VERSION}" \
     && curl -LO https://dl.k8s.io/${KUBECTL_VERSION}/kubernetes-client-linux-${TARGETARCH}.tar.gz \
@@ -49,11 +47,12 @@ RUN echo "KUSTOMIZE_VERSION: ${KUSTOMIZE_VERSION}" \
     && mv kustomize /opt/bin/kustomize \
     && /opt/bin/kustomize version
 
-RUN echo "TERRAFORM_VERSION: ${TERRAFORM_VERSION}" \
-    && curl -LO https://releases.hashicorp.com/terraform/${TERRAFORM_VERSION}/terraform_${TERRAFORM_VERSION}_linux_${TARGETARCH}.zip \
-    && unzip terraform_${TERRAFORM_VERSION}_linux_${TARGETARCH}.zip -d /opt/bin \
-    && chmod +x /opt/bin/terraform \
-    && /opt/bin/terraform version
+RUN echo "OPENTOFU_VERSION: ${OPENTOFU_VERSION}" \
+    && curl -LO https://github.com/opentofu/opentofu/releases/download/v${OPENTOFU_VERSION}/tofu_${OPENTOFU_VERSION}_linux_${TARGETARCH}.tar.gz \
+    && tar -xf tofu_${OPENTOFU_VERSION}_linux_${TARGETARCH}.tar.gz \
+    && mv tofu /opt/bin/tofu \
+    && chmod +x /opt/bin/tofu \
+    && /opt/bin/tofu version
 
 COPY oci/entrypoint oci/entrypoint_user /opt/bin/