
OpenToFu CLI
CertifiedTasks that run OpenTofu CLI commands to init, plan, apply, and destroy infrastructure.
Run OpenTofu commands inside a container with support for input files, output files, environment variables, and remote state backends such as S3, GCS, or Terraform Cloud.
OpenToFu CLI
Tasks that run OpenTofu CLI commands to init, plan, apply, and destroy infrastructure.
Run OpenTofu commands inside a container with support for input files, output files, environment variables, and remote state backends such as S3, GCS, or Terraform Cloud.
How to use the OpenTofu plugin
Run OpenTofu CLI commands — init, plan, apply, destroy, and more — from Kestra flows inside a container.
Common properties
containerImage defaults to ghcr.io/opentofu/opentofu. Pin a specific version by appending a tag (e.g. ghcr.io/opentofu/opentofu: 1.9.0). taskRunner controls where the container runs — defaults to Docker.
Tasks
cli.OpenTofuCLI runs one or more OpenTofu CLI commands set in commands (e.g. tofu init, tofu plan, tofu apply -auto-approve). Use beforeCommands for setup steps. Pass Terraform variable files, backend configs, or provider credentials via inputFiles or pull them from namespace files. Pass credentials and secrets as environment variables via env — store sensitive values in secrets. Apply connection or runner properties globally with plugin defaults.