Add provider lockfiles to test fixtures

Timo Furrerrequested to merge
test-fixture-provider-lockfiles into main
  • Add provider lockfiles to test fixtures

The IaC test fixtures had no committed .terraform.lock.hcl, so every tofu init re-resolved hashicorp/local, null, random and archive against registry.opentofu.org and downloaded them from GitHub releases. That happens in every test job of every child pipeline, and it was the second largest source of pipeline flakiness over the last six months.

Pinning the providers lets the existing $GITLAB_TOFU_ROOT_DIR/.terraform cache satisfy init without contacting the registry.

Lockfiles cover linux_amd64 (CI) and darwin_arm64 (local development). iac-without-lockfile is deliberately left without one, and iac-oci-provider resolves its provider over OCI instead.

Merge request reports