Workspaces
Apply an OpenTofu module published as OCI from your tenant: variables, outputs, refresh, approval, dependencies.
Providers
Declare the configuration of an OpenTofu provider and its credentials, once, for all the Workspaces of the tenant.
Publish a module
Package an OpenTofu module in OCI format and push it to a registry, so that a Workspace can reference it.