Terrapod is a free, open-source platform replacement for Terraform Enterprise. v0.25.0 lands the autodiscovery workspace lifecycle (safe-by-default rename / delete / orphan reconciliation), fleet bulk workspace operations, expanded autodiscovery rule templating, and switches new-workspace defaults to OpenTofu 1.12.
Highlights
- Autodiscovery workspace lifecycle — when a tracked directory is renamed, the workspace moves in place with its state and history preserved (never destroyed, even on a destroy rule). When a directory is deleted, the owning rule's
on_directory_deletepolicy decides:flag(default, safe — marks the workspacepending_deletionfor an explicit operator action) or opt-indestroy(queues a real destroy, then archives). Abandoned speculative workspaces auto-reconcile — never-applied orphans whose PR closed unmerged are archived; ones with state are flagged for a human. Safe by default: nothing destroys infrastructure unless a rule explicitly opts in (closes #314). - Bulk workspace operations — a new server-side workspace search plus an all-or-nothing bulk-update endpoint (single transaction, dry-run by default, and it never triggers runs) to change settings — including run-task and notification configs — across a filtered fleet of workspaces in one call (closes #318).
- Expanded autodiscovery rule templating — rules can now template
var_files, run-task specs, and notification specs onto every workspace they create, so "define once → apply to existing (via bulk-update) + auto-apply to future (via autodiscovery)" stays consistent (closes #318). - OpenTofu 1.12 default — newly created workspaces default to OpenTofu 1.12 (now GA) instead of Terraform 1.11. Existing workspaces are unaffected — they keep their stored execution backend and version (closes #325).
Security
Status
Beta — the autodiscovery lifecycle was smoke-tested end-to-end on a live stack against real squash-merge PR flows, including the opt-in destroy path (the smoke surfaced and fixed four blast-radius edge cases that unit tests alone missed). Bulk-update + rule templating verified live; the workspace list badges, detail-page lifecycle banner, and the destroy-opt-in rule control were verified in the UI.
Full Changelog: v0.24.0...v0.25.0