components/opentofu 2.0.0

on GitLab

Changelog

[!tip]
Please review the changelog carefully to make use of the latest
and gratest features and to spot any deprecations or removals

that may cause a breaking change for your specific use case.

Added (2 changes)

• Document example with external secrets integration (merge request)
  
• Document how to work with auto-encrypted states locally (merge request)
  

Changed (2 changes)

• Change default for version input to match component version (merge request)
  
• Use GITLAB_TOFU_STATE_NAME for plan job resource_group value (merge request)
  

See the CHANGELOG.md file for the entire history.

Usage

You can use the OpenTofu CI/CD component from the CI/CD catalog using:

include:
  - component: gitlab.com/components/opentofu/full-pipeline@2.0.0
    inputs:
      opentofu_version: 1.9.0

stages: [validate, test, build, deploy, cleanup]

See the README.md for more usage examples.

Available OpenTofu versions

This release is available with the following OpenTofu versions:

• 1.9.0
  
• 1.8.8
  
• 1.7.7
  
• 1.6.3
  

Available GitLab OpenTofu images

This release deployed the following gitlab-opentofu images:

• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofulatest-debian
  
  • (digest: sha256:59ed339480d731d6b54674ce206fec52ffe8a0442156da681e1e66bc57281bed)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofulatest-alpine
  
  • (digest: sha256:e79e59c6ef14738f1462745e1cb959a6b82e2983bc41c486046e7399be7581bf)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.9.0-debian
  
  • (digest: sha256:59ed339480d731d6b54674ce206fec52ffe8a0442156da681e1e66bc57281bed)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.9.0-alpine
  
  • (digest: sha256:e79e59c6ef14738f1462745e1cb959a6b82e2983bc41c486046e7399be7581bf)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.8.8-debian
  
  • (digest: sha256:cbfa9ec4b5441bd809a3343b7e96263b51df43a4a862bc082e37b351f97789c7)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.8.8-alpine
  
  • (digest: sha256:aa8577348fdb6ebc51ae2dcb394711feaac40e6a669f171bed5db6611587d7c7)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.7.7-debian
  
  • (digest: sha256:d25a6f3d50977804f5aa9e89eba42144cd027473e659df51c7199234bbcfc345)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.7.7-alpine
  
  • (digest: sha256:7dab003ee533fe5a9b89a4ee3a760299a6b98f16899aecc92f9ea3070fb8ee92)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.6.3-debian
  
  • (digest: sha256:c54febbf67dbf4022bf9afb9522f4e5df9b5ab33c0b6bbb6f3ced0cfde7b9575)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.6.3-alpine
  
  • (digest: sha256:9a18c0f67e6736ef11c1d5b1b15aa57fab75093960e469bbdeb3439273e6d05f)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-debian
  
  • (digest: sha256:59ed339480d731d6b54674ce206fec52ffe8a0442156da681e1e66bc57281bed)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-alpine
  
  • (digest: sha256:e79e59c6ef14738f1462745e1cb959a6b82e2983bc41c486046e7399be7581bf)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.0.0-opentofulatest-debian
  
  • (digest: sha256:59ed339480d731d6b54674ce206fec52ffe8a0442156da681e1e66bc57281bed)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.0.0-opentofulatest-alpine
  
  • (digest: sha256:e79e59c6ef14738f1462745e1cb959a6b82e2983bc41c486046e7399be7581bf)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.0.0-opentofu1.9.0-debian
  
  • (digest: sha256:59ed339480d731d6b54674ce206fec52ffe8a0442156da681e1e66bc57281bed)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.0.0-opentofu1.9.0-alpine
  
  • (digest: sha256:e79e59c6ef14738f1462745e1cb959a6b82e2983bc41c486046e7399be7581bf)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.0.0-opentofu1.8.8-debian
  
  • (digest: sha256:cbfa9ec4b5441bd809a3343b7e96263b51df43a4a862bc082e37b351f97789c7)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.0.0-opentofu1.8.8-alpine
  
  • (digest: sha256:aa8577348fdb6ebc51ae2dcb394711feaac40e6a669f171bed5db6611587d7c7)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.0.0-opentofu1.7.7-debian
  
  • (digest: sha256:d25a6f3d50977804f5aa9e89eba42144cd027473e659df51c7199234bbcfc345)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.0.0-opentofu1.7.7-alpine
  
  • (digest: sha256:7dab003ee533fe5a9b89a4ee3a760299a6b98f16899aecc92f9ea3070fb8ee92)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.0.0-opentofu1.6.3-debian
  
  • (digest: sha256:c54febbf67dbf4022bf9afb9522f4e5df9b5ab33c0b6bbb6f3ced0cfde7b9575)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.0.0-opentofu1.6.3-alpine
  
  • (digest: sha256:9a18c0f67e6736ef11c1d5b1b15aa57fab75093960e469bbdeb3439273e6d05f)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.0.0-debian
  
  • (digest: sha256:59ed339480d731d6b54674ce206fec52ffe8a0442156da681e1e66bc57281bed)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.0.0-alpine
  
  • (digest: sha256:e79e59c6ef14738f1462745e1cb959a6b82e2983bc41c486046e7399be7581bf)
    

The images are available for the following platforms:

• linux/amd64
  
• linux/arm64
  

And with the follow base OS images:

• alpine, use base_os: alpine input to use it (default).
  
• debian, use base_os: debian input to use it.
  

The images have been signed with cosign and can be verified with the following command:

cosign verify \
  "registry.gitlab.com/components/opentofu/gitlab-opentofu:2.0.0-alpine" \
  --certificate-identity "https://gitlab.com/components/opentofu//.gitlab-ci.yml@refs/tags/2.0.0" \
  --certificate-oidc-issuer "https://gitlab.com"

The image_digest input can be used to strictly pull by the image digest.
The image_digest input value needs to have the format of @<type>:<hash>
where <type>:<hash> is the digest value from the images list above.

[!note]
When using the component with the inputs version and opentofu_version,
then the image tag is constructed with the following pattern: <version>-opentofu<opentofu_version>.

Read more about versioning and releases here.