components/opentofu 2.4.0

on GitLab

Changelog

[!tip]
Please review the changelog carefully to make use of the latest
and gratest features and to spot any deprecations or removals

that may cause a breaking change for your specific use case.

Added (4 changes)

• Support post_mr_plan_comment in full-pipeline template (merge request)
  
• Support post_mr_plan_comment in validate-plan-apply template by @pleio_frank (merge request)
  
• Support post_mr_plan_comment in validate-plan-destroy template by @pleio_frank (merge request)
  
• Implement new policy-enforcement template (merge request)
  

See the CHANGELOG.md file for the entire history.

Usage

You can use the OpenTofu CI/CD component from the CI/CD catalog using:

include:
  - component: gitlab.com/components/opentofu/full-pipeline@2.4.0
    inputs:
      opentofu_version: 1.9.1

stages: [validate, test, build, deploy, cleanup]

See the README.md for more usage examples.

Available OpenTofu versions

This release is available with the following OpenTofu versions:

• 1.9.1
  
• 1.9.0
  
• 1.8.9
  
• 1.8.8
  
• 1.7.8
  
• 1.7.7
  
• 1.6.3
  

Available GitLab OpenTofu images

This release deployed the following gitlab-opentofu images:

• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofulatest-debian
  
  • (digest: sha256:7083dce60a0064a9ae0181dbb6e04a44debce4cbfd80612506a27fd6b6c80259)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofulatest-alpine
  
  • (digest: sha256:e65f349490342cbf0f802447eaf882a8bb15221e564b8636bca27c9d2c6fad82)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.9.1-debian
  
  • (digest: sha256:7083dce60a0064a9ae0181dbb6e04a44debce4cbfd80612506a27fd6b6c80259)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.9.1-alpine
  
  • (digest: sha256:e65f349490342cbf0f802447eaf882a8bb15221e564b8636bca27c9d2c6fad82)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.9.0-debian
  
  • (digest: sha256:47f8b139d57db74d308a9081d9573d8cfba5cbfa595ed4755b34900543ef12ec)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.9.0-alpine
  
  • (digest: sha256:9613ce10473708b7538357986dbe80f347884b9cd1fe9e97876ab5d4833db8bd)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.8.9-debian
  
  • (digest: sha256:47c62282b8ad33d3236f47067494ad66fc5d817240f7c4250206303cac8684ad)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.8.9-alpine
  
  • (digest: sha256:37e0e1bf83ffb7360e857d0cc750df1209b3fe4b18f43a783998261e062a452c)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.8.8-debian
  
  • (digest: sha256:b5793ef907244604be873f43f3272ac0d0c355f8a9a09543f23a27ec6f2609a8)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.8.8-alpine
  
  • (digest: sha256:4d1a5ac060d88d7a122717bfdb3ac9f73a26e54d3ffc37ab059f59de6cb2dc81)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.7.8-debian
  
  • (digest: sha256:e4eefb77f3105d7834d5277acf2f864320c7377f4ba6371163b405d2474de03e)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.7.8-alpine
  
  • (digest: sha256:40d54673ccf5e1e40104416641d665cbb001e943023196fbd7a4183f0248a62c)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.7.7-debian
  
  • (digest: sha256:8a79b538695f5a926955129108b34368fb51b74684b4378d3689259ac444eccc)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.7.7-alpine
  
  • (digest: sha256:da6dc55d5262d55f72ba6ed52123c59c42cb2d4f2dbcf2f502e5ab329d8451bf)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.6.3-debian
  
  • (digest: sha256:4e713126e0443d548b3b73d218ea0ea6c38178aba39434a39887b599b9420ae2)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.6.3-alpine
  
  • (digest: sha256:9d34c0d04bfb9ded8ec4517e6acfcd8034e097e220471aa9cb34e9ace03c7a14)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-debian
  
  • (digest: sha256:7083dce60a0064a9ae0181dbb6e04a44debce4cbfd80612506a27fd6b6c80259)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-alpine
  
  • (digest: sha256:e65f349490342cbf0f802447eaf882a8bb15221e564b8636bca27c9d2c6fad82)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.4.0-opentofulatest-debian
  
  • (digest: sha256:7083dce60a0064a9ae0181dbb6e04a44debce4cbfd80612506a27fd6b6c80259)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.4.0-opentofulatest-alpine
  
  • (digest: sha256:e65f349490342cbf0f802447eaf882a8bb15221e564b8636bca27c9d2c6fad82)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.4.0-opentofu1.9.1-debian
  
  • (digest: sha256:7083dce60a0064a9ae0181dbb6e04a44debce4cbfd80612506a27fd6b6c80259)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.4.0-opentofu1.9.1-alpine
  
  • (digest: sha256:e65f349490342cbf0f802447eaf882a8bb15221e564b8636bca27c9d2c6fad82)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.4.0-opentofu1.9.0-debian
  
  • (digest: sha256:47f8b139d57db74d308a9081d9573d8cfba5cbfa595ed4755b34900543ef12ec)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.4.0-opentofu1.9.0-alpine
  
  • (digest: sha256:9613ce10473708b7538357986dbe80f347884b9cd1fe9e97876ab5d4833db8bd)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.4.0-opentofu1.8.9-debian
  
  • (digest: sha256:47c62282b8ad33d3236f47067494ad66fc5d817240f7c4250206303cac8684ad)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.4.0-opentofu1.8.9-alpine
  
  • (digest: sha256:37e0e1bf83ffb7360e857d0cc750df1209b3fe4b18f43a783998261e062a452c)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.4.0-opentofu1.8.8-debian
  
  • (digest: sha256:b5793ef907244604be873f43f3272ac0d0c355f8a9a09543f23a27ec6f2609a8)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.4.0-opentofu1.8.8-alpine
  
  • (digest: sha256:4d1a5ac060d88d7a122717bfdb3ac9f73a26e54d3ffc37ab059f59de6cb2dc81)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.4.0-opentofu1.7.8-debian
  
  • (digest: sha256:e4eefb77f3105d7834d5277acf2f864320c7377f4ba6371163b405d2474de03e)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.4.0-opentofu1.7.8-alpine
  
  • (digest: sha256:40d54673ccf5e1e40104416641d665cbb001e943023196fbd7a4183f0248a62c)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.4.0-opentofu1.7.7-debian
  
  • (digest: sha256:8a79b538695f5a926955129108b34368fb51b74684b4378d3689259ac444eccc)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.4.0-opentofu1.7.7-alpine
  
  • (digest: sha256:da6dc55d5262d55f72ba6ed52123c59c42cb2d4f2dbcf2f502e5ab329d8451bf)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.4.0-opentofu1.6.3-debian
  
  • (digest: sha256:4e713126e0443d548b3b73d218ea0ea6c38178aba39434a39887b599b9420ae2)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.4.0-opentofu1.6.3-alpine
  
  • (digest: sha256:9d34c0d04bfb9ded8ec4517e6acfcd8034e097e220471aa9cb34e9ace03c7a14)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.4.0-debian
  
  • (digest: sha256:7083dce60a0064a9ae0181dbb6e04a44debce4cbfd80612506a27fd6b6c80259)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:2.4.0-alpine
  
  • (digest: sha256:e65f349490342cbf0f802447eaf882a8bb15221e564b8636bca27c9d2c6fad82)
    

The images are available for the following platforms:

• linux/amd64
  
• linux/arm64
  

And with the follow base OS images:

• alpine, use base_os: alpine input to use it (default).
  
• debian, use base_os: debian input to use it.
  

The images have been signed with cosign and can be verified with the following command:

cosign verify \
  "registry.gitlab.com/components/opentofu/gitlab-opentofu:2.4.0-alpine" \
  --certificate-identity "https://gitlab.com/components/opentofu//.gitlab-ci.yml@refs/tags/2.4.0" \
  --certificate-oidc-issuer "https://gitlab.com"

The image_digest input can be used to strictly pull by the image digest.
The image_digest input value needs to have the format of @<type>:<hash>
where <type>:<hash> is the digest value from the images list above.

[!note]
When using the component with the inputs version and opentofu_version,
then the image tag is constructed with the following pattern: <version>-opentofu<opentofu_version>.

Read more about versioning and releases here.