110 Commits (03f6c650ca9e78fc0d80d430ca1ec2a52c262da4)

Author	SHA1	Message	Date
Mitchell Hashimoto	03f6c650ca	state/remote: ClientLocker is just a Client that is a state.Locker	9 years ago
Mitchell Hashimoto	9451acc5da	state/remote: add unit test to verify s3 is a ClientLocker as well	9 years ago
Mitchell Hashimoto	efe754183b	state/remote: export ClientLocker, test for implementation ... This adds unit tests (that will fail at compile time) if various structs don't implement the right interfaces for locking	9 years ago
James Bardin	ec00564be6	Clean up LockInfo and LockError and use them ... Gove LockInfo a Marshal method for easy serialization, and a String method for more readable output. Have the state.Locker implementations use LockError when possible to return LockInfo and an error.	9 years ago
James Bardin	888af93356	Have S3 check the lockID on Unlock ... This needs to be improved to happen in a transaction, but it gets the implementation passing the new tests.	9 years ago
James Bardin	67bbebce08	Have consul state reutrn the lock ID ... The lock ID isn't used because the lock is tied to the client, but return the lock ID to match the behavior of other locks.	9 years ago
James Bardin	6aa1066f7c	Store and use the correct IDs in TestRemoteLocks	9 years ago
James Bardin	f5ed8cd288	Use NewLockInfo to get a pre-populated value ... Using NewLockInfo ensure we start with all required fields filled.	9 years ago
James Bardin	6d32b70637	Make S3 remote state pass tests ... TODO: update S3Client to make full use of the state.Locker interface	9 years ago
James Bardin	0ad6f08204	Make remote state test run ... Make them compile against the new interface. The tests will be updated later to check new behavior.	9 years ago
James Bardin	4d00c29706	Merge pull request #11836 from hashicorp/jbardin/state-locking ... Add locking during backend configuration	9 years ago
Daren Desjardins	5718294386	state/remote/s3: Fix Bug with Assume Role for Federated IAM Account (#10067) ... * Enable remote s3 state support for assume role - provide role_arn in backend config to enable assume role Fixes #8739 * Check for errors after obtaining credentials	9 years ago
James Bardin	5c2e945b3c	Fix format string and typos	9 years ago
James Bardin	14d965722e	Use single state.LockInfo struct ... Remove redundant structures	9 years ago
James Bardin	9b76f6e138	Move TestRemoteLocks to state/remote ... This was legacy remote state client and backends can use this test function without an import cycle.	9 years ago
James Bardin	a2b5811f50	Remove "expires" from lock info. ... We are not going to handle lock expiration, at least at this time, so remove the Expires fields to avoid any confusion.	9 years ago
James Bardin	10f6d7f30f	Add locking for s3 state ... Use a DynamoDB table to coodinate state locking in S3. We use a simple strategy here, defining a key containing the value of the bucket/key of the state file as the lock. If the keys exists, the locks fails. TODO: decide if locks should automatically be expired, or require manual intervention.	9 years ago
James Bardin	35307d5a60	Add remote state locking ... In order to provide lockign for remote states, the Cache state, remote.State need to expose Lock and Unlock methods. The actual locking will be done by the remote.Client, which can implement the same state.Locker methods.	9 years ago
Mitchell Hashimoto	d3633ab368	state/remote: remove consul since we converted that	9 years ago
Ben Slusky	e3b20c3508	Basic authentication for HTTP remote state backend	9 years ago
Aleksander Modzelewski	2627e4bd8d	Add token authentication to Swift remote	9 years ago
Joe Topjian	8ecc6fda0a	Merge pull request #10055 from fatmcgav/swift_add_version_expire ... state/remote/swift: Add support for versioning state file in swift, and expiring objects	9 years ago
Gavin Williams	c77ed69a4e	state/remote/swift: Add support for versioning state file in swift, and expiring object after period of time. ... Update website docs with changes	9 years ago
Peter McAtominey	507efcb180	state/azure: support passing of lease ID when writing storage blob (#10115) ... Also fixed tests failing auth caused by getStorageAccountAccessKey returning the key name rather than the value TF_ACC= go test ./state/remote -v -run=TestAz -timeout=10m -parallel=4 === RUN TestAzureClient_impl --- PASS: TestAzureClient_impl (0.00s) === RUN TestAzureClient 2016/11/18 13:57:34 [DEBUG] New state was assigned lineage "96037426-f95e-45c3-9183-6c39b49f590b" 2016/11/18 13:57:34 [TRACE] Preserving existing state lineage "96037426-f95e-45c3-9183-6c39b49f590b" --- PASS: TestAzureClient (130.60s) === RUN TestAzureClientEmptyLease 2016/11/18 13:59:44 [DEBUG] New state was assigned lineage "d9997445-1ebf-4b2c-b4df-15ae152f6417" 2016/11/18 13:59:44 [TRACE] Preserving existing state lineage "d9997445-1ebf-4b2c-b4df-15ae152f6417" --- PASS: TestAzureClientEmptyLease (128.15s) === RUN TestAzureClientLease 2016/11/18 14:01:55 [DEBUG] New state was assigned lineage "85912a12-2e0e-464c-9886-8add39ea3a87" 2016/11/18 14:01:55 [TRACE] Preserving existing state lineage "85912a12-2e0e-464c-9886-8add39ea3a87" --- PASS: TestAzureClientLease (138.09s) PASS ok github.com/hashicorp/terraform/state/remote 397.111s	9 years ago
Gavin Williams	bf8612b9b7	state/remote/swift: Enhancements to support full set of Openstack configuration options, plus SSL certs. Documentation updated to support	10 years ago
Gavin Williams	ac07430124	state/remote/swift: Update to use Gophercloud/gophercloud, restructure to support insecure TLS, added Keystone v3 auth params ... Update swift remote documentation	10 years ago
Cameron Watters	b4eb63d710	state/remote: New provider - manta ... - add remote state provider backed by Joyent's Manta - add documentation of Manta remote state provider - explicitly check for passphrase-protected SSH keys, which are currently unsupported, and generate a more helpful error (borrowed from Packer's solution to the same problem): https://github.com/mitchellh/packer/blob/master/common/ssh/key.go#L27	10 years ago
James Nugent	8d0a68e1d4	state/remote: Officially Support local backend ... This is a rework of pull request #6213 submitted by @joshuaspence, adjusted to work with the remote state data source. We also add a deprecation warning for people using the unsupported API, and retain the ability to refer to "_local" as well as "local" for users in a mixed version environment.	10 years ago
Ian Duffy	767914bbdc	[GH-1275] Support for AWS access via IAMs AssumeRole functionality ... This commit enables terraform to utilise the assume role functionality of sts to execute commands with different privileges than the API keys specified. Signed-off-by: Ian Duffy <ian@ianduffy.ie>	10 years ago
James Bardin	cdb80f68a8	Ensure better state normalization ... Fix checksum issue with remote state If we read a state file with "null" objects in a module and they become initialized to an empty map the state file may be written out with empty objects rather than "null", changing the checksum. If we can detect this, increment the serial number to prevent a conflict in atlas. Our fakeAtlas test server now needs to decode the state directly rather than using the ReadState function, so as to be able to read the state unaltered. The terraform.State data structures have initialization spread out throughout the package. More thoroughly initialize State during ReadState, and add a call to init() during WriteState as another normalization safeguard. Expose State.init through an exported Init() method, so that a new State can be completely realized outside of the terraform package. Additionally, the internal init now completely walks all internal state structures ensuring that all maps and slices are initialized. While it was mentioned before that the `init()` methods are problematic with too many call sites, expanding this out better exposes the entry points that will need to be refactored later for improved concurrency handling. The State structures had a mix of `omitempty` fields. Remove omitempty for all maps and slices as part of this normalization process. Make Lineage mandatory, which is now explicitly set in some tests.	10 years ago
Guido Bakker	ee9ebe849f	Support setting datacenter when using consul remote state (#8102) ... * Support setting datacenter when using consul remote state Change-Id: I8c03f4058e9373f0de8fde7ce291ec552321cc60 * Add documentation for setting datacenter when using consul remote state Change-Id: Ia62feea7a910a76308f0a5e7f9505c9a210e0339	10 years ago
James Bardin	a1a501a26a	Merge pull request #8053 from hashicorp/jbardin/atlas-retry-policy ... don't retry the atlas requests with the wrong cert	10 years ago
James Bardin	df0c795b39	Don't retry the atlas requests with the wrong cert ... This probably won't recover, so abort immediately. Requires retryablehttp CheckRetry patch.	10 years ago
Renier Morales	c2bcb5fbe5	Skip IAM/STS validation and metadata check (#7874) ... * Skip IAM/STS validation and metadata check * Skip IAM/STS identity validation - For environments or other api implementations where there are no IAM/STS endpoints available, this option lets you opt out from that provider initialization step. * Skip metdata api check - For environments in which you know ahead of time there isn't going to be a metadta api endpoint, this option lets you opt out from that check to save time. * Allow iam/sts initialization even if skipping account/cred validation (#7874) * Split out skip of IAM validation into credentials and account id (#7874)	10 years ago
James Bardin	0a3714eaac	Don't send access_token in request params ... Always send the access_token in the X-Atlas-Token header.	10 years ago
James Bardin	74813821ec	Add remote state init test ... Verify that a remote state file is correctly initialized in the same manner as used by the `terraform remote config`	10 years ago
James Bardin	3622bfddd6	Revert #7464 and allow an empty state ... Revert back to using a nil state. The external usage of the state shoudl always check the Empty() method.	10 years ago
James Bardin	24f6d3fe98	Return an error when there's no remote state ... When refreshing remote state, indicate when no state file was found with an ErrRemoteStateNotFound error. This prevents us from inadvertantly getting a nil state into a terraform.State where we assume there's always a root module.	10 years ago
Paul Stack	079e1f9a56	provider/azurerm: Bump azure-sdk-for-go to 3.0.0-beta (#7420) ... provider/azurerm: Bump azure-sdk-for-go to 3.0.0-beta	10 years ago
Paul Stack	32e1a32476	remote: Rename mas to azure (#7114) ... MAS wasn't obvious it was Azure so renamed it to Azure	10 years ago
Maxime Bury	c98f391bee	Add basic implementation for remote state on azure (#7064) ... * Add basic implementation for remote state on azure * Don't auto-provision the container * Fix compilation errors * Add factory to the remote map * Add documentation * Add acceptance tests	10 years ago
James Nugent	706ccb7dfe	core: Introduce state v3 and upgrade process ... This commit makes the current Terraform state version 3 (previously 2), and a migration process as part of reading v2 state. For the most part this is unnecessary: helper/schema will deal with upgrading state for providers written with that framework. However, for providers which implemented the resource model directly, this gives a best-efforts attempt at lossless upgrade. The heuristics used to change the count of a map from the .# key to the .% key are as follows: - if the flat map contains any non-numeric keys, we treat it as a map - if the map is empty it must be computed or optional, so we remove it from state There is a known edge condition: maps with all-numeric keys are indistinguishable from sets without access to the schema. They will need manual conversion or may result in spurious diffs.	10 years ago
Matt Morrison	cbfb4d8b86	remote state: Add GCS provider for remote state	10 years ago
James Nugent	3ea3c657b5	core: Use OutputState in JSON instead of map ... This commit forward ports the changes made for 0.6.17, in order to store the type and sensitive flag against outputs. It also refactors the logic of the import for V0 to V1 state, and fixes up the call sites of the new format for outputs in V2 state. Finally we fix up tests which did not previously set a state version where one is required.	10 years ago
Joseph Anthony Pasquale Holsten	546fb94265	atlas: update test err msg to reflect real timeout	10 years ago
James Nugent	6a20e8927d	core: Fix issues from rebasing dev-0.7 onto master ... - Fix sensitive outputs for lists and maps - Fix test prelude which was missed during conflict resolution - Fix `terraform output` to match old behaviour and not have outputs header and colouring - Bump timeout on TestAtlasClient_UnresolvableConflict	10 years ago
James Nugent	6aac79e194	state: Add support for outputs of multiple types ... This commit adds the groundwork for supporting module outputs of types other than string. In order to do so, the state version is increased from 1 to 2 (though the "public-facing" state version is actually as the first state file was binary). Tests are added to ensure that V2 (1) state is upgraded to V3 (2) state, though no separate read path is required since the V2 JSON will unmarshal correctly into the V3 structure. Outputs in a ModuleState are now of type map[string]interface{}, and a test covers round-tripping string, []string and map[string]string, which should cover all of the types in question. Type switches have been added where necessary to deal with the interface{} value, but they currently default to panicking when the input is not a string.	10 years ago
John Engelman	14f6f90621	Support standard AWS config in the S3 remote backend. (#5270)	10 years ago
Paul Hinze	4ac6dda633	state/remote/atlas: Use go-rootcerts for certificate loading ... Allows CA certs to be configured via `ATLAS_CAFILE` and `ATLAS_CAPATH` env vars, and works around https://github.com/golang/go/issues/14514 on OS X.	10 years ago
Anubhav Mishra	f58290c83f	Moving octet-stream to json for remote http backend	10 years ago