terraform

Commit Graph

Author	SHA1	Message	Date
Jamie Finnigan	8b8df22e1a	go.mod: Use Go v1.21.3 and some other dependency upgrades Some of these dependencies are subject to security advisories. Although there is no practical exposure to these vulnerabilities with how Terraform uses these dependencies, we're upgrading them after checking that the upgrades are unlikely to cause other significant changes in behaviour as a concession to those who run imprecise security scanners that are unable to consider nuance.	2 years ago
James Bardin	84f375a092	update hcl v2.19.1	2 years ago
James Bardin	1f27118598	update hcl v2.19.0	2 years ago
James Bardin	273fd8ae8b	update go-getter v1.7.3 Fixes regression in v1.7.2 where GIT_SSH_COMMAND would always be overwritten.	2 years ago
Martin Atkins	dc376bc4c4	go.mod: cty v1.14.1 and HCL v2.18.1 These each fix some different bugs related to handling of "refined" unknown values, both of which were causing panics with some input.	2 years ago
Liam Cervante	ffbcaf8bef	Implement TFC integration for private module registry test runs (#33710 ) * implement module testing via TFC * ready for review * fix static checks * licence headers	2 years ago
Graham Davison	9df902ccfd	Uses S3 Upload Manager to upload state file	2 years ago
Jared Baker	2dc5795597	backend/s3(deps): bump aws-sdk-go-base/v2	3 years ago
Martin Atkins	91c30fe713	Build with Go 1.21.0 (#33691 ) * Build with Go 1.21.0 * tests: update tls error message string Go 1.21 introduced more detailed error conditions for mTLS connections. As of Go 1.21, if the server is configured to require client auth, but no client cert is provided, the alert is now "certificate required", rather than "bad certificate". See `62a994837a`. * declare go 1.21.0 As of Go 1.21.0, the go directive in go.mod declares a strict minimum version of Go necessary to use a module. The go command will download a copy of the newer toolchain if necessary. * changelog: Go 1.21 supported OS versions * scripts: pin staticcheck package The last released version of staticcheck does not yet support Go 1.21.0, so pin to the latest commit. When a version is released that supports Go 1.21.0, we should pin to that instead. * Go 1.21 contrib updates * bump versions of hcl/v2 and go-cty This update means that HCL, cty, and Terraform all use Unicode 15. --------- Co-authored-by: Katy Moe <katy@katy.moe> Co-authored-by: kmoe <5575356+kmoe@users.noreply.github.com>	3 years ago
Yin Luo	d3f4f37197	backend/cos: Support endpoint (#33656 ) * support endpoint for the COS backend * update go.sum * 1.add domain for tag client used for lock file. 2.adjust endpoint formation. * Apply suggestions from code review Co-authored-by: kmoe <5575356+kmoe@users.noreply.github.com> --------- Co-authored-by: kmoe <5575356+kmoe@users.noreply.github.com>	3 years ago
James Bardin	856799fc10	update hcl This update incorporates fixes to `try` and `can` to better handle unknown arguments.	3 years ago
Dinar Valeev	200ff93e4a	[backend] kubernetes: fix secret size limitation (#29678 ) * [backend] kubernetes: fix secret size limitation By now kubernetes backend could hold up to defaultETCDSize gzipped data (which is 1-1.5Mb). This doesn't scale for larger states. This commit implements spliting data across multiple secrets bound by the same Secret labels. This practically removes etcd value size limitation and allows backend to scale across multiple secrets. This also takes care of cases when state needs to be shrinked. In such case code will cleanup unneeded secrets Signed-off-by: Dinar Valeev <dinar.valeev@absa.africa> * Refactor - Remove unneeded function - Consistently use "chunk" as the unit - Sort the secret response by the index - rename etcdDefaultSize to defaultChunkSize * Add acceptance test to create a very large state * Remove documentation warning about secret size limit * fix broken test * remove unneeded code * add missing proxy_url attribute * update k8s.io dependencies to v1.25.5 --------- Signed-off-by: Dinar Valeev <dinar.valeev@absa.africa> Co-authored-by: John Houston <jhouston@hashicorp.com>	3 years ago
kmoe	14dacd76a6	upgrade go-cty to v1.13.3 (#33741 )	3 years ago
Jared Baker	56c6e34222	Merge branch 'main' into s3/modernization	3 years ago
Jared Baker	fb75bd0d31	chore: bump aws-sdk-go-base/v2	3 years ago
Brandon Croft	a89b321709	Bump go-tfe to v1.32.1	3 years ago
Graham Davison	7be07bb00e	Bumps `aws-sdk-go-base`	3 years ago
Brandon Croft	b1d4f18a9b	Create provisional configuration version when saving cloud plan	3 years ago
Graham Davison	f0fdd3c77c	Updates `aws-sdk-go-base` to `v2`	3 years ago
CJ Horton	4c834e0831	go get github.com/hashicorp/go-getter@v1.7.2	3 years ago
Nick Fagerlund	b3f254e08d	Upgrade to go-tfe v1.29.0 (for saved plan run support)	3 years ago
Martin Atkins	a7807dac16	main: Optionally configure an OpenTelemetry OTLP exporter Terraform CLI is sometimes used as part of a larger distributed system, in which case it would be helpful to be able to gather telemetry from it as part of the larger request it's being run in response to. We'll now support optionally enabling an OTLP exporter by setting the environment variable OTEL_TRACES_EXPORTER=otlp (a standard OpenTelemetry convention). As of this commit there isn't actually anything emitting traces to the specified collector, but we'll gradually add tracing instrumentation to parts of Terraform CLI and Core in later commits.	3 years ago
Martin Atkins	9e6cc4ae6f	go.mod: go get google.golang.org/grpc@v1.53.0 This is to upgrade past the vulnerability described here: https://github.com/advisories/GHSA-cfgp-2977-2fmm Terraform does not seem to be significantly affected by it since our use is primarily between Terraform Core and provider plugins where at worst a provider could just make its own connection to Terraform malfunction. However, this also appears to be a relatively low-risk upgrade. This does force upgrading some of the Google Cloud Platform dependencies, which the "gcs" (Google Cloud Storage) backend depends on, so there is some minor risk to that backend but the upstream changes to those dependencies do not seem to be significant.	3 years ago
Brandon Croft	2173aff852	Run go mod tidy	3 years ago
Brandon Croft	63124e0cb7	Merge pull request #33336 from hashicorp/TF-7056-uploading-state-directly-to-hosted-state-upload-url-when-available cloud: when saving state, utilize new 'pending' state version	3 years ago
Liam Cervante	1fe57d457d	upgrade golang.org/x/crypto/openpgp to github.com/ProtoMail/go-crypto (#33406 )	3 years ago
Brandon Croft	9fe3f7a7b4	cloud: when saving state, create a pending state version then upload Create a pending state version followed by a separate state upload When this version of the endpoint fails (It is not yet generally available, or when using with Terraform Enterprise) Fall back to the original call with state content included in the request. This strategy will reduce the amount of save failures due to network latency and gateway timeouts.	3 years ago
Martin Atkins	237877f170	go.mod: go get github.com/hashicorp/terraform-svchost@v0.1.1 This includes a change to make svchost.Disco and the caching credentials source both safe for concurrent calls.	3 years ago
CJ Horton	8213513e2b	Merge pull request #33278 from hashicorp/radditude/cloud-config-generation plannable import: allow writing generated config when using the cloud integration	3 years ago
Martin Atkins	1962b1167c	go.mod: go get github.com/hashicorp/hcl/v2@v2.17.0 This introduces HCL's own updates to generate refinements for unknown results from some operations.	3 years ago
CJ Horton	b705414d6b	use newly released go-tfe 1.26.0	3 years ago
Martin Atkins	9f6a3ba701	build: Generate copyright headers automatically HashiCorp legal now requires a copyright claim in a comment at the top of every substantial file in this repository. If we don't add this ourselves then a bot will open a PR to add missing entries, but that process adds git history, pull request, and GitHub notification noise so instead we'll deal with it proactively as part of our usual code generation steps. This means that pull requests will fail their checks if there are any files that lack copyright headers, so we can deal with those before we merge rather than in a subsequent PR.	3 years ago
CJ Horton	cdce4c4a6d	write generated config when using the cloud integration	3 years ago
CJ Horton	b88bae2ec4	tests for cloud backend config generation	3 years ago
Martin Atkins	1ef550e59a	go.mod: go get github.com/zclconf/go-cty@v1.3.2	3 years ago
Martin Atkins	c046b846a7	go.mod: upgrade github.com/hashicorp/go-tfe for response header hooks	3 years ago
James Bardin	6c08c3e45e	udpate go-cty	3 years ago
Sebastian Rivera	b23cfaefe8	Refactor SRO check to prevent duplicate plan output	3 years ago
Martin Atkins	9f827f57ae	go.mod: Revert cty minor version v1.13 upgrade We inadvertently incorporated the new minor release of cty into the 1.4 branch, and that's introduced some more refined handling of unknown values that is too much of a change to introduce in a patch release. Therefore this reverts back to the previous minor release for the v1.4 series, and then we'll separately get the main branch ready to work correctly with the new cty before Terraform v1.5. This reverts just the upgrade and the corresponding test changes from #32775, while retaining the HCL upgrade and the new test case it introduced for that bug it was trying to fix. That new test is still passing so it seems that the cty upgrade is not crucial to that fix.	3 years ago
Liam Cervante	32f151f20b	Update HCL to handle type mismatches when applying defaults (#32775 ) * add test reproducing terraform crash * pull latest hcl * add missing go.sum file * also fix tests broken by go-cty update	3 years ago
Alisdair McDiarmid	5e83ccc1f9	Remove terraform-config-inspect	3 years ago
dependabot[bot]	cff7584a38	Bump golang.org/x/net from 0.5.0 to 0.7.0 Bumps [golang.org/x/net](https://github.com/golang/net) from 0.5.0 to 0.7.0. - [Release notes](https://github.com/golang/net/releases) - [Commits](https://github.com/golang/net/compare/v0.5.0...v0.7.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	3 years ago
Martin Atkins	c7aff57c92	build: Use Go 1.20.0 This changes which Go version we use for official releases and for everyday development and testing. At the time of this commit Go 1.20.1 is available but is not yet included in goenv, the tool that we use in some environments for reacting automatically to this file. I expect we'll upgrade to Go 1.20.1 very soon, but this is a routine upgrade to the latest major release so that we can start soaking in the new compiler and library behaviors throughout the v1.5 development period. Go 1.20 continues to support only Unicode 13, so we do not need to make any changes to our supporting packages that also rely on Unicode data.	3 years ago
Jukie	e2106907f5	Update go-getter version	3 years ago
Yin Luo	e9b066f514	Support assume role for cos backend (#32631 ) * go get github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/sts/v20180813@v1.0.588 * feat:support assume_role for COS backend * update go.mod and go.sum * change secret_id and secret_key from required to optional * update cos doc * update logic by comments * rm sensitive info in log	3 years ago
Sebastian Rivera	de574ae6d4	Initial implementation of structured logging in cloud backend (#32504 ) * Implementation of structured logging. These are the changes that enable the cloud backend to consume structured logs and make use of the new plan renderer. This will enable CLI-driven runs to view the structured output in the Terraform Cloud UI. * Cloud structured logging unit tests * Remove deferred logs logic, fix minor issues Color formatting fixes, log type stop lists, default behavior for logs that are unknown * Use service disco path in redacted plan url	3 years ago
Brandon Croft	0cafe0dfdb	Merge pull request #32571 from hashicorp/TF-3527-detect-alias-localterraform-com-during-terraform-init Add support for Terraform Enterprise generic hostname localterraform.com	3 years ago
Liam Cervante	24b88b7a72	Reverse the order of conversion/defaults, and update HCL with more flexible defaults package (#32454 ) * Add failing test case for the given issue * pause * don't use local when sending PR for review * go get github.com/hashicorp/hcl/v2@v2.16.0 * Update go.mod --------- Co-authored-by: Alisdair McDiarmid <alisdair@users.noreply.github.com>	3 years ago
Brandon Croft	2fe3a23094	Add generic hostname (localterraform.com) support to cloud backend Aliases the backend hostname config as "localterraform.com" and duplicates any existing auth credentials during cloud backend configuration.	3 years ago
Sheridan C Rawlins	75e5ae27a2	[fixes 31700] Add mTLS support for http backend by way of client cert & key, as well as enterprise cacert. (#31699 ) * Add mTLS support for http backend by way of client cert & key, as well as enterprise cacert. * Fix style. * Skip cert validation to be sure error is related to missing client cert; not untrusted server cert. * Remove misplaced err check. * Fix the size of test using http backend. * Just for correctness, include all certs in the pem encoded cert - sometimes certs come with a chain of their signers. * Adjusted names as recommended in PR comments. * Adjusted names to be full-length and more descriptive. * Added full-fledged testing with mTLS http server * Fix goimports. * Fix the names of the backend config. * Exclusive lock for write and delete. * Revert "Fix goimports." This reverts commit 7d40f6099fbbb675fb2e25e35ee40aeafe3d0a22. * goimports just for server test. * Added the go:generation for the mock. * Move the TLS configuration out to make it more readable - don't replace the HTTPClient as the retryablehttp already creates one - just configure its TLS. * Just switch the client/data params - felt more natural this way. * Update internal/backend/remote-state/http/backend.go Co-authored-by: kmoe <5575356+kmoe@users.noreply.github.com> * Update internal/backend/remote-state/http/testdata/gencerts.sh Co-authored-by: kmoe <5575356+kmoe@users.noreply.github.com> * Update internal/backend/remote-state/http/backend.go Co-authored-by: kmoe <5575356+kmoe@users.noreply.github.com> * Update internal/backend/remote-state/http/backend.go Co-authored-by: kmoe <5575356+kmoe@users.noreply.github.com> * Update internal/backend/remote-state/http/backend.go Co-authored-by: kmoe <5575356+kmoe@users.noreply.github.com> * Update internal/backend/remote-state/http/backend.go Co-authored-by: kmoe <5575356+kmoe@users.noreply.github.com> * the location of the file name is not sensitive. * Added error if only one of client_certificate_pem and client_private_key_pem are set. * Remove testify from test cases; use t.Error* for assert and t.Fatal* for require. * Fixed import consistency * Just use default openssl. * Since file(...) is so trivial to use, changed the client cert, key, and ca cert to be the data. See also https://github.com/hashicorp/terraform-provider-http/pull/211 Co-authored-by: Sheridan C Rawlins <scr@ouryahoo.com> Co-authored-by: kmoe <5575356+kmoe@users.noreply.github.com>	3 years ago

1 2 3 4 5 ...

462 Commits (2cc94b4e89ccd47475c2b894e7cb9bd758ae73fc)