terraform

Commit Graph

Author	SHA1	Message	Date
James Bardin	3fdcbda3aa	Switch from Path to PathOut on LocalState.written After LocalState writes to a state file, we will refresh off the new state file rather than the original Path argument.	9 years ago
James Bardin	8f7f1917f2	Remove state file data when writing a nil state The old behavior in this situation was to simply delete the file. Since we now have a lock on this file we don't want to close or delete it, so instead truncate the file at offset 0. Fix a number of related tests	9 years ago
James Bardin	da0c325e5c	Silence state package logs during tests Output log output when testing is verbose	9 years ago
James Bardin	10f6d7f30f	Add locking for s3 state Use a DynamoDB table to coodinate state locking in S3. We use a simple strategy here, defining a key containing the value of the bucket/key of the state file as the lock. If the keys exists, the locks fails. TODO: decide if locks should automatically be expired, or require manual intervention.	9 years ago
James Bardin	35307d5a60	Add remote state locking In order to provide lockign for remote states, the Cache state, remote.State need to expose Lock and Unlock methods. The actual locking will be done by the remote.Client, which can implement the same state.Locker methods.	9 years ago
James Bardin	6162cde6ff	Add basic local state locking Add the LockUnlock methods to LocalState and BackupState. The implementation for LocalState will be platform specific. We will use OS-native locking on the state files, speficially locking whichever state file we intend to write to.	9 years ago
James Bardin	cc0712edab	add state.Locker interface Changed from state.StateLocker to remove the stutter. State implementations can provide Lock/Unlock methods to lock the state file. Remote clients can also provide these same methods, which will be called through remote.State.	9 years ago
Mitchell Hashimoto	d3633ab368	state/remote: remove consul since we converted that	9 years ago
Ben Slusky	e3b20c3508	Basic authentication for HTTP remote state backend	9 years ago
Aleksander Modzelewski	2627e4bd8d	Add token authentication to Swift remote	9 years ago
Joe Topjian	8ecc6fda0a	Merge pull request #10055 from fatmcgav/swift_add_version_expire state/remote/swift: Add support for versioning state file in swift, and expiring objects	9 years ago
Gavin Williams	c77ed69a4e	state/remote/swift: Add support for versioning state file in swift, and expiring object after period of time. Update website docs with changes	9 years ago
James Bardin	91378d0499	Merge pull request #10233 from hashicorp/jbardin/GH-10229 An empty module in state can panic	9 years ago
James Bardin	9616618de1	Make sure test has a valid ResourceState Empty resources are now pruned more aggressively, so make sure there is a valid ResourceState in the test ModuleState.	9 years ago
James Bardin	7715bc8423	change failing test to use subtests	9 years ago
Peter McAtominey	507efcb180	state/azure: support passing of lease ID when writing storage blob (#10115 ) Also fixed tests failing auth caused by getStorageAccountAccessKey returning the key name rather than the value TF_ACC= go test ./state/remote -v -run=TestAz -timeout=10m -parallel=4 === RUN TestAzureClient_impl --- PASS: TestAzureClient_impl (0.00s) === RUN TestAzureClient 2016/11/18 13:57:34 [DEBUG] New state was assigned lineage "96037426-f95e-45c3-9183-6c39b49f590b" 2016/11/18 13:57:34 [TRACE] Preserving existing state lineage "96037426-f95e-45c3-9183-6c39b49f590b" --- PASS: TestAzureClient (130.60s) === RUN TestAzureClientEmptyLease 2016/11/18 13:59:44 [DEBUG] New state was assigned lineage "d9997445-1ebf-4b2c-b4df-15ae152f6417" 2016/11/18 13:59:44 [TRACE] Preserving existing state lineage "d9997445-1ebf-4b2c-b4df-15ae152f6417" --- PASS: TestAzureClientEmptyLease (128.15s) === RUN TestAzureClientLease 2016/11/18 14:01:55 [DEBUG] New state was assigned lineage "85912a12-2e0e-464c-9886-8add39ea3a87" 2016/11/18 14:01:55 [TRACE] Preserving existing state lineage "85912a12-2e0e-464c-9886-8add39ea3a87" --- PASS: TestAzureClientLease (138.09s) PASS ok github.com/hashicorp/terraform/state/remote 397.111s	9 years ago
Gavin Williams	bf8612b9b7	state/remote/swift: Enhancements to support full set of Openstack configuration options, plus SSL certs. Documentation updated to support	9 years ago
Gavin Williams	ac07430124	state/remote/swift: Update to use Gophercloud/gophercloud, restructure to support insecure TLS, added Keystone v3 auth params Update swift remote documentation	9 years ago
James Bardin	f175497dd7	Fix vet issues None were critical, but these will fail with the next version of vet.	9 years ago
James Nugent	afe2d7b65b	Merge pull request #7320 from dtolnay/conflict core: Allow refresh of local state with no resources	9 years ago
Cameron Watters	b4eb63d710	state/remote: New provider - manta - add remote state provider backed by Joyent's Manta - add documentation of Manta remote state provider - explicitly check for passphrase-protected SSH keys, which are currently unsupported, and generate a more helpful error (borrowed from Packer's solution to the same problem): https://github.com/mitchellh/packer/blob/master/common/ssh/key.go#L27	10 years ago
David Tolnay	bb7dfaec81	Fix TestCacheState_RefreshState	10 years ago
David Tolnay	61185f083c	Merge branch hashicorp/master into dtolnay/conflict	10 years ago
James Nugent	8d0a68e1d4	state/remote: Officially Support local backend This is a rework of pull request #6213 submitted by @joshuaspence, adjusted to work with the remote state data source. We also add a deprecation warning for people using the unsupported API, and retain the ability to refer to "_local" as well as "local" for users in a mixed version environment.	10 years ago
Ian Duffy	767914bbdc	[GH-1275] Support for AWS access via IAMs AssumeRole functionality This commit enables terraform to utilise the assume role functionality of sts to execute commands with different privileges than the API keys specified. Signed-off-by: Ian Duffy <ian@ianduffy.ie>	10 years ago
James Bardin	cdb80f68a8	Ensure better state normalization Fix checksum issue with remote state If we read a state file with "null" objects in a module and they become initialized to an empty map the state file may be written out with empty objects rather than "null", changing the checksum. If we can detect this, increment the serial number to prevent a conflict in atlas. Our fakeAtlas test server now needs to decode the state directly rather than using the ReadState function, so as to be able to read the state unaltered. The terraform.State data structures have initialization spread out throughout the package. More thoroughly initialize State during ReadState, and add a call to init() during WriteState as another normalization safeguard. Expose State.init through an exported Init() method, so that a new State can be completely realized outside of the terraform package. Additionally, the internal init now completely walks all internal state structures ensuring that all maps and slices are initialized. While it was mentioned before that the `init()` methods are problematic with too many call sites, expanding this out better exposes the entry points that will need to be refactored later for improved concurrency handling. The State structures had a mix of `omitempty` fields. Remove omitempty for all maps and slices as part of this normalization process. Make Lineage mandatory, which is now explicitly set in some tests.	10 years ago
Guido Bakker	ee9ebe849f	Support setting datacenter when using consul remote state (#8102 ) * Support setting datacenter when using consul remote state Change-Id: I8c03f4058e9373f0de8fde7ce291ec552321cc60 * Add documentation for setting datacenter when using consul remote state Change-Id: Ia62feea7a910a76308f0a5e7f9505c9a210e0339	10 years ago
James Bardin	a1a501a26a	Merge pull request #8053 from hashicorp/jbardin/atlas-retry-policy don't retry the atlas requests with the wrong cert	10 years ago
James Bardin	df0c795b39	Don't retry the atlas requests with the wrong cert This probably won't recover, so abort immediately. Requires retryablehttp CheckRetry patch.	10 years ago
Renier Morales	c2bcb5fbe5	Skip IAM/STS validation and metadata check (#7874 ) * Skip IAM/STS validation and metadata check * Skip IAM/STS identity validation - For environments or other api implementations where there are no IAM/STS endpoints available, this option lets you opt out from that provider initialization step. * Skip metdata api check - For environments in which you know ahead of time there isn't going to be a metadta api endpoint, this option lets you opt out from that check to save time. * Allow iam/sts initialization even if skipping account/cred validation (#7874) * Split out skip of IAM validation into credentials and account id (#7874)	10 years ago
James Bardin	0a3714eaac	Don't send access_token in request params Always send the access_token in the X-Atlas-Token header.	10 years ago
James Bardin	74813821ec	Add remote state init test Verify that a remote state file is correctly initialized in the same manner as used by the `terraform remote config`	10 years ago
James Bardin	3622bfddd6	Revert #7464 and allow an empty state Revert back to using a nil state. The external usage of the state shoudl always check the Empty() method.	10 years ago
James Bardin	24f6d3fe98	Return an error when there's no remote state When refreshing remote state, indicate when no state file was found with an ErrRemoteStateNotFound error. This prevents us from inadvertantly getting a nil state into a terraform.State where we assume there's always a root module.	10 years ago
Paul Stack	079e1f9a56	provider/azurerm: Bump azure-sdk-for-go to 3.0.0-beta (#7420 ) provider/azurerm: Bump azure-sdk-for-go to 3.0.0-beta	10 years ago
David Tolnay	ff80e7b245	Allow refresh of local state with no resources	10 years ago
James Nugent	d60365af02	core: Correctly ensure that State() is a copy The previous mechanism for testing state threw away the mutation made on the state by calling State() twice - this commit corrects the test to match the comment. In addition, we replace the custom copying logic with the copystructure library to simplify the code.	10 years ago
Paul Stack	32e1a32476	remote: Rename mas to azure (#7114 ) MAS wasn't obvious it was Azure so renamed it to Azure	10 years ago
Maxime Bury	c98f391bee	Add basic implementation for remote state on azure (#7064 ) * Add basic implementation for remote state on azure * Don't auto-provision the container * Fix compilation errors * Add factory to the remote map * Add documentation * Add acceptance tests	10 years ago
James Nugent	706ccb7dfe	core: Introduce state v3 and upgrade process This commit makes the current Terraform state version 3 (previously 2), and a migration process as part of reading v2 state. For the most part this is unnecessary: helper/schema will deal with upgrading state for providers written with that framework. However, for providers which implemented the resource model directly, this gives a best-efforts attempt at lossless upgrade. The heuristics used to change the count of a map from the .# key to the .% key are as follows: - if the flat map contains any non-numeric keys, we treat it as a map - if the map is empty it must be computed or optional, so we remove it from state There is a known edge condition: maps with all-numeric keys are indistinguishable from sets without access to the schema. They will need manual conversion or may result in spurious diffs.	10 years ago
Matt Morrison	cbfb4d8b86	remote state: Add GCS provider for remote state	10 years ago
James Nugent	3ea3c657b5	core: Use OutputState in JSON instead of map This commit forward ports the changes made for 0.6.17, in order to store the type and sensitive flag against outputs. It also refactors the logic of the import for V0 to V1 state, and fixes up the call sites of the new format for outputs in V2 state. Finally we fix up tests which did not previously set a state version where one is required.	10 years ago
Joseph Anthony Pasquale Holsten	546fb94265	atlas: update test err msg to reflect real timeout	10 years ago
James Nugent	6a20e8927d	core: Fix issues from rebasing dev-0.7 onto master - Fix sensitive outputs for lists and maps - Fix test prelude which was missed during conflict resolution - Fix `terraform output` to match old behaviour and not have outputs header and colouring - Bump timeout on TestAtlasClient_UnresolvableConflict	10 years ago
James Nugent	6aac79e194	state: Add support for outputs of multiple types This commit adds the groundwork for supporting module outputs of types other than string. In order to do so, the state version is increased from 1 to 2 (though the "public-facing" state version is actually as the first state file was binary). Tests are added to ensure that V2 (1) state is upgraded to V3 (2) state, though no separate read path is required since the V2 JSON will unmarshal correctly into the V3 structure. Outputs in a ModuleState are now of type map[string]interface{}, and a test covers round-tripping string, []string and map[string]string, which should cover all of the types in question. Type switches have been added where necessary to deal with the interface{} value, but they currently default to panicking when the input is not a string.	10 years ago
John Engelman	14f6f90621	Support standard AWS config in the S3 remote backend. (#5270 )	10 years ago
Paul Hinze	4ac6dda633	state/remote/atlas: Use go-rootcerts for certificate loading Allows CA certs to be configured via `ATLAS_CAFILE` and `ATLAS_CAPATH` env vars, and works around https://github.com/golang/go/issues/14514 on OS X.	10 years ago
Anubhav Mishra	f58290c83f	Moving octet-stream to json for remote http backend	10 years ago
Trevor Pounds	bac909fdbf	Fix `go vet -unreachable` warnings.	10 years ago
Trevor Pounds	79742fc367	Enable `go vet -composites` check and fix warnings.	10 years ago

1 2 3

118 Commits (3fdcbda3aad99bbcf02bf69ceed926e0ee9f4ec2)