terraform

Commit Graph

Author	SHA1	Message	Date
Alisdair McDiarmid	3f6b4cc62a	go get github.com/hashicorp/hcl/v2@a0de289809fb	6 years ago
Alisdair McDiarmid	196c15a45d	go get github.com/zclconf/go-cty@36785d4dc4ac	6 years ago
Alisdair McDiarmid	b5ef33b715	Merge pull request #26239 from jceresini/master Add support for scopes to terraform login	6 years ago
Kristin Laemmert	acd8230013	vendor: upgrade go-userdirs library to fix openBSD crash (#26249 ) Fixes #26175	6 years ago
Joe Ceresini	2acb7fac9f	Include scopes in login URL	6 years ago
Pam Selle	6a126df0c6	Merge pull request #26183 from hashicorp/pselle/sensitive-values Add sensitive attribute to variables	6 years ago
Alisdair McDiarmid	59662c01af	vendor: Upgrade mitchellh/cli Update tests to match the fix in mitchellh/cli#71, which aligns MockUi with BasicUi and allows newlines in user input. We are not using the new ErrorWriter, added in mitchellh/cli#81, as it does not appear to interact correctly with panicwrap. All error output from CLI parsing will continue to appear on stdout, not stderr.	6 years ago
Pam Selle	3723594b3d	Point go module at master go-cty	6 years ago
Kristin Laemmert	e6e35f2077	deps: bump go-cty version (#26079 ) go-cty v1.6.1 fixes a panic in the `element` function when called with a negative offset.	6 years ago
Martin Atkins	b0da5b1ce5	core: Remove the last few HIL remnants We've not been using HIL in the main codepaths since Terraform 0.12, but some references to it (and some supporting functionality in Terraform) stuck around due to interactions with types we'd kept around to support legacy shims. However, removing the configs.RawConfig field from terraform.ResourceConfig disconnects that subtree of dependencies from everything else, allowing us to remove it. This is safe because the only remaining uses of terraform.ResourceConfig are shims from values that were already evaluated using the HCL 2 API, and thus they never need the "just in time" HIL evaluation that ResourceConfig.interpolateForce used to do. We also had some HIL references in configs/hcl2shim that were previously in support of the "terraform 0.12upgrade" command, but the implementation of that command is now removed. There was one remaining reference to HIL in a now-unused function in the helper/schema package, which I removed entirely here. This then allows us to remove the HIL dependency entirely, and also to clean up some remaining old remants of the legacy "config" package that we'd recently moved into the "configs" package pending further pruning.	6 years ago
James Bardin	82dcc93a1e	Merge pull request #25769 from hashicorp/f/azure-backend dependencies: updating Azure/azure-sdk-for-go, Azure/go-autorest, hashicorp/go-azure-helpers, tombuildsstuff/giovanni	6 years ago
Angie Pinilla	582fb73a7c	deps: Update aws-sdk-go-based to 0.6.0	6 years ago
tombuildsstuff	dc886f19c5	dependencies: updating Azure/azure-sdk-for-go, Azure/go-autorest, hashicorp/go-azure-helpers, tombuildsstuff/giovanni * updating `github.com/Azure/azure-sdk-for-go` to `v45.0.0` * updating `github.com/Azure/go-autorest` to `v0.11.3` * updating `github.com/hashicorp/go-azure-helpers` to `v0.12.0` * updating `github.com/tombuildsstuff/giovanni` to `v0.12.0`	6 years ago
Kristin Laemmert	642e3590a2	upgrade go-cidr to v1.1.0	6 years ago
Alisdair McDiarmid	cc655af72f	go get github.com/zclconf/go-cty@v1.5.1	6 years ago
Alisdair McDiarmid	779fe37a1c	command/login: Require "yes" to confirm This is for consistency with other commands which use prompts, all of which require "yes" rather than "y" to confirm. We also migrate the login command to use UIInput, which now supports securely asking for passwords or secrets via the speakeasy library.	6 years ago
Kristin Laemmert	d4ec69cfb3	communicator/winrm: include configured timeout in winrm server * upgrade windows dependencies * communicator/winrm: include configured timeout in winrm server	6 years ago
Alisdair McDiarmid	cd2ba6ca46	vendor: go get github.com/zclconf/go-cty-yaml@v1.0.2	6 years ago
Alvin Huang	7a471c0da7	adding gox to tools package	6 years ago
Martin Atkins	17feb2abfc	vendor: go get github.com/apparentlymart/go-versions@v1.0.0 This new version permits omitting the space between the operator and the boundary in a ruby-style version constraint, like ">1.0.0" instead of "> 1.0.0".	6 years ago
Alisdair McDiarmid	3fe8a7f76a	vendor: go get github.com/hashicorp/hcl/v2@v2.6.0	6 years ago
Alisdair McDiarmid	9ef84801a8	vendor: go get github.com/zclconf/go-cty@v1.5.0	6 years ago
James Bardin	7800ef63d4	Merge pull request #19525 from dramich/k8sback backend/kubernetes: Add Kubernetes as a backend	6 years ago
Brian Flad	ba081aa10a	backend/s3: Updates for Terraform v0.13.0 (#25134 ) * deps: Update github.com/hashicorp/aws-sdk-go-base@v0.5.0 Updated via: ``` $ go get github.com/hashicorp/aws-sdk-go-base@v0.5.0 $ go mod tidy $ go mod vendor ``` * backend/s3: Updates for Terraform v0.13.0 Reference: https://github.com/hashicorp/terraform/issues/13410 Reference: https://github.com/hashicorp/terraform/issues/18774 Reference: https://github.com/hashicorp/terraform/issues/19482 Reference: https://github.com/hashicorp/terraform/issues/20062 Reference: https://github.com/hashicorp/terraform/issues/20599 Reference: https://github.com/hashicorp/terraform/issues/22103 Reference: https://github.com/hashicorp/terraform/issues/22161 Reference: https://github.com/hashicorp/terraform/issues/22601 Reference: https://github.com/hashicorp/terraform/issues/22992 Reference: https://github.com/hashicorp/terraform/issues/24252 Reference: https://github.com/hashicorp/terraform/issues/24253 Reference: https://github.com/hashicorp/terraform/issues/24480 Reference: https://github.com/hashicorp/terraform/issues/25056 Changes: ``` NOTES * backend/s3: Deprecated `lock_table`, `skip_get_ec2_platforms`, `skip_requesting_account_id` arguments have been removed * backend/s3: Credential ordering has changed from static, environment, shared credentials, EC2 metadata, default AWS Go SDK (shared configuration, web identity, ECS, EC2 Metadata) to static, environment, shared credentials, default AWS Go SDK (shared configuration, web identity, ECS, EC2 Metadata) * The `AWS_METADATA_TIMEOUT` environment variable no longer has any effect as we now depend on the default AWS Go SDK EC2 Metadata client timeout of one second with two retries ENHANCEMENTS * backend/s3: Always enable shared configuration file support (no longer require `AWS_SDK_LOAD_CONFIG` environment variable) * backend/s3: Automatically expand `~` prefix for home directories in `shared_credentials_file` argument * backend/s3: Add `assume_role_duration_seconds`, `assume_role_policy_arns`, `assume_role_tags`, and `assume_role_transitive_tag_keys` arguments BUG FIXES * backend/s3: Ensure configured profile is used * backend/s3: Ensure configured STS endpoint is used during AssumeRole API calls * backend/s3: Prefer AWS shared configuration over EC2 metadata credentials * backend/s3: Prefer ECS credentials over EC2 metadata credentials * backend/s3: Remove hardcoded AWS Provider messaging ``` Output from acceptance testing: ``` --- PASS: TestBackend (16.32s) --- PASS: TestBackendConfig (0.58s) --- PASS: TestBackendConfig_AssumeRole (0.02s) --- PASS: TestBackendConfig_conflictingEncryptionSchema (0.00s) --- PASS: TestBackendConfig_invalidKey (0.00s) --- PASS: TestBackendConfig_invalidSSECustomerKeyEncoding (0.00s) --- PASS: TestBackendConfig_invalidSSECustomerKeyLength (0.00s) --- PASS: TestBackendExtraPaths (13.21s) --- PASS: TestBackendLocked (28.98s) --- PASS: TestBackendPrefixInWorkspace (5.65s) --- PASS: TestBackendSSECustomerKey (17.60s) --- PASS: TestBackend_impl (0.00s) --- PASS: TestForceUnlock (17.50s) --- PASS: TestKeyEnv (50.25s) --- PASS: TestRemoteClient (4.78s) --- PASS: TestRemoteClientLocks (16.85s) --- PASS: TestRemoteClient_clientMD5 (12.08s) --- PASS: TestRemoteClient_impl (0.00s) --- PASS: TestRemoteClient_stateChecksum (17.92s) ```	6 years ago
John Houston	23fb8f6d21	Add kubernetes backend Co-authored-by: Dan Ramich <danold215@gmail.com>	6 years ago
Pam Selle	5e8b60ba07	Upgrade go-cty for jsonencode fix, closes #23062	6 years ago
Paddy	5127f1ef8b	command: Unmanaged providers This adds supports for "unmanaged" providers, or providers with process lifecycles not controlled by Terraform. These providers are assumed to be started before Terraform is launched, and are assumed to shut themselves down after Terraform has finished running. To do this, we must update the go-plugin dependency to v1.3.0, which added support for the "test mode" plugin serving that powers all this. As a side-effect of not needing to manage the process lifecycle anymore, Terraform also no longer needs to worry about the provider's binary, as it won't be used for anything anymore. Because of this, we can disable the init behavior that concerns itself with downloading that provider's binary, checking its version, and otherwise managing the binary. This is all managed on a per-provider basis, so managed providers that Terraform downloads, starts, and stops can be used in the same commands as unmanaged providers. The TF_REATTACH_PROVIDERS environment variable is added, and is a JSON encoding of the provider's address to the information we need to connect to it. This change enables two benefits: first, delve and other debuggers can now be attached to provider server processes, and Terraform can connect. This allows for attaching debuggers to provider processes, which before was difficult to impossible. Second, it allows the SDK test framework to host the provider in the same process as the test driver, while running a production Terraform binary against the provider. This allows for Go's built-in race detector and test coverage tooling to work as expected in provider tests. Unmanaged providers are expected to work in the exact same way as managed providers, with one caveat: Terraform kills provider processes and restarts them once per graph walk, meaning multiple times during most Terraform CLI commands. As unmanaged providers can't be killed by Terraform, and have no visibility into graph walks, unmanaged providers are likely to have differences in how their global mutable state behaves when compared to managed providers. Namely, unmanaged providers are likely to retain global state when managed providers would have reset it. Developers relying on global state should be aware of this.	6 years ago
Matthew Frahry	481b03c34a	Update azure backend storage sdk (#24669 ) * update vendored azure sdk * vendor giovanni storage sdk * Add giovanni clients * go mod vendor * Swap to new storage sdk * workable tests * update .go-version to 1.14.2 * Tests working minus SAS * Add SAS Token support * Update vendor * Passing tests * Add date randomizer * Captalize RG * Remove random bits * Update client var name Co-authored-by: kt <kt@katbyte.me>	6 years ago
CJ Horton	0b2a8a5f64	go get github.com/hashicorp/go-tfe@v0.8.1 + vendor	6 years ago
Martin Atkins	c1f69fba03	backend/remote: Support -target on plan and apply	6 years ago
Kristin Laemmert	a4c3c1d389	vendor: upgrade go-cty dependency to 1.4.1 (#24983 ) * vendor: upgrade go-cty dependency to 1.4.1 This upgrade fixes a panic with inconsistent object element types.	6 years ago
Martin Atkins	db4f3f8bc5	vendor: go get github.com/hashicorp/go-tfe@v0.8.0 This includes a new TargetAddrs field on both Run and RunCreateOptions which we'll use to send resource addresses that were specified using -target on the CLI command line when using the remote backend. There were some unrelated upstream breaking changes compared to the last version we had vendored, so this commit also includes some changes to the backend/remote package to work with this new API, which now requires the remote backend to be aware of the remote system's opaque workspace id.	6 years ago
Alisdair McDiarmid	b07368eec3	vendor: go get github.com/hashicorp/hcl/v2@v2.5.1 Upgrade hcl for hclwrite bugfixes, which will make 0.13upgrade more reliable.	6 years ago
Rafal Potempa	2646e42ac9	Upgrade version	6 years ago
Rafal Potempa	b630543985	Upgrade crypto	6 years ago
Alisdair McDiarmid	5b307a07dc	vendor: go get github.com/hashicorp/hcl/v2@v2.5.0	6 years ago
kayrus	533c059378	Update dependencies	6 years ago
Brian Flad	2681ccf87f	deps: github.com/aws/aws-sdk-go@v1.30.12 [master] (#24745 ) * update github.com/aws/aws-sdk-go to v1.30.9 * deps: github.com/aws/aws-sdk-go@v1.30.12 Reference: https://github.com/hashicorp/terraform/issues/24710 Reference: https://github.com/hashicorp/terraform/issues/24741 Changes: ``` NOTES: * backend/s3: Region validation now automatically supports the new `af-south-1` (Africa (Cape Town)) region. For AWS operations to work in the new region, the region must be explicitly enabled as outlined in the [AWS Documentation](https://docs.aws.amazon.com/general/latest/gr/rande-manage.html#rande-manage-enable). When the region is not enabled, the Terraform S3 Backend will return errors during credential validation (e.g. `error validating provider credentials: error calling sts:GetCallerIdentity: InvalidClientTokenId: The security token included in the request is invalid`). ENHANCEMENTS: * backend/s3: Support automatic region validation for `af-south-1` ``` Updated via: ```console $ go get github.com/aws/aws-sdk-go@v1.30.12 $ go mod tidy $ go mod vendor ``` Output from acceptance testing: ```console $ TF_ACC=1 go test -v ./backend/remote-state/s3 \| grep '^--- ' --- PASS: TestBackend_impl (0.00s) --- PASS: TestBackendConfig (1.68s) --- PASS: TestBackendConfig_invalidKey (0.00s) --- PASS: TestBackendConfig_invalidSSECustomerKeyLength (0.00s) --- PASS: TestBackendConfig_invalidSSECustomerKeyEncoding (0.00s) --- PASS: TestBackendConfig_conflictingEncryptionSchema (0.00s) --- PASS: TestBackend (15.07s) --- PASS: TestBackendLocked (26.40s) --- PASS: TestBackendSSECustomerKey (16.99s) --- PASS: TestBackendExtraPaths (12.05s) --- PASS: TestBackendPrefixInWorkspace (5.55s) --- PASS: TestKeyEnv (45.07s) --- PASS: TestRemoteClient_impl (0.00s) --- PASS: TestRemoteClient (5.39s) --- PASS: TestRemoteClientLocks (14.30s) --- PASS: TestForceUnlock (20.08s) --- PASS: TestRemoteClient_clientMD5 (16.43s) --- PASS: TestRemoteClient_stateChecksum (24.58s) ``` Co-authored-by: Nicola Senno <nicola.senno@workday.com>	6 years ago
Alisdair McDiarmid	9128ce611a	vendor: go get github.com/hashicorp/hcl/v2@v2.4.0	6 years ago
Alisdair McDiarmid	1593b8b8e5	vendor: go get github.com/zclconf/go-cty@v1.4.0 This fixes several bugs: - `substr("abc", 0, 0)` would previously return `"abc"`, despite the length argument being `0`. This has been changed to return an empty string when length is zero. - `ceil(1/0)` and `floor(1/0)` would previously return a large integer value, rather than infinity. This has been fixed.	6 years ago
Martin Atkins	c945ef129a	vendor: go get github.com/apparentlymart/go-userdirs This library implements the user-specific directory layout specifications for various platforms (XDG on Unix, "Known Folders" on Windows, etc). We'll use this in a subsequent commit to add additional system-specific search directories for provider plugins, and perhaps later on also CLI configuration directories.	6 years ago
Martin Atkins	48bf00a7e2	vendor: go get golang.org/x/mod We'll be using this for its directory hashing algorithm, as used in go.sum in Go modules, and applying it also to Terraform provider packages.	6 years ago
Martin Atkins	43c1ec69e2	build: Use Go 1.14 This implies some notable changes that will have a visible impact to end-users of official Terraform releases: - Terraform is no longer compatible with MacOS 10.10 Yosemite, and requires at least 10.11 El Capitan. (Relatedly, Go 1.14 is planned to be the last release to support El Capitan, so while that remains supported for now, it's notable that Terraform 0.13 is likely to be the last major release of Terraform supporting it, with 0.14 likely to further require MacOS 10.12 Sierra.) - Terraform is no longer compatible with FreeBSD 10.x, which has reached end-of-life. Terraform now requires FreeBSD 11.2 or later. - Terraform now supports TLS 1.3 when it makes connections to remote services such as backends and module registries. Although TLS 1.3 is backward-compatible in principle, some legacy systems reportedly work incorrectly when attempting to negotiate it. (This change does not affect outgoing requests made by provider plugins, though they will see a similar change in behavior once built with Go 1.13 or later.) - Ed25519 certificates are now supported for TLS 1.2 and 1.3 connections. - On UNIX systems where "use-vc" is set in resolv.conf, TCP will now be used for DNS resolution. This is unlikely to cause issues in practice because a system set up in this way can presumably already reach its nameservers over TCP (or else other applications would misbehave), but could potentially lead to lookup failures in unusual situations where a system only runs Terraform, has historically had "use-vc" in its configuration, but yet is blocked from reaching its configured nameservers over TCP. - Some parts of Terraform now support Unicode 12.0 when working with strings. However, notably the Terraform Language itself continues to use the text segmentation tables from Unicode 9.0, which means it lacks up-to-date support for recognizing modern emoji combining forms as single characters. (We may wish to upgrade the text segmentation tables to Unicode 12.0 tables in a later commit, to restore consistency.) This also includes some changes to the contents of "vendor", and particularly to the format of vendor/modules.txt, per the changes to vendoring in the Go 1.14 toolchain. This new syntax is activated by the specification of "go 1.14" in the go.mod file. Finally, the exact format of error messages from the net/http library has changed since Go 1.12, and so a couple of our tests needed updates to their expected error messages to match that.	6 years ago
James Bardin	7d3fe3b404	update cty	6 years ago
Li Kexian	76e5b446ba	backend/cos: Add TencentCloud backend cos with lock (#22540 ) * add TencentCloud COS backend for remote state * add vendor of dependence * fixed error not handle and remove default value for prefix argument * get appid from TF_COS_APPID environment variables	6 years ago
Martin Atkins	b62e9a7227	vendor: go get github.com/hashicorp/hcl/v2@v2.3.0 This brings in the new HCL extension functions "try", "can", and "convert", along with the underlying HCL and cty infrastructure that allow them to work.	6 years ago
Martin Atkins	eda57670ce	go get github.com/apparentlymart/go-versions@master	6 years ago
Kristin Laemmert	18dd1bb4d6	Mildwonkey/tfconfig upgrade (#23670 ) * deps: bump terraform-config-inspect library * configs: parse `version` in new required_providers block With the latest version of `terraform-config-inspect`, the required_providers attribute can now be a string or an object with attributes "source" and "version". This change allows parsing the version constraint from the new object while ignoring any given source attribute.	6 years ago
James Bardin	9e5fca67e8	update go-getter Update to a go1.12 compatible branch of v1.4.1, which removes the Header.Clone methods which were added in go1.13.	6 years ago
Martin Atkins	9a17497d3f	vendor: go get github.com/hashicorp/hcl/v2@v2.2.0 This also includes an upgrade to cty v1.1.1 because HCL calls for it. The changes in these two libraries are mainly to codepaths that don't directly affect Terraform, but including this upgrade will cause some small improvements to Terraform's error messages for type conversion problems.	6 years ago

1 2 3 4 5

245 Commits (6440c839474f052d8997bb5cec19c2743e5108e6)