131 Commits (89e338f0bca306f00a2d65d4ccefc1dd6b7c3e46)

Author	SHA1	Message	Date
James Bardin	4d00c29706	Merge pull request #11836 from hashicorp/jbardin/state-locking ... Add locking during backend configuration	9 years ago
James Bardin	0c1b138719	Add state locking during backend init ... During backend initialization, especially during a migration, there is a chance that an existing state could be overwritten. Attempt to get a locks when writing the new state. It would be nice to always have a lock when reading the states, but the recursive structure of the Meta.Backend config functions makes that quite complex.	9 years ago
Daren Desjardins	5718294386	state/remote/s3: Fix Bug with Assume Role for Federated IAM Account (#10067) ... * Enable remote s3 state support for assume role - provide role_arn in backend config to enable assume role Fixes #8739 * Check for errors after obtaining credentials	9 years ago
James Bardin	5c2e945b3c	Fix format string and typos	9 years ago
James Bardin	14d965722e	Use single state.LockInfo struct ... Remove redundant structures	9 years ago
James Bardin	9b76f6e138	Move TestRemoteLocks to state/remote ... This was legacy remote state client and backends can use this test function without an import cycle.	9 years ago
James Bardin	e92559f518	Cleanup state file during Unlock ... Close and remove the file descriptor from LocalState if we Unlock the state. Also remove an empty state file if we created it and it was never written to. This is mostly to clean up after tests, but doesn't hurt to not leave empty files around.	9 years ago
James Bardin	a2b5811f50	Remove "expires" from lock info. ... We are not going to handle lock expiration, at least at this time, so remove the Expires fields to avoid any confusion.	9 years ago
James Bardin	1078781487	Change lock reason -> info ... This makes it more apparent that the information passed in isn't required nor will it conform to any standard. There may be call sites that can't provide good contextual info, and we don't want to count on that value.	9 years ago
James Bardin	ebd88f8f8a	add msdn link for LockFileEx	9 years ago
James Bardin	370a4ca70b	add mutex for windows lockedFiles map	9 years ago
James Bardin	7590154974	Don't create empty backups ... Not really a problem, but created unnecessary files and changes existing behavior.	9 years ago
James Bardin	1646310e68	Allow a non-existent state file ... A missing state file was allowed, and treated as an empty state.	9 years ago
James Bardin	3fdcbda3aa	Switch from Path to PathOut on LocalState.written ... After LocalState writes to a state file, we will refresh off the new state file rather than the original Path argument.	9 years ago
James Bardin	8f7f1917f2	Remove state file data when writing a nil state ... The old behavior in this situation was to simply delete the file. Since we now have a lock on this file we don't want to close or delete it, so instead truncate the file at offset 0. Fix a number of related tests	9 years ago
James Bardin	da0c325e5c	Silence state package logs during tests ... Output log output when testing is verbose	9 years ago
James Bardin	10f6d7f30f	Add locking for s3 state ... Use a DynamoDB table to coodinate state locking in S3. We use a simple strategy here, defining a key containing the value of the bucket/key of the state file as the lock. If the keys exists, the locks fails. TODO: decide if locks should automatically be expired, or require manual intervention.	9 years ago
James Bardin	35307d5a60	Add remote state locking ... In order to provide lockign for remote states, the Cache state, remote.State need to expose Lock and Unlock methods. The actual locking will be done by the remote.Client, which can implement the same state.Locker methods.	9 years ago
James Bardin	6162cde6ff	Add basic local state locking ... Add the LockUnlock methods to LocalState and BackupState. The implementation for LocalState will be platform specific. We will use OS-native locking on the state files, speficially locking whichever state file we intend to write to.	9 years ago
James Bardin	cc0712edab	add state.Locker interface ... Changed from state.StateLocker to remove the stutter. State implementations can provide Lock/Unlock methods to lock the state file. Remote clients can also provide these same methods, which will be called through remote.State.	9 years ago
Mitchell Hashimoto	d3633ab368	state/remote: remove consul since we converted that	9 years ago
Ben Slusky	e3b20c3508	Basic authentication for HTTP remote state backend	9 years ago
Aleksander Modzelewski	2627e4bd8d	Add token authentication to Swift remote	9 years ago
Joe Topjian	8ecc6fda0a	Merge pull request #10055 from fatmcgav/swift_add_version_expire ... state/remote/swift: Add support for versioning state file in swift, and expiring objects	10 years ago
Gavin Williams	c77ed69a4e	state/remote/swift: Add support for versioning state file in swift, and expiring object after period of time. ... Update website docs with changes	10 years ago
James Bardin	91378d0499	Merge pull request #10233 from hashicorp/jbardin/GH-10229 ... An empty module in state can panic	10 years ago
James Bardin	9616618de1	Make sure test has a valid ResourceState ... Empty resources are now pruned more aggressively, so make sure there is a valid ResourceState in the test ModuleState.	10 years ago
James Bardin	7715bc8423	change failing test to use subtests	10 years ago
Peter McAtominey	507efcb180	state/azure: support passing of lease ID when writing storage blob (#10115) ... Also fixed tests failing auth caused by getStorageAccountAccessKey returning the key name rather than the value TF_ACC= go test ./state/remote -v -run=TestAz -timeout=10m -parallel=4 === RUN TestAzureClient_impl --- PASS: TestAzureClient_impl (0.00s) === RUN TestAzureClient 2016/11/18 13:57:34 [DEBUG] New state was assigned lineage "96037426-f95e-45c3-9183-6c39b49f590b" 2016/11/18 13:57:34 [TRACE] Preserving existing state lineage "96037426-f95e-45c3-9183-6c39b49f590b" --- PASS: TestAzureClient (130.60s) === RUN TestAzureClientEmptyLease 2016/11/18 13:59:44 [DEBUG] New state was assigned lineage "d9997445-1ebf-4b2c-b4df-15ae152f6417" 2016/11/18 13:59:44 [TRACE] Preserving existing state lineage "d9997445-1ebf-4b2c-b4df-15ae152f6417" --- PASS: TestAzureClientEmptyLease (128.15s) === RUN TestAzureClientLease 2016/11/18 14:01:55 [DEBUG] New state was assigned lineage "85912a12-2e0e-464c-9886-8add39ea3a87" 2016/11/18 14:01:55 [TRACE] Preserving existing state lineage "85912a12-2e0e-464c-9886-8add39ea3a87" --- PASS: TestAzureClientLease (138.09s) PASS ok github.com/hashicorp/terraform/state/remote 397.111s	10 years ago
Gavin Williams	bf8612b9b7	state/remote/swift: Enhancements to support full set of Openstack configuration options, plus SSL certs. Documentation updated to support	10 years ago
Gavin Williams	ac07430124	state/remote/swift: Update to use Gophercloud/gophercloud, restructure to support insecure TLS, added Keystone v3 auth params ... Update swift remote documentation	10 years ago
James Bardin	f175497dd7	Fix vet issues ... None were critical, but these will fail with the next version of vet.	10 years ago
James Nugent	afe2d7b65b	Merge pull request #7320 from dtolnay/conflict ... core: Allow refresh of local state with no resources	10 years ago
Cameron Watters	b4eb63d710	state/remote: New provider - manta ... - add remote state provider backed by Joyent's Manta - add documentation of Manta remote state provider - explicitly check for passphrase-protected SSH keys, which are currently unsupported, and generate a more helpful error (borrowed from Packer's solution to the same problem): https://github.com/mitchellh/packer/blob/master/common/ssh/key.go#L27	10 years ago
David Tolnay	bb7dfaec81	Fix TestCacheState_RefreshState	10 years ago
David Tolnay	61185f083c	Merge branch hashicorp/master into dtolnay/conflict	10 years ago
James Nugent	8d0a68e1d4	state/remote: Officially Support local backend ... This is a rework of pull request #6213 submitted by @joshuaspence, adjusted to work with the remote state data source. We also add a deprecation warning for people using the unsupported API, and retain the ability to refer to "_local" as well as "local" for users in a mixed version environment.	10 years ago
Ian Duffy	767914bbdc	[GH-1275] Support for AWS access via IAMs AssumeRole functionality ... This commit enables terraform to utilise the assume role functionality of sts to execute commands with different privileges than the API keys specified. Signed-off-by: Ian Duffy <ian@ianduffy.ie>	10 years ago
James Bardin	cdb80f68a8	Ensure better state normalization ... Fix checksum issue with remote state If we read a state file with "null" objects in a module and they become initialized to an empty map the state file may be written out with empty objects rather than "null", changing the checksum. If we can detect this, increment the serial number to prevent a conflict in atlas. Our fakeAtlas test server now needs to decode the state directly rather than using the ReadState function, so as to be able to read the state unaltered. The terraform.State data structures have initialization spread out throughout the package. More thoroughly initialize State during ReadState, and add a call to init() during WriteState as another normalization safeguard. Expose State.init through an exported Init() method, so that a new State can be completely realized outside of the terraform package. Additionally, the internal init now completely walks all internal state structures ensuring that all maps and slices are initialized. While it was mentioned before that the `init()` methods are problematic with too many call sites, expanding this out better exposes the entry points that will need to be refactored later for improved concurrency handling. The State structures had a mix of `omitempty` fields. Remove omitempty for all maps and slices as part of this normalization process. Make Lineage mandatory, which is now explicitly set in some tests.	10 years ago
Guido Bakker	ee9ebe849f	Support setting datacenter when using consul remote state (#8102) ... * Support setting datacenter when using consul remote state Change-Id: I8c03f4058e9373f0de8fde7ce291ec552321cc60 * Add documentation for setting datacenter when using consul remote state Change-Id: Ia62feea7a910a76308f0a5e7f9505c9a210e0339	10 years ago
James Bardin	a1a501a26a	Merge pull request #8053 from hashicorp/jbardin/atlas-retry-policy ... don't retry the atlas requests with the wrong cert	10 years ago
James Bardin	df0c795b39	Don't retry the atlas requests with the wrong cert ... This probably won't recover, so abort immediately. Requires retryablehttp CheckRetry patch.	10 years ago
Renier Morales	c2bcb5fbe5	Skip IAM/STS validation and metadata check (#7874) ... * Skip IAM/STS validation and metadata check * Skip IAM/STS identity validation - For environments or other api implementations where there are no IAM/STS endpoints available, this option lets you opt out from that provider initialization step. * Skip metdata api check - For environments in which you know ahead of time there isn't going to be a metadta api endpoint, this option lets you opt out from that check to save time. * Allow iam/sts initialization even if skipping account/cred validation (#7874) * Split out skip of IAM validation into credentials and account id (#7874)	10 years ago
James Bardin	0a3714eaac	Don't send access_token in request params ... Always send the access_token in the X-Atlas-Token header.	10 years ago
James Bardin	74813821ec	Add remote state init test ... Verify that a remote state file is correctly initialized in the same manner as used by the `terraform remote config`	10 years ago
James Bardin	3622bfddd6	Revert #7464 and allow an empty state ... Revert back to using a nil state. The external usage of the state shoudl always check the Empty() method.	10 years ago
James Bardin	24f6d3fe98	Return an error when there's no remote state ... When refreshing remote state, indicate when no state file was found with an ErrRemoteStateNotFound error. This prevents us from inadvertantly getting a nil state into a terraform.State where we assume there's always a root module.	10 years ago
Paul Stack	079e1f9a56	provider/azurerm: Bump azure-sdk-for-go to 3.0.0-beta (#7420) ... provider/azurerm: Bump azure-sdk-for-go to 3.0.0-beta	10 years ago
David Tolnay	ff80e7b245	Allow refresh of local state with no resources	10 years ago
James Nugent	d60365af02	core: Correctly ensure that State() is a copy ... The previous mechanism for testing state threw away the mutation made on the state by calling State() twice - this commit corrects the test to match the comment. In addition, we replace the custom copying logic with the copystructure library to simplify the code.	10 years ago