terraform

Commit Graph

Author	SHA1	Message	Date
Radek Simko	32f9722d9d	Replace import paths & set UA string where necessary	7 years ago
Kristin Laemmert	120bb0a66c	plugin/discovery: use new addrs.ProviderType in place of a provider typeName string (#22724 ) This is a relatively small change meant to lay the foundation for future enhancements to providers' address.	7 years ago
James Bardin	666838f309	missing error check in discovery	7 years ago
Martin Atkins	eed605ac05	[WIP] Re-enable the end-to-end tests (#20044 ) * internal/initwd: Allow deprecated relative module paths In Terraform 0.11 we deprecated this form but didn't have any explicit warning for it. Now we'll still accept it but generate a warning. In a future major release we will drop this form altogether, since it is ambiguous with registry module source addresses. This codepath is covered by the command/e2etest suite. * e2e: Skip copying .exists file, if present We use this only in the "empty" test fixture in order to let git know that the directory exists. We need to skip copying it so that we can test "terraform init -from-module=...", which expects to find an empty directory. * command/e2etests: Re-enable and fix up the e2etest "acctests" We disabled all of the tests that accessed remote services like the Terraform Registry while they were being updated to support the new protocols we now expect. With those services now in place, we can re-enable these tests. Some details of exactly what output we print, etc, have intentionally changed since these tests were last updated. * e2e: refactor for modern states and plans * command/e2etest: re-enable e2etests and update for tf 0.12 compatibility plugin/discovery: mkdirAll instead of mkdir when creating cache dir	7 years ago
Radek Simko	b171997b39	plugin/discovery: Fix quoting of provider name	7 years ago
Pam Selle	346e341ff2	Only display status link if public registry used Updates to throw a specific error if using the defined public registry vs. another registry.	7 years ago
Pam Selle	d72456d188	Add friendly error for when registry unresponsive If the registry is unresponsive, you will now get an error specific to this, rather than a misleading "provider unavailable" type error. Also adds debug logging for when errors like this may occur	7 years ago
findkim	161fe47b34	plugin/discovery: improve providery discovery verification errors	7 years ago
findkim	2726282307	plugin/discovery: add context for provider discovery verification	7 years ago
findkim	1a32617d5e	plugin/discovery: verify checksum matches Registry response	7 years ago
Justin Campbell	e6316c9de6	plugin/discovery: Parse warnings from TF Registry Terraform Registry (and other registry implementations) can now return an array of warnings with the versions response. These warnings are now displayed to the user during a `terraform init`.	7 years ago
Justin Campbell	24e13d8ec1	plugin/discovery: Return tfdiags from Get Allows us to surface warnings to the user using the tfdiags interfaces.	7 years ago
Kristin Laemmert	9402b86217	plugin/discovery: create target plugin directory if it does not exist (#20575 ) If the user supplies a plugin cache dir, the provider installer was not checking if target directory exists before linking the cached pluging.	7 years ago
Justin Campbell	0574eadb62	plugin/discovery: Verify sig against HashiCorp key https://github.com/hashicorp/terraform/pull/19389 introduced a change to the provider GPG signature verification process, and removed the hardcoded HashiCorp GPG key. While the changes were intended and are still planned for a future release, we should still be verifying all providers in the TF 0.12.0 release against the HashiCorp GPG key until a more robust key verification procedure is in place. Fixes https://github.com/hashicorp/terraform/issues/20527	7 years ago
findkim	abeb86072b	Remove duplicate logging	7 years ago
findkim	6e0de3e3f5	Nest incompatible provider protocol error to include dynamic custom msg	7 years ago
findkim	f75d83c1cd	Prerelease versions are filtered for plugin protocol mismatches	7 years ago
findkim	368ac85a26	Add provider protocol compatibility UI err msg during registry discovery	7 years ago
findkim	5e06e39fcc	Use registry alias to fetch providers	7 years ago
Justin Campbell	06825bf46d	plugin/discovery: Add friendly gpg err msg When GPG verification fails, display a helpful message to the user instead of the generic openpgp error.	7 years ago
Justin Campbell	9a8a74b9bb	plugin/discovery: Print name before verification This is so that any errors output from the checksum/signature verification show up in the expected place in the output.	7 years ago
Justin Campbell	495826444b	plugin/discovery: Use GPG keys from Registry When verifying the signature of the SHA256SUMS file, we have been hardcoding HashiCorp's public GPG key and using it as the keyring. Going forward, Terraform will get a list of valid public keys for a provider from the Terraform Registry (registry.terraform.io), and use them as the keyring for the openpgp verification func.	7 years ago
Kristin Laemmert	5e7956f440	registry/response: rename Collection to ProviderVersionCollection for clarity	8 years ago
Kristin Laemmert	bdaf8290b4	registry/client: added a specific error if the registry client does not support the requested service.	8 years ago
Kristin Laemmert	ae015e0f75	plugin/discovery: add function to filter list of versions by those which support the requested platform. If the newest version of a provider which matches the version constraints does not support the requested platform, filter the list of available versions by platform support and try again.	8 years ago
Kristin Laemmert	f83d5866fe	plugin/discovery: removing deprecated functions	8 years ago
Kristin Laemmert	ce5e66e178	plugin/discovery provider installer: download providers from the registry Terraform will query the public registry at https://registry.terraform.io for providers, instead of https://releases.hashicorp.com.	8 years ago
Paul Tyng	c868092d2d	Standardize http.Client creation with User-Agent	8 years ago
Masayuki Morita	f440dba137	Standardize on log level "WARN" rather than "WARNING"	8 years ago
James Bardin	6cb4e14cf8	Use pooled http client for fetching providers While the TLS handshakes are a fairly small overhead compared to downloading the providers, clients in some situation are failing to complete the TLS handshake in a timely manner. It's unclear if this is because of heavily constrained clients are stalling while doing the major crpto operations, or the edge servers are throttling repeated requests from the same IPs. This should allow reusing the open TLS connection to the release edge servers during init.	8 years ago
Martin Atkins	879899d434	plugin/discovery: plugin caching mechanism For users that have metered or slow internet connections it is annoying to have Terraform constantly re-downloading the same files when they initialize many separate directories. To help such users, here we add an opt-in mechanism to use a local directory as a read-through cache. When enabled, any plugin download will be skipped if a suitable file already exists in the cache directory. If the desired plugin isn't in the cache, it will be downloaded into the cache for use next time. This mechanism also serves to reduce total disk usage by allowing plugin files to be shared between many configurations, as long as the target system isn't Windows and supports either hardlinks or symlinks.	9 years ago
Radek Simko	28b33c9299	plugin: Display version + source when initializing plugins	9 years ago
James Bardin	2b84e786e9	allow missing x-terraform-protocol-version If the release site is missing the "x-terraform-protocol-version" header, we should fetch the latest spec'ed release. Downloading the wrong protocol version can't do any damage, and the version present is more than likely compatible.	9 years ago
Martin Atkins	610fcb605e	plugin/discovery: allow customizing the OS/arch for auto-install Previously we forced only installing for the current GOOS and GOARCH. Now we allow this to be optionally overridden, which allows building tools that can, for example, populate a directory with plugins to run on a Linux server while working on a Mac.	9 years ago
James Bardin	2cca6f10fa	return sig error when fetching a plugin A signature error was being ignored while fetching a plugin	9 years ago
James Bardin	c10f5caf05	Merge pull request #15345 from hashicorp/jbardin/plugin-sig verify automatically downloaded plugins	9 years ago
Martin Atkins	af2111f24e	plugin/discovery: sentinel error values for Get errors Some errors from Get are essentially user error, so we want to be able to recognize them and give the user good feedback on how to proceed. Although sentinel values are not an ideal solution to this, it's something reasonably simple we can do to get this done without lots of refactoring.	9 years ago
James Bardin	415d562d36	add signature verification Fetch the SHA256SUMS file and verify it's signature before downloading any plugins. This embeds the hashicorp public key in the binary. If the publickey is replaced, new releases will need to be cut anyway. A --verify-plugin=false flag will be added to skip signature verification in these cases.	9 years ago
Martin Atkins	af4c82d151	plugin/discovery: Installer.PurgeUnused method Given a map describing the chosen plugin for each provider name, this method should purge any other plugins present in the local cache directory.	9 years ago
Martin Atkins	f753974bb3	plugin/discovery: Installer interface, and provider implementation Previously we had a "getProvider" function type used to implement plugin fetching. Here we replace that with an interface type, initially with just a "Get" function. For now this just simplifies the interface by allowing the target directory and protocol version to be members of the struct rather than passed as arguments. A later change will extend this interface to also include a method to purge unused plugins, so that upgrading frequently doesn't leave behind a trail of unused executable files.	9 years ago
James Bardin	1b201e67ea	fix releases path and protocol header Last minute change to the location of the binaries	9 years ago
James Bardin	dbbafbd43f	clean up plugin fetching We can filter the allowed versions and sort them before checking the protocol version, that way we can just return the first one found reducing network requests.	9 years ago
James Bardin	5f053a2e64	refactor GetProvider Get provider needs to be provided with the plugin protocol version, because it can't be imported here directly. The plugin url types and methods were confusing; replace them with a few functions to format the urls.	9 years ago
James Bardin	8ad67991a5	check protocol version on plugins Verify that the plugin we're requesting has a compatible protocol version.	9 years ago
James Bardin	044ad5ef59	rename some Constraints methods per code review	9 years ago
James Bardin	46190590cb	change []*Version to []Version Versions are used as values, so don't keep them as pointers here	9 years ago
James Bardin	a547e7c2f0	add releases version listing test	9 years ago
James Bardin	2749946f5c	basic plugin getter Add discovery.GetProviders to fetch plugins from the relases site. This is an early version, with no tests, that only (probably) fetches plugins from the default location. The URLs are still subject to change, and since there are no plugin releases, it doesn't work at all yet.	9 years ago

48 Commits (ba7679b6791a306a73062ddd5a00359452e152fc)