314 Commits (ccf19fbf5e2b61ba62efd1ac47a3a3fd3917d494)

Author	SHA1	Message	Date
Pam Selle	a93298bd14	Merge pull request #23656 from hashicorp/paddy_gcs_backend_env_var ... Add a backend-specific env var for the GCS backend.	6 years ago
Pam Selle	41675543c8	Merge pull request #23627 from alrs/fix-backend-remote-state-dropped-test-errs ... Fix backend remote state dropped test errors	6 years ago
Paddy Carver	b8752c7610	Add a backend-specific env var for the GCS backend. ... Right now, the only environment variable available is the same environment variable that will be picked up by the GCP provider. Users would like to be able to store state in separate projects or accounts or otherwise authenticate to the provider with a service account that doesn't have access to the state. This seems like a reasonable enough practice to me, and the solution seems straightforward--offer an environment variable that doesn't mean anything to the provider to configure the backend credentials. I've added GOOGLE_BACKEND_CREDENTIALS to manage just the backend credentials, and documented it appropriately.	6 years ago
Pam Selle	d45a4d33bb	Merge pull request #22963 from rekahsoft/s3-backend-pagination ... Allow s3 backends to contain more then 1000 workspaces	6 years ago
Pam Selle	45fa6a3145	Fix S3 test	6 years ago
Lars Lehtonen	77ffb4a0eb	backend/remote-state/http: fix dropped test errors	6 years ago
Lars Lehtonen	2845896fc9	backend/remote-state/http: drop unused assertError()	6 years ago
Martin Atkins	30bf83cdeb	helper/logging: Bring the LevelFilter into our own codebase ... In order to make this work reasonably we can't avoid using some funny heuristics, which are somewhat reasonable to apply within the context of Terraform itself but would not be good to add to the general "logutils". Specifically, this is adding the additional heuristic that lines starting with spaces are continuation lines and so should inherit the log level of the most recent non-continuation line.	6 years ago
Martin Atkins	6db3cf8e5b	vendor: upgrade Azure SDK and Azure/go-autorest ... This involves some minor changes to the "azure" backend code to account for upstream breaking changes.	6 years ago
Joaquín Fernández Campo	d2bc7c25b9	backend/artifactory: Honor HTTP_PROXY and HTTPS_PROXY environment variables	7 years ago
He Guimin	bfae627112	add a new field ecs_role_name to support more scenario	7 years ago
Martin Atkins	39e609d5fd	vendor: switch to HCL 2.0 in the HCL repository ... Previously we were using the experimental HCL 2 repository, but now we'll shift over to the v2 import path within the main HCL repository as part of actually releasing HCL 2.0 as stable. This is a mechanical search/replace to the new import paths. It also switches to the v2.0.0 release of HCL, which includes some new code that Terraform didn't previously have but should not change any behavior that matters for Terraform's purposes. For the moment the experimental HCL2 repository is still an indirect dependency via terraform-config-inspect, so it remains in our go.sum and vendor directories for the moment. Because terraform-config-inspect uses a much smaller subset of the HCL2 functionality, this does still manage to prune the vendor directory a little. A subsequent release of terraform-config-inspect should allow us to completely remove that old repository in a future commit.	7 years ago
Collin J. Doering	6d838ed76c	Allow s3 backends to contain more then 1000 workspaces ... * backend/remote-state/s3/backend_state.go: Prior to this commit, the terraform s3 backend did not paginate calls to s3 when finding workspaces, which resulted in workspaces 'disappearing' once they are switched away from, even though the state file still exists. This is due to the ListBucket operation defaulting MaxItems to 1000, so terraform s3 backends that contained more then 1000 workspaces did not function as expected. This rectifies this situation by paginating calls to s3 when finding workspaces. Signed-off-by: Collin J. Doering <collin@rekahsoft.ca>	7 years ago
Kristin Laemmert	006ef022e6	Merge pull request #22918 from hashicorp/mildwonkey/to-e2e-or-not-e2e ... Sundry fixes to e2e tests	7 years ago
Kristin Laemmert	68dfc3046d	backend/remote-state: etcdv3, oss, and manta acc tests should fail ... faster The acceptance tests for etcdv3, oss and manta were not validating required env variablea, chosing to assume that if one was running acceptance tests they had already configured the credentials. It was not always clear if this was a bug in the tests or the provider, so I opted to make the tests fail faster when required attributes were unset (or "").	7 years ago
Kristin Laemmert	5300f85a79	backend/manta: fix panic when insecure_skip_tls_verify was not set ... The DefaultFunc for insecure_skip_tls_verify was sending an empty string instead of a bool. Fixes to default to `false`.	7 years ago
Luis Silva	9ae8eca55d	Merge branch 'master' into 21680/GCS_OAUTH	7 years ago
yanndegat	be5280e4e1	remote-state/pg: add option to skip schema creation (#21607) ... * add `skip_schema_creation` option * add sanity check to avoid situations where postgres users hasn't been granted the "CREATE SCHEMA" right closes #21604 Signed-off-by: yann degat <yann@2kmail.net>	7 years ago
yuanye	b69c0b4199	oss backend support profile	7 years ago
James Bardin	10d94fb764	Merge pull request #21967 from williams-brian/SSE-C_Remote_State ... Add support for SSE-C to S3 backend	7 years ago
Radek Simko	f3357aad45	vendor: Downgrade Azure dependencies ... This is to allow Terraform providers to upgrade to at least one more minor version of the plugin SDK without major UX hiccups. This concludes (unsuccessful) experiments involving upgrades to SDK with https://github.com/Azure/go-autorest/pull/455 Even with that patch all providers still experience broken UX as described in https://github.com/hashicorp/terraform/pull/22490 This downgrade reduces the uncomfort to only a handful of providers from >100s. The affected providers more or less directly depend on Azure SDK(s), which is ~8. Affected providers practically cannot consume Terraform Plugin SDK with this patch (downgraded Azure SDKs) and can just wait for extracted Terraform Plugin SDK which is planned to be released soon. This reverts the following PRs: - https://github.com/hashicorp/terraform/pull/22247 - https://github.com/hashicorp/terraform/pull/22248 - https://github.com/hashicorp/terraform/pull/22524 - https://github.com/hashicorp/terraform/pull/22525 and it is otherwise result of the following commands ``` go get github.com/Azure/azure-sdk-for-go@v21.3.0 go get github.com/hashicorp/go-azure-helpers@166dfd221bb2 go mod tidy ```	7 years ago
Radek Simko	dee450cf8c	vendor: Bump go-azure-helpers to 0.7.0	7 years ago
Roberto Jung Drebes	b459a92575	backend/gcs: Use new endpoints for Google OAuth ... This is a consequence of googleapis/google-cloud-common#260.	7 years ago
Alex Pilon	4bf43efcfd	move hcl2shim package to configs	7 years ago
Chris Marchesi	d43fc71135	modules: update go-azure-helpers to v0.5.0 ... To help address the issues posed on #22087 and #22085.	7 years ago
He Guimin	a490dfa495	backend/oss: Support for assume role config	7 years ago
Pam Selle	23a187d85d	Merge pull request #21739 from hasheddan/s3-backend-comment-typo ... s3 backend: minor typo in putMD5 comment	7 years ago
Colin Fowler	cd7bfba141	rebased to terraform master branch	7 years ago
Brian Williams	5e3c3bafb8	Add support for SSE-C to S3 backend ... These changes add support for encrypting terraform remote-state in S3 using customer-supplied encryption keys (SSE-C).	7 years ago
Luis Silva	f6c90c1d96	Add OAuth2 token support for GCS backend	7 years ago
Daniel Mangum	3bc14620c0	backend/remote-state: remove dead code ... This remote-state adapter is no longer used, because the old remote state mechanism was removed in Terraform v0.12.	7 years ago
hasheddan	961d43142c	s3 backend: minor typo in putMD5 comment ... Signed-off-by: hasheddan <georgedanielmangum@gmail.com>	7 years ago
kayrus	d06609dd23	Swift backend: add application credential support	7 years ago
Joe Topjian	d8343aa95f	backend/swift: Authentication updates ... Support for cross-domain authentication has been added and mapping environment variables to the correct domain settings has been fixed. In addition, support for clouds.yaml files has been added.	7 years ago
James Bardin	0c91d227fa	Merge branch 'master' into master	7 years ago
Ivan Kalita	5b6b1663ef	backend/http: implement retries for the http backend (#19702) ... Fixes #19619	7 years ago
Mateusz Gozdek	b6de825723	backend/gcs: make Unlock error message more clear	7 years ago
Stephen Buergler	fc5b186e8d	Don't leak so many connections in the pg backend ... This change fixes an error I get: Error: pq: too many connections for role "asdf" because I can only have so many connections.	7 years ago
He Guimin	3f44dd9dec	Add tablestore config to store state lock	7 years ago
He Guimin	b887d44712	Add Alibaba Cloud backend OSS with lock	7 years ago
Justin Downing	1e32ae243c	grammatical updates to comments and docs (#20195)	7 years ago
Stefan Schmidt	3ca1253796	backend/gcs: Mark the unused attributes project and region as removed. ... These two attributes are not used since aec45e6967.	7 years ago
Mars Hall	34fa67c6b0	Correct pg backend error info	7 years ago
Mars Hall	ccf549a62d	Stricter pg backend locking during workspace creation	7 years ago
Mars Hall	31c9776d55	Switch pg backend to session-level advisory locking, to avoid rollback of partial state updates	7 years ago
Brian Flad	e34a97abca	backend/s3: Add debug logging and user agent ... Porting over previous behavior from terraform-provider-aws.	7 years ago
James Bardin	eada955721	Merge pull request #19070 from mars/postgres-backend ... Postgres backend	7 years ago
Mars Hall	6d9e2048f4	Skip more pg backend acceptance tests	7 years ago
Mars Hall	920e7a7acc	Mutex pg backend‘s database transaction	7 years ago
Mars Hall	c6bf3442fc	Lock() in pg backend now returns LockError for retryable errors	7 years ago
Mars Hall	a075a68c58	Correct name of pg backend‘s default schema	7 years ago
James Bardin	dd16455a79	fix s3 default region to match provider	7 years ago
Mars Hall	2621f95bd2	📚 doc corrections	7 years ago
Mars Hall	b9a91b7c1e	Switch pg backend to use native Postgres locks	7 years ago
James Bardin	c814f2da37	Change backend.ValidateConfig to PrepareConfig ... This mirrors the change made for providers, so that default values can be inserted into the config by the backend implementation. This is only the interface and method name changes, it does not yet add any default values.	7 years ago
James Bardin	aebfecf871	Merge pull request #20211 from yanndegat/swift_remote_backend ... Swift remote backend support for workspaces & locking	7 years ago
Mars Hall	8cb2943b6b	pg backend tests run when TF_ACC is set (no more TF_PG_TEST)	7 years ago
Mars Hall	c8b8227967	Compatibility fixes for 0.12.0	7 years ago
Mars Hall	d4d798c25e	Fix to use existing pg indexes	7 years ago
Mars Hall	9feda7aab3	Correct code comment for pg	7 years ago
Mars Hall	9043005cfb	Postgres database backend	7 years ago
James Bardin	31ca293777	fix slash handling around workspace_key_prefix ... The handling of slashes was broken around listing workspaces in workspace_key_prefix. While it worked in most places by splitting an extra time around the spurious slashes, it failed in the case that the prefix ended with a slash of its own. A test was temporarily added to verify that the backend works with the unusual keys, but rather than risking silent breakage around prefixes with trailing slashes, we also add validation to prevent users from entering keys with trailing slashes at all.	7 years ago
James Bardin	f6af61f990	fix test that never worked ... The 0.12 update left this test broken. Make sure we're working with the correct objects here.	7 years ago
Brian Flad	185a3304e5	Merge pull request #20374 from hashicorp/td-backend-s3-dependencies ... backend/s3: Switch from github.com/terraform-providers/terraform-provider-aws to github.com/hashicorp/aws-sdk-go-base	7 years ago
Brian Flad	a41e545198	backend/s3: Reinstate region validation and update copy for skip_requesting_account_id deprecation message	7 years ago
Brian Flad	43f12bbfe0	backend/s3: Update copy for skip_get_ec2_platforms and skip_requesting_account_id argument deprecations	7 years ago
Sander van Harmelen	54736b068b	backend/remote: use `state.v2` for remote state only ... The API surface area is much smaller when we use the remote backend for remote state only. So in order to try and prevent any backwards incompatibilities when TF runs inside of TFE, we’ve split up the discovery services into `state.v2` (which can be used for remote state only configurations, so when running in TFE) and `tfe.v2.1` (which can be used for all remote configurations).	7 years ago
Brian Flad	1aaac172b0	backend/s3: Switch from github.com/terraform-providers/terraform-provider-aws to github.com/hashicorp/aws-sdk-go-base ... Output from acceptance testing (no new failures): ``` --- PASS: TestBackend_impl (0.00s) --- PASS: TestBackendConfig (0.37s) --- PASS: TestBackendConfig_invalidKey (0.00s) --- PASS: TestBackend (3.26s) --- PASS: TestBackendLocked (6.80s) --- FAIL: TestBackendExtraPaths (2.32s) --- PASS: TestBackendPrefixInWorkspace (2.06s) --- PASS: TestKeyEnv (8.20s) --- PASS: TestRemoteClient_impl (0.00s) --- PASS: TestRemoteClient (2.42s) --- PASS: TestRemoteClientLocks (6.33s) --- PASS: TestForceUnlock (13.31s) --- PASS: TestRemoteClient_clientMD5 (11.75s) --- PASS: TestRemoteClient_stateChecksum (10.07s) ```	7 years ago
Yann DEGAT	e70b8928e9	remote/backend/swift: Add support for workspaces & locking	7 years ago
Radek Simko	a7f0722729	backend/swift: Fix interface after upgrade	7 years ago
Radek Simko	6365fffe4f	Fix interface after upgrade	7 years ago
Brian Flad	ed37d07632	backend/s3: Configure AWS Client MaxRetries and provide enhanced S3 NoSuchBucket error message ... The AWS Go SDK automatically provides a default request retryer with exponential backoff that is invoked via setting `MaxRetries` or leaving it `nil` will default to 3. The terraform-aws-provider `config.Client()` sets `MaxRetries` to 0 unless explicitly configured above 0. Previously, we were not overriding this behavior by setting the configuration and therefore not invoking the default request retryer. The default retryer already handles HTTP error codes above 500, including S3's InternalError response, so the extraneous handling can be removed. This will also start automatically retrying many additional cases, such as temporary networking issues or other retryable AWS service responses. Changes: * s3/backend: Add `max_retries` argument * s3/backend: Enhance S3 NoSuchBucket error to include additional information	7 years ago
Brian Flad	058434d28b	Merge pull request #19571 from hashicorp/f-backend-s3-other-endpoints ... backend/s3: Support DynamoDB, IAM, and STS endpoint configurations	7 years ago
Tom Harvey	383bc98f5c	backend/azurerm: Support for authenticating using the Azure CLI (#19465) ... * Upgrading to 2.0.0 of github.com/hashicorp/go-azure-helpers * Support for authenticating using Azure CLI * backend/azurerm: support for authenticating using the Azure CLI	7 years ago
Brian Flad	9a3b02cd6c	backend/s3: Support DynamoDB, IAM, and STS endpoint configurations ... This change enables a few related use cases: * AWS has partitions outside Commercial, GovCloud (US), and China, which are the only endpoints automatically handled by the AWS Go SDK. DynamoDB locking and credential verification can not currently be enabled in those regions. * Allows usage of any DynamoDB-compatible API for state locking * Allows usage of any IAM/STS-compatible API for credential verification	7 years ago
Tom Harvey	6d4f702467	backend/azurerm: support for custom resource manager endpoints (#19460) ... * backend/azurerm: removing the `arm_` prefix from keys * removing the deprecated fields test because the deprecation makes it fail * authentication: support for custom resource manager endpoints * Adding debug prefixes to the log statements	8 years ago
Tom Harvey	d580f30e03	backend/azurerm: removing the `arm_` prefix from keys (#19448) ... * backend/azurerm: removing the `arm_` prefix from keys * removing the deprecated fields test because the deprecation makes it fail	8 years ago
Tom Harvey	96b1c951fa	backend/azurerm: support for authenticating via SAS Tokens (#19440) ... * adding acceptance tests for msi auth * including the resource group name in the tests * backend/azurerm: support for authenticating using a SAS Token * resolving merge conflicts * moving the defer to prior to the error	8 years ago
Tom Harvey	e437feadc2	backend/azurerm: fixing a bug where locks couldn't be unlocked (#19441) ... Fixes #17046	8 years ago
Tom Harvey	c928962f44	backend/azurerm: support for authenticating via msi (#19433) ... * backend/azurerm: support for authenticating via msi * adding acceptance tests for msi auth * including the resource group name in the tests * support for using the test client via msi	8 years ago
Tom Harvey	0ec109bdc0	backend/azurerm: upgrading the SDK / support for proxies (#19414) ... * vendor updates - updating to v21.3.0 of github.com/Azure/azure-sdk-for-go - updating to v10.15.4 of github.com/Azure/go-autorest - vendoring github.com/hashicorp/go-azure-helpers @ 0.1.1 * backend/azurerm: refactoring to use the new auth package - refactoring the backend to use a shared client via the new auth package - adding tests covering both Service Principal and Access Key auth - support for authenticating using a proxy - rewriting the backend documentation to include examples of both authentication types * switching to use the build-in logging function * documenting it's also possible to retrieve the access key from an env var	8 years ago
Sander van Harmelen	52a1b22f7a	Implement the remote enhanced backend ... This is a refactored version of the `remote` backend that was initially added to Terraform v0.11.8 which should now be compatible with v0.12.0.	8 years ago
Sander van Harmelen	48ef7ecfa6	Updates after running `make fmt` with Go v1.11.1	8 years ago
Martin Atkins	8565c7460e	backend/remote-state/inmem: remove FIXME guards on tests that no longer hang	8 years ago
Martin Atkins	20727945ee	backend/remote-state/inmem: enable optional logging in tests	8 years ago
Martin Atkins	aaf405b662	backend/remote-state: Get all the backend tests building again ... The state manager refactoring in an earlier commit was reflected in the implementations of these backends, but not in their tests. This gets us back to a state where the backend tests will compile, and gets _most_ of them passing again, with a few exceptions that will be addressed in a subsequent commit.	8 years ago
Martin Atkins	a3403f2766	terraform: Ugly huge change to weave in new State and Plan types ... Due to how often the state and plan types are referenced throughout Terraform, there isn't a great way to switch them out gradually. As a consequence, this huge commit gets us from the old world to a _compilable_ new world, but still has a large number of known test failures due to key functionality being stubbed out. The stubs here are for anything that interacts with providers, since we now need to do the follow-up work to similarly replace the old terraform.ResourceProvider interface with its replacement in the new "providers" package. That work, along with work to fix the remaining failing tests, will follow in subsequent commits. The aim here was to replace all references to terraform.State and its downstream types with states.State, terraform.Plan with plans.Plan, state.State with statemgr.State, and switch to the new implementations of the state and plan file formats. However, due to the number of times those types are used, this also ended up affecting numerous other parts of core such as terraform.Hook, the backend.Backend interface, and most of the CLI commands. Just as with 5861dbf3fc before, I apologize in advance to the person who inevitably just found this huge commit while spelunking through the commit history.	8 years ago
Martin Atkins	5782357c28	backend: Update interface and implementations for new config loader ... The new config loader requires some steps to happen in a different order, particularly in regard to knowing the schema in order to decode the configuration. Here we lean directly on the configschema package, rather than on helper/schema.Backend as before, because it's generally sufficient for our needs here and this prepares us for the helper/schema package later moving out into its own repository to seed a "plugin SDK".	8 years ago
James Bardin	979faa5dbe	move artifactory remote state to backend	8 years ago
James Bardin	18ef072325	move legacy http remote state to a backend	8 years ago
James Bardin	fe527ec9d7	move legacy etcd remote state to a backend	8 years ago
Sean Chittenden	d749420a25	Fix drift caused from gofmt when running make dev and go 1.11. ... A fresh checkout of `origin/master` does not build atm using the `dev` target because `master` has not been formatted using `gofmt` from Go 1.11 (tis has been the case for a while if you've been running devel). None of the drift in question is especially new but now that Go 1.11 has been released and gofmt's formatting guidelines have been updated, it would be *really* nice if the code in `master` reflected the current tooling in order to avoid having to fight this drift locally. * 8mo: https://github.com/hashicorp/terraform/blame/master/backend/remote-state/s3/backend_test.go#L260-L261 * 6mo: https://github.com/hashicorp/terraform/blame/master/builtin/provisioners/chef/linux_provisioner_test.go#L124 * 1yr: 7cfeffe36b/command/init.go (L75-L76) * 12d: 7cfeffe36b/command/meta_backend_test.go (L1437) * 2yr: 7cfeffe36b/helper/schema/resource_timeout_test.go (L26) * 4yr: 7cfeffe36b/helper/schema/schema_test.go (L2059) * 1yr: 7cfeffe36b/plugin/discovery/get_test.go (L151)	8 years ago
Sander van Harmelen	77b9fad7f0	backend/manta: deprecate camelcase attribute name ... This change is needed (next to making it consistent as its the only attribute name that uses camelcase) because passing that attribute objectName in the update `terraform_remote_state` resource, ended up giving me this error: https://github.com/hashicorp/terraform/blob/master/helper/schema/schema.go#L736	8 years ago
Sander van Harmelen	495d1ea350	Use New() instead of `once.Do(b.init)`	8 years ago
stack72	df9b2913ae	backend/manta: Add support for manta backend tiered path structure ... This was already added to triton-go and is now making its way to the manta backend ``` % acctests backend/remote-state/manta === RUN TestBackend_impl --- PASS: TestBackend_impl (0.00s) === RUN TestBackend --- PASS: TestBackend (27.36s) === RUN TestBackendLocked --- PASS: TestBackendLocked (16.24s) === RUN TestRemoteClient_impl --- PASS: TestRemoteClient_impl (0.00s) === RUN TestRemoteClient --- PASS: TestRemoteClient (3.40s) === RUN TestRemoteClientLocks --- PASS: TestRemoteClientLocks (7.17s) PASS ok github.com/hashicorp/terraform/backend/remote-state/manta ```	8 years ago
stack72	a6f76aa0af	backend/manta: Manta Backend was not dealing with a ResourceNotFound ... Fixes: #17314 We now deal correctly with the creation of the state file - we were not dealing well with a ResourceNotFound error Now that this has been changed around, we try and create the statefile and if there is an error, we look for an existing statefile - previously this was not the order of operations	8 years ago
Paul Tyng	c868092d2d	Standardize http.Client creation with User-Agent	8 years ago
James Bardin	12bda53558	Revert "create clistate.Locker interface" ... This reverts commit e88bd74bb7.	8 years ago
James Bardin	e88bd74bb7	create clistate.Locker interface ... Simplify the use of clistate.Lock by creating a clistate.Locker instance, which stores the context of locking a state, to allow unlock to be called without knowledge of how the state was locked. This alows the backend code to bring the needed UI methods to the point where the state is locked, and still unlock the state from an outer scope.	8 years ago
James Bardin	57cbcbe99d	update remote state tests to use new test helpers	8 years ago