81 Commits (efc08de5d6876af140f5a6ddb254698eb243b2fc)

Author	SHA1	Message	Date
Pam Selle	346e341ff2	Only display status link if public registry used ... Updates to throw a specific error if using the defined public registry vs. another registry.	7 years ago
Pam Selle	d72456d188	Add friendly error for when registry unresponsive ... If the registry is unresponsive, you will now get an error specific to this, rather than a misleading "provider unavailable" type error. Also adds debug logging for when errors like this may occur	7 years ago
Justin Downing	1e32ae243c	grammatical updates to comments and docs (#20195)	7 years ago
findkim	161fe47b34	plugin/discovery: improve providery discovery verification errors	7 years ago
findkim	2726282307	plugin/discovery: add context for provider discovery verification	7 years ago
findkim	1a32617d5e	plugin/discovery: verify checksum matches Registry response	7 years ago
Justin Campbell	e6316c9de6	plugin/discovery: Parse warnings from TF Registry ... Terraform Registry (and other registry implementations) can now return an array of warnings with the versions response. These warnings are now displayed to the user during a `terraform init`.	7 years ago
Justin Campbell	24e13d8ec1	plugin/discovery: Return tfdiags from Get ... Allows us to surface warnings to the user using the tfdiags interfaces.	7 years ago
Sander van Harmelen	973e2a7cf9	core: add a context to the UIInput interface	7 years ago
Kristin Laemmert	9402b86217	plugin/discovery: create target plugin directory if it does not exist (#20575) ... If the user supplies a plugin cache dir, the provider installer was not checking if target directory exists before linking the cached pluging.	7 years ago
Justin Campbell	0574eadb62	plugin/discovery: Verify sig against HashiCorp key ... https://github.com/hashicorp/terraform/pull/19389 introduced a change to the provider GPG signature verification process, and removed the hardcoded HashiCorp GPG key. While the changes were intended and are still planned for a future release, we should still be verifying all providers in the TF 0.12.0 release against the HashiCorp GPG key until a more robust key verification procedure is in place. Fixes https://github.com/hashicorp/terraform/issues/20527	7 years ago
findkim	7816e61614	Bump installer protocol version to 5 and separate client and server protocol references	7 years ago
findkim	abeb86072b	Remove duplicate logging	7 years ago
findkim	6e0de3e3f5	Nest incompatible provider protocol error to include dynamic custom msg	7 years ago
findkim	f75d83c1cd	Prerelease versions are filtered for plugin protocol mismatches	7 years ago
findkim	368ac85a26	Add provider protocol compatibility UI err msg during registry discovery	7 years ago
findkim	43b22d4e14	Fix plugin protocol test	7 years ago
findkim	5e06e39fcc	Use registry alias to fetch providers	7 years ago
Justin Campbell	06825bf46d	plugin/discovery: Add friendly gpg err msg ... When GPG verification fails, display a helpful message to the user instead of the generic openpgp error.	7 years ago
Justin Campbell	9a8a74b9bb	plugin/discovery: Print name before verification ... This is so that any errors output from the checksum/signature verification show up in the expected place in the output.	7 years ago
Justin Campbell	495826444b	plugin/discovery: Use GPG keys from Registry ... When verifying the signature of the SHA256SUMS file, we have been hardcoding HashiCorp's public GPG key and using it as the keyring. Going forward, Terraform will get a list of valid public keys for a provider from the Terraform Registry (registry.terraform.io), and use them as the keyring for the openpgp verification func.	7 years ago
Martin Atkins	3eaf2c308d	plugin/discovery: Use mockos_mockarch when testing installation ... If we don't override these then the tests can only pass on one platform.	7 years ago
Kristin Laemmert	5e7956f440	registry/response: rename Collection to ProviderVersionCollection for clarity	7 years ago
Kristin Laemmert	bdaf8290b4	registry/client: added a specific error if the registry client does not ... support the requested service.	7 years ago
Kristin Laemmert	ae015e0f75	plugin/discovery: add function to filter list of versions by those which ... support the requested platform. If the newest version of a provider which matches the version constraints does not support the requested platform, filter the list of available versions by platform support and try again.	7 years ago
Kristin Laemmert	f83d5866fe	plugin/discovery: removing deprecated functions	7 years ago
Kristin Laemmert	ce5e66e178	plugin/discovery provider installer: download providers from the registry ... Terraform will query the public registry at https://registry.terraform.io for providers, instead of https://releases.hashicorp.com.	7 years ago
Martin Atkins	4ed06a9227	terraform: HCL2-flavored module dependency resolver ... For the moment this is just a lightly-adapted copy of ModuleTreeDependencies named ConfigTreeDependencies, with the goal that the two can live concurrently for the moment while not all callers are yet updated and then we can drop ModuleTreeDependencies and its helper functions altogether in a later commit. This can then be used to make "terraform init" and "terraform providers" work properly with the HCL2-powered configuration loader.	7 years ago
James Bardin	0a6938e90a	update tests to match pre-release constraint rules	7 years ago
Sean Chittenden	d749420a25	Fix drift caused from gofmt when running make dev and go 1.11. ... A fresh checkout of `origin/master` does not build atm using the `dev` target because `master` has not been formatted using `gofmt` from Go 1.11 (tis has been the case for a while if you've been running devel). None of the drift in question is especially new but now that Go 1.11 has been released and gofmt's formatting guidelines have been updated, it would be *really* nice if the code in `master` reflected the current tooling in order to avoid having to fight this drift locally. * 8mo: https://github.com/hashicorp/terraform/blame/master/backend/remote-state/s3/backend_test.go#L260-L261 * 6mo: https://github.com/hashicorp/terraform/blame/master/builtin/provisioners/chef/linux_provisioner_test.go#L124 * 1yr: 7cfeffe36b/command/init.go (L75-L76) * 12d: 7cfeffe36b/command/meta_backend_test.go (L1437) * 2yr: 7cfeffe36b/helper/schema/resource_timeout_test.go (L26) * 4yr: 7cfeffe36b/helper/schema/schema_test.go (L2059) * 1yr: 7cfeffe36b/plugin/discovery/get_test.go (L151)	8 years ago
Paul Tyng	c868092d2d	Standardize http.Client creation with User-Agent	8 years ago
Masayuki Morita	f440dba137	Standardize on log level "WARN" rather than "WARNING"	8 years ago
James Bardin	6cb4e14cf8	Use pooled http client for fetching providers ... While the TLS handshakes are a fairly small overhead compared to downloading the providers, clients in some situation are failing to complete the TLS handshake in a timely manner. It's unclear if this is because of heavily constrained clients are stalling while doing the major crpto operations, or the edge servers are throttling repeated requests from the same IPs. This should allow reusing the open TLS connection to the release edge servers during init.	8 years ago
Martin Atkins	879899d434	plugin/discovery: plugin caching mechanism ... For users that have metered or slow internet connections it is annoying to have Terraform constantly re-downloading the same files when they initialize many separate directories. To help such users, here we add an opt-in mechanism to use a local directory as a read-through cache. When enabled, any plugin download will be skipped if a suitable file already exists in the cache directory. If the desired plugin isn't in the cache, it will be downloaded into the cache for use next time. This mechanism also serves to reduce total disk usage by allowing plugin files to be shared between many configurations, as long as the target system isn't Windows and supports either hardlinks or symlinks.	9 years ago
Martin Atkins	12d6bc8c30	plugin/discovery: ignore non-files when discovering ... If we encounter something that isn't a file -- for example, a dangling symlink whose referent has been deleted -- we'll ignore it so that we can either later produce a "no such plugin" error or auto-install a plugin that will actually work.	9 years ago
Radek Simko	28b33c9299	plugin: Display version + source when initializing plugins	9 years ago
Radek Simko	de3015cebf	Remove overly verbose DEBUG log	9 years ago
Martin Atkins	ac250d2792	plugin/discovery: trim off .exe suffix when parsing filenames ... On Windows systems the plugin binaries use a .exe suffix, which we were misparsing as part of either the "v" or "x" parts of the filename. This fixes #15578.	9 years ago
James Bardin	2b84e786e9	allow missing x-terraform-protocol-version ... If the release site is missing the "x-terraform-protocol-version" header, we should fetch the latest spec'ed release. Downloading the wrong protocol version can't do any damage, and the version present is more than likely compatible.	9 years ago
Martin Atkins	610fcb605e	plugin/discovery: allow customizing the OS/arch for auto-install ... Previously we forced only installing for the current GOOS and GOARCH. Now we allow this to be optionally overridden, which allows building tools that can, for example, populate a directory with plugins to run on a Linux server while working on a Mac.	9 years ago
James Bardin	beebd5cee3	improve discovery logging ... Display whether we're looking for a provider or provisioner in the log messages.	9 years ago
James Bardin	e059eb80d1	add test for signature mismatch	9 years ago
James Bardin	2cca6f10fa	return sig error when fetching a plugin ... A signature error was being ignored while fetching a plugin	9 years ago
James Bardin	c10f5caf05	Merge pull request #15345 from hashicorp/jbardin/plugin-sig ... verify automatically downloaded plugins	9 years ago
Martin Atkins	af2111f24e	plugin/discovery: sentinel error values for Get errors ... Some errors from Get are essentially user error, so we want to be able to recognize them and give the user good feedback on how to proceed. Although sentinel values are not an ideal solution to this, it's something reasonably simple we can do to get this done without lots of refactoring.	9 years ago
James Bardin	13d835f996	test signature verification ... use a published provider's checksum file and signature to check the verification.	9 years ago
James Bardin	415d562d36	add signature verification ... Fetch the SHA256SUMS file and verify it's signature before downloading any plugins. This embeds the hashicorp public key in the binary. If the publickey is replaced, new releases will need to be cut anyway. A --verify-plugin=false flag will be added to skip signature verification in these cases.	9 years ago
James Bardin	2e57d284cb	Merge pull request #15323 from hashicorp/jbardin/constraint-suggestion ... remove "~> 0.0" constraint suggestions	9 years ago
James Bardin	ec99b6910b	remove "~> 0.0" constraint suggestions ... Don't suggest constraints when the available plugin isn't versioned. Add zero version const for comparisons.	9 years ago
James Bardin	6faace287d	remove restriction on unversioned plugins ... Discover unversioned plugins regarless of location.	9 years ago