You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Martin Atkins edf335e7eb lang/funcs: Experimental "templatestring" function ... This function complements the existing "templatefile" to deal with the unusual situation of rendering a template that comes from somewhere outside of the current module's source code, such as from a data resource result. We have some historical experience with the now-deprecated hashicorp/template provider and its template_file data source, where we found that new authors would find it via web search and assume it was "the way" to render templates in Terraform, and then get frustrated dealing with the confusing situation of writing a string template that generates another string template for a second round of template rendering. To try to support those who have this unusual need without creating another attractive nuisance that would derail new authors, this function imposes the artificial extra rule that its template argument may only be populated using a single reference to a symbol defined elsewhere in the same module. This is intended to entice folks trying to use this function for something other than its intended purpose to refer to its documentation (once written) and then hopefully learn what other Terraform language feature they ought to have used instead. The syntax restriction only goes one level deep, so particularly-determined authors can still intentionally misuse this function by adding one level of indirection, such as by building template source code in a local value and then passing that local value as the template argument. The restriction is in place only to reduce the chances of someone _misunderstanding_ the purpose of this function; we don't intend to prevent someone from actively deciding to misuse it, if they have a good reason to do so. This new function inherits the same restriction as templatefile where it does not allow recursively calling other template-rendering functions. This is to dissuade from trying to use Terraform templates "at large", since Terraform's template language is not designed for such uses. It would be better to build a Terraform provider that wraps a more featureful template system like Gonja if someone really does need advanced templating, beyond Terraform's basic goals of being able to build small configuration files, etc. Because this function's intended purpose is rendering templates obtained from elsewhere, this function also blocks calls to any of Terraform's functions that would read from the filesystem of the computer where Terraform is running. This is a small additional measure of isolation to reduce the risk of an attacker somehow modifying a dynamically-fetched template to inspire Terraform to write sensitive data from the host computer into a location accessible to the same attacker, or similar. This is currently only a language experiment and so will not yet be available in stable releases of Terraform. Before stabilizing this and committing to supporting it indefinitely we'll want to gather feedback on whether this function actually meets the intended narrow set of use-cases around dynamic template rendering.		2 years ago
..
blocktoattr	…
funcs	lang/funcs: Experimental "templatestring" function	2 years ago
globalref	langrefs: Separate package for expression reference analysis	2 years ago
langrefs	langrefs: Separate package for expression reference analysis	2 years ago
marks	lang/marks: MarkPaths helper function	2 years ago
testdata/functions-test	…
types	…
checks.go	lang: EvalCheckErrorMessage is language-agnostic	2 years ago
data.go	Introduce 'run' keyword for referencing outputs from earlier run blocks (#33683)	3 years ago
data_test.go	Introduce 'run' keyword for referencing outputs from earlier run blocks (#33683)	3 years ago
doc.go	…
eval.go	langrefs: Separate package for expression reference analysis	2 years ago
eval_test.go	langrefs: Separate package for expression reference analysis	2 years ago
functions.go	lang/funcs: Experimental "templatestring" function	2 years ago
functions_descriptions_test.go	check function descriptions directly	2 years ago
functions_test.go	add `issensitive` function	2 years ago
scope.go	langrefs: Separate package for expression reference analysis	2 years ago