Commit Graph

804 Commits

Author SHA1 Message Date
nemobis
6d0d9b8773 docs: Fix typo in sensitive.mdx (#3431)
Signed-off-by: nemobis <federico.leva@relexsolutions.com>
2025-10-30 15:11:44 -05:00
Andrei Ciobanu
ab51186a30 Add examples on how to use 'state_tags' and 'lock_tags' (#3437)
Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>
2025-10-29 11:23:59 +02:00
Martin Atkins
68fbe8d8d7 website: "element" function supports negative indices
We got this new functionality from an upgrade of the upstream cty library,
but we didn't update the docs to mention it.

The examples in this doc were also evidently generated with a much older
version of OpenTofu's predecessor, because the illustrated output was not
shown as a quoted string. The example output now matches how the current
version of "tofu console" would describe these results.

Signed-off-by: Martin Atkins <mart@degeneration.co.uk>
2025-10-28 15:11:26 -07:00
Andrei Ciobanu
934be4ad5e Glossary - initial version (#3411)
Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>
2025-10-28 11:41:31 +02:00
James Humphries
9eaba0d83d No longer mention that deprecation of module variables and outputs is experimental (#3417)
Signed-off-by: James Humphries <james@james-humphries.co.uk>
2025-10-23 14:48:10 +01:00
Martin Atkins
dc9bec611c website: Reorganize and tidy some lifecycle-related information
Over time the discussion about "lifecycle" blocks in the documentation
became confusing because the docs originally written for managed resource
lifecycle got partially generalized for resources of other modes and for
module calls, even though each of those has a completely different
lifecycle and thus a different set of lifecycle settings.

This is a first pass at trying to reorganize that so that the "lifecycle"
page is really just an index of all of the different kinds of lifecycle
block that exist in the language, while the main documentation for each
use of that block type now belongs with the documentation of the block
it's nested within.

While working on this I also found that there was some duplication inside
the "data sources" page where the same information was described multiple
times, and a few other cases where things had become inconsistent over
time. This also includes a little extra content to try to clarify the
difference between managed, data, and ephemeral resources and to make it
explicit that the "Resources" section is focused only on managed resources
because that is the primary resource mode.

As usual there's lots more that could be done here -- this documentation
has gradually evolved over time and is full of weird quirks due to that
evolution -- but I decided to draw a line here so that the diff wouldn't
get too large.

Signed-off-by: Martin Atkins <mart@degeneration.co.uk>
2025-10-17 15:08:14 -07:00
Diógenes Fernandes
d42dcc3b0a Add docs for the conditional enabled lifecycle attribute (#3380)
Signed-off-by: Diogenes Fernandes <diofeher@gmail.com>
Co-authored-by: Martin Atkins <mart@degeneration.co.uk>
Co-authored-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>
2025-10-16 13:10:00 -03:00
Andrei Ciobanu
7bcc6464ed Add a note about the lack of feedback on the experimental encryption method and key_provider (#3323)
Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>
Signed-off-by: Andrei Ciobanu <andreic9203@gmail.com>
Co-authored-by: Diógenes Fernandes <diofeher@gmail.com>
2025-10-03 15:33:46 +03:00
Magicalcrow
4fbbea6f4b Fix typos in uuid and uuidv5 docs
Signed-off-by: Magicalcrow <simondiev@gmail.com>
2025-09-30 09:00:55 -07:00
Larry Bordowitz
bcbfebce3d Implement the Azure Key Provider
This uses the same auth package as the newly-rewritten Azure State
Backend, so many of the properties and environment variables are the
same. I have put this through both the compliance test as well as built
the binary and run some end-to-end tests, and found that it
appropriately uses the Azure key as expected.

Signed-off-by: Larry Bordowitz <laurence.bordowitz@gmail.com>
2025-09-29 06:19:02 -04:00
Martin Atkins
116826c32f website: S3 module sources now support all standard AWS credential sources
As of go-getter v1.8.0, which we already upgraded in an earlier commit,
the S3 "getter" now uses the AWS SDK's default credentials chain
configuration and so follows the same set of credentials-searching
strategies that AWS CLI and other AWS SDK applications would follow.

We learned this only after having already merged that upgrade, so this is
a retroactive documentation and changelog update to describe the change.
Since go-getter is now delegating this whole question to the AWS SDK, our
future upgrades of the AWS SDK will automatically adopt any upstream
changes to the default credentials chain and so our documentation about
this is now more general than before: the intention is that our users can
generally assume that OpenTofu should support everything that is documented
as supported for the AWS CLI, instead of us listing out an explicit search
sequence that will be long and inevitably become outdated again.

Signed-off-by: Martin Atkins <mart@degeneration.co.uk>
2025-09-23 16:38:37 -07:00
Larry Bordowitz
0090e8a18c Add new configuration to AzureRM Backend (#3251)
Signed-off-by: Larry Bordowitz <laurence.bordowitz@gmail.com>
2025-09-15 19:22:17 +01:00
Christian Mesh
c8b58e949b Address review comments
Co-authored-by: James Humphries <James@james-humphries.co.uk>
Co-authored-by: Ilia Gogotchuri <ilia.gogotchuri0@gmail.com>
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
2025-09-10 07:45:23 -04:00
Andrei Ciobanu
57057aef27 Add docs for all ephemeral constructs (#3209)
Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
Co-authored-by: Christian Mesh <christianmesh1@gmail.com>
Co-authored-by: Diógenes Fernandes <diofeher@opentofu.org>
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
2025-09-10 07:45:23 -04:00
Christian Mesh
6437bfe01f Add tofu.applying (and terraform.applying) (#3170)
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
2025-09-10 07:45:23 -04:00
Christian Mesh
60b268200c Add ephemeralasnull() function (#3154)
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
Co-authored-by: Martin Atkins <mart@degeneration.co.uk>
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
2025-09-10 07:45:23 -04:00
Larry Bordowitz
63e8845ad9 Refactor the azurerm backend (#3034)
Signed-off-by: Larry Bordowitz <laurence.bordowitz@gmail.com>
2025-09-03 11:06:11 -04:00
Martin Atkins
9a161adbe3 go.mod: Upgrade to Go 1.25 (#3166)
Signed-off-by: Martin Atkins <mart@degeneration.co.uk>
2025-08-22 07:10:11 -04:00
James Humphries
9d47636173 Clarify dynamodb vs s3-native locking guidance (#3109)
Signed-off-by: James Humphries <james@james-humphries.co.uk>
2025-08-11 10:46:46 +01:00
Aaron George
e802c63f58 Add tag options for S3 state backend objects (#3038)
Signed-off-by: Aaron George <aarongeorge1994+github@gmail.com>
Co-authored-by: Andrei Ciobanu <andreic9203@gmail.com>
2025-08-07 10:39:19 +03:00
Diógenes Fernandes
5fb4a1aed2 Using a Key on ExtraInfo to differentiate between Consolidation Warnings (#3036)
Signed-off-by: Diogenes Fernandes <diofeher@gmail.com>
Signed-off-by: Diógenes Fernandes <diofeher@gmail.com>
2025-07-24 12:20:57 -03:00
Clément Denis
7dd55ebd5a Update documentation regarding short-circuiting boolean operators (#3063)
Signed-off-by: Clément Denis <clement.denis@gmail.com>
2025-07-24 14:04:52 +04:00
Diógenes Fernandes
cb73ae4299 docs for provider for_each in modules and resources (#2696)
Signed-off-by: Diogenes Fernandes <diofeher@gmail.com>
2025-07-15 16:54:32 -03:00
Andrei Ciobanu
4adc571c8c Fix a typo in the external method code snippet (#2881)
Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>
2025-06-02 15:19:47 +03:00
Ruben Aleman
dfcb220edd docs: fix headers default value for backend http (#2864)
Signed-off-by: Ruben Aleman <github@rubenaleman.de>
2025-05-27 11:26:59 +01:00
Andrei Ciobanu
8305bfb2ef Rename the CLI arg for deprecation outputs/variables (#2774)
Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>
2025-05-09 14:01:32 +03:00
Andrei Ciobanu
22dc9b2137 Add new CLI arg to control what warnings should be shown for deprecated outputs/variables (#2705)
Signed-off-by: yottta <andrei.ciobanu@opentofu.org>
Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>
2025-05-08 17:01:40 +03:00
Skyper
26a77c9156 website: mark input passphrase for state encryption as sensitive
Signed-off-by: Paul-Emmanuel Raoul <skyper@skyplabs.net>
2025-05-07 16:39:01 -07:00
Andrei Ciobanu
0d3d36778d Update some names in the encryption docs (#2762)
Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>
2025-05-07 16:06:22 +03:00
Oleksandr Levchenkov
89296b438a add explanation of supported commands for deprecation warnings (#2737)
Signed-off-by: ollevche <ollevche@gmail.com>
2025-05-02 11:31:03 +03:00
Andrei Ciobanu
3c51831e5c Enhance removed block with lifecycle and provisioner functionalities (#2628)
Signed-off-by: yottta <andrei.ciobanu@opentofu.org>
Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>
2025-04-25 06:29:42 -04:00
Oleksandr Levchenkov
8589d20d50 add website docs for deprecation attrs (#2706)
Signed-off-by: ollevche <ollevche@gmail.com>
2025-04-25 12:26:40 +03:00
Christian Mesh
5e714bc315 Add warning for sensitive state outputs in terraform_remote_state (#2697)
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
2025-04-24 07:55:53 -04:00
Martin Atkins
1421849989 website: Documentation for module packages in OCI repositories
This is a first draft of documentation describing our new capability to
treat artifacts in OCI Distribution repositories as a new kind of remote
module package.

This documentation includes both some caller-focused documentation that
extends our existing "Module Sources" page, and some documentation intended
more for the author of a module package describing how they could publish
their package as an OCI artifact that OpenTofu will accept.

As usual, we'll continue to refine this documentation based on feedback
during the prerelease period and beyond.

Signed-off-by: Martin Atkins <mart@degeneration.co.uk>
2025-04-21 10:11:44 -07:00
Taliesin Sisson
690a38dd69 Make table name and index name a config value for PG backend (#2465)
Signed-off-by: Taliesin Sisson <taliesins@yahoo.com>
2025-04-09 17:21:25 -04:00
Andrei Ciobanu
eba25e2fed Add the initial implementation for s3 locking (#2521)
Signed-off-by: yottta <andrei.ciobanu@opentofu.org>
2025-02-25 14:17:30 +02:00
Alexander Scheel
c66319a56b Remove experimental marker from OpenBao transit (#2536)
Signed-off-by: Alexander Scheel <alexander.m.scheel@gmail.com>
2025-02-21 10:00:13 -05:00
Ilia Gogotchuri
ec4e0cf0e2 Migration of null resource to terraform data (#2481)
Signed-off-by: Ilia Gogotchuri <ilia.gogotchuri0@gmail.com>
2025-02-06 17:45:00 +04:00
Thomas de Lachaux
897f9ebf06 fix(docs): correct custom example typo (#2485)
Signed-off-by: Thomas de Lachaux <21559770+ThomasLachaux@users.noreply.github.com>
2025-02-06 09:32:20 +01:00
Ilia Gogotchuri
5968e195b0 Moved for different types (#2370)
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
Signed-off-by: Ilia Gogotchuri <ilia.gogotchuri0@gmail.com>
Co-authored-by: Christian Mesh <christianmesh1@gmail.com>
2025-02-05 15:14:19 +04:00
AbstractionFactory
60fdd359d5 Fixes #2337: External encryption method (#2367)
Signed-off-by: AbstractionFactory <179820029+abstractionfactory@users.noreply.github.com>
2025-01-31 12:13:18 -05:00
Oleksandr Levchenkov
2a4d81042b make pg backend acquire schema-based global locks (#2411)
Signed-off-by: ollevche <ollevche@gmail.com>
2025-01-31 14:21:36 +02:00
Ludovico Magnocavallo
e7f130a490 Add example on supporting both OpenTofu and Terraform versions to version-constraints.mdx (#2302)
Signed-off-by: Ludovico Magnocavallo <ludo@qix.it>
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
Co-authored-by: Oleksandr Levchenkov <ollevche@gmail.com>
2025-01-24 12:48:11 -05:00
AbstractionFactory
174f1d5784 Fixed broken links in encryption docs (#2366)
Signed-off-by: AbstractionFactory <179820029+abstractionfactory@users.noreply.github.com>
2025-01-13 16:00:48 +01:00
AbstractionFactory
b036e534b2 Fixing incorrect keyprovider-external.tofu (#2365)
Signed-off-by: AbstractionFactory <179820029+abstractionfactory@users.noreply.github.com>
2025-01-13 15:53:05 +01:00
AbstractionFactory
5a6d2d3e98 Fixes #2022: Running external commands as a key provider (#2023)
Signed-off-by: AbstractionFactory <179820029+abstractionfactory@users.noreply.github.com>
Signed-off-by: ollevche <ollevche@gmail.com>
Co-authored-by: Oleksandr Levchenkov <ollevche@gmail.com>
2025-01-08 12:08:30 -05:00
Ilia Gogotchuri
2d9cef1f55 Functions: decode_tfvars, encode_tfvars, encode_expr on bult-in provider for compatibility (#2306)
Signed-off-by: Ilia Gogotchuri <ilia.gogotchuri0@gmail.com>
Co-authored-by: Oleksandr Levchenkov <ollevche@gmail.com>
2024-12-25 13:21:59 +04:00
Ilia Gogotchuri
ffa43acfcd Azurerm backend timeout (#2263)
adds a timeout_seconds configuration variable with a default value to the AzureRM backend
Signed-off-by: Ilia Gogotchuri <ilia.gogotchuri0@gmail.com>
2024-12-06 17:32:23 +04:00
Martin Atkins
c453eb6a3b website: Initial documentation updates for dynamic provider instances (#2138)
Signed-off-by: Martin Atkins <mart@degeneration.co.uk>
2024-12-05 07:46:02 -05:00
Christian Mesh
f6a1d8e2dd Support References in Variable Validation (#2216)
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
2024-12-04 14:24:44 -05:00