jprdonnelly/opentf
1
0
Fork 0
mirror of https://github.com/opentffoundation/opentf.git synced 2025-12-25 01:00:16 -05:00
Code Issues Packages Projects Releases Wiki Activity
32,301 Commits 230 Branches 78 Tags
9fb84e6ce92f67a2273037ca0902f360d4241a00
Commit Graph

32301 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Christian Mesh
9fb84e6ce9 Fix build issue from backport 
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
v1.8.10 		2025-07-15 12:47:06 -04:00
Christian Mesh
9d803d097c Version 1.8.10 
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
 2025-07-15 09:55:04 -04:00
Christian Mesh
5886db5114 Update changelog 
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
 2025-07-14 11:52:07 -04:00
Christian Mesh
7cbca7a9b4 Smarter approach to .Equals on state objects for unordered lists (#3024) 
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
 2025-07-14 11:52:01 -04:00
Christian Mesh
a1da9c1dcd Update changelog 
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
 2025-07-14 11:51:55 -04:00
Martin Atkins
a7d4a51938 hcl2shim: MockValueComposer handles structural-typed attributes (#2994) 
Signed-off-by: Martin Atkins <mart@degeneration.co.uk>
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
Co-authored-by: Christian Mesh <christianmesh1@gmail.com>
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
 2025-07-14 11:51:45 -04:00
Christian Mesh
373c3d7185 Update changelog 
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
 2025-07-14 11:48:03 -04:00
krishna sindhur
ddfa42c477 fix: Temp data cleanup in windows (#2995) 
Signed-off-by: krishna sindhur <krishna.sindhur@thinkbyte.ai>
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
 2025-07-14 11:47:56 -04:00
Martin Atkins
5b5708bfa4 CHANGELOG: Entry for opentofu/opentofu#2988 
Signed-off-by: Martin Atkins <mart@degeneration.co.uk>
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
 2025-07-14 11:47:46 -04:00
Martin Atkins
7390ec9e2d jsonformat: Tolerate incorrect paths in plan relevant_attributes 
The code for matching relevant_attributes against resource_drift entries
(a part of the heuristic for deciding whether to show "changes outside of
OpenTofu" in the human-oriented plan UI) was previously assuming that paths
in resource_drift would always be valid for the associated resource
instance object values because in most cases the language runtime will
detect invalid references and so fail to generate a plan at all.

However, when the reference is to something within a dynamically-typed
argument (such as the manifest in kubernetes_manifest) and when it appears
only as an argument to either the "try" or "can" functions (so the dynamic
error is intentionally suppressed) the language runtime can't catch it
and so the incorrect reference will leak out into relevant_attributes,
thereby violating assumptions made by the path matcher.

Instead then, we'll continue the existing precedent that this "relevant
attributes" mechanism is a best-effort heuristic that prefers to succeed
with an incomplete result rather than to fail, extending that to the
traversals in the plan renderer which will now treat incorrectly-typed
steps as not matching rather than causing OpenTofu to crash completely.

Since a reference to something that doesn't exist cannot succeed it also
cannot possibly _actually_ contribute directly to the final result of the
expression it appeared in, so in practice it should be okay to disregard
these invalid references for the purposes of deciding which changes outside
of OpenTofu seem likely to have caused the actions that OpenTofu is
proposing to make during the apply phase.

Signed-off-by: Martin Atkins <mart@degeneration.co.uk>
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
 2025-07-14 11:46:37 -04:00
Oleksandr Levchenkov
09bf3f4a30 update documentation images (#1864) 
Signed-off-by: ollevche <ollevche@gmail.com>
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
 2025-05-15 10:59:30 -04:00
Christian Mesh
ae3ed97882 Release v1.8.9 
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
v1.8.9 		2025-04-24 09:41:02 -04:00
Christian Mesh
72d3a45292 Add warning for sensitive state outputs in terraform_remote_state (#2697) 
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
 2025-04-24 09:38:13 -04:00
Timothée Ravier
e7ef010eb9 website: Fix the cosign verification example to allow shell glob expansion 
Signed-off-by: Timothée Ravier <tim@siosm.fr>
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
 2025-04-24 09:38:13 -04:00
Oleksandr Levchenkov
9d9d646430 update tofu console docs for non-interactive use-case (#2369) 
Signed-off-by: ollevche <ollevche@gmail.com>
Signed-off-by: Oleksandr Levchenkov <ollevche@gmail.com>
Co-authored-by: AbstractionFactory <179820029+abstractionfactory@users.noreply.github.com>
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
 2025-04-24 09:38:13 -04:00
Diógenes Fernandes
5eeb45e6b1 Backport [1.8] Reflecting the current state of module source on tofu test docs (#2670) 
Signed-off-by: Diogenes Fernandes <diofeher@gmail.com>
 2025-04-16 19:43:11 -03:00
Andrei Ciobanu
3b678ee4bb Fix vulnerability: GO-2025-3447 in Opentofu@v1.8 (#2649) 
Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>
 2025-04-08 07:30:56 -04:00
AbstractionFactory
5f55de518e Backport[1.8] fix(docs): correct custom example typo (#2485) (#2488) 
Co-authored-by: Thomas de Lachaux <21559770+ThomasLachaux@users.noreply.github.com>
 2025-02-13 10:50:16 -05:00
Oleksandr Levchenkov
f3df925e0d [BACKPORT v1.8] update github actions (#2483) 
Signed-off-by: ollevche <ollevche@gmail.com>
 2025-02-06 12:56:34 +02:00
Andrei Ciobanu
4fd1755615 [Backport 1.8] Add a new go-getter detector wrapper that can remove the query params before giving the src to the actual detector (#2459) 
Signed-off-by: yottta <andrei.ciobanu@opentofu.org>
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
Co-authored-by: Christian Mesh <christianmesh1@gmail.com>
 2025-01-31 11:57:25 -05:00
AbstractionFactory
551f4b1b94 Backports[v1.8] Bumping Go version to address CVE-2024-45336 and CVE-2024-45341 (#2438) (#2440) 
Signed-off-by: AbstractionFactory <179820029+abstractionfactory@users.noreply.github.com>
 2025-01-31 11:55:13 -05:00
Andrei Ciobanu
9b2aded3be [Backport 1.8] Fix error message when default value of variable is of wrong type (#2446) 
Signed-off-by: yottta <andrei.ciobanu@opentofu.org>
 2025-01-29 11:35:35 +02:00
Andrei Ciobanu
816bfba9aa [Backport 1.8] Fix: When a RequiredProvider is having syntax errors, return an empty one to allow further validations to generate their diags (#2436) 
Signed-off-by: yottta <andrei.ciobanu@opentofu.org>
Co-authored-by: yottta <andpectech@gmail.com>
 2025-01-28 16:01:34 +01:00
Andrei Ciobanu
bc6a804eb1 [Backport 1.8] MakeStaticTimestampFunc now returns unknown value if the given time.Time is zero (#2431) 
Signed-off-by: yottta <andrei.ciobanu@opentofu.org>
 2025-01-27 10:48:30 -05:00
Christian Mesh
7055fec681 [Backport v1.8] build(deps): bump github.com/hashicorp/go-slug from 0.12.2 to 0.16.3 (#2427) 
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-01-24 17:57:59 -05:00
Christian Mesh
192463d68e [Backport v1.8] Use import provider instead of guess (#2424) 
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
 2025-01-24 17:37:45 -05:00
Christian Mesh
3f0195eb09 [backport v1.8] Add example on supporting both OpenTofu and Terraform versions (#2422) 
Signed-off-by: Ludovico Magnocavallo <ludo@qix.it>
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
Co-authored-by: Ludovico Magnocavallo <ludo@qix.it>
Co-authored-by: Oleksandr Levchenkov <ollevche@gmail.com>
 2025-01-24 12:56:50 -05:00
Oleksandr Levchenkov
ac48a80b99 [BACKPORT v1.8] fix randomly failing destroyed_mod_outputs test (#2315) (#2319) 
Signed-off-by: ollevche <ollevche@gmail.com>
 2025-01-02 14:01:51 +02:00
Oleksandr Levchenkov
79ca3090fc prepare branch for v1.8.8 release (#2314) 
Signed-off-by: ollevche <ollevche@gmail.com>
v1.8.8 		2024-12-26 16:31:26 +02:00
Oleksandr Levchenkov
d7124386f2 [BACKPORT v1.8] bump golang.org/x/net from 0.25 to 0.33 (#2311) (#2313) 
Signed-off-by: ollevche <ollevche@gmail.com>
 2024-12-26 15:31:55 +02:00
AbstractionFactory
3191e7ab50 Backport[v1.8]: Bump golang.org/x/crypto from 0.21.0 to 0.31.0 (#2288) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-12-12 16:14:59 +01:00
Oleksandr Levchenkov
8fd25f3346 [BACKPORT] add simulated state serialization between tofu test runs (#2274) (#2276) 
Signed-off-by: ollevche <ollevche@gmail.com>
 2024-12-10 17:23:56 +02:00
Oleksandr Levchenkov
82fdce1c7d prepare for 1.8.7 release (#2255) 
Signed-off-by: ollevche <ollevche@gmail.com>
v1.8.7 		2024-12-05 13:42:46 +02:00
Oleksandr Levchenkov
39a15ab499 [BACKPORT] fix: type defaults for variables in tests (#2244) (#2247) 
Signed-off-by: ollevche <ollevche@gmail.com>
 2024-12-04 17:00:09 +02:00
Oleksandr Levchenkov
e1daace5ea [BACKPORT] make tofu test generate dynamic mock values (#2245) (#2246) 
Signed-off-by: ollevche <ollevche@gmail.com>
 2024-12-04 16:48:38 +02:00
AbstractionFactory
48cbedc87d Backport[v1.8]: Bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.1 (#2240) 
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: AbstractionFactory <179820029+abstractionfactory@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-12-04 11:20:39 +01:00
Christian Mesh
4a86cddc33 [backport v1.8] Force state change if encryption used fallback (#2236) 
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
 2024-12-03 18:17:46 -05:00
Martin Atkins
8f2c997396 tofu: Variable validation diagnostics must mark sensitive values 
The existing test for input variable validation with sensitive values was
building on a false premise that sensitive-flagged variables always emerge
from EvalContext.GetVariableValue as marked. In practice that's true only
for input variables passed from a parent model where the value was already
marked on entry, because the marking caused directly by the
"sensitive = true" argument is handled later once the value has been
finalized and is being reported from the main expression scope.

Since the variable validation codepath writes a not-yet-finalized value
for the variable into its own HCL expression scope directly, it needs to
apply the sensitive mark itself when the variable was configured as
sensitive, which therefore means that the value provided to the "condition"
expression is properly marked and any diagnostics generated from it will
capture that marked value.

Along with fixing the existing test to have a mock GetVariableValue that
more realistically models BuiltinEvalContext's behavior, this introduces
a new test specifically about the marking of the values in the diagnostic
errors to help avoid potentially regressing that specific detail, since
diagnostics there can potentially originate from various different parts
of the system.

Signed-off-by: Martin Atkins <mart@degeneration.co.uk>
 2024-12-03 09:55:12 -08:00
AbstractionFactory
9b2833f786 Backport[v1.8]: #2224 (Updated migration guides) (#2227) 2024-11-28 15:11:05 +01:00
Oleksandr Levchenkov
879fea59d9 update 1.8 versions (#2211) 
Signed-off-by: ollevche <ollevche@gmail.com>
v1.8.6 		2024-11-22 14:57:51 +01:00
Oleksandr Levchenkov
d34cade6c5 fix changelog for 1.8.6 (#2207) 
Signed-off-by: ollevche <ollevche@gmail.com>
 2024-11-22 13:52:03 +01:00
Oleksandr Levchenkov
a324472955 [BACKPORT] add missing changelog entry for http backend logging (#2206) (#2209) 
Signed-off-by: ollevche <ollevche@gmail.com>
 2024-11-22 14:01:12 +02:00
AbstractionFactory
8f19aa2c15 Bump golang version to 1.22.8 (address CVE-2024-34156) (#2050) (#2182) 
Signed-off-by: Sergey Pisarenko <spisarenko@palantir.com>
Signed-off-by: AbstractionFactory <179820029+abstractionfactory@users.noreply.github.com>
Co-authored-by: Sergey Pisarenko <sergey@pisarenko.net>
Co-authored-by: Sergey Pisarenko <spisarenko@palantir.com>
 2024-11-22 12:03:18 +01:00
Oleksandr Levchenkov
6c6f5beba1 [BACKPORT] fix mock type conversion in tofu test (#2144) (#2197) 
Signed-off-by: ollevche <ollevche@gmail.com>
 2024-11-21 14:58:42 +02:00
Oleksandr Levchenkov
2e04317cb6 [BACKPORT] fix mock provider validation (#2140) (#2196) 
Signed-off-by: ollevche <ollevche@gmail.com>
 2024-11-20 17:42:16 +02:00
Oleksandr Levchenkov
e4fd6b9f47 [BACKPORT] Add DEBUG-level logging to the "http" state storage backend (#2120) (#2192) 
Signed-off-by: Bari, Haider <haider.bari@fmr.com>
Signed-off-by: ollevche <ollevche@gmail.com>
Co-authored-by: Haider Bari <haiderbari@rocketmail.com>
Co-authored-by: Bari, Haider <haider.bari@fmr.com>
 2024-11-20 17:41:30 +02:00
Oleksandr Levchenkov
c59ba19b09 [BACKPORT] pin node version for docusaurus build (#2177) (#2194) 
Signed-off-by: ollevche <ollevche@gmail.com>
 2024-11-20 17:40:45 +02:00
Martin Atkins
b1062873d3 Prepare for the v1.8.6 release (#2137) 
Signed-off-by: Martin Atkins <mart@degeneration.co.uk>
v1.8.5 		2024-11-04 15:01:09 -05:00
Martin Atkins
3e7c2e7d0c v1.8 Backport: Fix regression of backend reinit detection when backend schema has required arguments (#2135) 
Signed-off-by: Martin Atkins <mart@degeneration.co.uk>
 2024-11-04 14:49:24 -05:00
Christian Mesh
e5b89195ff Partially unknown provider functions arguments fixed (#2127) (#2133) 
Signed-off-by: Christian Mesh <christianmesh1@gmail.com>
 2024-11-04 14:27:52 -05:00