github.com/akazakov/terraform@v0.5.2-0.20160205142716-097441beafdf/CHANGELOG.md (about) 1 ## 0.6.12 (Unreleased) 2 3 FEATURES: 4 5 * **New resource:** `azurerm_dns_zone` [GH-4979] 6 * **New resource:** `azurerm_sql_server` [GH-4991] 7 8 BUG FIXES: 9 10 * core: Fix bug where `ignore_changes` could produce "diffs didn't match during apply" errors [GH-4965] 11 * provider/openstack: Fix crash when `access_network` was not defined in instances [GH-4966] 12 13 ## 0.6.11 (February 1, 2016) 14 15 BACKWARDS INCOMPATIBILITIES / NOTES: 16 17 * The `max_size`, `min_size` and `desired_capacity` attributes on `aws_autoscaling_schedule` resources now default to 0 18 19 FEATURES: 20 21 * **New provider: `powerdns` - PowerDNS REST API** [GH-4885] 22 * **New builtin function:** `trimspace` for trimming whitespaces [GH-4910] 23 * **New builtin function:** `base64sha256` for base64 encoding raw sha256 sum of a given string [GH-4899] 24 * **New resource:** `openstack_lb_member_v1` [GH-4359] 25 26 IMPROVEMENTS: 27 28 * provider/template: Remove unnecessary mime-type validation from `template_cloudinit_config` resources [GH-4873] 29 * provider/template: Correct spelling of "Boundary" in the part separator of rendered `template_cloudinit_config` resources [GH-4873] 30 * provider/aws: Provide a better message if no AWS creds are found [GH-4869] 31 * provider/openstack: Ability to specify per-network Floating IPs [GH-4812] 32 33 BUG FIXES: 34 35 * provider/aws: `aws_autoscale_schedule` 0 values [GH-4693] 36 * provider/aws: Fix regression with VPCs and ClassicLink for regions that do not support it [GH-4879] 37 * provider/aws: Change VPC ClassicLink to be computed [GH-4933] 38 * provider/aws: Fix SNS Topic Refresh to ensure deleted topics are removed from state [GH-4891] 39 * provider/aws: Refactor Route53 record to fix regression in deleting records created in previous versions of Terraform [GH-4892] 40 * provider/azurerm: Fix panic if no creds supplied [GH-4902] 41 * provider/openstack: Changing the port resource to mark the ip_address as optional [GH-4850] 42 * provider/docker: Catch potential custom network errors in docker [GH-4918] 43 44 45 46 ## 0.6.10 (January 27, 2016) 47 48 BACKWARDS INCOMPATIBILITIES / NOTES: 49 50 * The `-module-depth` flag available on `plan`, `apply`, `show`, and `graph` now defaults to `-1`, causing 51 resources within modules to be expanded in command output. This is only a cosmetic change; it does not affect 52 any behavior. 53 * This release includes a bugfix for `$${}` interpolation escaping. These strings are now properly converted to `${}` 54 during interpolation. This may cause diffs on existing configurations in certain cases. 55 * Users of `consul_keys` should note that the `value` sub-attribute of `key` will no longer be updated with the remote value of the key. It should be only used to _set_ a key in Consul K/V. To reference key values, use the `var` attribute. 56 * The 0.6.9 release contained a regression in `aws_autoscaling_group` capacity waiting behavior for configs where `min_elb_capacity != desired_capacity` or `min_size != desired_capacity`. This release remedies that regression by un-deprecating `min_elb_capacity` and restoring the prior behavior. 57 * Users of `aws_security_group` may notice new diffs in initial plans with 0.6.10 due to a bugfix that fixes drift detection on nested security group rules. These new diffs should reflect the actual state of the resources, which Terraform previously was unable to see. 58 59 60 FEATURES: 61 62 * **New resource: `aws_lambda_alias`** [GH-4664] 63 * **New resource: `aws_redshift_cluster`** [GH-3862] 64 * **New resource: `aws_redshift_parameter_group`** [GH-3862] 65 * **New resource: `aws_redshift_security_group`** [GH-3862] 66 * **New resource: `aws_redshift_subnet_group`** [GH-3862] 67 * **New resource: `azurerm_cdn_endpoint`** [GH-4759] 68 * **New resource: `azurerm_cdn_profile`** [GH-4740] 69 * **New resource: `azurerm_network_interface`** [GH-4598] 70 * **New resource: `azurerm_network_security_rule`** [GH-4586] 71 * **New resource: `azurerm_route_table`** [GH-4602] 72 * **New resource: `azurerm_route`** [GH-4604] 73 * **New resource: `azurerm_storage_account`** [GH-4698] 74 * **New resource: `azurerm_storage_blob`** [GH-4862] 75 * **New resource: `azurerm_storage_container`** [GH-4862] 76 * **New resource: `azurerm_storage_queue`** [GH-4862] 77 * **New resource: `azurerm_subnet`** [GH-4595] 78 * **New resource: `docker_network`** [GH-4483] 79 * **New resource: `docker_volume`** [GH-4483] 80 * **New resource: `google_sql_user`** [GH-4669] 81 82 IMPROVEMENTS: 83 84 * core: Add `sha256()` interpolation function [GH-4704] 85 * core: Validate lifecycle keys to show helpful error messages whe they are mistypes [GH-4745] 86 * core: Default `module-depth` parameter to `-1`, which expands resources within modules in command output [GH-4763] 87 * core: Variable types may now be specified explicitly using the `type` argument [GH-4795] 88 * provider/aws: Add new parameters `az_mode` and `availability_zone(s)` in ElastiCache [GH-4631] 89 * provider/aws: Allow ap-northeast-2 (Seoul) as valid region [GH-4637] 90 * provider/aws: Limit SNS Topic Subscription protocols [GH-4639] 91 * provider/aws: Add support for configuring logging on `aws_s3_bucket` resources [GH-4482] 92 * provider/aws: Add AWS Classiclink for AWS VPC resource [GH-3994] 93 * provider/aws: Supporting New AWS Route53 HealthCheck additions [GH-4564] 94 * provider/aws: Store instance state [GH-3261] 95 * provider/aws: Add support for updating ELB availability zones and subnets [GH-4597] 96 * provider/aws: Enable specifying aws s3 redirect protocol [GH-4098] 97 * provider/aws: Added support for `encrypted` on `ebs_block_devices` in Launch Configurations [GH-4481] 98 * provider/aws: Retry Listener Creation for ELBs [GH-4825] 99 * provider/aws: Add support for creating Managed Microsoft Active Directory 100 and Directory Connectors [GH-4388] 101 * provider/aws: Mark some `aws_db_instance` fields as optional [GH-3138] 102 * provider/digitalocean: Add support for reassigning `digitalocean_floating_ip` resources [GH-4476] 103 * provider/dme: Add support for Global Traffic Director locations on `dme_record` resources [GH-4305] 104 * provider/docker: Add support for adding host entries on `docker_container` resources [GH-3463] 105 * provider/docker: Add support for mounting named volumes on `docker_container` resources [GH-4480] 106 * provider/google: Add content field to bucket object [GH-3893] 107 * provider/google: Add support for `named_port` blocks on `google_compute_instance_group_manager` resources [GH-4605] 108 * provider/openstack: Add "personality" support to instance resource [GH-4623] 109 * provider/packet: Handle external state changes for Packet resources gracefully [GH-4676] 110 * provider/tls: `tls_private_key` now exports attributes with public key in both PEM and OpenSSH format [GH-4606] 111 * provider/vdc: Add `allow_unverified_ssl` for connections to vCloud API [GH-4811] 112 * state/remote: Allow KMS Key Encryption to be used with S3 backend [GH-2903] 113 114 BUG FIXES: 115 116 * core: Fix handling of literals with escaped interpolations `$${var}` [GH-4747] 117 * core: Fix diff mismatch when RequiresNew field and list both change [GH-4749] 118 * core: Respect module target path argument on `terraform init` [GH-4753] 119 * core: Write planfile even on empty plans [GH-4766] 120 * core: Add validation error when output is missing value field [GH-4762] 121 * core: Fix improper handling of orphan resources when targeting [GH-4574] 122 * core: Properly handle references to computed set attributes [GH-4840] 123 * config: Detect a specific JSON edge case and show a helpful workaround [GH-4746] 124 * provider/openstack: Ensure valid Security Group Rule attribute combination [GH-4466] 125 * provider/openstack: Don't put fixed_ip in port creation request if not defined [GH-4617] 126 * provider/google: Clarify SQL Database Instance recent name restriction [GH-4577] 127 * provider/google: Split Instance network interface into two fields [GH-4265] 128 * provider/aws: Error with empty list item on security group [GH-4140] 129 * provider/aws: Fix issue with detecting drift in AWS Security Groups rules [GH-4779] 130 * provider/aws: Trap Instance error from mismatched SG IDs and Names [GH-4240] 131 * provider/aws: EBS optimised to force new resource in AWS Instance [GH-4627] 132 * provider/aws: Wait for NACL rule to be visible [GH-4734] 133 * provider/aws: `default_result` on `aws_autoscaling_lifecycle_hook` resources is now computed [GH-4695] 134 * provider/aws: fix ASG capacity waiting regression by un-deprecating `min_elb_capacity` [GH-4864] 135 * provider/consul: fix several bugs surrounding update behavior [GH-4787] 136 * provider/mailgun: Handle the fact that the domain destroy API is eventually consistent [GH-4777] 137 * provider/template: Fix race causing sporadic crashes in template_file with count > 1 [GH-4694] 138 * provider/template: Add support for updating `template_cloudinit_config` resources [GH-4757] 139 * provisioner/chef: Add ENV['no_proxy'] to chef provisioner if no_proxy is detected [GH-4661] 140 141 ## 0.6.9 (January 8, 2016) 142 143 FEATURES: 144 145 * **New provider: `vcd` - VMware vCloud Director** [GH-3785] 146 * **New provider: `postgresql` - Create PostgreSQL databases and roles** [GH-3653] 147 * **New provider: `chef` - Create chef environments, roles, etc** [GH-3084] 148 * **New provider: `azurerm` - Preliminary support for Azure Resource Manager** [GH-4226] 149 * **New provider: `mysql` - Create MySQL databases** [GH-3122] 150 * **New resource: `aws_autoscaling_schedule`** [GH-4256] 151 * **New resource: `aws_nat_gateway`** [GH-4381] 152 * **New resource: `aws_network_acl_rule`** [GH-4286] 153 * **New resources: `aws_ecr_repository` and `aws_ecr_repository_policy`** [GH-4415] 154 * **New resource: `google_pubsub_topic`** [GH-3671] 155 * **New resource: `google_pubsub_subscription`** [GH-3671] 156 * **New resource: `template_cloudinit_config`** [GH-4095] 157 * **New resource: `tls_locally_signed_cert`** [GH-3930] 158 * **New remote state backend: `artifactory`** [GH-3684] 159 160 IMPROVEMENTS: 161 162 * core: Change set internals for performance improvements [GH-3992] 163 * core: Support HTTP basic auth in consul remote state [GH-4166] 164 * core: Improve error message on resource arity mismatch [GH-4244] 165 * core: Add support for unary operators + and - to the interpolation syntax [GH-3621] 166 * core: Add SSH agent support for Windows [GH-4323] 167 * core: Add `sha1()` interpolation function [GH-4450] 168 * provider/aws: Add `placement_group` as an option for `aws_autoscaling_group` [GH-3704] 169 * provider/aws: Add support for DynamoDB Table StreamSpecifications [GH-4208] 170 * provider/aws: Add `name_prefix` to Security Groups [GH-4167] 171 * provider/aws: Add support for removing nodes to `aws_elasticache_cluster` [GH-3809] 172 * provider/aws: Add support for `skip_final_snapshot` to `aws_db_instance` [GH-3853] 173 * provider/aws: Adding support for Tags to DB SecurityGroup [GH-4260] 174 * provider/aws: Adding Tag support for DB Param Groups [GH-4259] 175 * provider/aws: Fix issue with updated route ids for VPC Endpoints [GH-4264] 176 * provider/aws: Added measure_latency option to Route 53 Health Check resource [GH-3688] 177 * provider/aws: Validate IOPs for EBS Volumes [GH-4146] 178 * provider/aws: DB Subnet group arn output [GH-4261] 179 * provider/aws: Get full Kinesis streams view with pagination [GH-4368] 180 * provider/aws: Allow changing private IPs for ENIs [GH-4307] 181 * provider/aws: Retry MalformedPolicy errors due to newly created principals in S3 Buckets [GH-4315] 182 * provider/aws: Validate `name` on `db_subnet_group` against AWS requirements [GH-4340] 183 * provider/aws: wait for ASG capacity on update [GH-3947] 184 * provider/aws: Add validation for ECR repository name [GH-4431] 185 * provider/cloudstack: performance improvements [GH-4150] 186 * provider/docker: Add support for setting the entry point on `docker_container` resources [GH-3761] 187 * provider/docker: Add support for setting the restart policy on `docker_container` resources [GH-3761] 188 * provider/docker: Add support for setting memory, swap and CPU shares on `docker_container` resources [GH-3761] 189 * provider/docker: Add support for setting labels on `docker_container` resources [GH-3761] 190 * provider/docker: Add support for setting log driver and options on `docker_container` resources [GH-3761] 191 * provider/docker: Add support for settings network mode on `docker_container` resources [GH-4475] 192 * provider/heroku: Improve handling of Applications within an Organization [GH-4495] 193 * provider/vsphere: Add support for custom vm params on `vsphere_virtual_machine` [GH-3867] 194 * provider/vsphere: Rename vcenter_server config parameter to something clearer [GH-3718] 195 * provider/vsphere: Make allow_unverified_ssl a configuable on the provider [GH-3933] 196 * provider/vsphere: Add folder handling for folder-qualified vm names [GH-3939] 197 * provider/vsphere: Change ip_address parameter for ipv6 support [GH-4035] 198 * provider/openstack: Increase instance timeout from 10 to 30 minutes [GH-4223] 199 * provider/google: Add `restart_policy` attribute to `google_managed_instance_group` [GH-3892] 200 201 BUG FIXES: 202 203 * core: skip provider input for deprecated fields [GH-4193] 204 * core: Fix issue which could cause fields that become empty to retain old values in the state [GH-3257] 205 * provider/docker: Fix an issue running with Docker Swarm by looking up containers by ID instead of name [GH-4148] 206 * provider/openstack: Better handling of load balancing resource state changes [GH-3926] 207 * provider/aws: Treat `INACTIVE` ECS cluster as deleted [GH-4364] 208 * provider/aws: Skip `source_security_group_id` determination logic for Classic ELBs [GH-4075] 209 * provider/aws: Fix issue destroy Route 53 zone/record if it no longer exists [GH-4198] 210 * provider/aws: Fix issue force destroying a versioned S3 bucket [GH-4168] 211 * provider/aws: Update DB Replica to honor storage type [GH-4155] 212 * provider/aws: Fix issue creating AWS RDS replicas across regions [GH-4215] 213 * provider/aws: Fix issue with Route53 and zero weighted records [GH-4427] 214 * provider/aws: Fix issue with iam_profile in aws_instance when a path is specified [GH-3663] 215 * provider/aws: Refactor AWS Authentication chain to fix issue with authentication and IAM [GH-4254] 216 * provider/aws: Fix issue with finding S3 Hosted Zone ID for eu-central-1 region [GH-4236] 217 * provider/aws: Fix missing AMI issue with Launch Configurations [GH-4242] 218 * provider/aws: Opsworks stack SSH key is write-only [GH-4241] 219 * provider/aws: Update VPC Endpoint to correctly set route table ids [GH-4392] 220 * provider/aws: Fix issue with ElasticSearch Domain `access_policies` always appear changed [GH-4245] 221 * provider/aws: Fix issue with nil parameter group value causing panic in `aws_db_parameter_group` [GH-4318] 222 * provider/aws: Fix issue with Elastic IPs not recognizing when they have been unassigned manually [GH-4387] 223 * provider/aws: Use body or URL for all CloudFormation stack updates [GH-4370] 224 * provider/aws: Fix template_url/template_body conflict [GH-4540] 225 * provider/aws: Fix bug w/ changing ECS svc/ELB association [GH-4366] 226 * provider/aws: Fix RDS unexpected state config [GH-4490] 227 * provider/digitalocean: Fix issue where a floating IP attached to a missing droplet causes a panic [GH-4214] 228 * provider/google: Fix project metadata sshKeys from showing up and causing unnecessary diffs [GH-4512] 229 * provider/heroku: Retry drain create until log channel is assigned [GH-4823] 230 * provider/openstack: Handle volumes in "deleting" state [GH-4204] 231 * provider/rundeck: Tolerate Rundeck server not returning project name when reading a job [GH-4301] 232 * provider/vsphere: Create and attach additional disks before bootup [GH-4196] 233 * provider/openstack: Convert block_device from a Set to a List [GH-4288] 234 * provider/google: Terraform identifies deleted resources and handles them appropriately on Read [GH-3913] 235 236 ## 0.6.8 (December 2, 2015) 237 238 FEATURES: 239 240 * **New provider: `statuscake`** [GH-3340] 241 * **New resource: `digitalocean_floating_ip`** [GH-3748] 242 * **New resource: `aws_lambda_event_source_mapping`** [GH-4093] 243 244 IMPROVEMENTS: 245 246 * provider/cloudstack: Reduce the number of network calls required for common operations [GH-4051] 247 * provider/aws: Make `publically_accessible` on an `aws_db_instance` update existing instances instead of forcing new ones [GH-3895] 248 * provider/aws: Allow `block_duration_minutes` to be set for spot instance requests [GH-4071] 249 * provider/aws: Make setting `acl` on S3 buckets update existing buckets instead of forcing new ones [GH-4080] 250 * provider/aws: Make updates to `assume_role_policy` modify existing IAM roles instead of forcing new ones [GH-4107] 251 252 BUG FIXES: 253 254 * core: Fix a bug which prevented HEREDOC syntax being used in lists [GH-4078] 255 * core: Fix a bug which prevented HEREDOC syntax where the anchor ends in a number [GH-4128] 256 * core: Fix a bug which prevented HEREDOC syntax being used with Windows line endings [GH-4069] 257 * provider/aws: Fix a bug which could result in a panic when reading EC2 metadata [GH-4024] 258 * provider/aws: Fix issue recreating security group rule if it has been destroyed [GH-4050] 259 * provider/aws: Fix issue with some attributes in Spot Instance Requests returning as nil [GH-4132] 260 * provider/aws: Fix issue where SPF records in Route 53 could show differences with no modification to the configuration [GH-4108] 261 * provisioner/chef: Fix issue with path separators breaking the Chef provisioner on Windows [GH-4041] 262 263 ## 0.6.7 (November 23, 2015) 264 265 FEATURES: 266 267 * **New provider: `tls`** - A utility provider for generating TLS keys/self-signed certificates for development and testing [GH-2778] 268 * **New provider: `dyn`** - Manage DNS records on Dyn 269 * **New resource: `aws_cloudformation_stack`** [GH-2636] 270 * **New resource: `aws_cloudtrail`** [GH-3094], [GH-4010] 271 * **New resource: `aws_route`** [GH-3548] 272 * **New resource: `aws_codecommit_repository`** [GH-3274] 273 * **New resource: `aws_kinesis_firehose_delivery_stream`** [GH-3833] 274 * **New resource: `google_sql_database` and `google_sql_database_instance`** [GH-3617] 275 * **New resource: `google_compute_global_address`** [GH-3701] 276 * **New resource: `google_compute_https_health_check`** [GH-3883] 277 * **New resource: `google_compute_ssl_certificate`** [GH-3723] 278 * **New resource: `google_compute_url_map`** [GH-3722] 279 * **New resource: `google_compute_target_http_proxy`** [GH-3727] 280 * **New resource: `google_compute_target_https_proxy`** [GH-3728] 281 * **New resource: `google_compute_global_forwarding_rule`** [GH-3702] 282 * **New resource: `openstack_networking_port_v2`** [GH-3731] 283 * New interpolation function: `coalesce` [GH-3814] 284 285 IMPROVEMENTS: 286 287 * core: Improve message to list only resources which will be destroyed when using `--target` [GH-3859] 288 * connection/ssh: Accept `private_key` contents instead of paths [GH-3846] 289 * provider/google: `preemptible` option for instance_template [GH-3667] 290 * provider/google: Accurate Terraform Version [GH-3554] 291 * provider/google: Simplified auth (DefaultClient support) [GH-3553] 292 * provider/google: `automatic_restart`, `preemptible`, `on_host_maintenance` options [GH-3643] 293 * provider/google: Read credentials as contents instead of path [GH-3901] 294 * null_resource: Enhance and document [GH-3244, GH-3659] 295 * provider/aws: Add CORS settings to S3 bucket [GH-3387] 296 * provider/aws: Add notification topic ARN for ElastiCache clusters [GH-3674] 297 * provider/aws: Add `kinesis_endpoint` for configuring Kinesis [GH-3255] 298 * provider/aws: Add a computed ARN for S3 Buckets [GH-3685] 299 * provider/aws: Add S3 support for Lambda Function resource [GH-3794] 300 * provider/aws: Add `name_prefix` option to launch configurations [GH-3802] 301 * provider/aws: Add support for group name and path changes with IAM group update function [GH-3237] 302 * provider/aws: Provide `source_security_group_id` for ELBs inside a VPC [GH-3780] 303 * provider/aws: Add snapshot window and retention limits for ElastiCache (Redis) [GH-3707] 304 * provider/aws: Add username updates for `aws_iam_user` [GH-3227] 305 * provider/aws: Add AutoMinorVersionUpgrade to RDS Instances [GH-3677] 306 * provider/aws: Add `access_logs` to ELB resource [GH-3756] 307 * provider/aws: Add a retry function to rescue an error in creating Autoscaling Lifecycle Hooks [GH-3694] 308 * provider/aws: `engine_version` is now optional for DB Instance [GH-3744] 309 * provider/aws: Add configuration to enable copying RDS tags to final snapshot [GH-3529] 310 * provider/aws: RDS Cluster additions (`backup_retention_period`, `preferred_backup_window`, `preferred_maintenance_window`) [GH-3757] 311 * provider/aws: Document and validate ELB `ssl_certificate_id` and protocol requirements [GH-3887] 312 * provider/azure: Read `publish_settings` as contents instead of path [GH-3899] 313 * provider/openstack: Use IPv4 as the default IP version for subnets [GH-3091] 314 * provider/aws: Apply security group after restoring `db_instance` from snapshot [GH-3513] 315 * provider/aws: Make the AutoScalingGroup `name` optional [GH-3710] 316 * provider/openstack: Add "delete on termination" boot-from-volume option [GH-3232] 317 * provider/digitalocean: Make `user_data` force a new droplet [GH-3740] 318 * provider/vsphere: Do not add network interfaces by default [GH-3652] 319 * provider/openstack: Configure Fixed IPs through ports [GH-3772] 320 * provider/openstack: Specify a port ID on a Router Interface [GH-3903] 321 * provider/openstack: Make LBaaS Virtual IP computed [GH-3927] 322 323 BUG FIXES: 324 325 * `terraform remote config`: update `--help` output [GH-3632] 326 * core: Modules on Git branches now update properly [GH-1568] 327 * core: Fix issue preventing input prompts for unset variables during plan [GH-3843] 328 * core: Fix issue preventing input prompts for unset variables during refresh [GH-4017] 329 * core: Orphan resources can now be targets [GH-3912] 330 * helper/schema: Skip StateFunc when value is nil [GH-4002] 331 * provider/google: Timeout when deleting large `instance_group_manager` [GH-3591] 332 * provider/aws: Fix issue with order of Termination Policies in AutoScaling Groups. 333 This will introduce plans on upgrade to this version, in order to correct the ordering [GH-2890] 334 * provider/aws: Allow cluster name, not only ARN for `aws_ecs_service` [GH-3668] 335 * provider/aws: Fix a bug where a non-lower-cased `maintenance_window` can cause unnecessary planned changes [GH-4020] 336 * provider/aws: Only set `weight` on an `aws_route53_record` if it has been set in configuration [GH-3900] 337 * provider/aws: Ignore association not existing on route table destroy [GH-3615] 338 * provider/aws: Fix policy encoding issue with SNS Topics [GH-3700] 339 * provider/aws: Correctly export ARN in `aws_iam_saml_provider` [GH-3827] 340 * provider/aws: Fix issue deleting users who are attached to a group [GH-4005] 341 * provider/aws: Fix crash in Route53 Record if Zone not found [GH-3945] 342 * provider/aws: Retry deleting IAM Server Cert on dependency violation [GH-3898] 343 * provider/aws: Update Spot Instance request to provide connection information [GH-3940] 344 * provider/aws: Fix typo in error checking for IAM Policy Attachments [GH-3970] 345 * provider/aws: Fix issue with LB Cookie Stickiness and empty expiration period [GH-3908] 346 * provider/aws: Tolerate ElastiCache clusters being deleted outside Terraform [GH-3767] 347 * provider/aws: Downcase Route 53 record names in state file to match API output [GH-3574] 348 * provider/aws: Fix issue that could occur if no ECS Cluster was found for a given name [GH-3829] 349 * provider/aws: Fix issue with SNS topic policy if omitted [GH-3777] 350 * provider/aws: Support scratch volumes in `aws_ecs_task_definition` [GH-3810] 351 * provider/aws: Treat `aws_ecs_service` w/ Status==INACTIVE as deleted [GH-3828] 352 * provider/aws: Expand ~ to homedir in `aws_s3_bucket_object.source` [GH-3910] 353 * provider/aws: Fix issue with updating the `aws_ecs_task_definition` where `aws_ecs_service` didn't wait for a new computed ARN [GH-3924] 354 * provider/aws: Prevent crashing when deleting `aws_ecs_service` that is already gone [GH-3914] 355 * provider/aws: Allow spaces in `aws_db_subnet_group.name` (undocumented in the API) [GH-3955] 356 * provider/aws: Make VPC ID required on subnets [GH-4021] 357 * provider/azure: Various bug fixes [GH-3695] 358 * provider/digitalocean: Fix issue preventing SSH fingerprints from working [GH-3633] 359 * provider/digitalocean: Fix the DigitalOcean Droplet 404 potential on refresh of state [GH-3768] 360 * provider/openstack: Fix several issues causing unresolvable diffs [GH-3440] 361 * provider/openstack: Safely delete security groups [GH-3696] 362 * provider/openstack: Ignore order of `security_groups` in instance [GH-3651] 363 * provider/vsphere: Fix d.SetConnInfo error in case of a missing IP address [GH-3636] 364 * provider/openstack: Fix boot from volume [GH-3206] 365 * provider/openstack: Fix crashing when image is no longer accessible [GH-2189] 366 * provider/openstack: Better handling of network resource state changes [GH-3712] 367 * provider/openstack: Fix crashing when no security group is specified [GH-3801] 368 * provider/packet: Fix issue that could cause errors when provisioning many devices at once [GH-3847] 369 * provider/packet: Fix connection information for devices, allowing provisioners to run [GH-3948] 370 * provider/openstack: Fix issue preventing security group rules from being removed [GH-3796] 371 * provider/template: `template_file`: source contents instead of path [GH-3909] 372 373 ## 0.6.6 (October 23, 2015) 374 375 FEATURES: 376 377 * New interpolation functions: `cidrhost`, `cidrnetmask` and `cidrsubnet` [GH-3127] 378 379 IMPROVEMENTS: 380 381 * "forces new resource" now highlighted in plan output [GH-3136] 382 383 BUG FIXES: 384 385 * helper/schema: Better error message for assigning list/map to string [GH-3009] 386 * remote/state/atlas: Additional remote state conflict handling for semantically neutral state changes [GH-3603] 387 388 ## 0.6.5 (October 21, 2015) 389 390 FEATURES: 391 392 * **New resources: `aws_codeploy_app` and `aws_codeploy_deployment_group`** [GH-2783] 393 * New remote state backend: `etcd` [GH-3487] 394 * New interpolation functions: `upper` and `lower` [GH-3558] 395 396 BUG FIXES: 397 398 * core: Fix remote state conflicts caused by ambiguity in ordering of deeply nested modules [GH-3573] 399 * core: Fix remote state conflicts caused by state metadata differences [GH-3569] 400 * core: Avoid using http.DefaultClient [GH-3532] 401 402 INTERNAL IMPROVEMENTS: 403 404 * provider/digitalocean: use official Go client [GH-3333] 405 * core: extract module fetching to external library [GH-3516] 406 407 ## 0.6.4 (October 15, 2015) 408 409 FEATURES: 410 411 * **New provider: `rundeck`** [GH-2412] 412 * **New provider: `packet`** [GH-2260], [GH-3472] 413 * **New provider: `vsphere`**: Initial support for a VM resource [GH-3419] 414 * **New resource: `cloudstack_loadbalancer_rule`** [GH-2934] 415 * **New resource: `google_compute_project_metadata`** [GH-3065] 416 * **New resources: `aws_ami`, `aws_ami_copy`, `aws_ami_from_instance`** [GH-2784] 417 * **New resources: `aws_cloudwatch_log_group`** [GH-2415] 418 * **New resource: `google_storage_bucket_object`** [GH-3192] 419 * **New resources: `google_compute_vpn_gateway`, `google_compute_vpn_tunnel`** [GH-3213] 420 * **New resources: `google_storage_bucket_acl`, `google_storage_object_acl`** [GH-3272] 421 * **New resource: `aws_iam_saml_provider`** [GH-3156] 422 * **New resources: `aws_efs_file_system` and `aws_efs_mount_target`** [GH-2196] 423 * **New resources: `aws_opsworks_*`** [GH-2162] 424 * **New resource: `aws_elasticsearch_domain`** [GH-3443] 425 * **New resource: `aws_directory_service_directory`** [GH-3228] 426 * **New resource: `aws_autoscaling_lifecycle_hook`** [GH-3351] 427 * **New resource: `aws_placement_group`** [GH-3457] 428 * **New resource: `aws_glacier_vault`** [GH-3491] 429 * **New lifecycle flag: `ignore_changes`** [GH-2525] 430 431 IMPROVEMENTS: 432 433 * core: Add a function to find the index of an element in a list. [GH-2704] 434 * core: Print all outputs when `terraform output` is called with no arguments [GH-2920] 435 * core: In plan output summary, count resource replacement as Add/Remove instead of Change [GH-3173] 436 * core: Add interpolation functions for base64 encoding and decoding. [GH-3325] 437 * core: Expose parallelism as a CLI option instead of a hard-coding the default of 10 [GH-3365] 438 * core: Add interpolation function `compact`, to remove empty elements from a list. [GH-3239], [GH-3479] 439 * core: Allow filtering of log output by level, using e.g. ``TF_LOG=INFO`` [GH-3380] 440 * provider/aws: Add `instance_initiated_shutdown_behavior` to AWS Instance [GH-2887] 441 * provider/aws: Support IAM role names (previously just ARNs) in `aws_ecs_service.iam_role` [GH-3061] 442 * provider/aws: Add update method to RDS Subnet groups, can modify subnets without recreating [GH-3053] 443 * provider/aws: Paginate notifications returned for ASG Notifications [GH-3043] 444 * provider/aws: Adds additional S3 Bucket Object inputs [GH-3265] 445 * provider/aws: add `ses_smtp_password` to `aws_iam_access_key` [GH-3165] 446 * provider/aws: read `iam_instance_profile` for `aws_instance` and save to state [GH-3167] 447 * provider/aws: allow `instance` to be computed in `aws_eip` [GH-3036] 448 * provider/aws: Add `versioning` option to `aws_s3_bucket` [GH-2942] 449 * provider/aws: Add `configuation_endpoint` to `aws_elasticache_cluster` [GH-3250] 450 * provider/aws: Add validation for `app_cookie_stickiness_policy.name` [GH-3277] 451 * provider/aws: Add validation for `db_parameter_group.name` [GH-3279] 452 * provider/aws: Set DynamoDB Table ARN after creation [GH-3500] 453 * provider/aws: `aws_s3_bucket_object` allows interpolated content to be set with new `content` attribute. [GH-3200] 454 * provider/aws: Allow tags for `aws_kinesis_stream` resource. [GH-3397] 455 * provider/aws: Configurable capacity waiting duration for ASGs [GH-3191] 456 * provider/aws: Allow non-persistent Spot Requests [GH-3311] 457 * provider/aws: Support tags for AWS DB subnet group [GH-3138] 458 * provider/cloudstack: Add `project` parameter to `cloudstack_vpc`, `cloudstack_network`, `cloudstack_ipaddress` and `cloudstack_disk` [GH-3035] 459 * provider/openstack: add functionality to attach FloatingIP to Port [GH-1788] 460 * provider/google: Can now do multi-region deployments without using multiple providers [GH-3258] 461 * remote/s3: Allow canned ACLs to be set on state objects. [GH-3233] 462 * remote/s3: Remote state is stored in S3 with `Content-Type: application/json` [GH-3385] 463 464 BUG FIXES: 465 466 * core: Fix problems referencing list attributes in interpolations [GH-2157] 467 * core: don't error on computed value during input walk [GH-2988] 468 * core: Ignore missing variables during destroy phase [GH-3393] 469 * provider/google: Crashes with interface conversion in GCE Instance Template [GH-3027] 470 * provider/google: Convert int to int64 when building the GKE cluster.NodeConfig struct [GH-2978] 471 * provider/google: google_compute_instance_template.network_interface.network should be a URL [GH-3226] 472 * provider/aws: Retry creation of `aws_ecs_service` if IAM policy isn't ready yet [GH-3061] 473 * provider/aws: Fix issue with mixed capitalization for RDS Instances [GH-3053] 474 * provider/aws: Fix issue with RDS to allow major version upgrades [GH-3053] 475 * provider/aws: Fix shard_count in `aws_kinesis_stream` [GH-2986] 476 * provider/aws: Fix issue with `key_name` and using VPCs with spot instance requests [GH-2954] 477 * provider/aws: Fix unresolvable diffs coming from `aws_elasticache_cluster` names being downcased 478 by AWS [GH-3120] 479 * provider/aws: Read instance source_dest_check and save to state [GH-3152] 480 * provider/aws: Allow `weight = 0` in Route53 records [GH-3196] 481 * provider/aws: Normalize aws_elasticache_cluster id to lowercase, allowing convergence. [GH-3235] 482 * provider/aws: Fix ValidateAccountId for IAM Instance Profiles [GH-3313] 483 * provider/aws: Update Security Group Rules to Version 2 [GH-3019] 484 * provider/aws: Migrate KeyPair to version 1, fixing issue with using `file()` [GH-3470] 485 * provider/aws: Fix force_delete on autoscaling groups [GH-3485] 486 * provider/aws: Fix crash with VPC Peering connections [GH-3490] 487 * provider/aws: fix bug with reading GSIs from dynamodb [GH-3300] 488 * provider/docker: Fix issue preventing private images from being referenced [GH-2619] 489 * provider/digitalocean: Fix issue causing unnecessary diffs based on droplet slugsize case [GH-3284] 490 * provider/openstack: add state 'downloading' to list of expected states in 491 `blockstorage_volume_v1` creation [GH-2866] 492 * provider/openstack: remove security groups (by name) before adding security 493 groups (by id) [GH-2008] 494 495 INTERNAL IMPROVEMENTS: 496 497 * core: Makefile target "plugin-dev" for building just one plugin. [GH-3229] 498 * helper/schema: Don't allow ``Update`` func if no attributes can actually be updated, per schema. [GH-3288] 499 * helper/schema: Default hashing function for sets [GH-3018] 500 * helper/multierror: Remove in favor of [github.com/hashicorp/go-multierror](http://github.com/hashicorp/go-multierror). [GH-3336] 501 502 ## 0.6.3 (August 11, 2015) 503 504 BUG FIXES: 505 506 * core: Skip all descendents after error, not just children; helps prevent confusing 507 additional errors/crashes after initial failure [GH-2963] 508 * core: fix deadlock possibility when both a module and a dependent resource are 509 removed in the same run [GH-2968] 510 * provider/aws: Fix issue with authenticating when using IAM profiles [GH-2959] 511 512 ## 0.6.2 (August 6, 2015) 513 514 FEATURES: 515 516 * **New resource: `google_compute_instance_group_manager`** [GH-2868] 517 * **New resource: `google_compute_autoscaler`** [GH-2868] 518 * **New resource: `aws_s3_bucket_object`** [GH-2898] 519 520 IMPROVEMENTS: 521 522 * core: Add resource IDs to errors coming from `apply`/`refresh` [GH-2815] 523 * provider/aws: Validate credentials before walking the graph [GH-2730] 524 * provider/aws: Added website_domain for S3 buckets [GH-2210] 525 * provider/aws: ELB names are now optional, and generated by Terraform if omitted [GH-2571] 526 * provider/aws: Downcase RDS engine names to prevent continuous diffs [GH-2745] 527 * provider/aws: Added `source_dest_check` attribute to the aws_network_interface [GH-2741] 528 * provider/aws: Clean up externally removed Launch Configurations [GH-2806] 529 * provider/aws: Allow configuration of the DynamoDB Endpoint [GH-2825] 530 * provider/aws: Compute private ip addresses of ENIs if they are not specified [GH-2743] 531 * provider/aws: Add `arn` attribute for DynamoDB tables [GH-2924] 532 * provider/aws: Fail silently when account validation fails while from instance profile [GH-3001] 533 * provider/azure: Allow `settings_file` to accept XML string [GH-2922] 534 * provider/azure: Provide a simpler error when using a Platform Image without a 535 Storage Service [GH-2861] 536 * provider/google: `account_file` is now expected to be JSON. Paths are still supported for 537 backwards compatibility. [GH-2839] 538 539 BUG FIXES: 540 541 * core: Prevent error duplication in `apply` [GH-2815] 542 * core: Fix crash when a provider validation adds a warning [GH-2878] 543 * provider/aws: Fix issue with toggling monitoring in AWS Instances [GH-2794] 544 * provider/aws: Fix issue with Spot Instance Requests and cancellation [GH-2805] 545 * provider/aws: Fix issue with checking for ElastiCache cluster cache node status [GH-2842] 546 * provider/aws: Fix issue when unable to find a Root Block Device name of an Instance Backed 547 AMI [GH-2646] 548 * provider/dnsimple: Domain and type should force new records [GH-2777] 549 * provider/aws: Fix issue with IAM Server Certificates and Chains [GH-2871] 550 * provider/aws: Fix issue with IAM Server Certificates when using `path` [GH-2871] 551 * provider/aws: Fix issue in Security Group Rules when the Security Group is not found [GH-2897] 552 * provider/aws: allow external ENI attachments [GH-2943] 553 * provider/aws: Fix issue with S3 Buckets, and throwing an error when not found [GH-2925] 554 555 ## 0.6.1 (July 20, 2015) 556 557 FEATURES: 558 559 * **New resource: `google_container_cluster`** [GH-2357] 560 * **New resource: `aws_vpc_endpoint`** [GH-2695] 561 562 IMPROVEMENTS: 563 564 * connection/ssh: Print SSH bastion host details to output [GH-2684] 565 * provider/aws: Create RDS databases from snapshots [GH-2062] 566 * provider/aws: Add support for restoring from Redis backup stored in S3 [GH-2634] 567 * provider/aws: Add `maintenance_window` to ElastiCache cluster [GH-2642] 568 * provider/aws: Availability Zones are optional when specifying VPC Zone Identifiers in 569 Auto Scaling Groups updates [GH-2724] 570 * provider/google: Add metadata_startup_script to google_compute_instance [GH-2375] 571 572 BUG FIXES: 573 574 * core: Don't prompt for variables with defaults [GH-2613] 575 * core: Return correct number of planned updates [GH-2620] 576 * core: Fix "provider not found" error that can occur while running 577 a destroy plan with grandchildren modules [GH-2755] 578 * core: Fix UUID showing up in diff for computed splat (`foo.*.bar`) 579 variables. [GH-2788] 580 * core: Orphan modules that contain no resources (only other modules) 581 are properly destroyed up to arbitrary depth [GH-2786] 582 * core: Fix "attribute not available" during destroy plans in 583 cases where the parameter is passed between modules [GH-2775] 584 * core: Record schema version when destroy fails [GH-2923] 585 * connection/ssh: fix issue on machines with an SSH Agent available 586 preventing `key_file` from being read without explicitly 587 setting `agent = false` [GH-2615] 588 * provider/aws: Allow uppercase characters in `aws_elb.name` [GH-2580] 589 * provider/aws: Allow underscores in `aws_db_subnet_group.name` (undocumented by AWS) [GH-2604] 590 * provider/aws: Allow dots in `aws_db_subnet_group.name` (undocumented by AWS) [GH-2665] 591 * provider/aws: Fix issue with pending Spot Instance requests [GH-2640] 592 * provider/aws: Fix issue in AWS Classic environment with referencing external 593 Security Groups [GH-2644] 594 * provider/aws: Bump internet gateway detach timeout [GH-2669] 595 * provider/aws: Fix issue with detecting differences in DB Parameters [GH-2728] 596 * provider/aws: `ecs_cluster` rename (recreation) and deletion is handled correctly [GH-2698] 597 * provider/aws: `aws_route_table` ignores routes generated for VPC endpoints [GH-2695] 598 * provider/aws: Fix issue with Launch Configurations and enable_monitoring [GH-2735] 599 * provider/openstack: allow empty api_key and endpoint_type [GH-2626] 600 * provisioner/chef: Fix permission denied error with ohai hints [GH-2781] 601 602 ## 0.6.0 (June 30, 2015) 603 604 BACKWARDS INCOMPATIBILITIES: 605 606 * command/push: If a variable is already set within Atlas, it won't be 607 updated unless the `-overwrite` flag is present [GH-2373] 608 * connection/ssh: The `agent` field now defaults to `true` if 609 the `SSH_AGENT_SOCK` environment variable is present. In other words, 610 `ssh-agent` support is now opt-out instead of opt-in functionality. [GH-2408] 611 * provider/aws: If you were setting access and secret key to blank ("") 612 to force Terraform to load credentials from another source such as the 613 EC2 role, this will now error. Remove the blank lines and Terraform 614 will load from other sources. 615 * `concat()` has been repurposed to combine lists instead of strings (old behavior 616 of joining strings is maintained in this version but is deprecated, strings 617 should be combined using interpolation syntax, like "${var.foo}{var.bar}") 618 [GH-1790] 619 620 FEATURES: 621 622 * **New provider: `azure`** [GH-2052, GH-2053, GH-2372, GH-2380, GH-2394, GH-2515, GH-2530, GH-2562] 623 * **New resource: `aws_autoscaling_notification`** [GH-2197] 624 * **New resource: `aws_autoscaling_policy`** [GH-2201] 625 * **New resource: `aws_cloudwatch_metric_alarm`** [GH-2201] 626 * **New resource: `aws_dynamodb_table`** [GH-2121] 627 * **New resource: `aws_ecs_cluster`** [GH-1803] 628 * **New resource: `aws_ecs_service`** [GH-1803] 629 * **New resource: `aws_ecs_task_definition`** [GH-1803, GH-2402] 630 * **New resource: `aws_elasticache_parameter_group`** [GH-2276] 631 * **New resource: `aws_flow_log`** [GH-2384] 632 * **New resource: `aws_iam_group_association`** [GH-2273] 633 * **New resource: `aws_iam_policy_attachment`** [GH-2395] 634 * **New resource: `aws_lambda_function`** [GH-2170] 635 * **New resource: `aws_route53_delegation_set`** [GH-1999] 636 * **New resource: `aws_route53_health_check`** [GH-2226] 637 * **New resource: `aws_spot_instance_request`** [GH-2263] 638 * **New resource: `cloudstack_ssh_keypair`** [GH-2004] 639 * **New remote state backend: `swift`**: You can now store remote state in 640 a OpenStack Swift. [GH-2254] 641 * command/output: support display of module outputs [GH-2102] 642 * core: `keys()` and `values()` funcs for map variables [GH-2198] 643 * connection/ssh: SSH bastion host support and ssh-agent forwarding [GH-2425] 644 645 IMPROVEMENTS: 646 647 * core: HTTP remote state now accepts `skip_cert_verification` 648 option to ignore TLS cert verification. [GH-2214] 649 * core: S3 remote state now accepts the 'encrypt' option for SSE [GH-2405] 650 * core: `plan` now reports sum of resources to be changed/created/destroyed [GH-2458] 651 * core: Change string list representation so we can distinguish empty, single 652 element lists [GH-2504] 653 * core: Properly close provider and provisioner plugin connections [GH-2406, GH-2527] 654 * provider/aws: AutoScaling groups now support updating Load Balancers without 655 recreation [GH-2472] 656 * provider/aws: Allow more in-place updates for ElastiCache cluster without recreating 657 [GH-2469] 658 * provider/aws: ElastiCache Subnet Groups can be updated 659 without destroying first [GH-2191] 660 * provider/aws: Normalize `certificate_chain` in `aws_iam_server_certificate` to 661 prevent unnecessary replacement. [GH-2411] 662 * provider/aws: `aws_instance` supports `monitoring' [GH-2489] 663 * provider/aws: `aws_launch_configuration` now supports `enable_monitoring` [GH-2410] 664 * provider/aws: Show outputs after `terraform refresh` [GH-2347] 665 * provider/aws: Add backoff/throttling during DynamoDB creation [GH-2462] 666 * provider/aws: Add validation for aws_vpc.cidr_block [GH-2514] 667 * provider/aws: Add validation for aws_db_subnet_group.name [GH-2513] 668 * provider/aws: Add validation for aws_db_instance.identifier [GH-2516] 669 * provider/aws: Add validation for aws_elb.name [GH-2517] 670 * provider/aws: Add validation for aws_security_group (name+description) [GH-2518] 671 * provider/aws: Add validation for aws_launch_configuration [GH-2519] 672 * provider/aws: Add validation for aws_autoscaling_group.name [GH-2520] 673 * provider/aws: Add validation for aws_iam_role.name [GH-2521] 674 * provider/aws: Add validation for aws_iam_role_policy.name [GH-2552] 675 * provider/aws: Add validation for aws_iam_instance_profile.name [GH-2553] 676 * provider/aws: aws_auto_scaling_group.default_cooldown no longer requires 677 resource replacement [GH-2510] 678 * provider/aws: add AH and ESP protocol integers [GH-2321] 679 * provider/docker: `docker_container` has the `privileged` 680 option. [GH-2227] 681 * provider/openstack: allow `OS_AUTH_TOKEN` environment variable 682 to set the openstack `api_key` field [GH-2234] 683 * provider/openstack: Can now configure endpoint type (public, admin, 684 internal) [GH-2262] 685 * provider/cloudstack: `cloudstack_instance` now supports projects [GH-2115] 686 * provisioner/chef: Added a `os_type` to specifically specify the target OS [GH-2483] 687 * provisioner/chef: Added a `ohai_hints` option to upload hint files [GH-2487] 688 689 BUG FIXES: 690 691 * core: lifecycle `prevent_destroy` can be any value that can be 692 coerced into a bool [GH-2268] 693 * core: matching provider types in sibling modules won't override 694 each other's config. [GH-2464] 695 * core: computed provider configurations now properly validate [GH-2457] 696 * core: orphan (commented out) resource dependencies are destroyed in 697 the correct order [GH-2453] 698 * core: validate object types in plugins are actually objects [GH-2450] 699 * core: fix `-no-color` flag in subcommands [GH-2414] 700 * core: Fix error of 'attribute not found for variable' when a computed 701 resource attribute is used as a parameter to a module [GH-2477] 702 * core: moduled orphans will properly inherit provider configs [GH-2476] 703 * core: modules with provider aliases work properly if the parent 704 doesn't implement those aliases [GH-2475] 705 * core: unknown resource attributes passed in as parameters to modules 706 now error [GH-2478] 707 * core: better error messages for missing variables [GH-2479] 708 * core: removed set items now properly appear in diffs and applies [GH-2507] 709 * core: '*' will not be added as part of the variable name when you 710 attempt multiplication without a space [GH-2505] 711 * core: fix target dependency calculation across module boundaries [GH-2555] 712 * command/*: fixed bug where variable input was not asked for unset 713 vars if terraform.tfvars existed [GH-2502] 714 * command/apply: prevent output duplication when reporting errors [GH-2267] 715 * command/apply: destroyed orphan resources are properly counted [GH-2506] 716 * provider/aws: loading credentials from the environment (vars, EC2 role, 717 etc.) is more robust and will not ask for credentials from stdin [GH-1841] 718 * provider/aws: fix panic when route has no `cidr_block` [GH-2215] 719 * provider/aws: fix issue preventing destruction of IAM Roles [GH-2177] 720 * provider/aws: fix issue where Security Group Rules could collide and fail 721 to save to the state file correctly [GH-2376] 722 * provider/aws: fix issue preventing destruction self referencing Securtity 723 Group Rules [GH-2305] 724 * provider/aws: fix issue causing perpetual diff on ELB listeners 725 when non-lowercase protocol strings were used [GH-2246] 726 * provider/aws: corrected frankfurt S3 website region [GH-2259] 727 * provider/aws: `aws_elasticache_cluster` port is required [GH-2160] 728 * provider/aws: Handle AMIs where RootBlockDevice does not appear in the 729 BlockDeviceMapping, preventing root_block_device from working [GH-2271] 730 * provider/aws: fix `terraform show` with remote state [GH-2371] 731 * provider/aws: detect `instance_type` drift on `aws_instance` [GH-2374] 732 * provider/aws: fix crash when `security_group_rule` referenced non-existent 733 security group [GH-2434] 734 * provider/aws: `aws_launch_configuration` retries if IAM instance 735 profile is not ready yet. [GH-2452] 736 * provider/aws: `fqdn` is populated during creation for `aws_route53_record` [GH-2528] 737 * provider/aws: retry VPC delete on DependencyViolation due to eventual 738 consistency [GH-2532] 739 * provider/aws: VPC peering connections in "failed" state are deleted [GH-2544] 740 * provider/aws: EIP deletion works if it was manually disassociated [GH-2543] 741 * provider/aws: `elasticache_subnet_group.subnet_ids` is now a required argument [GH-2534] 742 * provider/aws: handle nil response from VPN connection describes [GH-2533] 743 * provider/cloudflare: manual record deletion doesn't cause error [GH-2545] 744 * provider/digitalocean: handle case where droplet is deleted outside of 745 terraform [GH-2497] 746 * provider/dme: No longer an error if record deleted manually [GH-2546] 747 * provider/docker: Fix issues when using containers with links [GH-2327] 748 * provider/openstack: fix panic case if API returns nil network [GH-2448] 749 * provider/template: fix issue causing "unknown variable" rendering errors 750 when an existing set of template variables is changed [GH-2386] 751 * provisioner/chef: improve the decoding logic to prevent parameter not found errors [GH-2206] 752 753 ## 0.5.3 (June 1, 2015) 754 755 IMPROVEMENTS: 756 757 * **New resource: `aws_kinesis_stream`** [GH-2110] 758 * **New resource: `aws_iam_server_certificate`** [GH-2086] 759 * **New resource: `aws_sqs_queue`** [GH-1939] 760 * **New resource: `aws_sns_topic`** [GH-1974] 761 * **New resource: `aws_sns_topic_subscription`** [GH-1974] 762 * **New resource: `aws_volume_attachment`** [GH-2050] 763 * **New resource: `google_storage_bucket`** [GH-2060] 764 * provider/aws: support ec2 termination protection [GH-1988] 765 * provider/aws: support for RDS Read Replicas [GH-1946] 766 * provider/aws: `aws_s3_bucket` add support for `policy` [GH-1992] 767 * provider/aws: `aws_ebs_volume` add support for `tags` [GH-2135] 768 * provider/aws: `aws_elasticache_cluster` Confirm node status before reporting 769 available 770 * provider/aws: `aws_network_acl` Add support for ICMP Protocol [GH-2148] 771 * provider/aws: New `force_destroy` parameter for S3 buckets, to destroy 772 Buckets that contain objects [GH-2007] 773 * provider/aws: switching `health_check_type` on ASGs no longer requires 774 resource refresh [GH-2147] 775 * provider/aws: ignore empty `vpc_security_group_ids` on `aws_instance` [GH-2311] 776 777 BUG FIXES: 778 779 * provider/aws: Correctly handle AWS keypairs which no longer exist [GH-2032] 780 * provider/aws: Fix issue with restoring an Instance from snapshot ID [GH-2120] 781 * provider/template: store relative path in the state [GH-2038] 782 * provisioner/chef: fix interpolation in the Chef provisioner [GH-2168] 783 * provisioner/remote-exec: Don't prepend shebang on scripts that already 784 have one [GH-2041] 785 786 ## 0.5.2 (May 15, 2015) 787 788 FEATURES: 789 790 * **Chef provisioning**: You can now provision new hosts (both Linux and 791 Windows) with [Chef](https://chef.io) using a native provisioner [GH-1868] 792 793 IMPROVEMENTS: 794 795 * **New config function: `formatlist`** - Format lists in a similar way to `format`. 796 Useful for creating URLs from a list of IPs. [GH-1829] 797 * **New resource: `aws_route53_zone_association`** 798 * provider/aws: `aws_autoscaling_group` can wait for capacity in ELB 799 via `min_elb_capacity` [GH-1970] 800 * provider/aws: `aws_db_instances` supports `license_model` [GH-1966] 801 * provider/aws: `aws_elasticache_cluster` add support for Tags [GH-1965] 802 * provider/aws: `aws_network_acl` Network ACLs can be applied to multiple subnets [GH-1931] 803 * provider/aws: `aws_s3_bucket` exports `hosted_zone_id` and `region` [GH-1865] 804 * provider/aws: `aws_s3_bucket` add support for website `redirect_all_requests_to` [GH-1909] 805 * provider/aws: `aws_route53_record` exports `fqdn` [GH-1847] 806 * provider/aws: `aws_route53_zone` can create private hosted zones [GH-1526] 807 * provider/google: `google_compute_instance` `scratch` attribute added [GH-1920] 808 809 BUG FIXES: 810 811 * core: fix "resource not found" for interpolation issues with modules 812 * core: fix unflattenable error for orphans [GH-1922] 813 * core: fix deadlock with create-before-destroy + modules [GH-1949] 814 * core: fix "no roots found" error with create-before-destroy [GH-1953] 815 * core: variables set with environment variables won't validate as 816 not set without a default [GH-1930] 817 * core: resources with a blank ID in the state are now assumed to not exist [GH-1905] 818 * command/push: local vars override remote ones [GH-1881] 819 * provider/aws: Mark `aws_security_group` description as `ForceNew` [GH-1871] 820 * provider/aws: `aws_db_instance` ARN value is correct [GH-1910] 821 * provider/aws: `aws_db_instance` only submit modify request if there 822 is a change. [GH-1906] 823 * provider/aws: `aws_elasticache_cluster` export missing information on cluster nodes [GH-1965] 824 * provider/aws: bad AMI on a launch configuration won't block refresh [GH-1901] 825 * provider/aws: `aws_security_group` + `aws_subnet` - destroy timeout increased 826 to prevent DependencyViolation errors. [GH-1886] 827 * provider/google: `google_compute_instance` Local SSDs no-longer cause crash 828 [GH-1088] 829 * provider/google: `google_http_health_check` Defaults now driven from Terraform, 830 avoids errors on update [GH-1894] 831 * provider/google: `google_compute_template` Update Instance Template network 832 definition to match changes to Instance [GH-980] 833 * provider/template: Fix infinite diff [GH-1898] 834 835 ## 0.5.1 (never released) 836 837 This version was never released since we accidentally skipped it! 838 839 ## 0.5.0 (May 7, 2015) 840 841 BACKWARDS INCOMPATIBILITIES: 842 843 * provider/aws: Terraform now remove the default egress rule created by AWS in 844 a new security group. 845 846 FEATURES: 847 848 * **Multi-provider (a.k.a multi-region)**: Multiple instances of a single 849 provider can be configured so resources can apply to different settings. 850 As an example, this allows Terraform to manage multiple regions with AWS. 851 * **Environmental variables to set variables**: Environment variables can be 852 used to set variables. The environment variables must be in the format 853 `TF_VAR_name` and this will be checked last for a value. 854 * **New remote state backend: `s3`**: You can now store remote state in 855 an S3 bucket. [GH-1723] 856 * **Automatic AWS retries**: This release includes a lot of improvement 857 around automatic retries of transient errors in AWS. The number of 858 retry attempts is also configurable. 859 * **Templates**: A new `template_file` resource allows long strings needing 860 variable interpolation to be moved into files. [GH-1778] 861 * **Provision with WinRM**: Provisioners can now run remote commands on 862 Windows hosts. [GH-1483] 863 864 IMPROVEMENTS: 865 866 * **New config function: `length`** - Get the length of a string or a list. 867 Useful in conjunction with `split`. [GH-1495] 868 * **New resource: `aws_app_cookie_stickiness_policy`** 869 * **New resource: `aws_customer_gateway`** 870 * **New resource: `aws_ebs_volume`** 871 * **New resource: `aws_elasticache_cluster`** 872 * **New resource: `aws_elasticache_security_group`** 873 * **New resource: `aws_elasticache_subnet_group`** 874 * **New resource: `aws_iam_access_key`** 875 * **New resource: `aws_iam_group_policy`** 876 * **New resource: `aws_iam_group`** 877 * **New resource: `aws_iam_instance_profile`** 878 * **New resource: `aws_iam_policy`** 879 * **New resource: `aws_iam_role_policy`** 880 * **New resource: `aws_iam_role`** 881 * **New resource: `aws_iam_user_policy`** 882 * **New resource: `aws_iam_user`** 883 * **New resource: `aws_lb_cookie_stickiness_policy`** 884 * **New resource: `aws_proxy_protocol_policy`** 885 * **New resource: `aws_security_group_rule`** 886 * **New resource: `aws_vpc_dhcp_options_association`** 887 * **New resource: `aws_vpc_dhcp_options`** 888 * **New resource: `aws_vpn_connection_route`** 889 * **New resource: `google_dns_managed_zone`** 890 * **New resource: `google_dns_record_set`** 891 * **Migrate to upstream AWS SDK:** Migrate the AWS provider to 892 [awslabs/aws-sdk-go](https://github.com/awslabs/aws-sdk-go), 893 the official `awslabs` library. Previously we had forked the library for 894 stability while `awslabs` refactored. Now that work has completed, and we've 895 migrated back to the upstream version. 896 * core: Improve error message on diff mismatch [GH-1501] 897 * provisioner/file: expand `~` in source path [GH-1569] 898 * provider/aws: Better retry logic, now retries up to 11 times by default 899 with exponentional backoff. This number is configurable. [GH-1787] 900 * provider/aws: Improved credential detection [GH-1470] 901 * provider/aws: Can specify a `token` via the config file [GH-1601] 902 * provider/aws: Added new `vpc_security_group_ids` attribute for AWS 903 Instances. If using a VPC, you can now modify the security groups for that 904 Instance without destroying it [GH-1539] 905 * provider/aws: White or blacklist account IDs that can be used to 906 protect against accidents. [GH-1595] 907 * provider/aws: Add a subset of IAM resources [GH-939] 908 * provider/aws: `aws_autoscaling_group` retries deletes through "in progress" 909 errors [GH-1840] 910 * provider/aws: `aws_autoscaling_group` waits for healthy capacity during 911 ASG creation [GH-1839] 912 * provider/aws: `aws_instance` supports placement groups [GH-1358] 913 * provider/aws: `aws_eip` supports network interface attachment [GH-1681] 914 * provider/aws: `aws_elb` supports in-place changing of listeners [GH-1619] 915 * provider/aws: `aws_elb` supports connection draining settings [GH-1502] 916 * provider/aws: `aws_elb` increase default idle timeout to 60s [GH-1646] 917 * provider/aws: `aws_key_pair` name can be omitted and generated [GH-1751] 918 * provider/aws: `aws_network_acl` improved validation for network ACL ports 919 and protocols [GH-1798] [GH-1808] 920 * provider/aws: `aws_route_table` can target network interfaces [GH-968] 921 * provider/aws: `aws_route_table` can specify propagating VGWs [GH-1516] 922 * provider/aws: `aws_route53_record` supports weighted sets [GH-1578] 923 * provider/aws: `aws_route53_zone` exports nameservers [GH-1525] 924 * provider/aws: `aws_s3_bucket` website support [GH-1738] 925 * provider/aws: `aws_security_group` name becomes optional and can be 926 automatically set to a unique identifier; this helps with 927 `create_before_destroy` scenarios [GH-1632] 928 * provider/aws: `aws_security_group` description becomes optional with a 929 static default value [GH-1632] 930 * provider/aws: automatically set the private IP as the SSH address 931 if not specified and no public IP is available [GH-1623] 932 * provider/aws: `aws_elb` exports `source_security_group` field [GH-1708] 933 * provider/aws: `aws_route53_record` supports alias targeting [GH-1775] 934 * provider/aws: Remove default AWS egress rule for newly created Security Groups [GH-1765] 935 * provider/consul: add `scheme` configuration argument [GH-1838] 936 * provider/docker: `docker_container` can specify links [GH-1564] 937 * provider/google: `resource_compute_disk` supports snapshots [GH-1426] 938 * provider/google: `resource_compute_instance` supports specifying the 939 device name [GH-1426] 940 * provider/openstack: Floating IP support for LBaaS [GH-1550] 941 * provider/openstack: Add AZ to `openstack_blockstorage_volume_v1` [GH-1726] 942 943 BUG FIXES: 944 945 * core: Fix graph cycle issues surrounding modules [GH-1582] [GH-1637] 946 * core: math on arbitrary variables works if first operand isn't a 947 numeric primitive. [GH-1381] 948 * core: avoid unnecessary cycles by pruning tainted destroys from 949 graph if there are no tainted resources [GH-1475] 950 * core: fix issue where destroy nodes weren't pruned in specific 951 edge cases around matching prefixes, which could cause cycles [GH-1527] 952 * core: fix issue causing diff mismatch errors in certain scenarios during 953 resource replacement [GH-1515] 954 * core: dependencies on resources with a different index work when 955 count > 1 [GH-1540] 956 * core: don't panic if variable default type is invalid [GH-1344] 957 * core: fix perpetual diff issue for computed maps that are empty [GH-1607] 958 * core: validation added to check for `self` variables in modules [GH-1609] 959 * core: fix edge case where validation didn't pick up unknown fields 960 if the value was computed [GH-1507] 961 * core: Fix issue where values in sets on resources couldn't contain 962 hyphens. [GH-1641] 963 * core: Outputs removed from the config are removed from the state [GH-1714] 964 * core: Validate against the worst-case graph during plan phase to catch cycles 965 that would previously only show up during apply [GH-1655] 966 * core: Referencing invalid module output in module validates [GH-1448] 967 * command: remote states with uppercase types work [GH-1356] 968 * provider/aws: Support `AWS_SECURITY_TOKEN` env var again [GH-1785] 969 * provider/aws: Don't save "instance" for EIP if association fails [GH-1776] 970 * provider/aws: launch configuration ID set after create success [GH-1518] 971 * provider/aws: Fixed an issue with creating ELBs without any tags [GH-1580] 972 * provider/aws: Fix issue in Security Groups with empty IPRanges [GH-1612] 973 * provider/aws: manually deleted S3 buckets are refreshed properly [GH-1574] 974 * provider/aws: only check for EIP allocation ID in VPC [GH-1555] 975 * provider/aws: raw protocol numbers work in `aws_network_acl` [GH-1435] 976 * provider/aws: Block devices can be encrypted [GH-1718] 977 * provider/aws: ASG health check grace period can be updated in-place [GH-1682] 978 * provider/aws: ELB security groups can be updated in-place [GH-1662] 979 * provider/aws: `aws_main_route_table_association` can be deleted 980 manually [GH-1806] 981 * provider/docker: image can reference more complex image addresses, 982 such as with private repos with ports [GH-1818] 983 * provider/openstack: region config is not required [GH-1441] 984 * provider/openstack: `enable_dhcp` for networking subnet should be bool [GH-1741] 985 * provisioner/remote-exec: add random number to uploaded script path so 986 that parallel provisions work [GH-1588] 987 * provisioner/remote-exec: chmod the script to 0755 properly [GH-1796] 988 989 ## 0.4.2 (April 10, 2015) 990 991 BUG FIXES: 992 993 * core: refresh won't remove outputs from state file [GH-1369] 994 * core: clarify "unknown variable" error [GH-1480] 995 * core: properly merge parent provider configs when asking for input 996 * provider/aws: fix panic possibility if RDS DB name is empty [GH-1460] 997 * provider/aws: fix issue detecting credentials for some resources [GH-1470] 998 * provider/google: fix issue causing unresolvable diffs when using legacy 999 `network` field on `google_compute_instance` [GH-1458] 1000 1001 ## 0.4.1 (April 9, 2015) 1002 1003 IMPROVEMENTS: 1004 1005 * provider/aws: Route 53 records can now update `ttl` and `records` attributes 1006 without destroying/creating the record [GH-1396] 1007 * provider/aws: Support changing additional attributes of RDS databases 1008 without forcing a new resource [GH-1382] 1009 1010 BUG FIXES: 1011 1012 * core: module paths in ".terraform" are consistent across different 1013 systems so copying your ".terraform" folder works. [GH-1418] 1014 * core: don't validate providers too early when nested in a module [GH-1380] 1015 * core: fix race condition in `count.index` interpolation [GH-1454] 1016 * core: properly initialize provisioners, fixing resource targeting 1017 during destroy [GH-1544] 1018 * command/push: don't ask for input if terraform.tfvars is present 1019 * command/remote-config: remove spurrious error "nil" when initializing 1020 remote state on a new configuration. [GH-1392] 1021 * provider/aws: Fix issue with Route 53 and pre-existing Hosted Zones [GH-1415] 1022 * provider/aws: Fix refresh issue in Route 53 hosted zone [GH-1384] 1023 * provider/aws: Fix issue when changing map-public-ip in Subnets #1234 1024 * provider/aws: Fix issue finding db subnets [GH-1377] 1025 * provider/aws: Fix issues with `*_block_device` attributes on instances and 1026 launch configs creating unresolvable diffs when certain optional 1027 parameters were omitted from the config [GH-1445] 1028 * provider/aws: Fix issue with `aws_launch_configuration` causing an 1029 unnecessary diff for pre-0.4 environments [GH-1371] 1030 * provider/aws: Fix several related issues with `aws_launch_configuration` 1031 causing unresolvable diffs [GH-1444] 1032 * provider/aws: Fix issue preventing launch configurations from being valid 1033 in EC2 Classic [GH-1412] 1034 * provider/aws: Fix issue in updating Route 53 records on refresh/read. [GH-1430] 1035 * provider/docker: Don't ask for `cert_path` input on every run [GH-1432] 1036 * provider/google: Fix issue causing unresolvable diff on instances with 1037 `network_interface` [GH-1427] 1038 1039 ## 0.4.0 (April 2, 2015) 1040 1041 BACKWARDS INCOMPATIBILITIES: 1042 1043 * Commands `terraform push` and `terraform pull` are now nested under 1044 the `remote` command: `terraform remote push` and `terraform remote pull`. 1045 The old `remote` functionality is now at `terraform remote config`. This 1046 consolidates all remote state management under one command. 1047 * Period-prefixed configuration files are now ignored. This might break 1048 existing Terraform configurations if you had period-prefixed files. 1049 * The `block_device` attribute of `aws_instance` has been removed in favor 1050 of three more specific attributes to specify block device mappings: 1051 `root_block_device`, `ebs_block_device`, and `ephemeral_block_device`. 1052 Configurations using the old attribute will generate a validation error 1053 indicating that they must be updated to use the new fields [GH-1045]. 1054 1055 FEATURES: 1056 1057 * **New provider: `dme` (DNSMadeEasy)** [GH-855] 1058 * **New provider: `docker` (Docker)** - Manage container lifecycle 1059 using the standard Docker API. [GH-855] 1060 * **New provider: `openstack` (OpenStack)** - Interact with the many resources 1061 provided by OpenStack. [GH-924] 1062 * **New feature: `terraform_remote_state` resource** - Reference remote 1063 states from other Terraform runs to use Terraform outputs as inputs 1064 into another Terraform run. 1065 * **New command: `taint`** - Manually mark a resource as tainted, causing 1066 a destroy and recreate on the next plan/apply. 1067 * **New resource: `aws_vpn_gateway`** [GH-1137] 1068 * **New resource: `aws_elastic_network_interfaces`** [GH-1149] 1069 * **Self-variables** can be used to reference the current resource's 1070 attributes within a provisioner. Ex. `${self.private_ip_address}` [GH-1033] 1071 * **Continuous state** saving during `terraform apply`. The state file is 1072 continuously updated as apply is running, meaning that the state is 1073 less likely to become corrupt in a catastrophic case: terraform panic 1074 or system killing Terraform. 1075 * **Math operations** in interpolations. You can now do things like 1076 `${count.index + 1}`. [GH-1068] 1077 * **New AWS SDK:** Move to `aws-sdk-go` (hashicorp/aws-sdk-go), 1078 a fork of the official `awslabs` repo. We forked for stability while 1079 `awslabs` refactored the library, and will move back to the officially 1080 supported version in the next release. 1081 1082 IMPROVEMENTS: 1083 1084 * **New config function: `format`** - Format a string using `sprintf` 1085 format. [GH-1096] 1086 * **New config function: `replace`** - Search and replace string values. 1087 Search can be a regular expression. See documentation for more 1088 info. [GH-1029] 1089 * **New config function: `split`** - Split a value based on a delimiter. 1090 This is useful for faking lists as parameters to modules. 1091 * **New resource: `digitalocean_ssh_key`** [GH-1074] 1092 * config: Expand `~` with homedir in `file()` paths [GH-1338] 1093 * core: The serial of the state is only updated if there is an actual 1094 change. This will lower the amount of state changing on things 1095 like refresh. 1096 * core: Autoload `terraform.tfvars.json` as well as `terraform.tfvars` [GH-1030] 1097 * core: `.tf` files that start with a period are now ignored. [GH-1227] 1098 * command/remote-config: After enabling remote state, a `pull` is 1099 automatically done initially. 1100 * providers/google: Add `size` option to disk blocks for instances. [GH-1284] 1101 * providers/aws: Improve support for tagging resources. 1102 * providers/aws: Add a short syntax for Route 53 Record names, e.g. 1103 `www` instead of `www.example.com`. 1104 * providers/aws: Improve dependency violation error handling, when deleting 1105 Internet Gateways or Auto Scaling groups [GH-1325]. 1106 * provider/aws: Add non-destructive updates to AWS RDS. You can now upgrade 1107 `engine_version`, `parameter_group_name`, and `multi_az` without forcing 1108 a new database to be created.[GH-1341] 1109 * providers/aws: Full support for block device mappings on instances and 1110 launch configurations [GH-1045, GH-1364] 1111 * provisioners/remote-exec: SSH agent support. [GH-1208] 1112 1113 BUG FIXES: 1114 1115 * core: module outputs can be used as inputs to other modules [GH-822] 1116 * core: Self-referencing splat variables are no longer allowed in 1117 provisioners. [GH-795][GH-868] 1118 * core: Validate that `depends_on` doesn't contain interpolations. [GH-1015] 1119 * core: Module inputs can be non-strings. [GH-819] 1120 * core: Fix invalid plan that resulted in "diffs don't match" error when 1121 a computed attribute was used as part of a set parameter. [GH-1073] 1122 * core: Fix edge case where state containing both "resource" and 1123 "resource.0" would ignore the latter completely. [GH-1086] 1124 * core: Modules with a source of a relative file path moving up 1125 directories work properly, i.e. "../a" [GH-1232] 1126 * providers/aws: manually deleted VPC removes it from the state 1127 * providers/aws: `source_dest_check` regression fixed (now works). [GH-1020] 1128 * providers/aws: Longer wait times for DB instances. 1129 * providers/aws: Longer wait times for route53 records (30 mins). [GH-1164] 1130 * providers/aws: Fix support for TXT records in Route 53. [GH-1213] 1131 * providers/aws: Fix support for wildcard records in Route 53. [GH-1222] 1132 * providers/aws: Fix issue with ignoring the 'self' attribute of a 1133 Security Group rule. [GH-1223] 1134 * providers/aws: Fix issue with `sql_mode` in RDS parameter group always 1135 causing an update. [GH-1225] 1136 * providers/aws: Fix dependency violation with subnets and security groups 1137 [GH-1252] 1138 * providers/aws: Fix issue with refreshing `db_subnet_groups` causing an error 1139 instead of updating state [GH-1254] 1140 * providers/aws: Prevent empty string to be used as default 1141 `health_check_type` [GH-1052] 1142 * providers/aws: Add tags on AWS IG creation, not just on update [GH-1176] 1143 * providers/digitalocean: Waits until droplet is ready to be destroyed [GH-1057] 1144 * providers/digitalocean: More lenient about 404's while waiting [GH-1062] 1145 * providers/digitalocean: FQDN for domain records in CNAME, MX, NS, etc. 1146 Also fixes invalid updates in plans. [GH-863] 1147 * providers/google: Network data in state was not being stored. [GH-1095] 1148 * providers/heroku: Fix panic when config vars block was empty. [GH-1211] 1149 1150 PLUGIN CHANGES: 1151 1152 * New `helper/schema` fields for resources: `Deprecated` and `Removed` allow 1153 plugins to generate warning or error messages when a given attribute is used. 1154 1155 ## 0.3.7 (February 19, 2015) 1156 1157 IMPROVEMENTS: 1158 1159 * **New resources: `google_compute_forwarding_rule`, `google_compute_http_health_check`, 1160 and `google_compute_target_pool`** - Together these provide network-level 1161 load balancing. [GH-588] 1162 * **New resource: `aws_main_route_table_association`** - Manage the main routing table 1163 of a VPC. [GH-918] 1164 * **New resource: `aws_vpc_peering_connection`** [GH-963] 1165 * core: Formalized the syntax of interpolations and documented it 1166 very heavily. 1167 * core: Strings in interpolations can now contain further interpolations, 1168 e.g.: `foo ${bar("${baz}")}`. 1169 * provider/aws: Internet gateway supports tags [GH-720] 1170 * provider/aws: Support the more standard environmental variable names 1171 for access key and secret keys. [GH-851] 1172 * provider/aws: The `aws_db_instance` resource no longer requires both 1173 `final_snapshot_identifier` and `skip_final_snapshot`; the presence or 1174 absence of the former now implies the latter. [GH-874] 1175 * provider/aws: Avoid unnecessary update of `aws_subnet` when 1176 `map_public_ip_on_launch` is not specified in config. [GH-898] 1177 * provider/aws: Add `apply_method` to `aws_db_parameter_group` [GH-897] 1178 * provider/aws: Add `storage_type` to `aws_db_instance` [GH-896] 1179 * provider/aws: ELB can update listeners without requiring new. [GH-721] 1180 * provider/aws: Security group support egress rules. [GH-856] 1181 * provider/aws: Route table supports VPC peering connection on route. [GH-963] 1182 * provider/aws: Add `root_block_device` to `aws_db_instance` [GH-998] 1183 * provider/google: Remove "client secrets file", as it's no longer necessary 1184 for API authentication [GH-884]. 1185 * provider/google: Expose `self_link` on `google_compute_instance` [GH-906] 1186 1187 BUG FIXES: 1188 1189 * core: Fixing use of remote state with plan files. [GH-741] 1190 * core: Fix a panic case when certain invalid types were used in 1191 the configuration. [GH-691] 1192 * core: Escape characters `\"`, `\n`, and `\\` now work in interpolations. 1193 * core: Fix crash that could occur when there are exactly zero providers 1194 installed on a system. [GH-786] 1195 * core: JSON TF configurations can configure provisioners. [GH-807] 1196 * core: Sort `depends_on` in state to prevent unnecessary file changes. [GH-928] 1197 * core: State containing the zero value won't cause a diff with the 1198 lack of a value. [GH-952] 1199 * core: If a set type becomes empty, the state will be properly updated 1200 to remove it. [GH-952] 1201 * core: Bare "splat" variables are not allowed in provisioners. [GH-636] 1202 * core: Invalid configuration keys to sub-resources are now errors. [GH-740] 1203 * command/apply: Won't try to initialize modules in some cases when 1204 no arguments are given. [GH-780] 1205 * command/apply: Fix regression where user variables weren't asked [GH-736] 1206 * helper/hashcode: Update `hash.String()` to always return a positive index. 1207 Fixes issue where specific strings would convert to a negative index 1208 and be omitted when creating Route53 records. [GH-967] 1209 * provider/aws: Automatically suffix the Route53 zone name on record names. [GH-312] 1210 * provider/aws: Instance should ignore root EBS devices. [GH-877] 1211 * provider/aws: Fix `aws_db_instance` to not recreate each time. [GH-874] 1212 * provider/aws: ASG termination policies are synced with remote state. [GH-923] 1213 * provider/aws: ASG launch configuration setting can now be updated in-place. [GH-904] 1214 * provider/aws: No read error when subnet is manually deleted. [GH-889] 1215 * provider/aws: Tags with empty values (empty string) are properly 1216 managed. [GH-968] 1217 * provider/aws: Fix case where route table would delete its routes 1218 on an unrelated change. [GH-990] 1219 * provider/google: Fix bug preventing instances with metadata from being 1220 created [GH-884]. 1221 1222 PLUGIN CHANGES: 1223 1224 * New `helper/schema` type: `TypeFloat` [GH-594] 1225 * New `helper/schema` field for resources: `Exists` must point to a function 1226 to check for the existence of a resource. This is used to properly 1227 handle the case where the resource was manually deleted. [GH-766] 1228 * There is a semantic change in `GetOk` where it will return `true` if 1229 there is any value in the diff that is _non-zero_. Before, it would 1230 return true only if there was a value in the diff. 1231 1232 ## 0.3.6 (January 6, 2015) 1233 1234 FEATURES: 1235 1236 * **New provider: `cloudstack`** 1237 1238 IMPROVEMENTS: 1239 1240 * **New resource: `aws_key_pair`** - Import a public key into AWS. [GH-695] 1241 * **New resource: `heroku_cert`** - Manage Heroku app certs. 1242 * provider/aws: Support `eu-central-1`, `cn-north-1`, and GovCloud. [GH-525] 1243 * provider/aws: `route_table` can have tags. [GH-648] 1244 * provider/google: Support Ubuntu images. [GH-724] 1245 * provider/google: Support for service accounts. [GH-725] 1246 1247 BUG FIXES: 1248 1249 * core: temporary/hidden files that look like Terraform configurations 1250 are no longer loaded. [GH-548] 1251 * core: Set types in resources now result in deterministic states, 1252 resulting in cleaner plans. [GH-663] 1253 * core: fix issue where "diff was not the same" would come up with 1254 diffing lists. [GH-661] 1255 * core: fix crash where module inputs weren't strings, and add more 1256 validation around invalid types here. [GH-624] 1257 * core: fix error when using a computed module output as an input to 1258 another module. [GH-659] 1259 * core: map overrides in "terraform.tfvars" no longer result in a syntax 1260 error. [GH-647] 1261 * core: Colon character works in interpolation [GH-700] 1262 * provider/aws: Fix crash case when internet gateway is not attached 1263 to any VPC. [GH-664] 1264 * provider/aws: `vpc_id` is no longer required. [GH-667] 1265 * provider/aws: `availability_zones` on ELB will contain more than one 1266 AZ if it is set as such. [GH-682] 1267 * provider/aws: More fields are marked as "computed" properly, resulting 1268 in more accurate diffs for AWS instances. [GH-712] 1269 * provider/aws: Fix panic case by using the wrong type when setting 1270 volume size for AWS instances. [GH-712] 1271 * provider/aws: route table ignores routes with 'EnableVgwRoutePropagation' 1272 origin since those come from gateways. [GH-722] 1273 * provider/aws: Default network ACL ID and default security group ID 1274 support for `aws_vpc`. [GH-704] 1275 * provider/aws: Tags are not marked as computed. This introduces another 1276 issue with not detecting external tags, but this will be fixed in 1277 the future. [GH-730] 1278 1279 ## 0.3.5 (December 9, 2014) 1280 1281 FEATURES: 1282 1283 * **Remote State**: State files can now be stored remotely via HTTP, 1284 Consul, or HashiCorp's Atlas. 1285 * **New Provider: `atlas`**: Retrieve artifacts for deployment from 1286 HashiCorp's Atlas service. 1287 * New `element()` function to index into arrays 1288 1289 IMPROVEMENTS: 1290 1291 * provider/aws: Support tenancy for aws\_instance 1292 * provider/aws: Support block devices for aws\_instance 1293 * provider/aws: Support virtual\_name on block device 1294 * provider/aws: Improve RDS reliability (more grace time) 1295 * provider/aws: Added aws\_db\_parameter\_group resource 1296 * provider/aws: Added tag support to aws\_subnet 1297 * provider/aws: Routes in RouteTable are optional 1298 * provider/aws: associate\_public\_ip\_address on aws\_launch\_configuration 1299 * provider/aws: Added aws\_network\_acl 1300 * provider/aws: Ingress rules in security groups are optional 1301 * provider/aws: Support termination policy for ASG 1302 * provider/digitalocean: Improved droplet size compatibility 1303 1304 BUG FIXES: 1305 1306 * core: Fixed issue causing double delete. [GH-555] 1307 * core: Fixed issue with create-before-destroy not being respected in 1308 some circumstances. 1309 * core: Fixing issue with count expansion with non-homogenous instance 1310 plans. 1311 * core: Fix issue with referencing resource variables from resources 1312 that don't exist yet within resources that do exist, or modules. 1313 * core: Fixing depedency handling for modules 1314 * core: Fixing output handling [GH-474] 1315 * core: Fixing count interpolation in modules 1316 * core: Fixing multi-var without module state 1317 * core: Fixing HCL variable declaration 1318 * core: Fixing resource interpolation for without state 1319 * core: Fixing handling of computed maps 1320 * command/init: Fixing recursion issue [GH-518] 1321 * command: Validate config before requesting input [GH-602] 1322 * build: Fixing GOPATHs with spaces 1323 1324 MISC: 1325 1326 * provider/aws: Upgraded to helper.Schema 1327 * provider/heroku: Upgraded to helper.Schema 1328 * provider/mailgun: Upgraded to helper.Schema 1329 * provider/dnsimple: Upgraded to helper.Schema 1330 * provider/cloudflare: Upgraded to helper.Schema 1331 * provider/digitalocean: Upgraded to helper.Schema 1332 * provider/google: Upgraded to helper.Schema 1333 1334 ## 0.3.1 (October 21, 2014) 1335 1336 IMPROVEMENTS: 1337 1338 * providers/aws: Support tags for security groups. 1339 * providers/google: Add "external\_address" to network attributes [GH-454] 1340 * providers/google: External address is used as default connection host. [GH-454] 1341 * providers/heroku: Support `locked` and `personal` booleans on organization 1342 settings. [GH-406] 1343 1344 BUG FIXES: 1345 1346 * core: Remove panic case when applying with a plan that generates no 1347 new state. [GH-403] 1348 * core: Fix a hang that can occur with enough resources. [GH-410] 1349 * core: Config validation will not error if the field is being 1350 computed so the value is still unknown. 1351 * core: If a resource fails to create and has provisioners, it is 1352 marked as tainted. [GH-434] 1353 * core: Set types are validated to be sets. [GH-413] 1354 * core: String types are validated properly. [GH-460] 1355 * core: Fix crash case when destroying with tainted resources. [GH-412] 1356 * core: Don't execute provisioners in some cases on destroy. 1357 * core: Inherited provider configurations will be properly interpolated. [GH-418] 1358 * core: Refresh works properly if there are outputs that depend on resources 1359 that aren't yet created. [GH-483] 1360 * providers/aws: Refresh of launch configs and autoscale groups load 1361 the correct data and don't incorrectly recreate themselves. [GH-425] 1362 * providers/aws: Fix case where ELB would incorrectly plan to modify 1363 listeners (with the same data) in some cases. 1364 * providers/aws: Retry destroying internet gateway for some amount of time 1365 if there is a dependency violation since it is probably just eventual 1366 consistency (public facing resources being destroyed). [GH-447] 1367 * providers/aws: Retry deleting security groups for some amount of time 1368 if there is a dependency violation since it is probably just eventual 1369 consistency. [GH-436] 1370 * providers/aws: Retry deleting subnet for some amount of time if there is a 1371 dependency violation since probably asynchronous destroy events take 1372 place still. [GH-449] 1373 * providers/aws: Drain autoscale groups before deleting. [GH-435] 1374 * providers/aws: Fix crash case if launch config is manually deleted. [GH-421] 1375 * providers/aws: Disassociate EIP before destroying. 1376 * providers/aws: ELB treats subnets as a set. 1377 * providers/aws: Fix case where in a destroy/create tags weren't reapplied. [GH-464] 1378 * providers/aws: Fix incorrect/erroneous apply cases around security group 1379 rules. [GH-457] 1380 * providers/consul: Fix regression where `key` param changed to `keys. [GH-475] 1381 1382 ## 0.3.0 (October 14, 2014) 1383 1384 FEATURES: 1385 1386 * **Modules**: Configuration can now be modularized. Modules can live on 1387 GitHub, BitBucket, Git/Hg repos, HTTP URLs, and file paths. Terraform 1388 automatically downloads/updates modules for you on request. 1389 * **New Command: `init`**. This command initializes a Terraform configuration 1390 from an existing Terraform module (also new in 0.3). 1391 * **New Command: `destroy`**. This command destroys infrastructure 1392 created with `apply`. 1393 * Terraform will ask for user input to fill in required variables and 1394 provider configurations if they aren't set. 1395 * `terraform apply MODULE` can be used as a shorthand to quickly build 1396 infrastructure from a module. 1397 * The state file format is now JSON rather than binary. This allows for 1398 easier machine and human read/write. Old binary state files will be 1399 automatically upgraded. 1400 * You can now specify `create_before_destroy` as an option for replacement 1401 so that new resources are created before the old ones are destroyed. 1402 * The `count` metaparameter can now contain interpolations (such as 1403 variables). 1404 * The current index for a resource with a `count` set can be interpolated 1405 using `${count.index}`. 1406 * Various paths can be interpolated with the `path.X` variables. For example, 1407 the path to the current module can be interpolated using `${path.module}`. 1408 1409 IMPROVEMENTS: 1410 1411 * config: Trailing commas are now allowed for the final elements of lists. 1412 * core: Plugins are loaded from `~/.terraform.d/plugins` (Unix) or 1413 `%USERDATA%/terraform.d/plugins` (Windows). 1414 * command/show: With no arguments, it will show the default state. [GH-349] 1415 * helper/schema: Can now have default values. [GH-245] 1416 * providers/aws: Tag support for most resources. 1417 * providers/aws: New resource `db_subnet_group`. [GH-295] 1418 * providers/aws: Add `map_public_ip_on_launch` for subnets. [GH-285] 1419 * providers/aws: Add `iam_instance_profile` for instances. [GH-319] 1420 * providers/aws: Add `internal` option for ELBs. [GH-303] 1421 * providers/aws: Add `ssl_certificate_id` for ELB listeners. [GH-350] 1422 * providers/aws: Add `self` option for security groups for ingress 1423 rules with self as source. [GH-303] 1424 * providers/aws: Add `iam_instance_profile` option to 1425 `aws_launch_configuration`. [GH-371] 1426 * providers/aws: Non-destructive update of `desired_capacity` for 1427 autoscale groups. 1428 * providers/aws: Add `main_route_table_id` attribute to VPCs. [GH-193] 1429 * providers/consul: Support tokens. [GH-396] 1430 * providers/google: Support `target_tags` for firewalls. [GH-324] 1431 * providers/google: `google_compute_instance` supports `can_ip_forward` [GH-375] 1432 * providers/google: `google_compute_disk` supports `type` to support disks 1433 such as SSDs. [GH-351] 1434 * provisioners/local-exec: Output from command is shown in CLI output. [GH-311] 1435 * provisioners/remote-exec: Output from command is shown in CLI output. [GH-311] 1436 1437 BUG FIXES: 1438 1439 * core: Providers are validated even without a `provider` block. [GH-284] 1440 * core: In the case of error, walk all non-dependent trees. 1441 * core: Plugin loading from CWD works properly. 1442 * core: Fix many edge cases surrounding the `count` meta-parameter. 1443 * core: Strings in the configuration can escape double-quotes with the 1444 standard `\"` syntax. 1445 * core: Error parsing CLI config will show properly. [GH-288] 1446 * core: More than one Ctrl-C will exit immediately. 1447 * providers/aws: autoscaling_group can be launched into a vpc [GH-259] 1448 * providers/aws: not an error when RDS instance is deleted manually. [GH-307] 1449 * providers/aws: Retry deleting subnet for some time while AWS eventually 1450 destroys dependencies. [GH-357] 1451 * providers/aws: More robust destroy for route53 records. [GH-342] 1452 * providers/aws: ELB generates much more correct plans without extranneous 1453 data. 1454 * providers/aws: ELB works properly with dynamically changing 1455 count of instances. 1456 * providers/aws: Terraform can handle ELBs deleted manually. [GH-304] 1457 * providers/aws: Report errors properly if RDS fails to delete. [GH-310] 1458 * providers/aws: Wait for launch configuration to exist after creation 1459 (AWS eventual consistency) [GH-302] 1460 1461 ## 0.2.2 (September 9, 2014) 1462 1463 IMPROVEMENTS: 1464 1465 * providers/amazon: Add `ebs_optimized` flag. [GH-260] 1466 * providers/digitalocean: Handle 404 on delete 1467 * providers/digitalocean: Add `user_data` argument for creating droplets 1468 * providers/google: Disks can be marked `auto_delete`. [GH-254] 1469 1470 BUG FIXES: 1471 1472 * core: Fix certain syntax of configuration that could cause hang. [GH-261] 1473 * core: `-no-color` flag properly disables color. [GH-250] 1474 * core: "~" is expanded in `-var-file` flags. [GH-273] 1475 * core: Errors with tfvars are shown in console. [GH-269] 1476 * core: Interpolation function calls with more than two args parse. [GH-282] 1477 * providers/aws: Refreshing EIP from pre-0.2 state file won't error. [GH-258] 1478 * providers/aws: Creating EIP without an instance/network won't fail. 1479 * providers/aws: Refreshing EIP manually deleted works. 1480 * providers/aws: Retry EIP delete to allow AWS eventual consistency to 1481 detect it isn't attached. [GH-276] 1482 * providers/digitalocean: Handle situations when resource was destroyed 1483 manually. [GH-279] 1484 * providers/digitalocean: Fix a couple scenarios where the diff was 1485 incorrect (and therefore the execution as well). 1486 * providers/google: Attaching a disk source (not an image) works 1487 properly. [GH-254] 1488 1489 ## 0.2.1 (August 31, 2014) 1490 1491 IMPROVEMENTS: 1492 1493 * core: Plugins are automatically discovered in the executable directory 1494 or pwd if named properly. [GH-190] 1495 * providers/mailgun: domain records are now saved to state 1496 1497 BUG FIXES: 1498 1499 * core: Configuration parses when identifier and '=' have no space. [GH-243] 1500 * core: `depends_on` with `count` generates the proper graph. [GH-244] 1501 * core: Depending on a computed variable of a list type generates a 1502 plan without failure. i.e. `${type.name.foos.0.bar}` where `foos` 1503 is computed. [GH-247] 1504 * providers/aws: Route53 destroys in parallel work properly. [GH-183] 1505 1506 ## 0.2.0 (August 28, 2014) 1507 1508 BACKWARDS INCOMPATIBILITIES: 1509 1510 * We've replaced the configuration language in use from a C library to 1511 a pure-Go reimplementation. In the process, we removed some features 1512 of the language since it was too flexible: 1513 * Semicolons are no longer valid at the end of lines 1514 * Keys cannot be double-quoted strings: `"foo" = "bar"` is no longer 1515 valid. 1516 * JSON style maps `{ "foo": "bar" }` are no longer valid outside of JSON. 1517 Maps must be in the format of `{ foo = "bar" }` (like other objects 1518 in the config) 1519 * Heroku apps now require (will not validate without) `region` and 1520 `name` due to an upstream API change. [GH-239] 1521 1522 FEATURES: 1523 1524 * **New Provider: `google`**: Manage Google Compute instances, disks, 1525 firewalls, and more. 1526 * **New Provider: `mailgun`**: Manage mailgun domains. 1527 * **New Function: `concat`**: Concatenate multiple strings together. 1528 Example: `concat(var.region, "-", var.channel)`. 1529 1530 IMPROVEMENTS: 1531 1532 * core: "~/.terraformrc" (Unix) or "%APPDATA%/terraform.rc" (Windows) 1533 can be used to configure custom providers and provisioners. [GH-192] 1534 * providers/aws: EIPs now expose `allocation_id` and `public_ip` 1535 attributes. 1536 * providers/aws: Security group rules can be updated without a 1537 destroy/create. 1538 * providers/aws: You can enable and disable dns settings for VPCs. [GH-172] 1539 * providers/aws: Can specify a private IP address for `aws_instance` [GH-217] 1540 1541 BUG FIXES: 1542 1543 * core: Variables are validated to not contain interpolations. [GH-180] 1544 * core: Key files for provisioning can now contain `~` and will be expanded 1545 to the user's home directory. [GH-179] 1546 * core: The `file()` function can load files in sub-directories. [GH-213] 1547 * core: Fix issue where some JSON structures didn't map properly into 1548 Terraform structures. [GH-177] 1549 * core: Resources with only `file()` calls will interpolate. [GH-159] 1550 * core: Variables work in block names. [GH-234] 1551 * core: Plugins are searched for in the same directory as the executable 1552 before the PATH. [GH-157] 1553 * command/apply: "tfvars" file no longer interferes with plan apply. [GH-153] 1554 * providers/aws: Fix issues around failing to read EIPs. [GH-122] 1555 * providers/aws: Autoscaling groups now register and export load 1556 balancers. [GH-207] 1557 * providers/aws: Ingress results are treated as a set, so order doesn't 1558 matter anymore. [GH-87] 1559 * providers/aws: Instance security groups treated as a set [GH-194] 1560 * providers/aws: Retry Route53 requests if operation failed because another 1561 operation is in progress [GH-183] 1562 * providers/aws: Route53 records with multiple record values work. [GH-221] 1563 * providers/aws: Changing AMI doesn't result in errors anymore. [GH-196] 1564 * providers/heroku: If you delete the `config_vars` block, config vars 1565 are properly nuked. 1566 * providers/heroku: Domains and drains are deleted before the app. 1567 * providers/heroku: Moved from the client library bgentry/heroku-go to 1568 cyberdelia/heroku-go [GH-239]. 1569 * providers/heroku: Plans without a specific plan name for 1570 heroku\_addon work. [GH-198] 1571 1572 PLUGIN CHANGES: 1573 1574 * **New Package:** `helper/schema`. This introduces a high-level framework 1575 for easily writing new providers and resources. The Heroku provider has 1576 been converted to this as an example. 1577 1578 ## 0.1.1 (August 5, 2014) 1579 1580 FEATURES: 1581 1582 * providers/heroku: Now supports creating Heroku Drains [GH-97] 1583 1584 IMPROVEMENTS: 1585 1586 * providers/aws: Launch configurations accept user data [GH-94] 1587 * providers/aws: Regions are now validated [GH-96] 1588 * providers/aws: ELB now supports health check configurations [GH-109] 1589 1590 BUG FIXES: 1591 1592 * core: Default variable file "terraform.tfvars" is auto-loaded. [GH-59] 1593 * core: Multi-variables (`foo.*.bar`) work even when `count = 1`. [GH-115] 1594 * core: `file()` function can have string literal arg [GH-145] 1595 * providers/cloudflare: Include the proper bins so the cloudflare 1596 provider is compiled 1597 * providers/aws: Engine version for RDS now properly set [GH-118] 1598 * providers/aws: Security groups now depend on each other and 1599 * providers/aws: DB instances now wait for destroys, have proper 1600 dependencies and allow passing skip_final_snapshot 1601 * providers/aws: Add associate_public_ip_address as an attribute on 1602 the aws_instance resource [GH-85] 1603 * providers/aws: Fix cidr blocks being updated [GH-65, GH-85] 1604 * providers/aws: Description is now required for security groups 1605 * providers/digitalocean: Private IP addresses are now a separate 1606 attribute 1607 * provisioner/all: If an SSH key is given with a password, a better 1608 error message is shown. [GH-73] 1609 1610 ## 0.1.0 (July 28, 2014) 1611 1612 * Initial release