github.com/btobolaski/terraform@v0.6.4-0.20150928030114-0c3f2a915c02/CHANGELOG.md (about) 1 ## 0.6.4 (unreleased) 2 3 FEATURES: 4 5 * **New provider: `rundeck`** [GH-2412] 6 * **New resource: `cloudstack_loadbalancer_rule`** [GH-2934] 7 * **New resource: `google_compute_project_metadata`** [GH-3065] 8 * **New resources: `aws_ami`, `aws_ami_copy`, `aws_ami_from_instance`** [GH-2874] 9 * **New resource: `google_storage_bucket_object`** [GH-3192] 10 * **New resources: `google_compute_vpn_gateway`, `google_compute_vpn_tunnel`** [GH-3213] 11 12 IMPROVEMENTS: 13 14 * core: Add a function to find the index of an element in a list. [GH-2704] 15 * core: Print all outputs when `terraform output` is called with no arguments [GH-2920] 16 * core: In plan output summary, count resource replacement as Add/Remove instead of Change [GH-3173] 17 * provider/aws: Add `instance_initiated_shutdown_behavior` to AWS Instance [GH-2887] 18 * provider/aws: Support IAM role names (previously just ARNs) in `aws_ecs_service.iam_role` [GH-3061] 19 * provider/aws: Add update method to RDS Subnet groups, can modify subnets without recreating [GH-3053] 20 * provider/aws: Paginate notifications returned for ASG Notifications [GH-3043] 21 * provider/aws: add `ses_smtp_password` to `aws_iam_access_key` [GH-3165] 22 * provider/aws: read `iam_instance_profile` for `aws_instance` and save to state [GH-3167] 23 * provider/aws: Add `versioning` option to `aws_s3_bucket` [GH-2942] 24 * provider/aws: Add `configuation_endpoint` to `aws_elasticache_cluster` [GH-3250] 25 * provider/cloudstack: Add `project` parameter to `cloudstack_vpc`, `cloudstack_network`, `cloudstack_ipaddress` and `cloudstack_disk` [GH-3035] 26 27 BUG FIXES: 28 29 * core: Fix problems referencing list attributes in interpolations [GH-2157] 30 * core: don't error on computed value during input walk [GH-2988] 31 * provider/google: Crashes with interface conversion in GCE Instance Template [GH-3027] 32 * provider/google: Convert int to int64 when building the GKE cluster.NodeConfig struct [GH-2978] 33 * provider/google: google_compute_instance_template.network_interface.network should be a URL [GH-3226] 34 * provider/aws: Retry creation of `aws_ecs_service` if IAM policy isn't ready yet [GH-3061] 35 * provider/aws: Fix issue with mixed capitalization for RDS Instances [GH-3053] 36 * provider/aws: Fix issue with RDS to allow major version upgrades [GH-3053] 37 * provider/aws: Fix shard_count in `aws_kinesis_stream` [GH-2986] 38 * provider/aws: Fix issue with `key_name` and using VPCs with spot instance requests [GH-2954] 39 * provider/aws: Fix unresolvable diffs coming from `aws_elasticache_cluster` names being downcased 40 by AWS [GH-3120] 41 * provider/aws: Read instance source_dest_check and save to state [GH-3152] 42 * provider/aws: Allow `weight = 0` in Route53 records [GH-3196] 43 * provider/openstack: add state 'downloading' to list of expected states in 44 `blockstorage_volume_v1` creation [GH-2866] 45 * provider/openstack: remove security groups (by name) before adding security 46 groups (by id) [GH-2008] 47 48 ## 0.6.3 (August 11, 2015) 49 50 BUG FIXES: 51 52 * core: Skip all descendents after error, not just children; helps prevent confusing 53 additional errors/crashes after initial failure [GH-2963] 54 * core: fix deadlock possibility when both a module and a dependent resource are 55 removed in the same run [GH-2968] 56 * provider/aws: Fix issue with authenticating when using IAM profiles [GH-2959] 57 58 ## 0.6.2 (August 6, 2015) 59 60 FEATURES: 61 62 * **New resource: `google_compute_instance_group_manager`** [GH-2868] 63 * **New resource: `google_compute_autoscaler`** [GH-2868] 64 * **New resource: `aws_s3_bucket_object`** [GH-2898] 65 66 IMPROVEMENTS: 67 68 * core: Add resource IDs to errors coming from `apply`/`refresh` [GH-2815] 69 * provider/aws: Validate credentials before walking the graph [GH-2730] 70 * provider/aws: Added website_domain for S3 buckets [GH-2210] 71 * provider/aws: ELB names are now optional, and generated by Terraform if omitted [GH-2571] 72 * provider/aws: Downcase RDS engine names to prevent continuous diffs [GH-2745] 73 * provider/aws: Added `source_dest_check` attribute to the aws_network_interface [GH-2741] 74 * provider/aws: Clean up externally removed Launch Configurations [GH-2806] 75 * provider/aws: Allow configuration of the DynamoDB Endpoint [GH-2825] 76 * provider/aws: Compute private ip addresses of ENIs if they are not specified [GH-2743] 77 * provider/aws: Add `arn` attribute for DynamoDB tables [GH-2924] 78 * provider/aws: Fail silently when account validation fails while from instance profile [GH-3001] 79 * provider/azure: Allow `settings_file` to accept XML string [GH-2922] 80 * provider/azure: Provide a simpler error when using a Platform Image without a 81 Storage Service [GH-2861] 82 * provider/google: `account_file` is now expected to be JSON. Paths are still supported for 83 backwards compatibility. [GH-2839] 84 85 BUG FIXES: 86 87 * core: Prevent error duplication in `apply` [GH-2815] 88 * core: Fix crash when a provider validation adds a warning [GH-2878] 89 * provider/aws: Fix issue with toggling monitoring in AWS Instances [GH-2794] 90 * provider/aws: Fix issue with Spot Instance Requests and cancellation [GH-2805] 91 * provider/aws: Fix issue with checking for ElastiCache cluster cache node status [GH-2842] 92 * provider/aws: Fix issue when unable to find a Root Block Device name of an Instance Backed 93 AMI [GH-2646] 94 * provider/dnsimple: Domain and type should force new records [GH-2777] 95 * provider/aws: Fix issue with IAM Server Certificates and Chains [GH-2871] 96 * provider/aws: Fix issue with IAM Server Certificates when using `path` [GH-2871] 97 * provider/aws: Fix issue in Security Group Rules when the Security Group is not found [GH-2897] 98 * provider/aws: allow external ENI attachments [GH-2943] 99 * provider/aws: Fix issue with S3 Buckets, and throwing an error when not found [GH-2925] 100 101 ## 0.6.1 (July 20, 2015) 102 103 FEATURES: 104 105 * **New resource: `google_container_cluster`** [GH-2357] 106 * **New resource: `aws_vpc_endpoint`** [GH-2695] 107 108 IMPROVEMENTS: 109 110 * connection/ssh: Print SSH bastion host details to output [GH-2684] 111 * provider/aws: Create RDS databases from snapshots [GH-2062] 112 * provider/aws: Add support for restoring from Redis backup stored in S3 [GH-2634] 113 * provider/aws: Add `maintenance_window` to ElastiCache cluster [GH-2642] 114 * provider/aws: Availability Zones are optional when specifying VPC Zone Identifiers in 115 Auto Scaling Groups updates [GH-2724] 116 * provider/google: Add metadata_startup_script to google_compute_instance [GH-2375] 117 118 BUG FIXES: 119 120 * core: Don't prompt for variables with defaults [GH-2613] 121 * core: Return correct number of planned updates [GH-2620] 122 * core: Fix "provider not found" error that can occur while running 123 a destroy plan with grandchildren modules [GH-2755] 124 * core: Fix UUID showing up in diff for computed splat (`foo.*.bar`) 125 variables. [GH-2788] 126 * core: Orphan modules that contain no resources (only other modules) 127 are properly destroyed up to arbitrary depth [GH-2786] 128 * core: Fix "attribute not available" during destroy plans in 129 cases where the parameter is passed between modules [GH-2775] 130 * core: Record schema version when destroy fails [GH-2923] 131 * connection/ssh: fix issue on machines with an SSH Agent available 132 preventing `key_file` from being read without explicitly 133 setting `agent = false` [GH-2615] 134 * provider/aws: Allow uppercase characters in `aws_elb.name` [GH-2580] 135 * provider/aws: Allow underscores in `aws_db_subnet_group.name` (undocumented by AWS) [GH-2604] 136 * provider/aws: Allow dots in `aws_db_subnet_group.name` (undocumented by AWS) [GH-2665] 137 * provider/aws: Fix issue with pending Spot Instance requests [GH-2640] 138 * provider/aws: Fix issue in AWS Classic environment with referencing external 139 Security Groups [GH-2644] 140 * provider/aws: Bump internet gateway detach timeout [GH-2669] 141 * provider/aws: Fix issue with detecting differences in DB Parameters [GH-2728] 142 * provider/aws: `ecs_cluster` rename (recreation) and deletion is handled correctly [GH-2698] 143 * provider/aws: `aws_route_table` ignores routes generated for VPC endpoints [GH-2695] 144 * provider/aws: Fix issue with Launch Configurations and enable_monitoring [GH-2735] 145 * provider/openstack: allow empty api_key and endpoint_type [GH-2626] 146 * provisioner/chef: Fix permission denied error with ohai hints [GH-2781] 147 148 ## 0.6.0 (June 30, 2015) 149 150 BACKWARDS INCOMPATIBILITIES: 151 152 * command/push: If a variable is already set within Atlas, it won't be 153 updated unless the `-overwrite` flag is present [GH-2373] 154 * connection/ssh: The `agent` field now defaults to `true` if 155 the `SSH_AGENT_SOCK` environment variable is present. In other words, 156 `ssh-agent` support is now opt-out instead of opt-in functionality. [GH-2408] 157 * provider/aws: If you were setting access and secret key to blank ("") 158 to force Terraform to load credentials from another source such as the 159 EC2 role, this will now error. Remove the blank lines and Terraform 160 will load from other sources. 161 * `concat()` has been repurposed to combine lists instead of strings (old behavior 162 of joining strings is maintained in this version but is deprecated, strings 163 should be combined using interpolation syntax, like "${var.foo}{var.bar}") 164 [GH-1790] 165 166 FEATURES: 167 168 * **New provider: `azure`** [GH-2052, GH-2053, GH-2372, GH-2380, GH-2394, GH-2515, GH-2530, GH-2562] 169 * **New resource: `aws_autoscaling_notification`** [GH-2197] 170 * **New resource: `aws_autoscaling_policy`** [GH-2201] 171 * **New resource: `aws_cloudwatch_metric_alarm`** [GH-2201] 172 * **New resource: `aws_dynamodb_table`** [GH-2121] 173 * **New resource: `aws_ecs_cluster`** [GH-1803] 174 * **New resource: `aws_ecs_service`** [GH-1803] 175 * **New resource: `aws_ecs_task_definition`** [GH-1803, GH-2402] 176 * **New resource: `aws_elasticache_parameter_group`** [GH-2276] 177 * **New resource: `aws_flow_log`** [GH-2384] 178 * **New resource: `aws_iam_group_association`** [GH-2273] 179 * **New resource: `aws_iam_policy_attachment`** [GH-2395] 180 * **New resource: `aws_lambda_function`** [GH-2170] 181 * **New resource: `aws_route53_delegation_set`** [GH-1999] 182 * **New resource: `aws_route53_health_check`** [GH-2226] 183 * **New resource: `aws_spot_instance_request`** [GH-2263] 184 * **New resource: `cloudstack_ssh_keypair`** [GH-2004] 185 * **New remote state backend: `swift`**: You can now store remote state in 186 a OpenStack Swift. [GH-2254] 187 * command/output: support display of module outputs [GH-2102] 188 * core: `keys()` and `values()` funcs for map variables [GH-2198] 189 * connection/ssh: SSH bastion host support and ssh-agent forwarding [GH-2425] 190 191 IMPROVEMENTS: 192 193 * core: HTTP remote state now accepts `skip_cert_verification` 194 option to ignore TLS cert verification. [GH-2214] 195 * core: S3 remote state now accepts the 'encrypt' option for SSE [GH-2405] 196 * core: `plan` now reports sum of resources to be changed/created/destroyed [GH-2458] 197 * core: Change string list representation so we can distinguish empty, single 198 element lists [GH-2504] 199 * core: Properly close provider and provisioner plugin connections [GH-2406, GH-2527] 200 * provider/aws: AutoScaling groups now support updating Load Balancers without 201 recreation [GH-2472] 202 * provider/aws: Allow more in-place updates for ElastiCache cluster without recreating 203 [GH-2469] 204 * provider/aws: ElastiCache Subnet Groups can be updated 205 without destroying first [GH-2191] 206 * provider/aws: Normalize `certificate_chain` in `aws_iam_server_certificate` to 207 prevent unnecessary replacement. [GH-2411] 208 * provider/aws: `aws_instance` supports `monitoring' [GH-2489] 209 * provider/aws: `aws_launch_configuration` now supports `enable_monitoring` [GH-2410] 210 * provider/aws: Show outputs after `terraform refresh` [GH-2347] 211 * provider/aws: Add backoff/throttling during DynamoDB creation [GH-2462] 212 * provider/aws: Add validation for aws_vpc.cidr_block [GH-2514] 213 * provider/aws: Add validation for aws_db_subnet_group.name [GH-2513] 214 * provider/aws: Add validation for aws_db_instance.identifier [GH-2516] 215 * provider/aws: Add validation for aws_elb.name [GH-2517] 216 * provider/aws: Add validation for aws_security_group (name+description) [GH-2518] 217 * provider/aws: Add validation for aws_launch_configuration [GH-2519] 218 * provider/aws: Add validation for aws_autoscaling_group.name [GH-2520] 219 * provider/aws: Add validation for aws_iam_role.name [GH-2521] 220 * provider/aws: Add validation for aws_iam_role_policy.name [GH-2552] 221 * provider/aws: Add validation for aws_iam_instance_profile.name [GH-2553] 222 * provider/aws: aws_auto_scaling_group.default_cooldown no longer requires 223 resource replacement [GH-2510] 224 * provider/aws: add AH and ESP protocol integers [GH-2321] 225 * provider/docker: `docker_container` has the `privileged` 226 option. [GH-2227] 227 * provider/openstack: allow `OS_AUTH_TOKEN` environment variable 228 to set the openstack `api_key` field [GH-2234] 229 * provider/openstack: Can now configure endpoint type (public, admin, 230 internal) [GH-2262] 231 * provider/cloudstack: `cloudstack_instance` now supports projects [GH-2115] 232 * provisioner/chef: Added a `os_type` to specifically specify the target OS [GH-2483] 233 * provisioner/chef: Added a `ohai_hints` option to upload hint files [GH-2487] 234 235 BUG FIXES: 236 237 * core: lifecycle `prevent_destroy` can be any value that can be 238 coerced into a bool [GH-2268] 239 * core: matching provider types in sibling modules won't override 240 each other's config. [GH-2464] 241 * core: computed provider configurations now properly validate [GH-2457] 242 * core: orphan (commented out) resource dependencies are destroyed in 243 the correct order [GH-2453] 244 * core: validate object types in plugins are actually objects [GH-2450] 245 * core: fix `-no-color` flag in subcommands [GH-2414] 246 * core: Fix error of 'attribute not found for variable' when a computed 247 resource attribute is used as a parameter to a module [GH-2477] 248 * core: moduled orphans will properly inherit provider configs [GH-2476] 249 * core: modules with provider aliases work properly if the parent 250 doesn't implement those aliases [GH-2475] 251 * core: unknown resource attributes passed in as parameters to modules 252 now error [GH-2478] 253 * core: better error messages for missing variables [GH-2479] 254 * core: removed set items now properly appear in diffs and applies [GH-2507] 255 * core: '*' will not be added as part of the variable name when you 256 attempt multiplication without a space [GH-2505] 257 * core: fix target dependency calculation across module boundaries [GH-2555] 258 * command/*: fixed bug where variable input was not asked for unset 259 vars if terraform.tfvars existed [GH-2502] 260 * command/apply: prevent output duplication when reporting errors [GH-2267] 261 * command/apply: destroyed orphan resources are properly counted [GH-2506] 262 * provider/aws: loading credentials from the environment (vars, EC2 role, 263 etc.) is more robust and will not ask for credentials from stdin [GH-1841] 264 * provider/aws: fix panic when route has no `cidr_block` [GH-2215] 265 * provider/aws: fix issue preventing destruction of IAM Roles [GH-2177] 266 * provider/aws: fix issue where Security Group Rules could collide and fail 267 to save to the state file correctly [GH-2376] 268 * provider/aws: fix issue preventing destruction self referencing Securtity 269 Group Rules [GH-2305] 270 * provider/aws: fix issue causing perpetual diff on ELB listeners 271 when non-lowercase protocol strings were used [GH-2246] 272 * provider/aws: corrected frankfurt S3 website region [GH-2259] 273 * provider/aws: `aws_elasticache_cluster` port is required [GH-2160] 274 * provider/aws: Handle AMIs where RootBlockDevice does not appear in the 275 BlockDeviceMapping, preventing root_block_device from working [GH-2271] 276 * provider/aws: fix `terraform show` with remote state [GH-2371] 277 * provider/aws: detect `instance_type` drift on `aws_instance` [GH-2374] 278 * provider/aws: fix crash when `security_group_rule` referenced non-existent 279 security group [GH-2434] 280 * provider/aws: `aws_launch_configuration` retries if IAM instance 281 profile is not ready yet. [GH-2452] 282 * provider/aws: `fqdn` is populated during creation for `aws_route53_record` [GH-2528] 283 * provider/aws: retry VPC delete on DependencyViolation due to eventual 284 consistency [GH-2532] 285 * provider/aws: VPC peering connections in "failed" state are deleted [GH-2544] 286 * provider/aws: EIP deletion works if it was manually disassociated [GH-2543] 287 * provider/aws: `elasticache_subnet_group.subnet_ids` is now a required argument [GH-2534] 288 * provider/aws: handle nil response from VPN connection describes [GH-2533] 289 * provider/cloudflare: manual record deletion doesn't cause error [GH-2545] 290 * provider/digitalocean: handle case where droplet is deleted outside of 291 terraform [GH-2497] 292 * provider/dme: No longer an error if record deleted manually [GH-2546] 293 * provider/docker: Fix issues when using containers with links [GH-2327] 294 * provider/openstack: fix panic case if API returns nil network [GH-2448] 295 * provider/template: fix issue causing "unknown variable" rendering errors 296 when an existing set of template variables is changed [GH-2386] 297 * provisioner/chef: improve the decoding logic to prevent parameter not found errors [GH-2206] 298 299 ## 0.5.3 (June 1, 2015) 300 301 IMPROVEMENTS: 302 303 * **New resource: `aws_kinesis_stream`** [GH-2110] 304 * **New resource: `aws_iam_server_certificate`** [GH-2086] 305 * **New resource: `aws_sqs_queue`** [GH-1939] 306 * **New resource: `aws_sns_topic`** [GH-1974] 307 * **New resource: `aws_sns_topic_subscription`** [GH-1974] 308 * **New resource: `aws_volume_attachment`** [GH-2050] 309 * **New resource: `google_storage_bucket`** [GH-2060] 310 * provider/aws: support ec2 termination protection [GH-1988] 311 * provider/aws: support for RDS Read Replicas [GH-1946] 312 * provider/aws: `aws_s3_bucket` add support for `policy` [GH-1992] 313 * provider/aws: `aws_ebs_volume` add support for `tags` [GH-2135] 314 * provider/aws: `aws_elasticache_cluster` Confirm node status before reporting 315 available 316 * provider/aws: `aws_network_acl` Add support for ICMP Protocol [GH-2148] 317 * provider/aws: New `force_destroy` parameter for S3 buckets, to destroy 318 Buckets that contain objects [GH-2007] 319 * provider/aws: switching `health_check_type` on ASGs no longer requires 320 resource refresh [GH-2147] 321 * provider/aws: ignore empty `vpc_security_group_ids` on `aws_instance` [GH-2311] 322 323 BUG FIXES: 324 325 * provider/aws: Correctly handle AWS keypairs which no longer exist [GH-2032] 326 * provider/aws: Fix issue with restoring an Instance from snapshot ID [GH-2120] 327 * provider/template: store relative path in the state [GH-2038] 328 * provisioner/chef: fix interpolation in the Chef provisioner [GH-2168] 329 * provisioner/remote-exec: Don't prepend shebang on scripts that already 330 have one [GH-2041] 331 332 ## 0.5.2 (May 15, 2015) 333 334 FEATURES: 335 336 * **Chef provisioning**: You can now provision new hosts (both Linux and 337 Windows) with [Chef](https://chef.io) using a native provisioner [GH-1868] 338 339 IMPROVEMENTS: 340 341 * **New config function: `formatlist`** - Format lists in a similar way to `format`. 342 Useful for creating URLs from a list of IPs. [GH-1829] 343 * **New resource: `aws_route53_zone_association`** 344 * provider/aws: `aws_autoscaling_group` can wait for capacity in ELB 345 via `min_elb_capacity` [GH-1970] 346 * provider/aws: `aws_db_instances` supports `license_model` [GH-1966] 347 * provider/aws: `aws_elasticache_cluster` add support for Tags [GH-1965] 348 * provider/aws: `aws_network_acl` Network ACLs can be applied to multiple subnets [GH-1931] 349 * provider/aws: `aws_s3_bucket` exports `hosted_zone_id` and `region` [GH-1865] 350 * provider/aws: `aws_s3_bucket` add support for website `redirect_all_requests_to` [GH-1909] 351 * provider/aws: `aws_route53_record` exports `fqdn` [GH-1847] 352 * provider/aws: `aws_route53_zone` can create private hosted zones [GH-1526] 353 * provider/google: `google_compute_instance` `scratch` attribute added [GH-1920] 354 355 BUG FIXES: 356 357 * core: fix "resource not found" for interpolation issues with modules 358 * core: fix unflattenable error for orphans [GH-1922] 359 * core: fix deadlock with create-before-destroy + modules [GH-1949] 360 * core: fix "no roots found" error with create-before-destroy [GH-1953] 361 * core: variables set with environment variables won't validate as 362 not set without a default [GH-1930] 363 * core: resources with a blank ID in the state are now assumed to not exist [GH-1905] 364 * command/push: local vars override remote ones [GH-1881] 365 * provider/aws: Mark `aws_security_group` description as `ForceNew` [GH-1871] 366 * provider/aws: `aws_db_instance` ARN value is correct [GH-1910] 367 * provider/aws: `aws_db_instance` only submit modify request if there 368 is a change. [GH-1906] 369 * provider/aws: `aws_elasticache_cluster` export missing information on cluster nodes [GH-1965] 370 * provider/aws: bad AMI on a launch configuration won't block refresh [GH-1901] 371 * provider/aws: `aws_security_group` + `aws_subnet` - destroy timeout increased 372 to prevent DependencyViolation errors. [GH-1886] 373 * provider/google: `google_compute_instance` Local SSDs no-longer cause crash 374 [GH-1088] 375 * provider/google: `google_http_health_check` Defaults now driven from Terraform, 376 avoids errors on update [GH-1894] 377 * provider/google: `google_compute_template` Update Instance Template network 378 definition to match changes to Instance [GH-980] 379 * provider/template: Fix infinite diff [GH-1898] 380 381 ## 0.5.1 (never released) 382 383 This version was never released since we accidentally skipped it! 384 385 ## 0.5.0 (May 7, 2015) 386 387 BACKWARDS INCOMPATIBILITIES: 388 389 * provider/aws: Terraform now remove the default egress rule created by AWS in 390 a new security group. 391 392 FEATURES: 393 394 * **Multi-provider (a.k.a multi-region)**: Multiple instances of a single 395 provider can be configured so resources can apply to different settings. 396 As an example, this allows Terraform to manage multiple regions with AWS. 397 * **Environmental variables to set variables**: Environment variables can be 398 used to set variables. The environment variables must be in the format 399 `TF_VAR_name` and this will be checked last for a value. 400 * **New remote state backend: `s3`**: You can now store remote state in 401 an S3 bucket. [GH-1723] 402 * **Automatic AWS retries**: This release includes a lot of improvement 403 around automatic retries of transient errors in AWS. The number of 404 retry attempts is also configurable. 405 * **Templates**: A new `template_file` resource allows long strings needing 406 variable interpolation to be moved into files. [GH-1778] 407 * **Provision with WinRM**: Provisioners can now run remote commands on 408 Windows hosts. [GH-1483] 409 410 IMPROVEMENTS: 411 412 * **New config function: `length`** - Get the length of a string or a list. 413 Useful in conjunction with `split`. [GH-1495] 414 * **New resource: `aws_app_cookie_stickiness_policy`** 415 * **New resource: `aws_customer_gateway`** 416 * **New resource: `aws_ebs_volume`** 417 * **New resource: `aws_elasticache_cluster`** 418 * **New resource: `aws_elasticache_security_group`** 419 * **New resource: `aws_elasticache_subnet_group`** 420 * **New resource: `aws_iam_access_key`** 421 * **New resource: `aws_iam_group_policy`** 422 * **New resource: `aws_iam_group`** 423 * **New resource: `aws_iam_instance_profile`** 424 * **New resource: `aws_iam_policy`** 425 * **New resource: `aws_iam_role_policy`** 426 * **New resource: `aws_iam_role`** 427 * **New resource: `aws_iam_user_policy`** 428 * **New resource: `aws_iam_user`** 429 * **New resource: `aws_lb_cookie_stickiness_policy`** 430 * **New resource: `aws_proxy_protocol_policy`** 431 * **New resource: `aws_security_group_rule`** 432 * **New resource: `aws_vpc_dhcp_options_association`** 433 * **New resource: `aws_vpc_dhcp_options`** 434 * **New resource: `aws_vpn_connection_route`** 435 * **New resource: `google_dns_managed_zone`** 436 * **New resource: `google_dns_record_set`** 437 * **Migrate to upstream AWS SDK:** Migrate the AWS provider to 438 [awslabs/aws-sdk-go](https://github.com/awslabs/aws-sdk-go), 439 the official `awslabs` library. Previously we had forked the library for 440 stability while `awslabs` refactored. Now that work has completed, and we've 441 migrated back to the upstream version. 442 * core: Improve error message on diff mismatch [GH-1501] 443 * provisioner/file: expand `~` in source path [GH-1569] 444 * provider/aws: Better retry logic, now retries up to 11 times by default 445 with exponentional backoff. This number is configurable. [GH-1787] 446 * provider/aws: Improved credential detection [GH-1470] 447 * provider/aws: Can specify a `token` via the config file [GH-1601] 448 * provider/aws: Added new `vpc_security_group_ids` attribute for AWS 449 Instances. If using a VPC, you can now modify the security groups for that 450 Instance without destroying it [GH-1539] 451 * provider/aws: White or blacklist account IDs that can be used to 452 protect against accidents. [GH-1595] 453 * provider/aws: Add a subset of IAM resources [GH-939] 454 * provider/aws: `aws_autoscaling_group` retries deletes through "in progress" 455 errors [GH-1840] 456 * provider/aws: `aws_autoscaling_group` waits for healthy capacity during 457 ASG creation [GH-1839] 458 * provider/aws: `aws_instance` supports placement groups [GH-1358] 459 * provider/aws: `aws_eip` supports network interface attachment [GH-1681] 460 * provider/aws: `aws_elb` supports in-place changing of listeners [GH-1619] 461 * provider/aws: `aws_elb` supports connection draining settings [GH-1502] 462 * provider/aws: `aws_elb` increase default idle timeout to 60s [GH-1646] 463 * provider/aws: `aws_key_pair` name can be omitted and generated [GH-1751] 464 * provider/aws: `aws_network_acl` improved validation for network ACL ports 465 and protocols [GH-1798] [GH-1808] 466 * provider/aws: `aws_route_table` can target network interfaces [GH-968] 467 * provider/aws: `aws_route_table` can specify propagating VGWs [GH-1516] 468 * provider/aws: `aws_route53_record` supports weighted sets [GH-1578] 469 * provider/aws: `aws_route53_zone` exports nameservers [GH-1525] 470 * provider/aws: `aws_s3_bucket` website support [GH-1738] 471 * provider/aws: `aws_security_group` name becomes optional and can be 472 automatically set to a unique identifier; this helps with 473 `create_before_destroy` scenarios [GH-1632] 474 * provider/aws: `aws_security_group` description becomes optional with a 475 static default value [GH-1632] 476 * provider/aws: automatically set the private IP as the SSH address 477 if not specified and no public IP is available [GH-1623] 478 * provider/aws: `aws_elb` exports `source_security_group` field [GH-1708] 479 * provider/aws: `aws_route53_record` supports alias targeting [GH-1775] 480 * provider/aws: Remove default AWS egress rule for newly created Security Groups [GH-1765] 481 * provider/consul: add `scheme` configuration argument [GH-1838] 482 * provider/docker: `docker_container` can specify links [GH-1564] 483 * provider/google: `resource_compute_disk` supports snapshots [GH-1426] 484 * provider/google: `resource_compute_instance` supports specifying the 485 device name [GH-1426] 486 * provider/openstack: Floating IP support for LBaaS [GH-1550] 487 * provider/openstack: Add AZ to `openstack_blockstorage_volume_v1` [GH-1726] 488 489 BUG FIXES: 490 491 * core: Fix graph cycle issues surrounding modules [GH-1582] [GH-1637] 492 * core: math on arbitrary variables works if first operand isn't a 493 numeric primitive. [GH-1381] 494 * core: avoid unnecessary cycles by pruning tainted destroys from 495 graph if there are no tainted resources [GH-1475] 496 * core: fix issue where destroy nodes weren't pruned in specific 497 edge cases around matching prefixes, which could cause cycles [GH-1527] 498 * core: fix issue causing diff mismatch errors in certain scenarios during 499 resource replacement [GH-1515] 500 * core: dependencies on resources with a different index work when 501 count > 1 [GH-1540] 502 * core: don't panic if variable default type is invalid [GH-1344] 503 * core: fix perpetual diff issue for computed maps that are empty [GH-1607] 504 * core: validation added to check for `self` variables in modules [GH-1609] 505 * core: fix edge case where validation didn't pick up unknown fields 506 if the value was computed [GH-1507] 507 * core: Fix issue where values in sets on resources couldn't contain 508 hyphens. [GH-1641] 509 * core: Outputs removed from the config are removed from the state [GH-1714] 510 * core: Validate against the worst-case graph during plan phase to catch cycles 511 that would previously only show up during apply [GH-1655] 512 * core: Referencing invalid module output in module validates [GH-1448] 513 * command: remote states with uppercase types work [GH-1356] 514 * provider/aws: Support `AWS_SECURITY_TOKEN` env var again [GH-1785] 515 * provider/aws: Don't save "instance" for EIP if association fails [GH-1776] 516 * provider/aws: launch configuration ID set after create success [GH-1518] 517 * provider/aws: Fixed an issue with creating ELBs without any tags [GH-1580] 518 * provider/aws: Fix issue in Security Groups with empty IPRanges [GH-1612] 519 * provider/aws: manually deleted S3 buckets are refreshed properly [GH-1574] 520 * provider/aws: only check for EIP allocation ID in VPC [GH-1555] 521 * provider/aws: raw protocol numbers work in `aws_network_acl` [GH-1435] 522 * provider/aws: Block devices can be encrypted [GH-1718] 523 * provider/aws: ASG health check grace period can be updated in-place [GH-1682] 524 * provider/aws: ELB security groups can be updated in-place [GH-1662] 525 * provider/aws: `aws_main_route_table_association` can be deleted 526 manually [GH-1806] 527 * provider/docker: image can reference more complex image addresses, 528 such as with private repos with ports [GH-1818] 529 * provider/openstack: region config is not required [GH-1441] 530 * provider/openstack: `enable_dhcp` for networking subnet should be bool [GH-1741] 531 * provisioner/remote-exec: add random number to uploaded script path so 532 that parallel provisions work [GH-1588] 533 * provisioner/remote-exec: chmod the script to 0755 properly [GH-1796] 534 535 ## 0.4.2 (April 10, 2015) 536 537 BUG FIXES: 538 539 * core: refresh won't remove outputs from state file [GH-1369] 540 * core: clarify "unknown variable" error [GH-1480] 541 * core: properly merge parent provider configs when asking for input 542 * provider/aws: fix panic possibility if RDS DB name is empty [GH-1460] 543 * provider/aws: fix issue detecting credentials for some resources [GH-1470] 544 * provider/google: fix issue causing unresolvable diffs when using legacy 545 `network` field on `google_compute_instance` [GH-1458] 546 547 ## 0.4.1 (April 9, 2015) 548 549 IMPROVEMENTS: 550 551 * provider/aws: Route 53 records can now update `ttl` and `records` attributes 552 without destroying/creating the record [GH-1396] 553 * provider/aws: Support changing additional attributes of RDS databases 554 without forcing a new resource [GH-1382] 555 556 BUG FIXES: 557 558 * core: module paths in ".terraform" are consistent across different 559 systems so copying your ".terraform" folder works. [GH-1418] 560 * core: don't validate providers too early when nested in a module [GH-1380] 561 * core: fix race condition in `count.index` interpolation [GH-1454] 562 * core: properly initialize provisioners, fixing resource targeting 563 during destroy [GH-1544] 564 * command/push: don't ask for input if terraform.tfvars is present 565 * command/remote-config: remove spurrious error "nil" when initializing 566 remote state on a new configuration. [GH-1392] 567 * provider/aws: Fix issue with Route 53 and pre-existing Hosted Zones [GH-1415] 568 * provider/aws: Fix refresh issue in Route 53 hosted zone [GH-1384] 569 * provider/aws: Fix issue when changing map-public-ip in Subnets #1234 570 * provider/aws: Fix issue finding db subnets [GH-1377] 571 * provider/aws: Fix issues with `*_block_device` attributes on instances and 572 launch configs creating unresolvable diffs when certain optional 573 parameters were omitted from the config [GH-1445] 574 * provider/aws: Fix issue with `aws_launch_configuration` causing an 575 unnecessary diff for pre-0.4 environments [GH-1371] 576 * provider/aws: Fix several related issues with `aws_launch_configuration` 577 causing unresolvable diffs [GH-1444] 578 * provider/aws: Fix issue preventing launch configurations from being valid 579 in EC2 Classic [GH-1412] 580 * provider/aws: Fix issue in updating Route 53 records on refresh/read. [GH-1430] 581 * provider/docker: Don't ask for `cert_path` input on every run [GH-1432] 582 * provider/google: Fix issue causing unresolvable diff on instances with 583 `network_interface` [GH-1427] 584 585 ## 0.4.0 (April 2, 2015) 586 587 BACKWARDS INCOMPATIBILITIES: 588 589 * Commands `terraform push` and `terraform pull` are now nested under 590 the `remote` command: `terraform remote push` and `terraform remote pull`. 591 The old `remote` functionality is now at `terraform remote config`. This 592 consolidates all remote state management under one command. 593 * Period-prefixed configuration files are now ignored. This might break 594 existing Terraform configurations if you had period-prefixed files. 595 * The `block_device` attribute of `aws_instance` has been removed in favor 596 of three more specific attributes to specify block device mappings: 597 `root_block_device`, `ebs_block_device`, and `ephemeral_block_device`. 598 Configurations using the old attribute will generate a validation error 599 indicating that they must be updated to use the new fields [GH-1045]. 600 601 FEATURES: 602 603 * **New provider: `dme` (DNSMadeEasy)** [GH-855] 604 * **New provider: `docker` (Docker)** - Manage container lifecycle 605 using the standard Docker API. [GH-855] 606 * **New provider: `openstack` (OpenStack)** - Interact with the many resources 607 provided by OpenStack. [GH-924] 608 * **New feature: `terraform_remote_state` resource** - Reference remote 609 states from other Terraform runs to use Terraform outputs as inputs 610 into another Terraform run. 611 * **New command: `taint`** - Manually mark a resource as tainted, causing 612 a destroy and recreate on the next plan/apply. 613 * **New resource: `aws_vpn_gateway`** [GH-1137] 614 * **New resource: `aws_elastic_network_interfaces`** [GH-1149] 615 * **Self-variables** can be used to reference the current resource's 616 attributes within a provisioner. Ex. `${self.private_ip_address}` [GH-1033] 617 * **Continuous state** saving during `terraform apply`. The state file is 618 continuously updated as apply is running, meaning that the state is 619 less likely to become corrupt in a catastrophic case: terraform panic 620 or system killing Terraform. 621 * **Math operations** in interpolations. You can now do things like 622 `${count.index + 1}`. [GH-1068] 623 * **New AWS SDK:** Move to `aws-sdk-go` (hashicorp/aws-sdk-go), 624 a fork of the official `awslabs` repo. We forked for stability while 625 `awslabs` refactored the library, and will move back to the officially 626 supported version in the next release. 627 628 IMPROVEMENTS: 629 630 * **New config function: `format`** - Format a string using `sprintf` 631 format. [GH-1096] 632 * **New config function: `replace`** - Search and replace string values. 633 Search can be a regular expression. See documentation for more 634 info. [GH-1029] 635 * **New config function: `split`** - Split a value based on a delimiter. 636 This is useful for faking lists as parameters to modules. 637 * **New resource: `digitalocean_ssh_key`** [GH-1074] 638 * config: Expand `~` with homedir in `file()` paths [GH-1338] 639 * core: The serial of the state is only updated if there is an actual 640 change. This will lower the amount of state changing on things 641 like refresh. 642 * core: Autoload `terraform.tfvars.json` as well as `terraform.tfvars` [GH-1030] 643 * core: `.tf` files that start with a period are now ignored. [GH-1227] 644 * command/remote-config: After enabling remote state, a `pull` is 645 automatically done initially. 646 * providers/google: Add `size` option to disk blocks for instances. [GH-1284] 647 * providers/aws: Improve support for tagging resources. 648 * providers/aws: Add a short syntax for Route 53 Record names, e.g. 649 `www` instead of `www.example.com`. 650 * providers/aws: Improve dependency violation error handling, when deleting 651 Internet Gateways or Auto Scaling groups [GH-1325]. 652 * provider/aws: Add non-destructive updates to AWS RDS. You can now upgrade 653 `engine_version`, `parameter_group_name`, and `multi_az` without forcing 654 a new database to be created.[GH-1341] 655 * providers/aws: Full support for block device mappings on instances and 656 launch configurations [GH-1045, GH-1364] 657 * provisioners/remote-exec: SSH agent support. [GH-1208] 658 659 BUG FIXES: 660 661 * core: module outputs can be used as inputs to other modules [GH-822] 662 * core: Self-referencing splat variables are no longer allowed in 663 provisioners. [GH-795][GH-868] 664 * core: Validate that `depends_on` doesn't contain interpolations. [GH-1015] 665 * core: Module inputs can be non-strings. [GH-819] 666 * core: Fix invalid plan that resulted in "diffs don't match" error when 667 a computed attribute was used as part of a set parameter. [GH-1073] 668 * core: Fix edge case where state containing both "resource" and 669 "resource.0" would ignore the latter completely. [GH-1086] 670 * core: Modules with a source of a relative file path moving up 671 directories work properly, i.e. "../a" [GH-1232] 672 * providers/aws: manually deleted VPC removes it from the state 673 * providers/aws: `source_dest_check` regression fixed (now works). [GH-1020] 674 * providers/aws: Longer wait times for DB instances. 675 * providers/aws: Longer wait times for route53 records (30 mins). [GH-1164] 676 * providers/aws: Fix support for TXT records in Route 53. [GH-1213] 677 * providers/aws: Fix support for wildcard records in Route 53. [GH-1222] 678 * providers/aws: Fix issue with ignoring the 'self' attribute of a 679 Security Group rule. [GH-1223] 680 * providers/aws: Fix issue with `sql_mode` in RDS parameter group always 681 causing an update. [GH-1225] 682 * providers/aws: Fix dependency violation with subnets and security groups 683 [GH-1252] 684 * providers/aws: Fix issue with refreshing `db_subnet_groups` causing an error 685 instead of updating state [GH-1254] 686 * providers/aws: Prevent empty string to be used as default 687 `health_check_type` [GH-1052] 688 * providers/aws: Add tags on AWS IG creation, not just on update [GH-1176] 689 * providers/digitalocean: Waits until droplet is ready to be destroyed [GH-1057] 690 * providers/digitalocean: More lenient about 404's while waiting [GH-1062] 691 * providers/digitalocean: FQDN for domain records in CNAME, MX, NS, etc. 692 Also fixes invalid updates in plans. [GH-863] 693 * providers/google: Network data in state was not being stored. [GH-1095] 694 * providers/heroku: Fix panic when config vars block was empty. [GH-1211] 695 696 PLUGIN CHANGES: 697 698 * New `helper/schema` fields for resources: `Deprecated` and `Removed` allow 699 plugins to generate warning or error messages when a given attribute is used. 700 701 ## 0.3.7 (February 19, 2015) 702 703 IMPROVEMENTS: 704 705 * **New resources: `google_compute_forwarding_rule`, `google_compute_http_health_check`, 706 and `google_compute_target_pool`** - Together these provide network-level 707 load balancing. [GH-588] 708 * **New resource: `aws_main_route_table_association`** - Manage the main routing table 709 of a VPC. [GH-918] 710 * **New resource: `aws_vpc_peering_connection`** [GH-963] 711 * core: Formalized the syntax of interpolations and documented it 712 very heavily. 713 * core: Strings in interpolations can now contain further interpolations, 714 e.g.: `foo ${bar("${baz}")}`. 715 * provider/aws: Internet gateway supports tags [GH-720] 716 * provider/aws: Support the more standard environmental variable names 717 for access key and secret keys. [GH-851] 718 * provider/aws: The `aws_db_instance` resource no longer requires both 719 `final_snapshot_identifier` and `skip_final_snapshot`; the presence or 720 absence of the former now implies the latter. [GH-874] 721 * provider/aws: Avoid unnecessary update of `aws_subnet` when 722 `map_public_ip_on_launch` is not specified in config. [GH-898] 723 * provider/aws: Add `apply_method` to `aws_db_parameter_group` [GH-897] 724 * provider/aws: Add `storage_type` to `aws_db_instance` [GH-896] 725 * provider/aws: ELB can update listeners without requiring new. [GH-721] 726 * provider/aws: Security group support egress rules. [GH-856] 727 * provider/aws: Route table supports VPC peering connection on route. [GH-963] 728 * provider/aws: Add `root_block_device` to `aws_db_instance` [GH-998] 729 * provider/google: Remove "client secrets file", as it's no longer necessary 730 for API authentication [GH-884]. 731 * provider/google: Expose `self_link` on `google_compute_instance` [GH-906] 732 733 BUG FIXES: 734 735 * core: Fixing use of remote state with plan files. [GH-741] 736 * core: Fix a panic case when certain invalid types were used in 737 the configuration. [GH-691] 738 * core: Escape characters `\"`, `\n`, and `\\` now work in interpolations. 739 * core: Fix crash that could occur when there are exactly zero providers 740 installed on a system. [GH-786] 741 * core: JSON TF configurations can configure provisioners. [GH-807] 742 * core: Sort `depends_on` in state to prevent unnecessary file changes. [GH-928] 743 * core: State containing the zero value won't cause a diff with the 744 lack of a value. [GH-952] 745 * core: If a set type becomes empty, the state will be properly updated 746 to remove it. [GH-952] 747 * core: Bare "splat" variables are not allowed in provisioners. [GH-636] 748 * core: Invalid configuration keys to sub-resources are now errors. [GH-740] 749 * command/apply: Won't try to initialize modules in some cases when 750 no arguments are given. [GH-780] 751 * command/apply: Fix regression where user variables weren't asked [GH-736] 752 * helper/hashcode: Update `hash.String()` to always return a positive index. 753 Fixes issue where specific strings would convert to a negative index 754 and be omitted when creating Route53 records. [GH-967] 755 * provider/aws: Automatically suffix the Route53 zone name on record names. [GH-312] 756 * provider/aws: Instance should ignore root EBS devices. [GH-877] 757 * provider/aws: Fix `aws_db_instance` to not recreate each time. [GH-874] 758 * provider/aws: ASG termination policies are synced with remote state. [GH-923] 759 * provider/aws: ASG launch configuration setting can now be updated in-place. [GH-904] 760 * provider/aws: No read error when subnet is manually deleted. [GH-889] 761 * provider/aws: Tags with empty values (empty string) are properly 762 managed. [GH-968] 763 * provider/aws: Fix case where route table would delete its routes 764 on an unrelated change. [GH-990] 765 * provider/google: Fix bug preventing instances with metadata from being 766 created [GH-884]. 767 768 PLUGIN CHANGES: 769 770 * New `helper/schema` type: `TypeFloat` [GH-594] 771 * New `helper/schema` field for resources: `Exists` must point to a function 772 to check for the existence of a resource. This is used to properly 773 handle the case where the resource was manually deleted. [GH-766] 774 * There is a semantic change in `GetOk` where it will return `true` if 775 there is any value in the diff that is _non-zero_. Before, it would 776 return true only if there was a value in the diff. 777 778 ## 0.3.6 (January 6, 2015) 779 780 FEATURES: 781 782 * **New provider: `cloudstack`** 783 784 IMPROVEMENTS: 785 786 * **New resource: `aws_key_pair`** - Import a public key into AWS. [GH-695] 787 * **New resource: `heroku_cert`** - Manage Heroku app certs. 788 * provider/aws: Support `eu-central-1`, `cn-north-1`, and GovCloud. [GH-525] 789 * provider/aws: `route_table` can have tags. [GH-648] 790 * provider/google: Support Ubuntu images. [GH-724] 791 * provider/google: Support for service accounts. [GH-725] 792 793 BUG FIXES: 794 795 * core: temporary/hidden files that look like Terraform configurations 796 are no longer loaded. [GH-548] 797 * core: Set types in resources now result in deterministic states, 798 resulting in cleaner plans. [GH-663] 799 * core: fix issue where "diff was not the same" would come up with 800 diffing lists. [GH-661] 801 * core: fix crash where module inputs weren't strings, and add more 802 validation around invalid types here. [GH-624] 803 * core: fix error when using a computed module output as an input to 804 another module. [GH-659] 805 * core: map overrides in "terraform.tfvars" no longer result in a syntax 806 error. [GH-647] 807 * core: Colon character works in interpolation [GH-700] 808 * provider/aws: Fix crash case when internet gateway is not attached 809 to any VPC. [GH-664] 810 * provider/aws: `vpc_id` is no longer required. [GH-667] 811 * provider/aws: `availability_zones` on ELB will contain more than one 812 AZ if it is set as such. [GH-682] 813 * provider/aws: More fields are marked as "computed" properly, resulting 814 in more accurate diffs for AWS instances. [GH-712] 815 * provider/aws: Fix panic case by using the wrong type when setting 816 volume size for AWS instances. [GH-712] 817 * provider/aws: route table ignores routes with 'EnableVgwRoutePropagation' 818 origin since those come from gateways. [GH-722] 819 * provider/aws: Default network ACL ID and default security group ID 820 support for `aws_vpc`. [GH-704] 821 * provider/aws: Tags are not marked as computed. This introduces another 822 issue with not detecting external tags, but this will be fixed in 823 the future. [GH-730] 824 825 ## 0.3.5 (December 9, 2014) 826 827 FEATURES: 828 829 * **Remote State**: State files can now be stored remotely via HTTP, 830 Consul, or HashiCorp's Atlas. 831 * **New Provider: `atlas`**: Retrieve artifacts for deployment from 832 HashiCorp's Atlas service. 833 * New `element()` function to index into arrays 834 835 IMPROVEMENTS: 836 837 * provider/aws: Support tenancy for aws\_instance 838 * provider/aws: Support block devices for aws\_instance 839 * provider/aws: Support virtual\_name on block device 840 * provider/aws: Improve RDS reliability (more grace time) 841 * provider/aws: Added aws\_db\_parameter\_group resource 842 * provider/aws: Added tag support to aws\_subnet 843 * provider/aws: Routes in RouteTable are optional 844 * provider/aws: associate\_public\_ip\_address on aws\_launch\_configuration 845 * provider/aws: Added aws\_network\_acl 846 * provider/aws: Ingress rules in security groups are optional 847 * provider/aws: Support termination policy for ASG 848 * provider/digitalocean: Improved droplet size compatibility 849 850 BUG FIXES: 851 852 * core: Fixed issue causing double delete. [GH-555] 853 * core: Fixed issue with create-before-destroy not being respected in 854 some circumstances. 855 * core: Fixing issue with count expansion with non-homogenous instance 856 plans. 857 * core: Fix issue with referencing resource variables from resources 858 that don't exist yet within resources that do exist, or modules. 859 * core: Fixing depedency handling for modules 860 * core: Fixing output handling [GH-474] 861 * core: Fixing count interpolation in modules 862 * core: Fixing multi-var without module state 863 * core: Fixing HCL variable declaration 864 * core: Fixing resource interpolation for without state 865 * core: Fixing handling of computed maps 866 * command/init: Fixing recursion issue [GH-518] 867 * command: Validate config before requesting input [GH-602] 868 * build: Fixing GOPATHs with spaces 869 870 MISC: 871 872 * provider/aws: Upgraded to helper.Schema 873 * provider/heroku: Upgraded to helper.Schema 874 * provider/mailgun: Upgraded to helper.Schema 875 * provider/dnsimple: Upgraded to helper.Schema 876 * provider/cloudflare: Upgraded to helper.Schema 877 * provider/digitalocean: Upgraded to helper.Schema 878 * provider/google: Upgraded to helper.Schema 879 880 ## 0.3.1 (October 21, 2014) 881 882 IMPROVEMENTS: 883 884 * providers/aws: Support tags for security groups. 885 * providers/google: Add "external\_address" to network attributes [GH-454] 886 * providers/google: External address is used as default connection host. [GH-454] 887 * providers/heroku: Support `locked` and `personal` booleans on organization 888 settings. [GH-406] 889 890 BUG FIXES: 891 892 * core: Remove panic case when applying with a plan that generates no 893 new state. [GH-403] 894 * core: Fix a hang that can occur with enough resources. [GH-410] 895 * core: Config validation will not error if the field is being 896 computed so the value is still unknown. 897 * core: If a resource fails to create and has provisioners, it is 898 marked as tainted. [GH-434] 899 * core: Set types are validated to be sets. [GH-413] 900 * core: String types are validated properly. [GH-460] 901 * core: Fix crash case when destroying with tainted resources. [GH-412] 902 * core: Don't execute provisioners in some cases on destroy. 903 * core: Inherited provider configurations will be properly interpolated. [GH-418] 904 * core: Refresh works properly if there are outputs that depend on resources 905 that aren't yet created. [GH-483] 906 * providers/aws: Refresh of launch configs and autoscale groups load 907 the correct data and don't incorrectly recreate themselves. [GH-425] 908 * providers/aws: Fix case where ELB would incorrectly plan to modify 909 listeners (with the same data) in some cases. 910 * providers/aws: Retry destroying internet gateway for some amount of time 911 if there is a dependency violation since it is probably just eventual 912 consistency (public facing resources being destroyed). [GH-447] 913 * providers/aws: Retry deleting security groups for some amount of time 914 if there is a dependency violation since it is probably just eventual 915 consistency. [GH-436] 916 * providers/aws: Retry deleting subnet for some amount of time if there is a 917 dependency violation since probably asynchronous destroy events take 918 place still. [GH-449] 919 * providers/aws: Drain autoscale groups before deleting. [GH-435] 920 * providers/aws: Fix crash case if launch config is manually deleted. [GH-421] 921 * providers/aws: Disassociate EIP before destroying. 922 * providers/aws: ELB treats subnets as a set. 923 * providers/aws: Fix case where in a destroy/create tags weren't reapplied. [GH-464] 924 * providers/aws: Fix incorrect/erroneous apply cases around security group 925 rules. [GH-457] 926 * providers/consul: Fix regression where `key` param changed to `keys. [GH-475] 927 928 ## 0.3.0 (October 14, 2014) 929 930 FEATURES: 931 932 * **Modules**: Configuration can now be modularized. Modules can live on 933 GitHub, BitBucket, Git/Hg repos, HTTP URLs, and file paths. Terraform 934 automatically downloads/updates modules for you on request. 935 * **New Command: `init`**. This command initializes a Terraform configuration 936 from an existing Terraform module (also new in 0.3). 937 * **New Command: `destroy`**. This command destroys infrastructure 938 created with `apply`. 939 * Terraform will ask for user input to fill in required variables and 940 provider configurations if they aren't set. 941 * `terraform apply MODULE` can be used as a shorthand to quickly build 942 infrastructure from a module. 943 * The state file format is now JSON rather than binary. This allows for 944 easier machine and human read/write. Old binary state files will be 945 automatically upgraded. 946 * You can now specify `create_before_destroy` as an option for replacement 947 so that new resources are created before the old ones are destroyed. 948 * The `count` metaparameter can now contain interpolations (such as 949 variables). 950 * The current index for a resource with a `count` set can be interpolated 951 using `${count.index}`. 952 * Various paths can be interpolated with the `path.X` variables. For example, 953 the path to the current module can be interpolated using `${path.module}`. 954 955 IMPROVEMENTS: 956 957 * config: Trailing commas are now allowed for the final elements of lists. 958 * core: Plugins are loaded from `~/.terraform.d/plugins` (Unix) or 959 `%USERDATA%/terraform.d/plugins` (Windows). 960 * command/show: With no arguments, it will show the default state. [GH-349] 961 * helper/schema: Can now have default values. [GH-245] 962 * providers/aws: Tag support for most resources. 963 * providers/aws: New resource `db_subnet_group`. [GH-295] 964 * providers/aws: Add `map_public_ip_on_launch` for subnets. [GH-285] 965 * providers/aws: Add `iam_instance_profile` for instances. [GH-319] 966 * providers/aws: Add `internal` option for ELBs. [GH-303] 967 * providers/aws: Add `ssl_certificate_id` for ELB listeners. [GH-350] 968 * providers/aws: Add `self` option for security groups for ingress 969 rules with self as source. [GH-303] 970 * providers/aws: Add `iam_instance_profile` option to 971 `aws_launch_configuration`. [GH-371] 972 * providers/aws: Non-destructive update of `desired_capacity` for 973 autoscale groups. 974 * providers/aws: Add `main_route_table_id` attribute to VPCs. [GH-193] 975 * providers/consul: Support tokens. [GH-396] 976 * providers/google: Support `target_tags` for firewalls. [GH-324] 977 * providers/google: `google_compute_instance` supports `can_ip_forward` [GH-375] 978 * providers/google: `google_compute_disk` supports `type` to support disks 979 such as SSDs. [GH-351] 980 * provisioners/local-exec: Output from command is shown in CLI output. [GH-311] 981 * provisioners/remote-exec: Output from command is shown in CLI output. [GH-311] 982 983 BUG FIXES: 984 985 * core: Providers are validated even without a `provider` block. [GH-284] 986 * core: In the case of error, walk all non-dependent trees. 987 * core: Plugin loading from CWD works properly. 988 * core: Fix many edge cases surrounding the `count` meta-parameter. 989 * core: Strings in the configuration can escape double-quotes with the 990 standard `\"` syntax. 991 * core: Error parsing CLI config will show properly. [GH-288] 992 * core: More than one Ctrl-C will exit immediately. 993 * providers/aws: autoscaling_group can be launched into a vpc [GH-259] 994 * providers/aws: not an error when RDS instance is deleted manually. [GH-307] 995 * providers/aws: Retry deleting subnet for some time while AWS eventually 996 destroys dependencies. [GH-357] 997 * providers/aws: More robust destroy for route53 records. [GH-342] 998 * providers/aws: ELB generates much more correct plans without extranneous 999 data. 1000 * providers/aws: ELB works properly with dynamically changing 1001 count of instances. 1002 * providers/aws: Terraform can handle ELBs deleted manually. [GH-304] 1003 * providers/aws: Report errors properly if RDS fails to delete. [GH-310] 1004 * providers/aws: Wait for launch configuration to exist after creation 1005 (AWS eventual consistency) [GH-302] 1006 1007 ## 0.2.2 (September 9, 2014) 1008 1009 IMPROVEMENTS: 1010 1011 * providers/amazon: Add `ebs_optimized` flag. [GH-260] 1012 * providers/digitalocean: Handle 404 on delete 1013 * providers/digitalocean: Add `user_data` argument for creating droplets 1014 * providers/google: Disks can be marked `auto_delete`. [GH-254] 1015 1016 BUG FIXES: 1017 1018 * core: Fix certain syntax of configuration that could cause hang. [GH-261] 1019 * core: `-no-color` flag properly disables color. [GH-250] 1020 * core: "~" is expanded in `-var-file` flags. [GH-273] 1021 * core: Errors with tfvars are shown in console. [GH-269] 1022 * core: Interpolation function calls with more than two args parse. [GH-282] 1023 * providers/aws: Refreshing EIP from pre-0.2 state file won't error. [GH-258] 1024 * providers/aws: Creating EIP without an instance/network won't fail. 1025 * providers/aws: Refreshing EIP manually deleted works. 1026 * providers/aws: Retry EIP delete to allow AWS eventual consistency to 1027 detect it isn't attached. [GH-276] 1028 * providers/digitalocean: Handle situations when resource was destroyed 1029 manually. [GH-279] 1030 * providers/digitalocean: Fix a couple scenarios where the diff was 1031 incorrect (and therefore the execution as well). 1032 * providers/google: Attaching a disk source (not an image) works 1033 properly. [GH-254] 1034 1035 ## 0.2.1 (August 31, 2014) 1036 1037 IMPROVEMENTS: 1038 1039 * core: Plugins are automatically discovered in the executable directory 1040 or pwd if named properly. [GH-190] 1041 * providers/mailgun: domain records are now saved to state 1042 1043 BUG FIXES: 1044 1045 * core: Configuration parses when identifier and '=' have no space. [GH-243] 1046 * core: `depends_on` with `count` generates the proper graph. [GH-244] 1047 * core: Depending on a computed variable of a list type generates a 1048 plan without failure. i.e. `${type.name.foos.0.bar}` where `foos` 1049 is computed. [GH-247] 1050 * providers/aws: Route53 destroys in parallel work properly. [GH-183] 1051 1052 ## 0.2.0 (August 28, 2014) 1053 1054 BACKWARDS INCOMPATIBILITIES: 1055 1056 * We've replaced the configuration language in use from a C library to 1057 a pure-Go reimplementation. In the process, we removed some features 1058 of the language since it was too flexible: 1059 * Semicolons are no longer valid at the end of lines 1060 * Keys cannot be double-quoted strings: `"foo" = "bar"` is no longer 1061 valid. 1062 * JSON style maps `{ "foo": "bar" }` are no longer valid outside of JSON. 1063 Maps must be in the format of `{ foo = "bar" }` (like other objects 1064 in the config) 1065 * Heroku apps now require (will not validate without) `region` and 1066 `name` due to an upstream API change. [GH-239] 1067 1068 FEATURES: 1069 1070 * **New Provider: `google`**: Manage Google Compute instances, disks, 1071 firewalls, and more. 1072 * **New Provider: `mailgun`**: Manage mailgun domains. 1073 * **New Function: `concat`**: Concatenate multiple strings together. 1074 Example: `concat(var.region, "-", var.channel)`. 1075 1076 IMPROVEMENTS: 1077 1078 * core: "~/.terraformrc" (Unix) or "%APPDATA%/terraform.rc" (Windows) 1079 can be used to configure custom providers and provisioners. [GH-192] 1080 * providers/aws: EIPs now expose `allocation_id` and `public_ip` 1081 attributes. 1082 * providers/aws: Security group rules can be updated without a 1083 destroy/create. 1084 * providers/aws: You can enable and disable dns settings for VPCs. [GH-172] 1085 * providers/aws: Can specify a private IP address for `aws_instance` [GH-217] 1086 1087 BUG FIXES: 1088 1089 * core: Variables are validated to not contain interpolations. [GH-180] 1090 * core: Key files for provisioning can now contain `~` and will be expanded 1091 to the user's home directory. [GH-179] 1092 * core: The `file()` function can load files in sub-directories. [GH-213] 1093 * core: Fix issue where some JSON structures didn't map properly into 1094 Terraform structures. [GH-177] 1095 * core: Resources with only `file()` calls will interpolate. [GH-159] 1096 * core: Variables work in block names. [GH-234] 1097 * core: Plugins are searched for in the same directory as the executable 1098 before the PATH. [GH-157] 1099 * command/apply: "tfvars" file no longer interferes with plan apply. [GH-153] 1100 * providers/aws: Fix issues around failing to read EIPs. [GH-122] 1101 * providers/aws: Autoscaling groups now register and export load 1102 balancers. [GH-207] 1103 * providers/aws: Ingress results are treated as a set, so order doesn't 1104 matter anymore. [GH-87] 1105 * providers/aws: Instance security groups treated as a set [GH-194] 1106 * providers/aws: Retry Route53 requests if operation failed because another 1107 operation is in progress [GH-183] 1108 * providers/aws: Route53 records with multiple record values work. [GH-221] 1109 * providers/aws: Changing AMI doesn't result in errors anymore. [GH-196] 1110 * providers/heroku: If you delete the `config_vars` block, config vars 1111 are properly nuked. 1112 * providers/heroku: Domains and drains are deleted before the app. 1113 * providers/heroku: Moved from the client library bgentry/heroku-go to 1114 cyberdelia/heroku-go [GH-239]. 1115 * providers/heroku: Plans without a specific plan name for 1116 heroku\_addon work. [GH-198] 1117 1118 PLUGIN CHANGES: 1119 1120 * **New Package:** `helper/schema`. This introduces a high-level framework 1121 for easily writing new providers and resources. The Heroku provider has 1122 been converted to this as an example. 1123 1124 ## 0.1.1 (August 5, 2014) 1125 1126 FEATURES: 1127 1128 * providers/heroku: Now supports creating Heroku Drains [GH-97] 1129 1130 IMPROVEMENTS: 1131 1132 * providers/aws: Launch configurations accept user data [GH-94] 1133 * providers/aws: Regions are now validated [GH-96] 1134 * providers/aws: ELB now supports health check configurations [GH-109] 1135 1136 BUG FIXES: 1137 1138 * core: Default variable file "terraform.tfvars" is auto-loaded. [GH-59] 1139 * core: Multi-variables (`foo.*.bar`) work even when `count = 1`. [GH-115] 1140 * core: `file()` function can have string literal arg [GH-145] 1141 * providers/cloudflare: Include the proper bins so the cloudflare 1142 provider is compiled 1143 * providers/aws: Engine version for RDS now properly set [GH-118] 1144 * providers/aws: Security groups now depend on each other and 1145 * providers/aws: DB instances now wait for destroys, have proper 1146 dependencies and allow passing skip_final_snapshot 1147 * providers/aws: Add associate_public_ip_address as an attribute on 1148 the aws_instance resource [GH-85] 1149 * providers/aws: Fix cidr blocks being updated [GH-65, GH-85] 1150 * providers/aws: Description is now required for security groups 1151 * providers/digitalocean: Private IP addresses are now a separate 1152 attribute 1153 * provisioner/all: If an SSH key is given with a password, a better 1154 error message is shown. [GH-73] 1155 1156 ## 0.1.0 (July 28, 2014) 1157 1158 * Initial release