github.com/fluxrad/terraform@v0.6.4-0.20150906191316-06627ccf39fa/CHANGELOG.md (about)

     1  ## 0.6.4 (unreleased)
     2  
     3  FEATURES:
     4  
     5    * **New provider: `rundeck`** [GH-2412]
     6    * **New resource: `cloudstack_loadbalancer_rule`** [GH-2934]
     7    * **New resource: `google_compute_project_metadata`** [GH-3065]
     8    * **New resources: `aws_ami`, `aws_ami_copy`, `aws_ami_from_instance`** [GH-2874]
     9  
    10  IMPROVEMENTS:
    11  
    12    * core: Add a function to find the index of an element in a list. [GH-2704]
    13    * core: Print all outputs when `terraform output` is called with no arguments [GH-2920]
    14    * core: In plan output summary, count resource replacement as Add/Remove instead of Change [GH-3173]
    15    * provider/aws: Add `instance_initiated_shutdown_behavior` to AWS Instance [GH-2887]
    16    * provider/aws: Support IAM role names (previously just ARNs) in `aws_ecs_service.iam_role` [GH-3061]
    17    * provider/aws: Add update method to RDS Subnet groups, can modify subnets without recreating  [GH-3053]
    18    * provider/aws: Paginate notifications returned for ASG Notifications [GH-3043]
    19    * provider/aws: add `ses_smtp_password` to `aws_iam_access_key` [GH-3165]
    20    * provider/aws: read `iam_instance_profile` for `aws_instance` and save to state [GH-3167]
    21    * provider/aws: Add `versioning` option to `aws_s3_bucket` [GH-2942]
    22    * provider/cloudstack: Add `project` parameter to `cloudstack_vpc`, `cloudstack_network`, `cloudstack_ipaddress` and `cloudstack_disk` [GH-3035]
    23  
    24  BUG FIXES:
    25  
    26    * core: Fix problems referencing list attributes in interpolations [GH-2157]
    27    * provider/google: Crashes with interface conversion in GCE Instance Template [GH-3027]
    28    * provider/google: Convert int to int64 when building the GKE cluster.NodeConfig struct [GH-2978]
    29    * provider/aws: Retry creation of `aws_ecs_service` if IAM policy isn't ready yet [GH-3061]
    30    * provider/aws: Fix issue with mixed capitalization for RDS Instances  [GH-3053]
    31    * provider/aws: Fix issue with RDS to allow major version upgrades [GH-3053]
    32    * provider/aws: Fix shard_count in `aws_kinesis_stream` [GH-2986]
    33    * provider/aws: Fix issue with `key_name` and using VPCs with spot instance requests [GH-2954]
    34    * provider/aws: Fix unresolvable diffs coming from `aws_elasticache_cluster` names being downcased
    35        by AWS [GH-3120]
    36    * provider/openstack: add state 'downloading' to list of expected states in
    37        `blockstorage_volume_v1` creation [GH-2866]
    38  
    39  ## 0.6.3 (August 11, 2015)
    40  
    41  BUG FIXES:
    42  
    43    * core: Skip all descendents after error, not just children; helps prevent confusing
    44        additional errors/crashes after initial failure [GH-2963]
    45    * core: fix deadlock possibility when both a module and a dependent resource are
    46        removed in the same run [GH-2968]
    47    * provider/aws: Fix issue with authenticating when using IAM profiles [GH-2959]
    48  
    49  ## 0.6.2 (August 6, 2015)
    50  
    51  FEATURES:
    52  
    53    * **New resource: `google_compute_instance_group_manager`** [GH-2868]
    54    * **New resource: `google_compute_autoscaler`** [GH-2868]
    55    * **New resource: `aws_s3_bucket_object`** [GH-2898]
    56  
    57  IMPROVEMENTS:
    58  
    59    * core: Add resource IDs to errors coming from `apply`/`refresh` [GH-2815]
    60    * provider/aws: Validate credentials before walking the graph [GH-2730]
    61    * provider/aws: Added website_domain for S3 buckets [GH-2210]
    62    * provider/aws: ELB names are now optional, and generated by Terraform if omitted [GH-2571]
    63    * provider/aws: Downcase RDS engine names to prevent continuous diffs [GH-2745]
    64    * provider/aws: Added `source_dest_check` attribute to the aws_network_interface [GH-2741]
    65    * provider/aws: Clean up externally removed Launch Configurations [GH-2806]
    66    * provider/aws: Allow configuration of the DynamoDB Endpoint [GH-2825]
    67    * provider/aws: Compute private ip addresses of ENIs if they are not specified [GH-2743]
    68    * provider/aws: Add `arn` attribute for DynamoDB tables [GH-2924]
    69    * provider/azure: Allow `settings_file` to accept XML string [GH-2922]
    70    * provider/azure: Provide a simpler error when using a Platform Image without a
    71        Storage Service [GH-2861]
    72    * provider/google: `account_file` is now expected to be JSON. Paths are still supported for
    73        backwards compatibility. [GH-2839]
    74  
    75  BUG FIXES:
    76  
    77    * core: Prevent error duplication in `apply` [GH-2815]
    78    * core: Fix crash when  a provider validation adds a warning [GH-2878]
    79    * provider/aws: Fix issue with toggling monitoring in AWS Instances [GH-2794]
    80    * provider/aws: Fix issue with Spot Instance Requests and cancellation [GH-2805]
    81    * provider/aws: Fix issue with checking for ElastiCache cluster cache node status [GH-2842]
    82    * provider/aws: Fix issue when unable to find a Root Block Device name of an Instance Backed
    83        AMI [GH-2646]
    84    * provider/dnsimple: Domain and type should force new records [GH-2777]
    85    * provider/aws: Fix issue with IAM Server Certificates and Chains [GH-2871]
    86    * provider/aws: Fix issue with IAM Server Certificates when using `path` [GH-2871]
    87    * provider/aws: Fix issue in Security Group Rules when the Security Group is not found [GH-2897]
    88    * provider/aws: allow external ENI attachments [GH-2943]
    89    * provider/aws: Fix issue with S3 Buckets, and throwing an error when not found [GH-2925]
    90  
    91  ## 0.6.1 (July 20, 2015)
    92  
    93  FEATURES:
    94  
    95    * **New resource: `google_container_cluster`** [GH-2357]
    96    * **New resource: `aws_vpc_endpoint`** [GH-2695]
    97  
    98  IMPROVEMENTS:
    99  
   100    * connection/ssh: Print SSH bastion host details to output [GH-2684]
   101    * provider/aws: Create RDS databases from snapshots [GH-2062]
   102    * provider/aws: Add support for restoring from Redis backup stored in S3 [GH-2634]
   103    * provider/aws: Add `maintenance_window` to ElastiCache cluster [GH-2642]
   104    * provider/aws: Availability Zones are optional when specifying VPC Zone Identifiers in
   105        Auto Scaling Groups updates [GH-2724]
   106    * provider/google: Add metadata_startup_script to google_compute_instance [GH-2375]
   107  
   108  BUG FIXES:
   109  
   110    * core: Don't prompt for variables with defaults [GH-2613]
   111    * core: Return correct number of planned updates [GH-2620]
   112    * core: Fix "provider not found" error that can occur while running
   113        a destroy plan with grandchildren modules [GH-2755]
   114    * core: Fix UUID showing up in diff for computed splat (`foo.*.bar`)
   115        variables. [GH-2788]
   116    * core: Orphan modules that contain no resources (only other modules)
   117        are properly destroyed up to arbitrary depth [GH-2786]
   118    * core: Fix "attribute not available" during destroy plans in
   119        cases where the parameter is passed between modules [GH-2775]
   120    * core: Record schema version when destroy fails [GH-2923]
   121    * connection/ssh: fix issue on machines with an SSH Agent available
   122      preventing `key_file` from being read without explicitly
   123      setting `agent = false` [GH-2615]
   124    * provider/aws: Allow uppercase characters in `aws_elb.name` [GH-2580]
   125    * provider/aws: Allow underscores in `aws_db_subnet_group.name` (undocumented by AWS) [GH-2604]
   126    * provider/aws: Allow dots in `aws_db_subnet_group.name` (undocumented by AWS) [GH-2665]
   127    * provider/aws: Fix issue with pending Spot Instance requests [GH-2640]
   128    * provider/aws: Fix issue in AWS Classic environment with referencing external
   129        Security Groups [GH-2644]
   130    * provider/aws: Bump internet gateway detach timeout [GH-2669]
   131    * provider/aws: Fix issue with detecting differences in DB Parameters [GH-2728]
   132    * provider/aws: `ecs_cluster` rename (recreation) and deletion is handled correctly [GH-2698]
   133    * provider/aws: `aws_route_table` ignores routes generated for VPC endpoints [GH-2695]
   134    * provider/aws: Fix issue with Launch Configurations and enable_monitoring [GH-2735]
   135    * provider/openstack: allow empty api_key and endpoint_type [GH-2626]
   136    * provisioner/chef: Fix permission denied error with ohai hints [GH-2781]
   137  
   138  ## 0.6.0 (June 30, 2015)
   139  
   140  BACKWARDS INCOMPATIBILITIES:
   141  
   142   * command/push: If a variable is already set within Atlas, it won't be
   143       updated unless the `-overwrite` flag is present [GH-2373]
   144   * connection/ssh: The `agent` field now defaults to `true` if
   145       the `SSH_AGENT_SOCK` environment variable is present. In other words,
   146       `ssh-agent` support is now opt-out instead of opt-in functionality. [GH-2408]
   147   * provider/aws: If you were setting access and secret key to blank ("")
   148       to force Terraform to load credentials from another source such as the
   149       EC2 role, this will now error. Remove the blank lines and Terraform
   150       will load from other sources.
   151   * `concat()` has been repurposed to combine lists instead of strings (old behavior
   152       of joining strings is maintained in this version but is deprecated, strings
   153       should be combined using interpolation syntax, like "${var.foo}{var.bar}")
   154       [GH-1790]
   155  
   156  FEATURES:
   157  
   158    * **New provider: `azure`** [GH-2052, GH-2053, GH-2372, GH-2380, GH-2394, GH-2515, GH-2530, GH-2562]
   159    * **New resource: `aws_autoscaling_notification`** [GH-2197]
   160    * **New resource: `aws_autoscaling_policy`** [GH-2201]
   161    * **New resource: `aws_cloudwatch_metric_alarm`** [GH-2201]
   162    * **New resource: `aws_dynamodb_table`** [GH-2121]
   163    * **New resource: `aws_ecs_cluster`** [GH-1803]
   164    * **New resource: `aws_ecs_service`** [GH-1803]
   165    * **New resource: `aws_ecs_task_definition`** [GH-1803, GH-2402]
   166    * **New resource: `aws_elasticache_parameter_group`** [GH-2276]
   167    * **New resource: `aws_flow_log`** [GH-2384]
   168    * **New resource: `aws_iam_group_association`** [GH-2273]
   169    * **New resource: `aws_iam_policy_attachment`** [GH-2395]
   170    * **New resource: `aws_lambda_function`** [GH-2170]
   171    * **New resource: `aws_route53_delegation_set`** [GH-1999]
   172    * **New resource: `aws_route53_health_check`** [GH-2226]
   173    * **New resource: `aws_spot_instance_request`** [GH-2263]
   174    * **New resource: `cloudstack_ssh_keypair`** [GH-2004]
   175    * **New remote state backend: `swift`**: You can now store remote state in
   176       a OpenStack Swift. [GH-2254]
   177    * command/output: support display of module outputs [GH-2102]
   178    * core: `keys()` and `values()` funcs for map variables [GH-2198]
   179    * connection/ssh: SSH bastion host support and ssh-agent forwarding [GH-2425]
   180  
   181  IMPROVEMENTS:
   182  
   183    * core: HTTP remote state now accepts `skip_cert_verification`
   184        option to ignore TLS cert verification. [GH-2214]
   185    * core: S3 remote state now accepts the 'encrypt' option for SSE [GH-2405]
   186    * core: `plan` now reports sum of resources to be changed/created/destroyed [GH-2458]
   187    * core: Change string list representation so we can distinguish empty, single
   188        element lists [GH-2504]
   189    * core: Properly close provider and provisioner plugin connections [GH-2406, GH-2527]
   190    * provider/aws: AutoScaling groups now support updating Load Balancers without
   191        recreation [GH-2472]
   192    * provider/aws: Allow more in-place updates for ElastiCache cluster without recreating
   193        [GH-2469]
   194    * provider/aws: ElastiCache Subnet Groups can be updated
   195        without destroying first [GH-2191]
   196    * provider/aws: Normalize `certificate_chain` in `aws_iam_server_certificate` to
   197        prevent unnecessary replacement. [GH-2411]
   198    * provider/aws: `aws_instance` supports `monitoring' [GH-2489]
   199    * provider/aws: `aws_launch_configuration` now supports `enable_monitoring` [GH-2410]
   200    * provider/aws: Show outputs after `terraform refresh` [GH-2347]
   201    * provider/aws: Add backoff/throttling during DynamoDB creation [GH-2462]
   202    * provider/aws: Add validation for aws_vpc.cidr_block [GH-2514]
   203    * provider/aws: Add validation for aws_db_subnet_group.name [GH-2513]
   204    * provider/aws: Add validation for aws_db_instance.identifier [GH-2516]
   205    * provider/aws: Add validation for aws_elb.name [GH-2517]
   206    * provider/aws: Add validation for aws_security_group (name+description) [GH-2518]
   207    * provider/aws: Add validation for aws_launch_configuration [GH-2519]
   208    * provider/aws: Add validation for aws_autoscaling_group.name [GH-2520]
   209    * provider/aws: Add validation for aws_iam_role.name [GH-2521]
   210    * provider/aws: Add validation for aws_iam_role_policy.name [GH-2552]
   211    * provider/aws: Add validation for aws_iam_instance_profile.name [GH-2553]
   212    * provider/aws: aws_auto_scaling_group.default_cooldown no longer requires
   213        resource replacement [GH-2510]
   214    * provider/aws: add AH and ESP protocol integers [GH-2321]
   215    * provider/docker: `docker_container` has the `privileged`
   216        option. [GH-2227]
   217    * provider/openstack: allow `OS_AUTH_TOKEN` environment variable
   218        to set the openstack `api_key` field [GH-2234]
   219    * provider/openstack: Can now configure endpoint type (public, admin,
   220        internal) [GH-2262]
   221    * provider/cloudstack: `cloudstack_instance` now supports projects [GH-2115]
   222    * provisioner/chef: Added a `os_type` to specifically specify the target OS [GH-2483]
   223    * provisioner/chef: Added a `ohai_hints` option to upload hint files [GH-2487]
   224  
   225  BUG FIXES:
   226  
   227    * core: lifecycle `prevent_destroy` can be any value that can be
   228        coerced into a bool [GH-2268]
   229    * core: matching provider types in sibling modules won't override
   230        each other's config. [GH-2464]
   231    * core: computed provider configurations now properly validate [GH-2457]
   232    * core: orphan (commented out) resource dependencies are destroyed in
   233        the correct order [GH-2453]
   234    * core: validate object types in plugins are actually objects [GH-2450]
   235    * core: fix `-no-color` flag in subcommands [GH-2414]
   236    * core: Fix error of 'attribute not found for variable' when a computed
   237        resource attribute is used as a parameter to a module [GH-2477]
   238    * core: moduled orphans will properly inherit provider configs [GH-2476]
   239    * core: modules with provider aliases work properly if the parent
   240        doesn't implement those aliases [GH-2475]
   241    * core: unknown resource attributes passed in as parameters to modules
   242        now error [GH-2478]
   243    * core: better error messages for missing variables [GH-2479]
   244    * core: removed set items now properly appear in diffs and applies [GH-2507]
   245    * core: '*' will not be added as part of the variable name when you
   246        attempt multiplication without a space [GH-2505]
   247    * core: fix target dependency calculation across module boundaries [GH-2555]
   248    * command/*: fixed bug where variable input was not asked for unset
   249        vars if terraform.tfvars existed [GH-2502]
   250    * command/apply: prevent output duplication when reporting errors [GH-2267]
   251    * command/apply: destroyed orphan resources are properly counted [GH-2506]
   252    * provider/aws: loading credentials from the environment (vars, EC2 role,
   253        etc.) is more robust and will not ask for credentials from stdin [GH-1841]
   254    * provider/aws: fix panic when route has no `cidr_block` [GH-2215]
   255    * provider/aws: fix issue preventing destruction of IAM Roles [GH-2177]
   256    * provider/aws: fix issue where Security Group Rules could collide and fail
   257        to save to the state file correctly [GH-2376]
   258    * provider/aws: fix issue preventing destruction self referencing Securtity
   259       Group Rules [GH-2305]
   260    * provider/aws: fix issue causing perpetual diff on ELB listeners
   261        when non-lowercase protocol strings were used [GH-2246]
   262    * provider/aws: corrected frankfurt S3 website region [GH-2259]
   263    * provider/aws: `aws_elasticache_cluster` port is required [GH-2160]
   264    * provider/aws: Handle AMIs where RootBlockDevice does not appear in the
   265        BlockDeviceMapping, preventing root_block_device from working [GH-2271]
   266    * provider/aws: fix `terraform show` with remote state [GH-2371]
   267    * provider/aws: detect `instance_type` drift on `aws_instance` [GH-2374]
   268    * provider/aws: fix crash when `security_group_rule` referenced non-existent
   269        security group [GH-2434]
   270    * provider/aws: `aws_launch_configuration` retries if IAM instance
   271        profile is not ready yet. [GH-2452]
   272    * provider/aws: `fqdn` is populated during creation for `aws_route53_record` [GH-2528]
   273    * provider/aws: retry VPC delete on DependencyViolation due to eventual
   274        consistency [GH-2532]
   275    * provider/aws: VPC peering connections in "failed" state are deleted [GH-2544]
   276    * provider/aws: EIP deletion works if it was manually disassociated [GH-2543]
   277    * provider/aws: `elasticache_subnet_group.subnet_ids` is now a required argument [GH-2534]
   278    * provider/aws: handle nil response from VPN connection describes [GH-2533]
   279    * provider/cloudflare: manual record deletion doesn't cause error [GH-2545]
   280    * provider/digitalocean: handle case where droplet is deleted outside of
   281        terraform [GH-2497]
   282    * provider/dme: No longer an error if record deleted manually [GH-2546]
   283    * provider/docker: Fix issues when using containers with links [GH-2327]
   284    * provider/openstack: fix panic case if API returns nil network [GH-2448]
   285    * provider/template: fix issue causing "unknown variable" rendering errors
   286        when an existing set of template variables is changed [GH-2386]
   287    * provisioner/chef: improve the decoding logic to prevent parameter not found errors [GH-2206]
   288  
   289  ## 0.5.3 (June 1, 2015)
   290  
   291  IMPROVEMENTS:
   292  
   293    * **New resource: `aws_kinesis_stream`** [GH-2110]
   294    * **New resource: `aws_iam_server_certificate`** [GH-2086]
   295    * **New resource: `aws_sqs_queue`** [GH-1939]
   296    * **New resource: `aws_sns_topic`** [GH-1974]
   297    * **New resource: `aws_sns_topic_subscription`** [GH-1974]
   298    * **New resource: `aws_volume_attachment`** [GH-2050]
   299    * **New resource: `google_storage_bucket`** [GH-2060]
   300    * provider/aws: support ec2 termination protection [GH-1988]
   301    * provider/aws: support for RDS Read Replicas [GH-1946]
   302    * provider/aws: `aws_s3_bucket` add support for `policy` [GH-1992]
   303    * provider/aws: `aws_ebs_volume` add support for `tags` [GH-2135]
   304    * provider/aws: `aws_elasticache_cluster` Confirm node status before reporting
   305        available
   306    * provider/aws: `aws_network_acl` Add support for ICMP Protocol [GH-2148]
   307    * provider/aws: New `force_destroy` parameter for S3 buckets, to destroy
   308        Buckets that contain objects [GH-2007]
   309    * provider/aws: switching `health_check_type` on ASGs no longer requires
   310        resource refresh [GH-2147]
   311    * provider/aws: ignore empty `vpc_security_group_ids` on `aws_instance` [GH-2311]
   312  
   313  BUG FIXES:
   314  
   315    * provider/aws: Correctly handle AWS keypairs which no longer exist [GH-2032]
   316    * provider/aws: Fix issue with restoring an Instance from snapshot ID [GH-2120]
   317    * provider/template: store relative path in the state [GH-2038]
   318    * provisioner/chef: fix interpolation in the Chef provisioner [GH-2168]
   319    * provisioner/remote-exec: Don't prepend shebang on scripts that already
   320        have one [GH-2041]
   321  
   322  ## 0.5.2 (May 15, 2015)
   323  
   324  FEATURES:
   325  
   326    * **Chef provisioning**: You can now provision new hosts (both Linux and
   327       Windows) with [Chef](https://chef.io) using a native provisioner [GH-1868]
   328  
   329  IMPROVEMENTS:
   330  
   331    * **New config function: `formatlist`** - Format lists in a similar way to `format`.
   332      Useful for creating URLs from a list of IPs. [GH-1829]
   333    * **New resource: `aws_route53_zone_association`**
   334    * provider/aws: `aws_autoscaling_group` can wait for capacity in ELB
   335        via `min_elb_capacity` [GH-1970]
   336    * provider/aws: `aws_db_instances` supports `license_model` [GH-1966]
   337    * provider/aws: `aws_elasticache_cluster` add support for Tags [GH-1965]
   338    * provider/aws: `aws_network_acl` Network ACLs can be applied to multiple subnets [GH-1931]
   339    * provider/aws: `aws_s3_bucket` exports `hosted_zone_id` and `region` [GH-1865]
   340    * provider/aws: `aws_s3_bucket` add support for website `redirect_all_requests_to` [GH-1909]
   341    * provider/aws: `aws_route53_record` exports `fqdn` [GH-1847]
   342    * provider/aws: `aws_route53_zone` can create private hosted zones [GH-1526]
   343    * provider/google: `google_compute_instance` `scratch` attribute added [GH-1920]
   344  
   345  BUG FIXES:
   346  
   347    * core: fix "resource not found" for interpolation issues with modules
   348    * core: fix unflattenable error for orphans [GH-1922]
   349    * core: fix deadlock with create-before-destroy + modules [GH-1949]
   350    * core: fix "no roots found" error with create-before-destroy [GH-1953]
   351    * core: variables set with environment variables won't validate as
   352        not set without a default [GH-1930]
   353    * core: resources with a blank ID in the state are now assumed to not exist [GH-1905]
   354    * command/push: local vars override remote ones [GH-1881]
   355    * provider/aws: Mark `aws_security_group` description as `ForceNew` [GH-1871]
   356    * provider/aws: `aws_db_instance` ARN value is correct [GH-1910]
   357    * provider/aws: `aws_db_instance` only submit modify request if there
   358        is a change. [GH-1906]
   359    * provider/aws: `aws_elasticache_cluster` export missing information on cluster nodes [GH-1965]
   360    * provider/aws: bad AMI on a launch configuration won't block refresh [GH-1901]
   361    * provider/aws: `aws_security_group` + `aws_subnet` - destroy timeout increased
   362      to prevent DependencyViolation errors. [GH-1886]
   363    * provider/google: `google_compute_instance` Local SSDs no-longer cause crash
   364        [GH-1088]
   365    * provider/google: `google_http_health_check` Defaults now driven from Terraform,
   366        avoids errors on update [GH-1894]
   367    * provider/google: `google_compute_template` Update Instance Template network
   368        definition to match changes to Instance [GH-980]
   369    * provider/template: Fix infinite diff [GH-1898]
   370  
   371  ## 0.5.1 (never released)
   372  
   373  This version was never released since we accidentally skipped it!
   374  
   375  ## 0.5.0 (May 7, 2015)
   376  
   377  BACKWARDS INCOMPATIBILITIES:
   378  
   379    * provider/aws: Terraform now remove the default egress rule created by AWS in
   380      a new security group.
   381  
   382  FEATURES:
   383  
   384    * **Multi-provider (a.k.a multi-region)**: Multiple instances of a single
   385       provider can be configured so resources can apply to different settings.
   386       As an example, this allows Terraform to manage multiple regions with AWS.
   387    * **Environmental variables to set variables**: Environment variables can be
   388       used to set variables. The environment variables must be in the format
   389       `TF_VAR_name` and this will be checked last for a value.
   390    * **New remote state backend: `s3`**: You can now store remote state in
   391       an S3 bucket. [GH-1723]
   392    * **Automatic AWS retries**: This release includes a lot of improvement
   393       around automatic retries of transient errors in AWS. The number of
   394       retry attempts is also configurable.
   395    * **Templates**: A new `template_file` resource allows long strings needing
   396       variable interpolation to be moved into files. [GH-1778]
   397    * **Provision with WinRM**: Provisioners can now run remote commands on
   398       Windows hosts. [GH-1483]
   399  
   400  IMPROVEMENTS:
   401  
   402    * **New config function: `length`** - Get the length of a string or a list.
   403        Useful in conjunction with `split`. [GH-1495]
   404    * **New resource: `aws_app_cookie_stickiness_policy`**
   405    * **New resource: `aws_customer_gateway`**
   406    * **New resource: `aws_ebs_volume`**
   407    * **New resource: `aws_elasticache_cluster`**
   408    * **New resource: `aws_elasticache_security_group`**
   409    * **New resource: `aws_elasticache_subnet_group`**
   410    * **New resource: `aws_iam_access_key`**
   411    * **New resource: `aws_iam_group_policy`**
   412    * **New resource: `aws_iam_group`**
   413    * **New resource: `aws_iam_instance_profile`**
   414    * **New resource: `aws_iam_policy`**
   415    * **New resource: `aws_iam_role_policy`**
   416    * **New resource: `aws_iam_role`**
   417    * **New resource: `aws_iam_user_policy`**
   418    * **New resource: `aws_iam_user`**
   419    * **New resource: `aws_lb_cookie_stickiness_policy`**
   420    * **New resource: `aws_proxy_protocol_policy`**
   421    * **New resource: `aws_security_group_rule`**
   422    * **New resource: `aws_vpc_dhcp_options_association`**
   423    * **New resource: `aws_vpc_dhcp_options`**
   424    * **New resource: `aws_vpn_connection_route`**
   425    * **New resource: `google_dns_managed_zone`**
   426    * **New resource: `google_dns_record_set`**
   427    * **Migrate to upstream AWS SDK:** Migrate the AWS provider to
   428        [awslabs/aws-sdk-go](https://github.com/awslabs/aws-sdk-go),
   429        the official `awslabs` library. Previously we had forked the library for
   430        stability while `awslabs` refactored. Now that work has completed, and we've
   431        migrated back to the upstream version.
   432    * core: Improve error message on diff mismatch [GH-1501]
   433    * provisioner/file: expand `~` in source path [GH-1569]
   434    * provider/aws: Better retry logic, now retries up to 11 times by default
   435        with exponentional backoff. This number is configurable. [GH-1787]
   436    * provider/aws: Improved credential detection [GH-1470]
   437    * provider/aws: Can specify a `token` via the config file [GH-1601]
   438    * provider/aws: Added new `vpc_security_group_ids` attribute for AWS
   439        Instances. If using a VPC, you can now modify the security groups for that
   440        Instance without destroying it [GH-1539]
   441    * provider/aws: White or blacklist account IDs that can be used to
   442        protect against accidents. [GH-1595]
   443    * provider/aws: Add a subset of IAM resources [GH-939]
   444    * provider/aws: `aws_autoscaling_group` retries deletes through "in progress"
   445        errors [GH-1840]
   446    * provider/aws: `aws_autoscaling_group` waits for healthy capacity during
   447        ASG creation [GH-1839]
   448    * provider/aws: `aws_instance` supports placement groups [GH-1358]
   449    * provider/aws: `aws_eip` supports network interface attachment [GH-1681]
   450    * provider/aws: `aws_elb` supports in-place changing of listeners [GH-1619]
   451    * provider/aws: `aws_elb` supports connection draining settings [GH-1502]
   452    * provider/aws: `aws_elb` increase default idle timeout to 60s [GH-1646]
   453    * provider/aws: `aws_key_pair` name can be omitted and generated [GH-1751]
   454    * provider/aws: `aws_network_acl` improved validation for network ACL ports
   455        and protocols [GH-1798] [GH-1808]
   456    * provider/aws: `aws_route_table` can target network interfaces [GH-968]
   457    * provider/aws: `aws_route_table` can specify propagating VGWs [GH-1516]
   458    * provider/aws: `aws_route53_record` supports weighted sets [GH-1578]
   459    * provider/aws: `aws_route53_zone` exports nameservers [GH-1525]
   460    * provider/aws: `aws_s3_bucket` website support [GH-1738]
   461    * provider/aws: `aws_security_group` name becomes optional and can be
   462        automatically set to a unique identifier; this helps with
   463        `create_before_destroy` scenarios [GH-1632]
   464    * provider/aws: `aws_security_group` description becomes optional with a
   465        static default value [GH-1632]
   466    * provider/aws: automatically set the private IP as the SSH address
   467        if not specified and no public IP is available [GH-1623]
   468    * provider/aws: `aws_elb` exports `source_security_group` field [GH-1708]
   469    * provider/aws: `aws_route53_record` supports alias targeting [GH-1775]
   470    * provider/aws: Remove default AWS egress rule for newly created Security Groups [GH-1765]
   471    * provider/consul: add `scheme` configuration argument [GH-1838]
   472    * provider/docker: `docker_container` can specify links [GH-1564]
   473    * provider/google: `resource_compute_disk` supports snapshots [GH-1426]
   474    * provider/google: `resource_compute_instance` supports specifying the
   475        device name [GH-1426]
   476    * provider/openstack: Floating IP support for LBaaS [GH-1550]
   477    * provider/openstack: Add AZ to `openstack_blockstorage_volume_v1` [GH-1726]
   478  
   479  BUG FIXES:
   480  
   481    * core: Fix graph cycle issues surrounding modules [GH-1582] [GH-1637]
   482    * core: math on arbitrary variables works if first operand isn't a
   483        numeric primitive. [GH-1381]
   484    * core: avoid unnecessary cycles by pruning tainted destroys from
   485        graph if there are no tainted resources [GH-1475]
   486    * core: fix issue where destroy nodes weren't pruned in specific
   487        edge cases around matching prefixes, which could cause cycles [GH-1527]
   488    * core: fix issue causing diff mismatch errors in certain scenarios during
   489        resource replacement [GH-1515]
   490    * core: dependencies on resources with a different index work when
   491        count > 1 [GH-1540]
   492    * core: don't panic if variable default type is invalid [GH-1344]
   493    * core: fix perpetual diff issue for computed maps that are empty [GH-1607]
   494    * core: validation added to check for `self` variables in modules [GH-1609]
   495    * core: fix edge case where validation didn't pick up unknown fields
   496        if the value was computed [GH-1507]
   497    * core: Fix issue where values in sets on resources couldn't contain
   498        hyphens. [GH-1641]
   499    * core: Outputs removed from the config are removed from the state [GH-1714]
   500    * core: Validate against the worst-case graph during plan phase to catch cycles
   501        that would previously only show up during apply [GH-1655]
   502    * core: Referencing invalid module output in module validates [GH-1448]
   503    * command: remote states with uppercase types work [GH-1356]
   504    * provider/aws: Support `AWS_SECURITY_TOKEN` env var again [GH-1785]
   505    * provider/aws: Don't save "instance" for EIP if association fails [GH-1776]
   506    * provider/aws: launch configuration ID set after create success [GH-1518]
   507    * provider/aws: Fixed an issue with creating ELBs without any tags [GH-1580]
   508    * provider/aws: Fix issue in Security Groups with empty IPRanges [GH-1612]
   509    * provider/aws: manually deleted S3 buckets are refreshed properly [GH-1574]
   510    * provider/aws: only check for EIP allocation ID in VPC [GH-1555]
   511    * provider/aws: raw protocol numbers work in `aws_network_acl` [GH-1435]
   512    * provider/aws: Block devices can be encrypted [GH-1718]
   513    * provider/aws: ASG health check grace period can be updated in-place [GH-1682]
   514    * provider/aws: ELB security groups can be updated in-place [GH-1662]
   515    * provider/aws: `aws_main_route_table_association` can be deleted
   516        manually [GH-1806]
   517    * provider/docker: image can reference more complex image addresses,
   518        such as with private repos with ports [GH-1818]
   519    * provider/openstack: region config is not required [GH-1441]
   520    * provider/openstack: `enable_dhcp` for networking subnet should be bool [GH-1741]
   521    * provisioner/remote-exec: add random number to uploaded script path so
   522        that parallel provisions work [GH-1588]
   523    * provisioner/remote-exec: chmod the script to 0755 properly [GH-1796]
   524  
   525  ## 0.4.2 (April 10, 2015)
   526  
   527  BUG FIXES:
   528  
   529    * core: refresh won't remove outputs from state file [GH-1369]
   530    * core: clarify "unknown variable" error [GH-1480]
   531    * core: properly merge parent provider configs when asking for input
   532    * provider/aws: fix panic possibility if RDS DB name is empty [GH-1460]
   533    * provider/aws: fix issue detecting credentials for some resources [GH-1470]
   534    * provider/google: fix issue causing unresolvable diffs when using legacy
   535        `network` field on `google_compute_instance` [GH-1458]
   536  
   537  ## 0.4.1 (April 9, 2015)
   538  
   539  IMPROVEMENTS:
   540  
   541    * provider/aws: Route 53 records can now update `ttl` and `records` attributes
   542        without destroying/creating the record [GH-1396]
   543    * provider/aws: Support changing additional attributes of RDS databases
   544        without forcing a new resource  [GH-1382]
   545  
   546  BUG FIXES:
   547  
   548    * core: module paths in ".terraform" are consistent across different
   549        systems so copying your ".terraform" folder works. [GH-1418]
   550    * core: don't validate providers too early when nested in a module [GH-1380]
   551    * core: fix race condition in `count.index` interpolation [GH-1454]
   552    * core: properly initialize provisioners, fixing resource targeting
   553        during destroy [GH-1544]
   554    * command/push: don't ask for input if terraform.tfvars is present
   555    * command/remote-config: remove spurrious error "nil" when initializing
   556        remote state on a new configuration. [GH-1392]
   557    * provider/aws: Fix issue with Route 53 and pre-existing Hosted Zones [GH-1415]
   558    * provider/aws: Fix refresh issue in Route 53 hosted zone [GH-1384]
   559    * provider/aws: Fix issue when changing map-public-ip in Subnets #1234
   560    * provider/aws: Fix issue finding db subnets [GH-1377]
   561    * provider/aws: Fix issues with `*_block_device` attributes on instances and
   562        launch configs creating unresolvable diffs when certain optional
   563        parameters were omitted from the config [GH-1445]
   564    * provider/aws: Fix issue with `aws_launch_configuration` causing an
   565        unnecessary diff for pre-0.4 environments [GH-1371]
   566    * provider/aws: Fix several related issues with `aws_launch_configuration`
   567        causing unresolvable diffs [GH-1444]
   568    * provider/aws: Fix issue preventing launch configurations from being valid
   569        in EC2 Classic [GH-1412]
   570    * provider/aws: Fix issue in updating Route 53 records on refresh/read. [GH-1430]
   571    * provider/docker: Don't ask for `cert_path` input on every run [GH-1432]
   572    * provider/google: Fix issue causing unresolvable diff on instances with
   573        `network_interface` [GH-1427]
   574  
   575  ## 0.4.0 (April 2, 2015)
   576  
   577  BACKWARDS INCOMPATIBILITIES:
   578  
   579    * Commands `terraform push` and `terraform pull` are now nested under
   580      the `remote` command: `terraform remote push` and `terraform remote pull`.
   581      The old `remote` functionality is now at `terraform remote config`. This
   582      consolidates all remote state management under one command.
   583    * Period-prefixed configuration files are now ignored. This might break
   584      existing Terraform configurations if you had period-prefixed files.
   585    * The `block_device` attribute of `aws_instance` has been removed in favor
   586      of three more specific attributes to specify block device mappings:
   587      `root_block_device`, `ebs_block_device`, and `ephemeral_block_device`.
   588      Configurations using the old attribute will generate a validation error
   589      indicating that they must be updated to use the new fields [GH-1045].
   590  
   591  FEATURES:
   592  
   593    * **New provider: `dme` (DNSMadeEasy)** [GH-855]
   594    * **New provider: `docker` (Docker)** - Manage container lifecycle
   595        using the standard Docker API. [GH-855]
   596    * **New provider: `openstack` (OpenStack)** - Interact with the many resources
   597        provided by OpenStack. [GH-924]
   598    * **New feature: `terraform_remote_state` resource** - Reference remote
   599        states from other Terraform runs to use Terraform outputs as inputs
   600        into another Terraform run.
   601    * **New command: `taint`** - Manually mark a resource as tainted, causing
   602        a destroy and recreate on the next plan/apply.
   603    * **New resource: `aws_vpn_gateway`** [GH-1137]
   604    * **New resource: `aws_elastic_network_interfaces`** [GH-1149]
   605    * **Self-variables** can be used to reference the current resource's
   606        attributes within a provisioner. Ex. `${self.private_ip_address}` [GH-1033]
   607    * **Continuous state** saving during `terraform apply`. The state file is
   608        continuously updated as apply is running, meaning that the state is
   609        less likely to become corrupt in a catastrophic case: terraform panic
   610        or system killing Terraform.
   611    * **Math operations** in interpolations. You can now do things like
   612        `${count.index + 1}`. [GH-1068]
   613    * **New AWS SDK:** Move to `aws-sdk-go` (hashicorp/aws-sdk-go),
   614        a fork of the official `awslabs` repo. We forked for stability while
   615        `awslabs` refactored the library, and will move back to the officially
   616        supported version in the next release.
   617  
   618  IMPROVEMENTS:
   619  
   620    * **New config function: `format`** - Format a string using `sprintf`
   621        format. [GH-1096]
   622    * **New config function: `replace`** - Search and replace string values.
   623        Search can be a regular expression. See documentation for more
   624        info. [GH-1029]
   625    * **New config function: `split`** - Split a value based on a delimiter.
   626        This is useful for faking lists as parameters to modules.
   627    * **New resource: `digitalocean_ssh_key`** [GH-1074]
   628    * config: Expand `~` with homedir in `file()` paths [GH-1338]
   629    * core: The serial of the state is only updated if there is an actual
   630        change. This will lower the amount of state changing on things
   631        like refresh.
   632    * core: Autoload `terraform.tfvars.json` as well as `terraform.tfvars` [GH-1030]
   633    * core: `.tf` files that start with a period are now ignored. [GH-1227]
   634    * command/remote-config: After enabling remote state, a `pull` is
   635        automatically done initially.
   636    * providers/google: Add `size` option to disk blocks for instances. [GH-1284]
   637    * providers/aws: Improve support for tagging resources.
   638    * providers/aws: Add a short syntax for Route 53 Record names, e.g.
   639        `www` instead of `www.example.com`.
   640    * providers/aws: Improve dependency violation error handling, when deleting
   641        Internet Gateways or Auto Scaling groups [GH-1325].
   642    * provider/aws: Add non-destructive updates to AWS RDS. You can now upgrade
   643        `engine_version`, `parameter_group_name`, and `multi_az` without forcing
   644        a new database to be created.[GH-1341]
   645    * providers/aws: Full support for block device mappings on instances and
   646        launch configurations [GH-1045, GH-1364]
   647    * provisioners/remote-exec: SSH agent support. [GH-1208]
   648  
   649  BUG FIXES:
   650  
   651    * core: module outputs can be used as inputs to other modules [GH-822]
   652    * core: Self-referencing splat variables are no longer allowed in
   653        provisioners. [GH-795][GH-868]
   654    * core: Validate that `depends_on` doesn't contain interpolations. [GH-1015]
   655    * core: Module inputs can be non-strings. [GH-819]
   656    * core: Fix invalid plan that resulted in "diffs don't match" error when
   657        a computed attribute was used as part of a set parameter. [GH-1073]
   658    * core: Fix edge case where state containing both "resource" and
   659        "resource.0" would ignore the latter completely. [GH-1086]
   660    * core: Modules with a source of a relative file path moving up
   661        directories work properly, i.e. "../a" [GH-1232]
   662    * providers/aws: manually deleted VPC removes it from the state
   663    * providers/aws: `source_dest_check` regression fixed (now works). [GH-1020]
   664    * providers/aws: Longer wait times for DB instances.
   665    * providers/aws: Longer wait times for route53 records (30 mins). [GH-1164]
   666    * providers/aws: Fix support for TXT records in Route 53. [GH-1213]
   667    * providers/aws: Fix support for wildcard records in Route 53. [GH-1222]
   668    * providers/aws: Fix issue with ignoring the 'self' attribute of a
   669        Security Group rule. [GH-1223]
   670    * providers/aws: Fix issue with `sql_mode` in RDS parameter group always
   671        causing an update. [GH-1225]
   672    * providers/aws: Fix dependency violation with subnets and security groups
   673        [GH-1252]
   674    * providers/aws: Fix issue with refreshing `db_subnet_groups` causing an error
   675        instead of updating state [GH-1254]
   676    * providers/aws: Prevent empty string to be used as default
   677        `health_check_type` [GH-1052]
   678    * providers/aws: Add tags on AWS IG creation, not just on update [GH-1176]
   679    * providers/digitalocean: Waits until droplet is ready to be destroyed [GH-1057]
   680    * providers/digitalocean: More lenient about 404's while waiting [GH-1062]
   681    * providers/digitalocean: FQDN for domain records in CNAME, MX, NS, etc.
   682        Also fixes invalid updates in plans. [GH-863]
   683    * providers/google: Network data in state was not being stored. [GH-1095]
   684    * providers/heroku: Fix panic when config vars block was empty. [GH-1211]
   685  
   686  PLUGIN CHANGES:
   687  
   688    * New `helper/schema` fields for resources: `Deprecated` and `Removed` allow
   689        plugins to generate warning or error messages when a given attribute is used.
   690  
   691  ## 0.3.7 (February 19, 2015)
   692  
   693  IMPROVEMENTS:
   694  
   695    * **New resources: `google_compute_forwarding_rule`, `google_compute_http_health_check`,
   696        and `google_compute_target_pool`** - Together these provide network-level
   697        load balancing. [GH-588]
   698    * **New resource: `aws_main_route_table_association`** - Manage the main routing table
   699        of a VPC. [GH-918]
   700    * **New resource: `aws_vpc_peering_connection`** [GH-963]
   701    * core: Formalized the syntax of interpolations and documented it
   702        very heavily.
   703    * core: Strings in interpolations can now contain further interpolations,
   704        e.g.: `foo ${bar("${baz}")}`.
   705    * provider/aws: Internet gateway supports tags [GH-720]
   706    * provider/aws: Support the more standard environmental variable names
   707        for access key and secret keys. [GH-851]
   708    * provider/aws: The `aws_db_instance` resource no longer requires both
   709        `final_snapshot_identifier` and `skip_final_snapshot`; the presence or
   710        absence of the former now implies the latter. [GH-874]
   711    * provider/aws: Avoid unnecessary update of `aws_subnet` when
   712        `map_public_ip_on_launch` is not specified in config. [GH-898]
   713    * provider/aws: Add `apply_method` to `aws_db_parameter_group` [GH-897]
   714    * provider/aws: Add `storage_type` to `aws_db_instance` [GH-896]
   715    * provider/aws: ELB can update listeners without requiring new. [GH-721]
   716    * provider/aws: Security group support egress rules. [GH-856]
   717    * provider/aws: Route table supports VPC peering connection on route. [GH-963]
   718    * provider/aws: Add `root_block_device` to `aws_db_instance` [GH-998]
   719    * provider/google: Remove "client secrets file", as it's no longer necessary
   720        for API authentication [GH-884].
   721    * provider/google: Expose `self_link` on `google_compute_instance` [GH-906]
   722  
   723  BUG FIXES:
   724  
   725    * core: Fixing use of remote state with plan files. [GH-741]
   726    * core: Fix a panic case when certain invalid types were used in
   727        the configuration. [GH-691]
   728    * core: Escape characters `\"`, `\n`, and `\\` now work in interpolations.
   729    * core: Fix crash that could occur when there are exactly zero providers
   730        installed on a system. [GH-786]
   731    * core: JSON TF configurations can configure provisioners. [GH-807]
   732    * core: Sort `depends_on` in state to prevent unnecessary file changes. [GH-928]
   733    * core: State containing the zero value won't cause a diff with the
   734        lack of a value. [GH-952]
   735    * core: If a set type becomes empty, the state will be properly updated
   736        to remove it. [GH-952]
   737    * core: Bare "splat" variables are not allowed in provisioners. [GH-636]
   738    * core: Invalid configuration keys to sub-resources are now errors. [GH-740]
   739    * command/apply: Won't try to initialize modules in some cases when
   740        no arguments are given. [GH-780]
   741    * command/apply: Fix regression where user variables weren't asked [GH-736]
   742    * helper/hashcode: Update `hash.String()` to always return a positive index.
   743        Fixes issue where specific strings would convert to a negative index
   744        and be omitted when creating Route53 records. [GH-967]
   745    * provider/aws: Automatically suffix the Route53 zone name on record names. [GH-312]
   746    * provider/aws: Instance should ignore root EBS devices. [GH-877]
   747    * provider/aws: Fix `aws_db_instance` to not recreate each time. [GH-874]
   748    * provider/aws: ASG termination policies are synced with remote state. [GH-923]
   749    * provider/aws: ASG launch configuration setting can now be updated in-place. [GH-904]
   750    * provider/aws: No read error when subnet is manually deleted. [GH-889]
   751    * provider/aws: Tags with empty values (empty string) are properly
   752        managed. [GH-968]
   753    * provider/aws: Fix case where route table would delete its routes
   754        on an unrelated change. [GH-990]
   755    * provider/google: Fix bug preventing instances with metadata from being
   756        created [GH-884].
   757  
   758  PLUGIN CHANGES:
   759  
   760    * New `helper/schema` type: `TypeFloat` [GH-594]
   761    * New `helper/schema` field for resources: `Exists` must point to a function
   762        to check for the existence of a resource. This is used to properly
   763        handle the case where the resource was manually deleted. [GH-766]
   764    * There is a semantic change in `GetOk` where it will return `true` if
   765        there is any value in the diff that is _non-zero_. Before, it would
   766        return true only if there was a value in the diff.
   767  
   768  ## 0.3.6 (January 6, 2015)
   769  
   770  FEATURES:
   771  
   772    * **New provider: `cloudstack`**
   773  
   774  IMPROVEMENTS:
   775  
   776    * **New resource: `aws_key_pair`** - Import a public key into AWS. [GH-695]
   777    * **New resource: `heroku_cert`** - Manage Heroku app certs.
   778    * provider/aws: Support `eu-central-1`, `cn-north-1`, and GovCloud. [GH-525]
   779    * provider/aws: `route_table` can have tags. [GH-648]
   780    * provider/google: Support Ubuntu images. [GH-724]
   781    * provider/google: Support for service accounts. [GH-725]
   782  
   783  BUG FIXES:
   784  
   785    * core: temporary/hidden files that look like Terraform configurations
   786        are no longer loaded. [GH-548]
   787    * core: Set types in resources now result in deterministic states,
   788        resulting in cleaner plans. [GH-663]
   789    * core: fix issue where "diff was not the same" would come up with
   790        diffing lists. [GH-661]
   791    * core: fix crash where module inputs weren't strings, and add more
   792        validation around invalid types here. [GH-624]
   793    * core: fix error when using a computed module output as an input to
   794        another module. [GH-659]
   795    * core: map overrides in "terraform.tfvars" no longer result in a syntax
   796        error. [GH-647]
   797    * core: Colon character works in interpolation [GH-700]
   798    * provider/aws: Fix crash case when internet gateway is not attached
   799        to any VPC. [GH-664]
   800    * provider/aws: `vpc_id` is no longer required. [GH-667]
   801    * provider/aws: `availability_zones` on ELB will contain more than one
   802        AZ if it is set as such. [GH-682]
   803    * provider/aws: More fields are marked as "computed" properly, resulting
   804        in more accurate diffs for AWS instances. [GH-712]
   805    * provider/aws: Fix panic case by using the wrong type when setting
   806        volume size for AWS instances. [GH-712]
   807    * provider/aws: route table ignores routes with 'EnableVgwRoutePropagation'
   808        origin since those come from gateways. [GH-722]
   809    * provider/aws: Default network ACL ID and default security group ID
   810        support for `aws_vpc`. [GH-704]
   811    * provider/aws: Tags are not marked as computed. This introduces another
   812        issue with not detecting external tags, but this will be fixed in
   813        the future. [GH-730]
   814  
   815  ## 0.3.5 (December 9, 2014)
   816  
   817  FEATURES:
   818  
   819   * **Remote State**: State files can now be stored remotely via HTTP,
   820       Consul, or HashiCorp's Atlas.
   821   * **New Provider: `atlas`**: Retrieve artifacts for deployment from
   822       HashiCorp's Atlas service.
   823   * New `element()` function to index into arrays
   824  
   825  IMPROVEMENTS:
   826  
   827    * provider/aws: Support tenancy for aws\_instance
   828    * provider/aws: Support block devices for aws\_instance
   829    * provider/aws: Support virtual\_name on block device
   830    * provider/aws: Improve RDS reliability (more grace time)
   831    * provider/aws: Added aws\_db\_parameter\_group resource
   832    * provider/aws: Added tag support to aws\_subnet
   833    * provider/aws: Routes in RouteTable are optional
   834    * provider/aws: associate\_public\_ip\_address on aws\_launch\_configuration
   835    * provider/aws: Added aws\_network\_acl
   836    * provider/aws: Ingress rules in security groups are optional
   837    * provider/aws: Support termination policy for ASG
   838    * provider/digitalocean: Improved droplet size compatibility
   839  
   840  BUG FIXES:
   841  
   842    * core: Fixed issue causing double delete. [GH-555]
   843    * core: Fixed issue with create-before-destroy not being respected in
   844        some circumstances.
   845    * core: Fixing issue with count expansion with non-homogenous instance
   846        plans.
   847    * core: Fix issue with referencing resource variables from resources
   848        that don't exist yet within resources that do exist, or modules.
   849    * core: Fixing depedency handling for modules
   850    * core: Fixing output handling [GH-474]
   851    * core: Fixing count interpolation in modules
   852    * core: Fixing multi-var without module state
   853    * core: Fixing HCL variable declaration
   854    * core: Fixing resource interpolation for without state
   855    * core: Fixing handling of computed maps
   856    * command/init: Fixing recursion issue [GH-518]
   857    * command: Validate config before requesting input [GH-602]
   858    * build: Fixing GOPATHs with spaces
   859  
   860  MISC:
   861  
   862    * provider/aws: Upgraded to helper.Schema
   863    * provider/heroku: Upgraded to helper.Schema
   864    * provider/mailgun: Upgraded to helper.Schema
   865    * provider/dnsimple: Upgraded to helper.Schema
   866    * provider/cloudflare: Upgraded to helper.Schema
   867    * provider/digitalocean: Upgraded to helper.Schema
   868    * provider/google: Upgraded to helper.Schema
   869  
   870  ## 0.3.1 (October 21, 2014)
   871  
   872  IMPROVEMENTS:
   873  
   874    * providers/aws: Support tags for security groups.
   875    * providers/google: Add "external\_address" to network attributes [GH-454]
   876    * providers/google: External address is used as default connection host. [GH-454]
   877    * providers/heroku: Support `locked` and `personal` booleans on organization
   878        settings. [GH-406]
   879  
   880  BUG FIXES:
   881  
   882    * core: Remove panic case when applying with a plan that generates no
   883        new state. [GH-403]
   884    * core: Fix a hang that can occur with enough resources. [GH-410]
   885    * core: Config validation will not error if the field is being
   886        computed so the value is still unknown.
   887    * core: If a resource fails to create and has provisioners, it is
   888        marked as tainted. [GH-434]
   889    * core: Set types are validated to be sets. [GH-413]
   890    * core: String types are validated properly. [GH-460]
   891    * core: Fix crash case when destroying with tainted resources. [GH-412]
   892    * core: Don't execute provisioners in some cases on destroy.
   893    * core: Inherited provider configurations will be properly interpolated. [GH-418]
   894    * core: Refresh works properly if there are outputs that depend on resources
   895        that aren't yet created. [GH-483]
   896    * providers/aws: Refresh of launch configs and autoscale groups load
   897        the correct data and don't incorrectly recreate themselves. [GH-425]
   898    * providers/aws: Fix case where ELB would incorrectly plan to modify
   899        listeners (with the same data) in some cases.
   900    * providers/aws: Retry destroying internet gateway for some amount of time
   901        if there is a dependency violation since it is probably just eventual
   902        consistency (public facing resources being destroyed). [GH-447]
   903    * providers/aws: Retry deleting security groups for some amount of time
   904        if there is a dependency violation since it is probably just eventual
   905        consistency. [GH-436]
   906    * providers/aws: Retry deleting subnet for some amount of time if there is a
   907        dependency violation since probably asynchronous destroy events take
   908        place still. [GH-449]
   909    * providers/aws: Drain autoscale groups before deleting. [GH-435]
   910    * providers/aws: Fix crash case if launch config is manually deleted. [GH-421]
   911    * providers/aws: Disassociate EIP before destroying.
   912    * providers/aws: ELB treats subnets as a set.
   913    * providers/aws: Fix case where in a destroy/create tags weren't reapplied. [GH-464]
   914    * providers/aws: Fix incorrect/erroneous apply cases around security group
   915        rules. [GH-457]
   916    * providers/consul: Fix regression where `key` param changed to `keys. [GH-475]
   917  
   918  ## 0.3.0 (October 14, 2014)
   919  
   920  FEATURES:
   921  
   922    * **Modules**: Configuration can now be modularized. Modules can live on
   923      GitHub, BitBucket, Git/Hg repos, HTTP URLs, and file paths. Terraform
   924      automatically downloads/updates modules for you on request.
   925    * **New Command: `init`**. This command initializes a Terraform configuration
   926      from an existing Terraform module (also new in 0.3).
   927    * **New Command: `destroy`**. This command destroys infrastructure
   928      created with `apply`.
   929    * Terraform will ask for user input to fill in required variables and
   930      provider configurations if they aren't set.
   931    * `terraform apply MODULE` can be used as a shorthand to quickly build
   932      infrastructure from a module.
   933    * The state file format is now JSON rather than binary. This allows for
   934      easier machine and human read/write. Old binary state files will be
   935      automatically upgraded.
   936    * You can now specify `create_before_destroy` as an option for replacement
   937      so that new resources are created before the old ones are destroyed.
   938    * The `count` metaparameter can now contain interpolations (such as
   939      variables).
   940    * The current index for a resource with a `count` set can be interpolated
   941      using `${count.index}`.
   942    * Various paths can be interpolated with the `path.X` variables. For example,
   943      the path to the current module can be interpolated using `${path.module}`.
   944  
   945  IMPROVEMENTS:
   946  
   947    * config: Trailing commas are now allowed for the final elements of lists.
   948    * core: Plugins are loaded from `~/.terraform.d/plugins` (Unix) or
   949      `%USERDATA%/terraform.d/plugins` (Windows).
   950    * command/show: With no arguments, it will show the default state. [GH-349]
   951    * helper/schema: Can now have default values. [GH-245]
   952    * providers/aws: Tag support for most resources.
   953    * providers/aws: New resource `db_subnet_group`. [GH-295]
   954    * providers/aws: Add `map_public_ip_on_launch` for subnets. [GH-285]
   955    * providers/aws: Add `iam_instance_profile` for instances. [GH-319]
   956    * providers/aws: Add `internal` option for ELBs. [GH-303]
   957    * providers/aws: Add `ssl_certificate_id` for ELB listeners. [GH-350]
   958    * providers/aws: Add `self` option for security groups for ingress
   959        rules with self as source. [GH-303]
   960    * providers/aws: Add `iam_instance_profile` option to
   961        `aws_launch_configuration`. [GH-371]
   962    * providers/aws: Non-destructive update of `desired_capacity` for
   963        autoscale groups.
   964    * providers/aws: Add `main_route_table_id` attribute to VPCs. [GH-193]
   965    * providers/consul: Support tokens. [GH-396]
   966    * providers/google: Support `target_tags` for firewalls. [GH-324]
   967    * providers/google: `google_compute_instance` supports `can_ip_forward` [GH-375]
   968    * providers/google: `google_compute_disk` supports `type` to support disks
   969        such as SSDs. [GH-351]
   970    * provisioners/local-exec: Output from command is shown in CLI output. [GH-311]
   971    * provisioners/remote-exec: Output from command is shown in CLI output. [GH-311]
   972  
   973  BUG FIXES:
   974  
   975    * core: Providers are validated even without a `provider` block. [GH-284]
   976    * core: In the case of error, walk all non-dependent trees.
   977    * core: Plugin loading from CWD works properly.
   978    * core: Fix many edge cases surrounding the `count` meta-parameter.
   979    * core: Strings in the configuration can escape double-quotes with the
   980        standard `\"` syntax.
   981    * core: Error parsing CLI config will show properly. [GH-288]
   982    * core: More than one Ctrl-C will exit immediately.
   983    * providers/aws: autoscaling_group can be launched into a vpc [GH-259]
   984    * providers/aws: not an error when RDS instance is deleted manually. [GH-307]
   985    * providers/aws: Retry deleting subnet for some time while AWS eventually
   986        destroys dependencies. [GH-357]
   987    * providers/aws: More robust destroy for route53 records. [GH-342]
   988    * providers/aws: ELB generates much more correct plans without extranneous
   989        data.
   990    * providers/aws: ELB works properly with dynamically changing
   991        count of instances.
   992    * providers/aws: Terraform can handle ELBs deleted manually. [GH-304]
   993    * providers/aws: Report errors properly if RDS fails to delete. [GH-310]
   994    * providers/aws: Wait for launch configuration to exist after creation
   995        (AWS eventual consistency) [GH-302]
   996  
   997  ## 0.2.2 (September 9, 2014)
   998  
   999  IMPROVEMENTS:
  1000  
  1001    * providers/amazon: Add `ebs_optimized` flag. [GH-260]
  1002    * providers/digitalocean: Handle 404 on delete
  1003    * providers/digitalocean: Add `user_data` argument for creating droplets
  1004    * providers/google: Disks can be marked `auto_delete`. [GH-254]
  1005  
  1006  BUG FIXES:
  1007  
  1008    * core: Fix certain syntax of configuration that could cause hang. [GH-261]
  1009    * core: `-no-color` flag properly disables color. [GH-250]
  1010    * core: "~" is expanded in `-var-file` flags. [GH-273]
  1011    * core: Errors with tfvars are shown in console. [GH-269]
  1012    * core: Interpolation function calls with more than two args parse. [GH-282]
  1013    * providers/aws: Refreshing EIP from pre-0.2 state file won't error. [GH-258]
  1014    * providers/aws: Creating EIP without an instance/network won't fail.
  1015    * providers/aws: Refreshing EIP manually deleted works.
  1016    * providers/aws: Retry EIP delete to allow AWS eventual consistency to
  1017        detect it isn't attached. [GH-276]
  1018    * providers/digitalocean: Handle situations when resource was destroyed
  1019        manually. [GH-279]
  1020    * providers/digitalocean: Fix a couple scenarios where the diff was
  1021        incorrect (and therefore the execution as well).
  1022    * providers/google: Attaching a disk source (not an image) works
  1023        properly. [GH-254]
  1024  
  1025  ## 0.2.1 (August 31, 2014)
  1026  
  1027  IMPROVEMENTS:
  1028  
  1029    * core: Plugins are automatically discovered in the executable directory
  1030        or pwd if named properly. [GH-190]
  1031    * providers/mailgun: domain records are now saved to state
  1032  
  1033  BUG FIXES:
  1034  
  1035    * core: Configuration parses when identifier and '=' have no space. [GH-243]
  1036    * core: `depends_on` with `count` generates the proper graph. [GH-244]
  1037    * core: Depending on a computed variable of a list type generates a
  1038        plan without failure. i.e. `${type.name.foos.0.bar}` where `foos`
  1039        is computed. [GH-247]
  1040    * providers/aws: Route53 destroys in parallel work properly. [GH-183]
  1041  
  1042  ## 0.2.0 (August 28, 2014)
  1043  
  1044  BACKWARDS INCOMPATIBILITIES:
  1045  
  1046    * We've replaced the configuration language in use from a C library to
  1047      a pure-Go reimplementation. In the process, we removed some features
  1048      of the language since it was too flexible:
  1049      * Semicolons are no longer valid at the end of lines
  1050      * Keys cannot be double-quoted strings: `"foo" = "bar"` is no longer
  1051        valid.
  1052      * JSON style maps `{ "foo": "bar" }` are no longer valid outside of JSON.
  1053        Maps must be in the format of `{ foo = "bar" }` (like other objects
  1054        in the config)
  1055    * Heroku apps now require (will not validate without) `region` and
  1056      `name` due to an upstream API change. [GH-239]
  1057  
  1058  FEATURES:
  1059  
  1060    * **New Provider: `google`**: Manage Google Compute instances, disks,
  1061        firewalls, and more.
  1062    * **New Provider: `mailgun`**: Manage mailgun domains.
  1063    * **New Function: `concat`**: Concatenate multiple strings together.
  1064      Example: `concat(var.region, "-", var.channel)`.
  1065  
  1066  IMPROVEMENTS:
  1067  
  1068    * core: "~/.terraformrc" (Unix) or "%APPDATA%/terraform.rc" (Windows)
  1069      can be used to configure custom providers and provisioners. [GH-192]
  1070    * providers/aws: EIPs now expose `allocation_id` and `public_ip`
  1071        attributes.
  1072    * providers/aws: Security group rules can be updated without a
  1073        destroy/create.
  1074    * providers/aws: You can enable and disable dns settings for VPCs. [GH-172]
  1075    * providers/aws: Can specify a private IP address for `aws_instance` [GH-217]
  1076  
  1077  BUG FIXES:
  1078  
  1079    * core: Variables are validated to not contain interpolations. [GH-180]
  1080    * core: Key files for provisioning can now contain `~` and will be expanded
  1081        to the user's home directory. [GH-179]
  1082    * core: The `file()` function can load files in sub-directories. [GH-213]
  1083    * core: Fix issue where some JSON structures didn't map properly into
  1084       Terraform structures. [GH-177]
  1085    * core: Resources with only `file()` calls will interpolate. [GH-159]
  1086    * core: Variables work in block names. [GH-234]
  1087    * core: Plugins are searched for in the same directory as the executable
  1088        before the PATH. [GH-157]
  1089    * command/apply: "tfvars" file no longer interferes with plan apply. [GH-153]
  1090    * providers/aws: Fix issues around failing to read EIPs. [GH-122]
  1091    * providers/aws: Autoscaling groups now register and export load
  1092      balancers. [GH-207]
  1093    * providers/aws: Ingress results are treated as a set, so order doesn't
  1094        matter anymore. [GH-87]
  1095    * providers/aws: Instance security groups treated as a set [GH-194]
  1096    * providers/aws: Retry Route53 requests if operation failed because another
  1097        operation is in progress [GH-183]
  1098    * providers/aws: Route53 records with multiple record values work. [GH-221]
  1099    * providers/aws: Changing AMI doesn't result in errors anymore. [GH-196]
  1100    * providers/heroku: If you delete the `config_vars` block, config vars
  1101        are properly nuked.
  1102    * providers/heroku: Domains and drains are deleted before the app.
  1103    * providers/heroku: Moved from the client library bgentry/heroku-go to
  1104        cyberdelia/heroku-go [GH-239].
  1105    * providers/heroku: Plans without a specific plan name for
  1106        heroku\_addon work. [GH-198]
  1107  
  1108  PLUGIN CHANGES:
  1109  
  1110    * **New Package:** `helper/schema`. This introduces a high-level framework
  1111      for easily writing new providers and resources. The Heroku provider has
  1112      been converted to this as an example.
  1113  
  1114  ## 0.1.1 (August 5, 2014)
  1115  
  1116  FEATURES:
  1117  
  1118    * providers/heroku: Now supports creating Heroku Drains [GH-97]
  1119  
  1120  IMPROVEMENTS:
  1121  
  1122    * providers/aws: Launch configurations accept user data [GH-94]
  1123    * providers/aws: Regions are now validated [GH-96]
  1124    * providers/aws: ELB now supports health check configurations [GH-109]
  1125  
  1126  BUG FIXES:
  1127  
  1128    * core: Default variable file "terraform.tfvars" is auto-loaded. [GH-59]
  1129    * core: Multi-variables (`foo.*.bar`) work even when `count = 1`. [GH-115]
  1130    * core: `file()` function can have string literal arg [GH-145]
  1131    * providers/cloudflare: Include the proper bins so the cloudflare
  1132        provider is compiled
  1133    * providers/aws: Engine version for RDS now properly set [GH-118]
  1134    * providers/aws: Security groups now depend on each other and
  1135    * providers/aws: DB instances now wait for destroys, have proper
  1136        dependencies and allow passing skip_final_snapshot
  1137    * providers/aws: Add associate_public_ip_address as an attribute on
  1138        the aws_instance resource [GH-85]
  1139    * providers/aws: Fix cidr blocks being updated [GH-65, GH-85]
  1140    * providers/aws: Description is now required for security groups
  1141    * providers/digitalocean: Private IP addresses are now a separate
  1142        attribute
  1143    * provisioner/all: If an SSH key is given with a password, a better
  1144        error message is shown. [GH-73]
  1145  
  1146  ## 0.1.0 (July 28, 2014)
  1147  
  1148    * Initial release