github.com/hobbeswalsh/terraform@v0.3.7-0.20150619183303-ad17cf55a0fa/CHANGELOG.md (about) 1 ## 0.6.0 (Unreleased) 2 3 FEATURES: 4 5 * **New provider: `azure`** [GH-2052, GH-2053, GH-2372, GH-2380] 6 * **New resource: `aws_autoscaling_notification`** [GH-2197] 7 * **New resource: `aws_autoscaling_policy`** [GH-2201] 8 * **New resource: `aws_cloudwatch_metric_alarm`** [GH-2201] 9 * **New resource: `aws_dynamodb_table`** [GH-2121] 10 * **New resource: `aws_ecs_cluster`** [GH-1803] 11 * **New resource: `aws_ecs_service`** [GH-1803] 12 * **New resource: `aws_ecs_task_definition`** [GH-1803] 13 * **New resource: `aws_iam_group_association`** [GH-2273] 14 * **New resource: `aws_lambda_function`** [GH-2170] 15 * **New resource: `aws_route53_health_check`** [GH-2226] 16 * **New resource: `aws_spot_instance_request`** [GH-2263] 17 * **New remote state backend: `swift`**: You can now store remote state in 18 a OpenStack Swift. [GH-2254] 19 * command/output: support display of module outputs [GH-2102] 20 * core: `keys()` and `values()` funcs for map variables [GH-2198] 21 22 IMPROVEMENTS: 23 24 * core: HTTP remote state now accepts `skip_cert_verification` 25 option to ignore TLS cert verification. [GH-2214] 26 * provider/aws: ElastiCache Subnet Groups can be updated 27 without destroying first [GH-2191] 28 * provider/docker: `docker_container` has the `privileged` 29 option. [GH-2227] 30 * provider/openstack: allow `OS_AUTH_TOKEN` environment variable 31 to set the openstack `api_key` field [GH-2234] 32 * provider/openstack: Can now configure endpoint type (public, admin, 33 internal) [GH-2262] 34 35 BUG FIXES: 36 37 * command/apply: prevent output duplication when reporting errors [GH-2267] 38 * provider/aws: fix panic when route has no cidr_block [GH-2215] 39 * provider/aws: fix issue preventing destruction of IAM Roles [GH-2177] 40 * provider/aws: fix issue preventing destruction self referencing Securtity 41 Group Rules [GH-2305] 42 * provider/aws: fix issue causing perpetual diff on ELB listeners 43 when non-lowercase protocol strings were used [GH-2246] 44 * provider/aws: corrected frankfurt S3 website region [GH-2259] 45 * provider/aws: `aws_elasticache_cluster` port is required [GH-2160] 46 * provider/template: fix issue causing "unknown variable" rendering errors 47 when an existing set of template variables is changed [GH-2386] 48 49 ## 0.5.3 (June 1, 2015) 50 51 IMPROVEMENTS: 52 53 * **New resource: `aws_kinesis_stream`** [GH-2110] 54 * **New resource: `aws_iam_server_certificate`** [GH-2086] 55 * **New resource: `aws_sqs_queue`** [GH-1939] 56 * **New resource: `aws_sns_topic`** [GH-1974] 57 * **New resource: `aws_sns_topic_subscription`** [GH-1974] 58 * **New resource: `aws_volume_attachment`** [GH-2050] 59 * **New resource: `google_storage_bucket`** [GH-2060] 60 * provider/aws: support ec2 termination protection [GH-1988] 61 * provider/aws: support for RDS Read Replicas [GH-1946] 62 * provider/aws: `aws_s3_bucket` add support for `policy` [GH-1992] 63 * provider/aws: `aws_ebs_volume` add support for `tags` [GH-2135] 64 * provider/aws: `aws_elasticache_cluster` Confirm node status before reporting 65 available 66 * provider/aws: `aws_network_acl` Add support for ICMP Protocol [GH-2148] 67 * provider/aws: New `force_destroy` parameter for S3 buckets, to destroy 68 Buckets that contain objects [GH-2007] 69 * provider/aws: switching `health_check_type` on ASGs no longer requires 70 resource refresh [GH-2147] 71 * provider/aws: ignore empty `vpc_security_group_ids` on `aws_instance` [GH-2311] 72 73 BUG FIXES: 74 75 * provider/aws: Correctly handle AWS keypairs which no longer exist [GH-2032] 76 * provider/aws: Fix issue with restoring an Instance from snapshot ID 77 [GH-2120] 78 * provider/template: store relative path in the state [GH-2038] 79 * provisioner/chef: fix interpolation in the Chef provisioner [GH-2168] 80 * provisioner/remote-exec: Don't prepend shebang on scripts that already 81 have one [GH-2041] 82 83 ## 0.5.2 (May 15, 2015) 84 85 FEATURES: 86 87 * **Chef provisioning**: You can now provision new hosts (both Linux and 88 Windows) with [Chef](https://chef.io) using a native provisioner [GH-1868] 89 90 IMPROVEMENTS: 91 92 * **New config function: `formatlist`** - Format lists in a similar way to `format`. 93 Useful for creating URLs from a list of IPs. [GH-1829] 94 * **New resource: `aws_route53_zone_association`** 95 * provider/aws: `aws_autoscaling_group` can wait for capacity in ELB 96 via `min_elb_capacity` [GH-1970] 97 * provider/aws: `aws_db_instances` supports `license_model` [GH-1966] 98 * provider/aws: `aws_elasticache_cluster` add support for Tags [GH-1965] 99 * provider/aws: `aws_network_acl` Network ACLs can be applied to multiple subnets [GH-1931] 100 * provider/aws: `aws_s3_bucket` exports `hosted_zone_id` and `region` [GH-1865] 101 * provider/aws: `aws_s3_bucket` add support for website `redirect_all_requests_to` [GH-1909] 102 * provider/aws: `aws_route53_record` exports `fqdn` [GH-1847] 103 * provider/aws: `aws_route53_zone` can create private hosted zones [GH-1526] 104 * provider/google: `google_compute_instance` `scratch` attribute added [GH-1920] 105 106 BUG FIXES: 107 108 * core: fix "resource not found" for interpolation issues with modules 109 * core: fix unflattenable error for orphans [GH-1922] 110 * core: fix deadlock with create-before-destroy + modules [GH-1949] 111 * core: fix "no roots found" error with create-before-destroy [GH-1953] 112 * core: variables set with environment variables won't validate as 113 not set without a default [GH-1930] 114 * core: resources with a blank ID in the state are now assumed to not exist [GH-1905] 115 * command/push: local vars override remote ones [GH-1881] 116 * provider/aws: Mark `aws_security_group` description as `ForceNew` [GH-1871] 117 * provider/aws: `aws_db_instance` ARN value is correct [GH-1910] 118 * provider/aws: `aws_db_instance` only submit modify request if there 119 is a change. [GH-1906] 120 * provider/aws: `aws_elasticache_cluster` export missing information on cluster nodes [GH-1965] 121 * provider/aws: bad AMI on a launch configuration won't block refresh [GH-1901] 122 * provider/aws: `aws_security_group` + `aws_subnet` - destroy timeout increased 123 to prevent DependencyViolation errors. [GH-1886] 124 * provider/google: `google_compute_instance` Local SSDs no-longer cause crash 125 [GH-1088] 126 * provider/google: `google_http_health_check` Defaults now driven from Terraform, 127 avoids errors on update [GH-1894] 128 * provider/google: `google_compute_template` Update Instance Template network 129 definition to match changes to Instance [GH-980] 130 * provider/template: Fix infinite diff [GH-1898] 131 132 ## 0.5.1 (never released) 133 134 This version was never released since we accidentally skipped it! 135 136 ## 0.5.0 (May 7, 2015) 137 138 BACKWARDS INCOMPATIBILITIES: 139 140 * provider/aws: Terraform now remove the default egress rule created by AWS in 141 a new security group. 142 143 FEATURES: 144 145 * **Multi-provider (a.k.a multi-region)**: Multiple instances of a single 146 provider can be configured so resources can apply to different settings. 147 As an example, this allows Terraform to manage multiple regions with AWS. 148 * **Environmental variables to set variables**: Environment variables can be 149 used to set variables. The environment variables must be in the format 150 `TF_VAR_name` and this will be checked last for a value. 151 * **New remote state backend: `s3`**: You can now store remote state in 152 an S3 bucket. [GH-1723] 153 * **Automatic AWS retries**: This release includes a lot of improvement 154 around automatic retries of transient errors in AWS. The number of 155 retry attempts is also configurable. 156 * **Templates**: A new `template_file` resource allows long strings needing 157 variable interpolation to be moved into files. [GH-1778] 158 * **Provision with WinRM**: Provisioners can now run remote commands on 159 Windows hosts. [GH-1483] 160 161 IMPROVEMENTS: 162 163 * **New config function: `length`** - Get the length of a string or a list. 164 Useful in conjunction with `split`. [GH-1495] 165 * **New resource: `aws_app_cookie_stickiness_policy`** 166 * **New resource: `aws_customer_gateway`** 167 * **New resource: `aws_ebs_volume`** 168 * **New resource: `aws_elasticache_cluster`** 169 * **New resource: `aws_elasticache_security_group`** 170 * **New resource: `aws_elasticache_subnet_group`** 171 * **New resource: `aws_iam_access_key`** 172 * **New resource: `aws_iam_group_policy`** 173 * **New resource: `aws_iam_group`** 174 * **New resource: `aws_iam_instance_profile`** 175 * **New resource: `aws_iam_policy`** 176 * **New resource: `aws_iam_role_policy`** 177 * **New resource: `aws_iam_role`** 178 * **New resource: `aws_iam_user_policy`** 179 * **New resource: `aws_iam_user`** 180 * **New resource: `aws_lb_cookie_stickiness_policy`** 181 * **New resource: `aws_proxy_protocol_policy`** 182 * **New resource: `aws_security_group_rule`** 183 * **New resource: `aws_vpc_dhcp_options_association`** 184 * **New resource: `aws_vpc_dhcp_options`** 185 * **New resource: `aws_vpn_connection_route`** 186 * **New resource: `google_dns_managed_zone`** 187 * **New resource: `google_dns_record_set`** 188 * **Migrate to upstream AWS SDK:** Migrate the AWS provider to 189 [awslabs/aws-sdk-go](https://github.com/awslabs/aws-sdk-go), 190 the official `awslabs` library. Previously we had forked the library for 191 stability while `awslabs` refactored. Now that work has completed, and we've 192 migrated back to the upstream version. 193 * core: Improve error message on diff mismatch [GH-1501] 194 * provisioner/file: expand `~` in source path [GH-1569] 195 * provider/aws: Better retry logic, now retries up to 11 times by default 196 with exponentional backoff. This number is configurable. [GH-1787] 197 * provider/aws: Improved credential detection [GH-1470] 198 * provider/aws: Can specify a `token` via the config file [GH-1601] 199 * provider/aws: Added new `vpc_security_group_ids` attribute for AWS 200 Instances. If using a VPC, you can now modify the security groups for that 201 Instance without destroying it [GH-1539] 202 * provider/aws: White or blacklist account IDs that can be used to 203 protect against accidents. [GH-1595] 204 * provider/aws: Add a subset of IAM resources [GH-939] 205 * provider/aws: `aws_autoscaling_group` retries deletes through "in progress" 206 errors [GH-1840] 207 * provider/aws: `aws_autoscaling_group` waits for healthy capacity during 208 ASG creation [GH-1839] 209 * provider/aws: `aws_instance` supports placement groups [GH-1358] 210 * provider/aws: `aws_eip` supports network interface attachment [GH-1681] 211 * provider/aws: `aws_elb` supports in-place changing of listeners [GH-1619] 212 * provider/aws: `aws_elb` supports connection draining settings [GH-1502] 213 * provider/aws: `aws_elb` increase default idle timeout to 60s [GH-1646] 214 * provider/aws: `aws_key_pair` name can be omitted and generated [GH-1751] 215 * provider/aws: `aws_network_acl` improved validation for network ACL ports 216 and protocols [GH-1798] [GH-1808] 217 * provider/aws: `aws_route_table` can target network interfaces [GH-968] 218 * provider/aws: `aws_route_table` can specify propagating VGWs [GH-1516] 219 * provider/aws: `aws_route53_record` supports weighted sets [GH-1578] 220 * provider/aws: `aws_route53_zone` exports nameservers [GH-1525] 221 * provider/aws: `aws_s3_bucket` website support [GH-1738] 222 * provider/aws: `aws_security_group` name becomes optional and can be 223 automatically set to a unique identifier; this helps with 224 `create_before_destroy` scenarios [GH-1632] 225 * provider/aws: `aws_security_group` description becomes optional with a 226 static default value [GH-1632] 227 * provider/aws: automatically set the private IP as the SSH address 228 if not specified and no public IP is available [GH-1623] 229 * provider/aws: `aws_elb` exports `source_security_group` field [GH-1708] 230 * provider/aws: `aws_route53_record` supports alias targeting [GH-1775] 231 * provider/aws: Remove default AWS egress rule for newly created Security Groups [GH-1765] 232 * provider/consul: add `scheme` configuration argument [GH-1838] 233 * provider/docker: `docker_container` can specify links [GH-1564] 234 * provider/google: `resource_compute_disk` supports snapshots [GH-1426] 235 * provider/google: `resource_compute_instance` supports specifying the 236 device name [GH-1426] 237 * provider/openstack: Floating IP support for LBaaS [GH-1550] 238 * provider/openstack: Add AZ to `openstack_blockstorage_volume_v1` [GH-1726] 239 240 BUG FIXES: 241 242 * core: Fix graph cycle issues surrounding modules [GH-1582] [GH-1637] 243 * core: math on arbitrary variables works if first operand isn't a 244 numeric primitive. [GH-1381] 245 * core: avoid unnecessary cycles by pruning tainted destroys from 246 graph if there are no tainted resources [GH-1475] 247 * core: fix issue where destroy nodes weren't pruned in specific 248 edge cases around matching prefixes, which could cause cycles [GH-1527] 249 * core: fix issue causing diff mismatch errors in certain scenarios during 250 resource replacement [GH-1515] 251 * core: dependencies on resources with a different index work when 252 count > 1 [GH-1540] 253 * core: don't panic if variable default type is invalid [GH-1344] 254 * core: fix perpetual diff issue for computed maps that are empty [GH-1607] 255 * core: validation added to check for `self` variables in modules [GH-1609] 256 * core: fix edge case where validation didn't pick up unknown fields 257 if the value was computed [GH-1507] 258 * core: Fix issue where values in sets on resources couldn't contain 259 hyphens. [GH-1641] 260 * core: Outputs removed from the config are removed from the state [GH-1714] 261 * core: Validate against the worst-case graph during plan phase to catch cycles 262 that would previously only show up during apply [GH-1655] 263 * core: Referencing invalid module output in module validates [GH-1448] 264 * command: remote states with uppercase types work [GH-1356] 265 * provider/aws: Support `AWS_SECURITY_TOKEN` env var again [GH-1785] 266 * provider/aws: Don't save "instance" for EIP if association fails [GH-1776] 267 * provider/aws: launch configuration ID set after create success [GH-1518] 268 * provider/aws: Fixed an issue with creating ELBs without any tags [GH-1580] 269 * provider/aws: Fix issue in Security Groups with empty IPRanges [GH-1612] 270 * provider/aws: manually deleted S3 buckets are refreshed properly [GH-1574] 271 * provider/aws: only check for EIP allocation ID in VPC [GH-1555] 272 * provider/aws: raw protocol numbers work in `aws_network_acl` [GH-1435] 273 * provider/aws: Block devices can be encrypted [GH-1718] 274 * provider/aws: ASG health check grace period can be updated in-place [GH-1682] 275 * provider/aws: ELB security groups can be updated in-place [GH-1662] 276 * provider/aws: `aws_main_route_table_association` can be deleted 277 manually [GH-1806] 278 * provider/docker: image can reference more complex image addresses, 279 such as with private repos with ports [GH-1818] 280 * provider/openstack: region config is not required [GH-1441] 281 * provider/openstack: `enable_dhcp` for networking subnet should be bool [GH-1741] 282 * provisioner/remote-exec: add random number to uploaded script path so 283 that parallel provisions work [GH-1588] 284 * provisioner/remote-exec: chmod the script to 0755 properly [GH-1796] 285 286 ## 0.4.2 (April 10, 2015) 287 288 BUG FIXES: 289 290 * core: refresh won't remove outputs from state file [GH-1369] 291 * core: clarify "unknown variable" error [GH-1480] 292 * core: properly merge parent provider configs when asking for input 293 * provider/aws: fix panic possibility if RDS DB name is empty [GH-1460] 294 * provider/aws: fix issue detecting credentials for some resources [GH-1470] 295 * provider/google: fix issue causing unresolvable diffs when using legacy 296 `network` field on `google_compute_instance` [GH-1458] 297 298 ## 0.4.1 (April 9, 2015) 299 300 IMPROVEMENTS: 301 302 * provider/aws: Route 53 records can now update `ttl` and `records` attributes 303 without destroying/creating the record [GH-1396] 304 * provider/aws: Support changing additional attributes of RDS databases 305 without forcing a new resource [GH-1382] 306 307 BUG FIXES: 308 309 * core: module paths in ".terraform" are consistent across different 310 systems so copying your ".terraform" folder works. [GH-1418] 311 * core: don't validate providers too early when nested in a module [GH-1380] 312 * core: fix race condition in `count.index` interpolation [GH-1454] 313 * core: properly initialize provisioners, fixing resource targeting 314 during destroy [GH-1544] 315 * command/push: don't ask for input if terraform.tfvars is present 316 * command/remote-config: remove spurrious error "nil" when initializing 317 remote state on a new configuration. [GH-1392] 318 * provider/aws: Fix issue with Route 53 and pre-existing Hosted Zones [GH-1415] 319 * provider/aws: Fix refresh issue in Route 53 hosted zone [GH-1384] 320 * provider/aws: Fix issue when changing map-public-ip in Subnets #1234 321 * provider/aws: Fix issue finding db subnets [GH-1377] 322 * provider/aws: Fix issues with `*_block_device` attributes on instances and 323 launch configs creating unresolvable diffs when certain optional 324 parameters were omitted from the config [GH-1445] 325 * provider/aws: Fix issue with `aws_launch_configuration` causing an 326 unnecessary diff for pre-0.4 environments [GH-1371] 327 * provider/aws: Fix several related issues with `aws_launch_configuration` 328 causing unresolvable diffs [GH-1444] 329 * provider/aws: Fix issue preventing launch configurations from being valid 330 in EC2 Classic [GH-1412] 331 * provider/aws: Fix issue in updating Route 53 records on refresh/read. [GH-1430] 332 * provider/docker: Don't ask for `cert_path` input on every run [GH-1432] 333 * provider/google: Fix issue causing unresolvable diff on instances with 334 `network_interface` [GH-1427] 335 336 ## 0.4.0 (April 2, 2015) 337 338 BACKWARDS INCOMPATIBILITIES: 339 340 * Commands `terraform push` and `terraform pull` are now nested under 341 the `remote` command: `terraform remote push` and `terraform remote pull`. 342 The old `remote` functionality is now at `terraform remote config`. This 343 consolidates all remote state management under one command. 344 * Period-prefixed configuration files are now ignored. This might break 345 existing Terraform configurations if you had period-prefixed files. 346 * The `block_device` attribute of `aws_instance` has been removed in favor 347 of three more specific attributes to specify block device mappings: 348 `root_block_device`, `ebs_block_device`, and `ephemeral_block_device`. 349 Configurations using the old attribute will generate a validation error 350 indicating that they must be updated to use the new fields [GH-1045]. 351 352 FEATURES: 353 354 * **New provider: `dme` (DNSMadeEasy)** [GH-855] 355 * **New provider: `docker` (Docker)** - Manage container lifecycle 356 using the standard Docker API. [GH-855] 357 * **New provider: `openstack` (OpenStack)** - Interact with the many resources 358 provided by OpenStack. [GH-924] 359 * **New feature: `terraform_remote_state` resource** - Reference remote 360 states from other Terraform runs to use Terraform outputs as inputs 361 into another Terraform run. 362 * **New command: `taint`** - Manually mark a resource as tainted, causing 363 a destroy and recreate on the next plan/apply. 364 * **New resource: `aws_vpn_gateway`** [GH-1137] 365 * **New resource: `aws_elastic_network_interfaces`** [GH-1149] 366 * **Self-variables** can be used to reference the current resource's 367 attributes within a provisioner. Ex. `${self.private_ip_address}` [GH-1033] 368 * **Continuous state** saving during `terraform apply`. The state file is 369 continuously updated as apply is running, meaning that the state is 370 less likely to become corrupt in a catastrophic case: terraform panic 371 or system killing Terraform. 372 * **Math operations** in interpolations. You can now do things like 373 `${count.index+1}`. [GH-1068] 374 * **New AWS SDK:** Move to `aws-sdk-go` (hashicorp/aws-sdk-go), 375 a fork of the official `awslabs` repo. We forked for stability while 376 `awslabs` refactored the library, and will move back to the officially 377 supported version in the next release. 378 379 IMPROVEMENTS: 380 381 * **New config function: `format`** - Format a string using `sprintf` 382 format. [GH-1096] 383 * **New config function: `replace`** - Search and replace string values. 384 Search can be a regular expression. See documentation for more 385 info. [GH-1029] 386 * **New config function: `split`** - Split a value based on a delimiter. 387 This is useful for faking lists as parameters to modules. 388 * **New resource: `digitalocean_ssh_key`** [GH-1074] 389 * config: Expand `~` with homedir in `file()` paths [GH-1338] 390 * core: The serial of the state is only updated if there is an actual 391 change. This will lower the amount of state changing on things 392 like refresh. 393 * core: Autoload `terraform.tfvars.json` as well as `terraform.tfvars` [GH-1030] 394 * core: `.tf` files that start with a period are now ignored. [GH-1227] 395 * command/remote-config: After enabling remote state, a `pull` is 396 automatically done initially. 397 * providers/google: Add `size` option to disk blocks for instances. [GH-1284] 398 * providers/aws: Improve support for tagging resources. 399 * providers/aws: Add a short syntax for Route 53 Record names, e.g. 400 `www` instead of `www.example.com`. 401 * providers/aws: Improve dependency violation error handling, when deleting 402 Internet Gateways or Auto Scaling groups [GH-1325]. 403 * provider/aws: Add non-destructive updates to AWS RDS. You can now upgrade 404 `engine_version`, `parameter_group_name`, and `multi_az` without forcing 405 a new database to be created.[GH-1341] 406 * providers/aws: Full support for block device mappings on instances and 407 launch configurations [GH-1045, GH-1364] 408 * provisioners/remote-exec: SSH agent support. [GH-1208] 409 410 BUG FIXES: 411 412 * core: module outputs can be used as inputs to other modules [GH-822] 413 * core: Self-referencing splat variables are no longer allowed in 414 provisioners. [GH-795][GH-868] 415 * core: Validate that `depends_on` doesn't contain interpolations. [GH-1015] 416 * core: Module inputs can be non-strings. [GH-819] 417 * core: Fix invalid plan that resulted in "diffs don't match" error when 418 a computed attribute was used as part of a set parameter. [GH-1073] 419 * core: Fix edge case where state containing both "resource" and 420 "resource.0" would ignore the latter completely. [GH-1086] 421 * core: Modules with a source of a relative file path moving up 422 directories work properly, i.e. "../a" [GH-1232] 423 * providers/aws: manually deleted VPC removes it from the state 424 * providers/aws: `source_dest_check` regression fixed (now works). [GH-1020] 425 * providers/aws: Longer wait times for DB instances. 426 * providers/aws: Longer wait times for route53 records (30 mins). [GH-1164] 427 * providers/aws: Fix support for TXT records in Route 53. [GH-1213] 428 * providers/aws: Fix support for wildcard records in Route 53. [GH-1222] 429 * providers/aws: Fix issue with ignoring the 'self' attribute of a 430 Security Group rule. [GH-1223] 431 * providers/aws: Fix issue with `sql_mode` in RDS parameter group always 432 causing an update. [GH-1225] 433 * providers/aws: Fix dependency violation with subnets and security groups 434 [GH-1252] 435 * providers/aws: Fix issue with refreshing `db_subnet_groups` causing an error 436 instead of updating state [GH-1254] 437 * providers/aws: Prevent empty string to be used as default 438 `health_check_type` [GH-1052] 439 * providers/aws: Add tags on AWS IG creation, not just on update [GH-1176] 440 * providers/digitalocean: Waits until droplet is ready to be destroyed [GH-1057] 441 * providers/digitalocean: More lenient about 404's while waiting [GH-1062] 442 * providers/digitalocean: FQDN for domain records in CNAME, MX, NS, etc. 443 Also fixes invalid updates in plans. [GH-863] 444 * providers/google: Network data in state was not being stored. [GH-1095] 445 * providers/heroku: Fix panic when config vars block was empty. [GH-1211] 446 447 PLUGIN CHANGES: 448 449 * New `helper/schema` fields for resources: `Deprecated` and `Removed` allow 450 plugins to generate warning or error messages when a given attribute is used. 451 452 ## 0.3.7 (February 19, 2015) 453 454 IMPROVEMENTS: 455 456 * **New resources: `google_compute_forwarding_rule`, `google_compute_http_health_check`, 457 and `google_compute_target_pool`** - Together these provide network-level 458 load balancing. [GH-588] 459 * **New resource: `aws_main_route_table_association`** - Manage the main routing table 460 of a VPC. [GH-918] 461 * **New resource: `aws_vpc_peering_connection`** [GH-963] 462 * core: Formalized the syntax of interpolations and documented it 463 very heavily. 464 * core: Strings in interpolations can now contain further interpolations, 465 e.g.: `foo ${bar("${baz}")}`. 466 * provider/aws: Internet gateway supports tags [GH-720] 467 * provider/aws: Support the more standard environmental variable names 468 for access key and secret keys. [GH-851] 469 * provider/aws: The `aws_db_instance` resource no longer requires both 470 `final_snapshot_identifier` and `skip_final_snapshot`; the presence or 471 absence of the former now implies the latter. [GH-874] 472 * provider/aws: Avoid unnecessary update of `aws_subnet` when 473 `map_public_ip_on_launch` is not specified in config. [GH-898] 474 * provider/aws: Add `apply_method` to `aws_db_parameter_group` [GH-897] 475 * provider/aws: Add `storage_type` to `aws_db_instance` [GH-896] 476 * provider/aws: ELB can update listeners without requiring new. [GH-721] 477 * provider/aws: Security group support egress rules. [GH-856] 478 * provider/aws: Route table supports VPC peering connection on route. [GH-963] 479 * provider/aws: Add `root_block_device` to `aws_db_instance` [GH-998] 480 * provider/google: Remove "client secrets file", as it's no longer necessary 481 for API authentication [GH-884]. 482 * provider/google: Expose `self_link` on `google_compute_instance` [GH-906] 483 484 BUG FIXES: 485 486 * core: Fixing use of remote state with plan files. [GH-741] 487 * core: Fix a panic case when certain invalid types were used in 488 the configuration. [GH-691] 489 * core: Escape characters `\"`, `\n`, and `\\` now work in interpolations. 490 * core: Fix crash that could occur when there are exactly zero providers 491 installed on a system. [GH-786] 492 * core: JSON TF configurations can configure provisioners. [GH-807] 493 * core: Sort `depends_on` in state to prevent unnecessary file changes. [GH-928] 494 * core: State containing the zero value won't cause a diff with the 495 lack of a value. [GH-952] 496 * core: If a set type becomes empty, the state will be properly updated 497 to remove it. [GH-952] 498 * core: Bare "splat" variables are not allowed in provisioners. [GH-636] 499 * core: Invalid configuration keys to sub-resources are now errors. [GH-740] 500 * command/apply: Won't try to initialize modules in some cases when 501 no arguments are given. [GH-780] 502 * command/apply: Fix regression where user variables weren't asked [GH-736] 503 * helper/hashcode: Update `hash.String()` to always return a positive index. 504 Fixes issue where specific strings would convert to a negative index 505 and be omitted when creating Route53 records. [GH-967] 506 * provider/aws: Automatically suffix the Route53 zone name on record names. [GH-312] 507 * provider/aws: Instance should ignore root EBS devices. [GH-877] 508 * provider/aws: Fix `aws_db_instance` to not recreate each time. [GH-874] 509 * provider/aws: ASG termination policies are synced with remote state. [GH-923] 510 * provider/aws: ASG launch configuration setting can now be updated in-place. [GH-904] 511 * provider/aws: No read error when subnet is manually deleted. [GH-889] 512 * provider/aws: Tags with empty values (empty string) are properly 513 managed. [GH-968] 514 * provider/aws: Fix case where route table would delete its routes 515 on an unrelated change. [GH-990] 516 * provider/google: Fix bug preventing instances with metadata from being 517 created [GH-884]. 518 519 PLUGIN CHANGES: 520 521 * New `helper/schema` type: `TypeFloat` [GH-594] 522 * New `helper/schema` field for resources: `Exists` must point to a function 523 to check for the existence of a resource. This is used to properly 524 handle the case where the resource was manually deleted. [GH-766] 525 * There is a semantic change in `GetOk` where it will return `true` if 526 there is any value in the diff that is _non-zero_. Before, it would 527 return true only if there was a value in the diff. 528 529 ## 0.3.6 (January 6, 2015) 530 531 FEATURES: 532 533 * **New provider: `cloudstack`** 534 535 IMPROVEMENTS: 536 537 * **New resource: `aws_key_pair`** - Import a public key into AWS. [GH-695] 538 * **New resource: `heroku_cert`** - Manage Heroku app certs. 539 * provider/aws: Support `eu-central-1`, `cn-north-1`, and GovCloud. [GH-525] 540 * provider/aws: `route_table` can have tags. [GH-648] 541 * provider/google: Support Ubuntu images. [GH-724] 542 * provider/google: Support for service accounts. [GH-725] 543 544 BUG FIXES: 545 546 * core: temporary/hidden files that look like Terraform configurations 547 are no longer loaded. [GH-548] 548 * core: Set types in resources now result in deterministic states, 549 resulting in cleaner plans. [GH-663] 550 * core: fix issue where "diff was not the same" would come up with 551 diffing lists. [GH-661] 552 * core: fix crash where module inputs weren't strings, and add more 553 validation around invalid types here. [GH-624] 554 * core: fix error when using a computed module output as an input to 555 another module. [GH-659] 556 * core: map overrides in "terraform.tfvars" no longer result in a syntax 557 error. [GH-647] 558 * core: Colon character works in interpolation [GH-700] 559 * provider/aws: Fix crash case when internet gateway is not attached 560 to any VPC. [GH-664] 561 * provider/aws: `vpc_id` is no longer required. [GH-667] 562 * provider/aws: `availability_zones` on ELB will contain more than one 563 AZ if it is set as such. [GH-682] 564 * provider/aws: More fields are marked as "computed" properly, resulting 565 in more accurate diffs for AWS instances. [GH-712] 566 * provider/aws: Fix panic case by using the wrong type when setting 567 volume size for AWS instances. [GH-712] 568 * provider/aws: route table ignores routes with 'EnableVgwRoutePropagation' 569 origin since those come from gateways. [GH-722] 570 * provider/aws: Default network ACL ID and default security group ID 571 support for `aws_vpc`. [GH-704] 572 * provider/aws: Tags are not marked as computed. This introduces another 573 issue with not detecting external tags, but this will be fixed in 574 the future. [GH-730] 575 576 ## 0.3.5 (December 9, 2014) 577 578 FEATURES: 579 580 * **Remote State**: State files can now be stored remotely via HTTP, 581 Consul, or HashiCorp's Atlas. 582 * **New Provider: `atlas`**: Retrieve artifacts for deployment from 583 HashiCorp's Atlas service. 584 * New `element()` function to index into arrays 585 586 IMPROVEMENTS: 587 588 * provider/aws: Support tenancy for aws\_instance 589 * provider/aws: Support block devices for aws\_instance 590 * provider/aws: Support virtual\_name on block device 591 * provider/aws: Improve RDS reliability (more grace time) 592 * provider/aws: Added aws\_db\_parameter\_group resource 593 * provider/aws: Added tag support to aws\_subnet 594 * provider/aws: Routes in RouteTable are optional 595 * provider/aws: associate\_public\_ip\_address on aws\_launch\_configuration 596 * provider/aws: Added aws\_network\_acl 597 * provider/aws: Ingress rules in security groups are optional 598 * provider/aws: Support termination policy for ASG 599 * provider/digitalocean: Improved droplet size compatibility 600 601 BUG FIXES: 602 603 * core: Fixed issue causing double delete. [GH-555] 604 * core: Fixed issue with create-before-destroy not being respected in 605 some circumstances. 606 * core: Fixing issue with count expansion with non-homogenous instance 607 plans. 608 * core: Fix issue with referencing resource variables from resources 609 that don't exist yet within resources that do exist, or modules. 610 * core: Fixing depedency handling for modules 611 * core: Fixing output handling [GH-474] 612 * core: Fixing count interpolation in modules 613 * core: Fixing multi-var without module state 614 * core: Fixing HCL variable declaration 615 * core: Fixing resource interpolation for without state 616 * core: Fixing handling of computed maps 617 * command/init: Fixing recursion issue [GH-518] 618 * command: Validate config before requesting input [GH-602] 619 * build: Fixing GOPATHs with spaces 620 621 MISC: 622 623 * provider/aws: Upgraded to helper.Schema 624 * provider/heroku: Upgraded to helper.Schema 625 * provider/mailgun: Upgraded to helper.Schema 626 * provider/dnsimple: Upgraded to helper.Schema 627 * provider/cloudflare: Upgraded to helper.Schema 628 * provider/digitalocean: Upgraded to helper.Schema 629 * provider/google: Upgraded to helper.Schema 630 631 ## 0.3.1 (October 21, 2014) 632 633 IMPROVEMENTS: 634 635 * providers/aws: Support tags for security groups. 636 * providers/google: Add "external\_address" to network attributes [GH-454] 637 * providers/google: External address is used as default connection host. [GH-454] 638 * providers/heroku: Support `locked` and `personal` booleans on organization 639 settings. [GH-406] 640 641 BUG FIXES: 642 643 * core: Remove panic case when applying with a plan that generates no 644 new state. [GH-403] 645 * core: Fix a hang that can occur with enough resources. [GH-410] 646 * core: Config validation will not error if the field is being 647 computed so the value is still unknown. 648 * core: If a resource fails to create and has provisioners, it is 649 marked as tainted. [GH-434] 650 * core: Set types are validated to be sets. [GH-413] 651 * core: String types are validated properly. [GH-460] 652 * core: Fix crash case when destroying with tainted resources. [GH-412] 653 * core: Don't execute provisioners in some cases on destroy. 654 * core: Inherited provider configurations will be properly interpolated. [GH-418] 655 * core: Refresh works properly if there are outputs that depend on resources 656 that aren't yet created. [GH-483] 657 * providers/aws: Refresh of launch configs and autoscale groups load 658 the correct data and don't incorrectly recreate themselves. [GH-425] 659 * providers/aws: Fix case where ELB would incorrectly plan to modify 660 listeners (with the same data) in some cases. 661 * providers/aws: Retry destroying internet gateway for some amount of time 662 if there is a dependency violation since it is probably just eventual 663 consistency (public facing resources being destroyed). [GH-447] 664 * providers/aws: Retry deleting security groups for some amount of time 665 if there is a dependency violation since it is probably just eventual 666 consistency. [GH-436] 667 * providers/aws: Retry deleting subnet for some amount of time if there is a 668 dependency violation since probably asynchronous destroy events take 669 place still. [GH-449] 670 * providers/aws: Drain autoscale groups before deleting. [GH-435] 671 * providers/aws: Fix crash case if launch config is manually deleted. [GH-421] 672 * providers/aws: Disassociate EIP before destroying. 673 * providers/aws: ELB treats subnets as a set. 674 * providers/aws: Fix case where in a destroy/create tags weren't reapplied. [GH-464] 675 * providers/aws: Fix incorrect/erroneous apply cases around security group 676 rules. [GH-457] 677 * providers/consul: Fix regression where `key` param changed to `keys. [GH-475] 678 679 ## 0.3.0 (October 14, 2014) 680 681 FEATURES: 682 683 * **Modules**: Configuration can now be modularized. Modules can live on 684 GitHub, BitBucket, Git/Hg repos, HTTP URLs, and file paths. Terraform 685 automatically downloads/updates modules for you on request. 686 * **New Command: `init`**. This command initializes a Terraform configuration 687 from an existing Terraform module (also new in 0.3). 688 * **New Command: `destroy`**. This command destroys infrastructure 689 created with `apply`. 690 * Terraform will ask for user input to fill in required variables and 691 provider configurations if they aren't set. 692 * `terraform apply MODULE` can be used as a shorthand to quickly build 693 infrastructure from a module. 694 * The state file format is now JSON rather than binary. This allows for 695 easier machine and human read/write. Old binary state files will be 696 automatically upgraded. 697 * You can now specify `create_before_destroy` as an option for replacement 698 so that new resources are created before the old ones are destroyed. 699 * The `count` metaparameter can now contain interpolations (such as 700 variables). 701 * The current index for a resource with a `count` set can be interpolated 702 using `${count.index}`. 703 * Various paths can be interpolated with the `path.X` variables. For example, 704 the path to the current module can be interpolated using `${path.module}`. 705 706 IMPROVEMENTS: 707 708 * config: Trailing commas are now allowed for the final elements of lists. 709 * core: Plugins are loaded from `~/.terraform.d/plugins` (Unix) or 710 `%USERDATA%/terraform.d/plugins` (Windows). 711 * command/show: With no arguments, it will show the default state. [GH-349] 712 * helper/schema: Can now have default values. [GH-245] 713 * providers/aws: Tag support for most resources. 714 * providers/aws: New resource `db_subnet_group`. [GH-295] 715 * providers/aws: Add `map_public_ip_on_launch` for subnets. [GH-285] 716 * providers/aws: Add `iam_instance_profile` for instances. [GH-319] 717 * providers/aws: Add `internal` option for ELBs. [GH-303] 718 * providers/aws: Add `ssl_certificate_id` for ELB listeners. [GH-350] 719 * providers/aws: Add `self` option for security groups for ingress 720 rules with self as source. [GH-303] 721 * providers/aws: Add `iam_instance_profile` option to 722 `aws_launch_configuration`. [GH-371] 723 * providers/aws: Non-destructive update of `desired_capacity` for 724 autoscale groups. 725 * providers/aws: Add `main_route_table_id` attribute to VPCs. [GH-193] 726 * providers/consul: Support tokens. [GH-396] 727 * providers/google: Support `target_tags` for firewalls. [GH-324] 728 * providers/google: `google_compute_instance` supports `can_ip_forward` [GH-375] 729 * providers/google: `google_compute_disk` supports `type` to support disks 730 such as SSDs. [GH-351] 731 * provisioners/local-exec: Output from command is shown in CLI output. [GH-311] 732 * provisioners/remote-exec: Output from command is shown in CLI output. [GH-311] 733 734 BUG FIXES: 735 736 * core: Providers are validated even without a `provider` block. [GH-284] 737 * core: In the case of error, walk all non-dependent trees. 738 * core: Plugin loading from CWD works properly. 739 * core: Fix many edge cases surrounding the `count` meta-parameter. 740 * core: Strings in the configuration can escape double-quotes with the 741 standard `\"` syntax. 742 * core: Error parsing CLI config will show properly. [GH-288] 743 * core: More than one Ctrl-C will exit immediately. 744 * providers/aws: autoscaling_group can be launched into a vpc [GH-259] 745 * providers/aws: not an error when RDS instance is deleted manually. [GH-307] 746 * providers/aws: Retry deleting subnet for some time while AWS eventually 747 destroys dependencies. [GH-357] 748 * providers/aws: More robust destroy for route53 records. [GH-342] 749 * providers/aws: ELB generates much more correct plans without extranneous 750 data. 751 * providers/aws: ELB works properly with dynamically changing 752 count of instances. 753 * providers/aws: Terraform can handle ELBs deleted manually. [GH-304] 754 * providers/aws: Report errors properly if RDS fails to delete. [GH-310] 755 * providers/aws: Wait for launch configuration to exist after creation 756 (AWS eventual consistency) [GH-302] 757 758 ## 0.2.2 (September 9, 2014) 759 760 IMPROVEMENTS: 761 762 * providers/amazon: Add `ebs_optimized` flag. [GH-260] 763 * providers/digitalocean: Handle 404 on delete 764 * providers/digitalocean: Add `user_data` argument for creating droplets 765 * providers/google: Disks can be marked `auto_delete`. [GH-254] 766 767 BUG FIXES: 768 769 * core: Fix certain syntax of configuration that could cause hang. [GH-261] 770 * core: `-no-color` flag properly disables color. [GH-250] 771 * core: "~" is expanded in `-var-file` flags. [GH-273] 772 * core: Errors with tfvars are shown in console. [GH-269] 773 * core: Interpolation function calls with more than two args parse. [GH-282] 774 * providers/aws: Refreshing EIP from pre-0.2 state file won't error. [GH-258] 775 * providers/aws: Creating EIP without an instance/network won't fail. 776 * providers/aws: Refreshing EIP manually deleted works. 777 * providers/aws: Retry EIP delete to allow AWS eventual consistency to 778 detect it isn't attached. [GH-276] 779 * providers/digitalocean: Handle situations when resource was destroyed 780 manually. [GH-279] 781 * providers/digitalocean: Fix a couple scenarios where the diff was 782 incorrect (and therefore the execution as well). 783 * providers/google: Attaching a disk source (not an image) works 784 properly. [GH-254] 785 786 ## 0.2.1 (August 31, 2014) 787 788 IMPROVEMENTS: 789 790 * core: Plugins are automatically discovered in the executable directory 791 or pwd if named properly. [GH-190] 792 * providers/mailgun: domain records are now saved to state 793 794 BUG FIXES: 795 796 * core: Configuration parses when identifier and '=' have no space. [GH-243] 797 * core: `depends_on` with `count` generates the proper graph. [GH-244] 798 * core: Depending on a computed variable of a list type generates a 799 plan without failure. i.e. `${type.name.foos.0.bar}` where `foos` 800 is computed. [GH-247] 801 * providers/aws: Route53 destroys in parallel work properly. [GH-183] 802 803 ## 0.2.0 (August 28, 2014) 804 805 BACKWARDS INCOMPATIBILITIES: 806 807 * We've replaced the configuration language in use from a C library to 808 a pure-Go reimplementation. In the process, we removed some features 809 of the language since it was too flexible: 810 * Semicolons are no longer valid at the end of lines 811 * Keys cannot be double-quoted strings: `"foo" = "bar"` is no longer 812 valid. 813 * JSON style maps `{ "foo": "bar" }` are no longer valid outside of JSON. 814 Maps must be in the format of `{ foo = "bar" }` (like other objects 815 in the config) 816 * Heroku apps now require (will not validate without) `region` and 817 `name` due to an upstream API change. [GH-239] 818 819 FEATURES: 820 821 * **New Provider: `google`**: Manage Google Compute instances, disks, 822 firewalls, and more. 823 * **New Provider: `mailgun`**: Manage mailgun domains. 824 * **New Function: `concat`**: Concatenate multiple strings together. 825 Example: `concat(var.region, "-", var.channel)`. 826 827 IMPROVEMENTS: 828 829 * core: "~/.terraformrc" (Unix) or "%APPDATA%/terraform.rc" (Windows) 830 can be used to configure custom providers and provisioners. [GH-192] 831 * providers/aws: EIPs now expose `allocation_id` and `public_ip` 832 attributes. 833 * providers/aws: Security group rules can be updated without a 834 destroy/create. 835 * providers/aws: You can enable and disable dns settings for VPCs. [GH-172] 836 * providers/aws: Can specify a private IP address for `aws_instance` [GH-217] 837 838 BUG FIXES: 839 840 * core: Variables are validated to not contain interpolations. [GH-180] 841 * core: Key files for provisioning can now contain `~` and will be expanded 842 to the user's home directory. [GH-179] 843 * core: The `file()` function can load files in sub-directories. [GH-213] 844 * core: Fix issue where some JSON structures didn't map properly into 845 Terraform structures. [GH-177] 846 * core: Resources with only `file()` calls will interpolate. [GH-159] 847 * core: Variables work in block names. [GH-234] 848 * core: Plugins are searched for in the same directory as the executable 849 before the PATH. [GH-157] 850 * command/apply: "tfvars" file no longer interferes with plan apply. [GH-153] 851 * providers/aws: Fix issues around failing to read EIPs. [GH-122] 852 * providers/aws: Autoscaling groups now register and export load 853 balancers. [GH-207] 854 * providers/aws: Ingress results are treated as a set, so order doesn't 855 matter anymore. [GH-87] 856 * providers/aws: Instance security groups treated as a set [GH-194] 857 * providers/aws: Retry Route53 requests if operation failed because another 858 operation is in progress [GH-183] 859 * providers/aws: Route53 records with multiple record values work. [GH-221] 860 * providers/aws: Changing AMI doesn't result in errors anymore. [GH-196] 861 * providers/heroku: If you delete the `config_vars` block, config vars 862 are properly nuked. 863 * providers/heroku: Domains and drains are deleted before the app. 864 * providers/heroku: Moved from the client library bgentry/heroku-go to 865 cyberdelia/heroku-go [GH-239]. 866 * providers/heroku: Plans without a specific plan name for 867 heroku\_addon work. [GH-198] 868 869 PLUGIN CHANGES: 870 871 * **New Package:** `helper/schema`. This introduces a high-level framework 872 for easily writing new providers and resources. The Heroku provider has 873 been converted to this as an example. 874 875 ## 0.1.1 (August 5, 2014) 876 877 FEATURES: 878 879 * providers/heroku: Now supports creating Heroku Drains [GH-97] 880 881 IMPROVEMENTS: 882 883 * providers/aws: Launch configurations accept user data [GH-94] 884 * providers/aws: Regions are now validated [GH-96] 885 * providers/aws: ELB now supports health check configurations [GH-109] 886 887 BUG FIXES: 888 889 * core: Default variable file "terraform.tfvars" is auto-loaded. [GH-59] 890 * core: Multi-variables (`foo.*.bar`) work even when `count = 1`. [GH-115] 891 * core: `file()` function can have string literal arg [GH-145] 892 * providers/cloudflare: Include the proper bins so the cloudflare 893 provider is compiled 894 * providers/aws: Engine version for RDS now properly set [GH-118] 895 * providers/aws: Security groups now depend on each other and 896 * providers/aws: DB instances now wait for destroys, have proper 897 dependencies and allow passing skip_final_snapshot 898 * providers/aws: Add associate_public_ip_address as an attribute on 899 the aws_instance resource [GH-85] 900 * providers/aws: Fix cidr blocks being updated [GH-65, GH-85] 901 * providers/aws: Description is now required for security groups 902 * providers/digitalocean: Private IP addresses are now a separate 903 attribute 904 * provisioner/all: If an SSH key is given with a password, a better 905 error message is shown. [GH-73] 906 907 ## 0.1.0 (July 28, 2014) 908 909 * Initial release