github.com/icebourg/terraform@v0.6.5-0.20151015205227-263cc1b85535/CHANGELOG.md (about)

     1  ## 0.6.5 (Unreleased)
     2  
     3  ## 0.6.4 (October 15, 2015)
     4  
     5  FEATURES:
     6  
     7    * **New provider: `rundeck`** [GH-2412]
     8    * **New provider: `packet`** [GH-2260], [GH-3472]
     9    * **New provider: `vsphere`**: Initial support for a VM resource [GH-3419]
    10    * **New resource: `cloudstack_loadbalancer_rule`** [GH-2934]
    11    * **New resource: `google_compute_project_metadata`** [GH-3065]
    12    * **New resources: `aws_ami`, `aws_ami_copy`, `aws_ami_from_instance`** [GH-2784]
    13    * **New resources: `aws_cloudwatch_log_group`** [GH-2415]
    14    * **New resource: `google_storage_bucket_object`** [GH-3192]
    15    * **New resources: `google_compute_vpn_gateway`, `google_compute_vpn_tunnel`** [GH-3213]
    16    * **New resources: `google_storage_bucket_acl`, `google_storage_object_acl`** [GH-3272]
    17    * **New resource: `aws_iam_saml_provider`** [GH-3156]
    18    * **New resources: `aws_efs_file_system` and `aws_efs_mount_target`** [GH-2196]
    19    * **New resources: `aws_opsworks_*`** [GH-2162]
    20    * **New resource: `aws_elasticsearch_domain`** [GH-3443]
    21    * **New resource: `aws_directory_service_directory`** [GH-3228]
    22    * **New resource: `aws_autoscaling_lifecycle_hook`** [GH-3351]
    23    * **New resource: `aws_placement_group`** [GH-3457]
    24    * **New resource: `aws_glacier_vault`** [GH-3491]
    25    * **New lifecycle flag: `ignore_changes`** [GH-2525]
    26  
    27  IMPROVEMENTS:
    28  
    29    * core: Add a function to find the index of an element in a list. [GH-2704]
    30    * core: Print all outputs when `terraform output` is called with no arguments [GH-2920]
    31    * core: In plan output summary, count resource replacement as Add/Remove instead of Change [GH-3173]
    32    * core: Add interpolation functions for base64 encoding and decoding. [GH-3325]
    33    * core: Expose parallelism as a CLI option instead of a hard-coding the default of 10 [GH-3365]
    34    * core: Add interpolation function `compact`, to remove empty elements from a list. [GH-3239], [GH-3479]
    35    * core: Allow filtering of log output by level, using e.g. ``TF_LOG=INFO`` [GH-3380]
    36    * provider/aws: Add `instance_initiated_shutdown_behavior` to AWS Instance [GH-2887]
    37    * provider/aws: Support IAM role names (previously just ARNs) in `aws_ecs_service.iam_role` [GH-3061]
    38    * provider/aws: Add update method to RDS Subnet groups, can modify subnets without recreating  [GH-3053]
    39    * provider/aws: Paginate notifications returned for ASG Notifications [GH-3043]
    40    * provider/aws: Adds additional S3 Bucket Object inputs [GH-3265]
    41    * provider/aws: add `ses_smtp_password` to `aws_iam_access_key` [GH-3165]
    42    * provider/aws: read `iam_instance_profile` for `aws_instance` and save to state [GH-3167]
    43    * provider/aws: allow `instance` to be computed in `aws_eip` [GH-3036]
    44    * provider/aws: Add `versioning` option to `aws_s3_bucket` [GH-2942]
    45    * provider/aws: Add `configuation_endpoint` to `aws_elasticache_cluster` [GH-3250]
    46    * provider/aws: Add validation for `app_cookie_stickiness_policy.name` [GH-3277]
    47    * provider/aws: Add validation for `db_parameter_group.name` [GH-3279]
    48    * provider/aws: Set DynamoDB Table ARN after creation [GH-3500]
    49    * provider/aws: `aws_s3_bucket_object` allows interpolated content to be set with new `content` attribute. [GH-3200]
    50    * provider/aws: Allow tags for `aws_kinesis_stream` resource. [GH-3397]
    51    * provider/aws: Configurable capacity waiting duration for ASGs [GH-3191]
    52    * provider/aws: Allow non-persistent Spot Requests [GH-3311]
    53    * provider/aws: Support tags for AWS DB subnet group [GH-3138]
    54    * provider/cloudstack: Add `project` parameter to `cloudstack_vpc`, `cloudstack_network`, `cloudstack_ipaddress` and `cloudstack_disk` [GH-3035]
    55    * provider/openstack: add functionality to attach FloatingIP to Port [GH-1788]
    56    * provider/google: Can now do multi-region deployments without using multiple providers [GH-3258]
    57    * remote/s3: Allow canned ACLs to be set on state objects. [GH-3233]
    58    * remote/s3: Remote state is stored in S3 with `Content-Type: application/json` [GH-3385]
    59  
    60  BUG FIXES:
    61  
    62    * core: Fix problems referencing list attributes in interpolations [GH-2157]
    63    * core: don't error on computed value during input walk [GH-2988]
    64    * core: Ignore missing variables during destroy phase [GH-3393]
    65    * provider/google: Crashes with interface conversion in GCE Instance Template [GH-3027]
    66    * provider/google: Convert int to int64 when building the GKE cluster.NodeConfig struct [GH-2978]
    67    * provider/google: google_compute_instance_template.network_interface.network should be a URL [GH-3226]
    68    * provider/aws: Retry creation of `aws_ecs_service` if IAM policy isn't ready yet [GH-3061]
    69    * provider/aws: Fix issue with mixed capitalization for RDS Instances  [GH-3053]
    70    * provider/aws: Fix issue with RDS to allow major version upgrades [GH-3053]
    71    * provider/aws: Fix shard_count in `aws_kinesis_stream` [GH-2986]
    72    * provider/aws: Fix issue with `key_name` and using VPCs with spot instance requests [GH-2954]
    73    * provider/aws: Fix unresolvable diffs coming from `aws_elasticache_cluster` names being downcased
    74        by AWS [GH-3120]
    75    * provider/aws: Read instance source_dest_check and save to state [GH-3152]
    76    * provider/aws: Allow `weight = 0` in Route53 records [GH-3196]
    77    * provider/aws: Normalize aws_elasticache_cluster id to lowercase, allowing convergence. [GH-3235]
    78    * provider/aws: Fix ValidateAccountId for IAM Instance Profiles [GH-3313]
    79    * provider/aws: Update Security Group Rules to Version 2 [GH-3019]
    80    * provider/aws: Migrate KeyPair to version 1, fixing issue with using `file()` [GH-3470]
    81    * provider/aws: Fix force_delete on autoscaling groups [GH-3485]
    82    * provider/aws: Fix crash with VPC Peering connections [GH-3490]
    83    * provider/aws: fix bug with reading GSIs from dynamodb [GH-3300]
    84    * provider/docker: Fix issue preventing private images from being referenced [GH-2619]
    85    * provider/digitalocean: Fix issue causing unnecessary diffs based on droplet slugsize case [GH-3284]
    86    * provider/openstack: add state 'downloading' to list of expected states in
    87        `blockstorage_volume_v1` creation [GH-2866]
    88    * provider/openstack: remove security groups (by name) before adding security
    89        groups (by id) [GH-2008]
    90  
    91  INTERNAL IMPROVEMENTS:
    92  
    93    * core: Makefile target "plugin-dev" for building just one plugin. [GH-3229]
    94    * helper/schema: Don't allow ``Update`` func if no attributes can actually be updated, per schema. [GH-3288]
    95    * helper/schema: Default hashing function for sets [GH-3018]
    96    * helper/multierror: Remove in favor of [github.com/hashicorp/go-multierror](http://github.com/hashicorp/go-multierror). [GH-3336]
    97  
    98  ## 0.6.3 (August 11, 2015)
    99  
   100  BUG FIXES:
   101  
   102    * core: Skip all descendents after error, not just children; helps prevent confusing
   103        additional errors/crashes after initial failure [GH-2963]
   104    * core: fix deadlock possibility when both a module and a dependent resource are
   105        removed in the same run [GH-2968]
   106    * provider/aws: Fix issue with authenticating when using IAM profiles [GH-2959]
   107  
   108  ## 0.6.2 (August 6, 2015)
   109  
   110  FEATURES:
   111  
   112    * **New resource: `google_compute_instance_group_manager`** [GH-2868]
   113    * **New resource: `google_compute_autoscaler`** [GH-2868]
   114    * **New resource: `aws_s3_bucket_object`** [GH-2898]
   115  
   116  IMPROVEMENTS:
   117  
   118    * core: Add resource IDs to errors coming from `apply`/`refresh` [GH-2815]
   119    * provider/aws: Validate credentials before walking the graph [GH-2730]
   120    * provider/aws: Added website_domain for S3 buckets [GH-2210]
   121    * provider/aws: ELB names are now optional, and generated by Terraform if omitted [GH-2571]
   122    * provider/aws: Downcase RDS engine names to prevent continuous diffs [GH-2745]
   123    * provider/aws: Added `source_dest_check` attribute to the aws_network_interface [GH-2741]
   124    * provider/aws: Clean up externally removed Launch Configurations [GH-2806]
   125    * provider/aws: Allow configuration of the DynamoDB Endpoint [GH-2825]
   126    * provider/aws: Compute private ip addresses of ENIs if they are not specified [GH-2743]
   127    * provider/aws: Add `arn` attribute for DynamoDB tables [GH-2924]
   128    * provider/aws: Fail silently when account validation fails while from instance profile [GH-3001]
   129    * provider/azure: Allow `settings_file` to accept XML string [GH-2922]
   130    * provider/azure: Provide a simpler error when using a Platform Image without a
   131        Storage Service [GH-2861]
   132    * provider/google: `account_file` is now expected to be JSON. Paths are still supported for
   133        backwards compatibility. [GH-2839]
   134  
   135  BUG FIXES:
   136  
   137    * core: Prevent error duplication in `apply` [GH-2815]
   138    * core: Fix crash when  a provider validation adds a warning [GH-2878]
   139    * provider/aws: Fix issue with toggling monitoring in AWS Instances [GH-2794]
   140    * provider/aws: Fix issue with Spot Instance Requests and cancellation [GH-2805]
   141    * provider/aws: Fix issue with checking for ElastiCache cluster cache node status [GH-2842]
   142    * provider/aws: Fix issue when unable to find a Root Block Device name of an Instance Backed
   143        AMI [GH-2646]
   144    * provider/dnsimple: Domain and type should force new records [GH-2777]
   145    * provider/aws: Fix issue with IAM Server Certificates and Chains [GH-2871]
   146    * provider/aws: Fix issue with IAM Server Certificates when using `path` [GH-2871]
   147    * provider/aws: Fix issue in Security Group Rules when the Security Group is not found [GH-2897]
   148    * provider/aws: allow external ENI attachments [GH-2943]
   149    * provider/aws: Fix issue with S3 Buckets, and throwing an error when not found [GH-2925]
   150  
   151  ## 0.6.1 (July 20, 2015)
   152  
   153  FEATURES:
   154  
   155    * **New resource: `google_container_cluster`** [GH-2357]
   156    * **New resource: `aws_vpc_endpoint`** [GH-2695]
   157  
   158  IMPROVEMENTS:
   159  
   160    * connection/ssh: Print SSH bastion host details to output [GH-2684]
   161    * provider/aws: Create RDS databases from snapshots [GH-2062]
   162    * provider/aws: Add support for restoring from Redis backup stored in S3 [GH-2634]
   163    * provider/aws: Add `maintenance_window` to ElastiCache cluster [GH-2642]
   164    * provider/aws: Availability Zones are optional when specifying VPC Zone Identifiers in
   165        Auto Scaling Groups updates [GH-2724]
   166    * provider/google: Add metadata_startup_script to google_compute_instance [GH-2375]
   167  
   168  BUG FIXES:
   169  
   170    * core: Don't prompt for variables with defaults [GH-2613]
   171    * core: Return correct number of planned updates [GH-2620]
   172    * core: Fix "provider not found" error that can occur while running
   173        a destroy plan with grandchildren modules [GH-2755]
   174    * core: Fix UUID showing up in diff for computed splat (`foo.*.bar`)
   175        variables. [GH-2788]
   176    * core: Orphan modules that contain no resources (only other modules)
   177        are properly destroyed up to arbitrary depth [GH-2786]
   178    * core: Fix "attribute not available" during destroy plans in
   179        cases where the parameter is passed between modules [GH-2775]
   180    * core: Record schema version when destroy fails [GH-2923]
   181    * connection/ssh: fix issue on machines with an SSH Agent available
   182      preventing `key_file` from being read without explicitly
   183      setting `agent = false` [GH-2615]
   184    * provider/aws: Allow uppercase characters in `aws_elb.name` [GH-2580]
   185    * provider/aws: Allow underscores in `aws_db_subnet_group.name` (undocumented by AWS) [GH-2604]
   186    * provider/aws: Allow dots in `aws_db_subnet_group.name` (undocumented by AWS) [GH-2665]
   187    * provider/aws: Fix issue with pending Spot Instance requests [GH-2640]
   188    * provider/aws: Fix issue in AWS Classic environment with referencing external
   189        Security Groups [GH-2644]
   190    * provider/aws: Bump internet gateway detach timeout [GH-2669]
   191    * provider/aws: Fix issue with detecting differences in DB Parameters [GH-2728]
   192    * provider/aws: `ecs_cluster` rename (recreation) and deletion is handled correctly [GH-2698]
   193    * provider/aws: `aws_route_table` ignores routes generated for VPC endpoints [GH-2695]
   194    * provider/aws: Fix issue with Launch Configurations and enable_monitoring [GH-2735]
   195    * provider/openstack: allow empty api_key and endpoint_type [GH-2626]
   196    * provisioner/chef: Fix permission denied error with ohai hints [GH-2781]
   197  
   198  ## 0.6.0 (June 30, 2015)
   199  
   200  BACKWARDS INCOMPATIBILITIES:
   201  
   202   * command/push: If a variable is already set within Atlas, it won't be
   203       updated unless the `-overwrite` flag is present [GH-2373]
   204   * connection/ssh: The `agent` field now defaults to `true` if
   205       the `SSH_AGENT_SOCK` environment variable is present. In other words,
   206       `ssh-agent` support is now opt-out instead of opt-in functionality. [GH-2408]
   207   * provider/aws: If you were setting access and secret key to blank ("")
   208       to force Terraform to load credentials from another source such as the
   209       EC2 role, this will now error. Remove the blank lines and Terraform
   210       will load from other sources.
   211   * `concat()` has been repurposed to combine lists instead of strings (old behavior
   212       of joining strings is maintained in this version but is deprecated, strings
   213       should be combined using interpolation syntax, like "${var.foo}{var.bar}")
   214       [GH-1790]
   215  
   216  FEATURES:
   217  
   218    * **New provider: `azure`** [GH-2052, GH-2053, GH-2372, GH-2380, GH-2394, GH-2515, GH-2530, GH-2562]
   219    * **New resource: `aws_autoscaling_notification`** [GH-2197]
   220    * **New resource: `aws_autoscaling_policy`** [GH-2201]
   221    * **New resource: `aws_cloudwatch_metric_alarm`** [GH-2201]
   222    * **New resource: `aws_dynamodb_table`** [GH-2121]
   223    * **New resource: `aws_ecs_cluster`** [GH-1803]
   224    * **New resource: `aws_ecs_service`** [GH-1803]
   225    * **New resource: `aws_ecs_task_definition`** [GH-1803, GH-2402]
   226    * **New resource: `aws_elasticache_parameter_group`** [GH-2276]
   227    * **New resource: `aws_flow_log`** [GH-2384]
   228    * **New resource: `aws_iam_group_association`** [GH-2273]
   229    * **New resource: `aws_iam_policy_attachment`** [GH-2395]
   230    * **New resource: `aws_lambda_function`** [GH-2170]
   231    * **New resource: `aws_route53_delegation_set`** [GH-1999]
   232    * **New resource: `aws_route53_health_check`** [GH-2226]
   233    * **New resource: `aws_spot_instance_request`** [GH-2263]
   234    * **New resource: `cloudstack_ssh_keypair`** [GH-2004]
   235    * **New remote state backend: `swift`**: You can now store remote state in
   236       a OpenStack Swift. [GH-2254]
   237    * command/output: support display of module outputs [GH-2102]
   238    * core: `keys()` and `values()` funcs for map variables [GH-2198]
   239    * connection/ssh: SSH bastion host support and ssh-agent forwarding [GH-2425]
   240  
   241  IMPROVEMENTS:
   242  
   243    * core: HTTP remote state now accepts `skip_cert_verification`
   244        option to ignore TLS cert verification. [GH-2214]
   245    * core: S3 remote state now accepts the 'encrypt' option for SSE [GH-2405]
   246    * core: `plan` now reports sum of resources to be changed/created/destroyed [GH-2458]
   247    * core: Change string list representation so we can distinguish empty, single
   248        element lists [GH-2504]
   249    * core: Properly close provider and provisioner plugin connections [GH-2406, GH-2527]
   250    * provider/aws: AutoScaling groups now support updating Load Balancers without
   251        recreation [GH-2472]
   252    * provider/aws: Allow more in-place updates for ElastiCache cluster without recreating
   253        [GH-2469]
   254    * provider/aws: ElastiCache Subnet Groups can be updated
   255        without destroying first [GH-2191]
   256    * provider/aws: Normalize `certificate_chain` in `aws_iam_server_certificate` to
   257        prevent unnecessary replacement. [GH-2411]
   258    * provider/aws: `aws_instance` supports `monitoring' [GH-2489]
   259    * provider/aws: `aws_launch_configuration` now supports `enable_monitoring` [GH-2410]
   260    * provider/aws: Show outputs after `terraform refresh` [GH-2347]
   261    * provider/aws: Add backoff/throttling during DynamoDB creation [GH-2462]
   262    * provider/aws: Add validation for aws_vpc.cidr_block [GH-2514]
   263    * provider/aws: Add validation for aws_db_subnet_group.name [GH-2513]
   264    * provider/aws: Add validation for aws_db_instance.identifier [GH-2516]
   265    * provider/aws: Add validation for aws_elb.name [GH-2517]
   266    * provider/aws: Add validation for aws_security_group (name+description) [GH-2518]
   267    * provider/aws: Add validation for aws_launch_configuration [GH-2519]
   268    * provider/aws: Add validation for aws_autoscaling_group.name [GH-2520]
   269    * provider/aws: Add validation for aws_iam_role.name [GH-2521]
   270    * provider/aws: Add validation for aws_iam_role_policy.name [GH-2552]
   271    * provider/aws: Add validation for aws_iam_instance_profile.name [GH-2553]
   272    * provider/aws: aws_auto_scaling_group.default_cooldown no longer requires
   273        resource replacement [GH-2510]
   274    * provider/aws: add AH and ESP protocol integers [GH-2321]
   275    * provider/docker: `docker_container` has the `privileged`
   276        option. [GH-2227]
   277    * provider/openstack: allow `OS_AUTH_TOKEN` environment variable
   278        to set the openstack `api_key` field [GH-2234]
   279    * provider/openstack: Can now configure endpoint type (public, admin,
   280        internal) [GH-2262]
   281    * provider/cloudstack: `cloudstack_instance` now supports projects [GH-2115]
   282    * provisioner/chef: Added a `os_type` to specifically specify the target OS [GH-2483]
   283    * provisioner/chef: Added a `ohai_hints` option to upload hint files [GH-2487]
   284  
   285  BUG FIXES:
   286  
   287    * core: lifecycle `prevent_destroy` can be any value that can be
   288        coerced into a bool [GH-2268]
   289    * core: matching provider types in sibling modules won't override
   290        each other's config. [GH-2464]
   291    * core: computed provider configurations now properly validate [GH-2457]
   292    * core: orphan (commented out) resource dependencies are destroyed in
   293        the correct order [GH-2453]
   294    * core: validate object types in plugins are actually objects [GH-2450]
   295    * core: fix `-no-color` flag in subcommands [GH-2414]
   296    * core: Fix error of 'attribute not found for variable' when a computed
   297        resource attribute is used as a parameter to a module [GH-2477]
   298    * core: moduled orphans will properly inherit provider configs [GH-2476]
   299    * core: modules with provider aliases work properly if the parent
   300        doesn't implement those aliases [GH-2475]
   301    * core: unknown resource attributes passed in as parameters to modules
   302        now error [GH-2478]
   303    * core: better error messages for missing variables [GH-2479]
   304    * core: removed set items now properly appear in diffs and applies [GH-2507]
   305    * core: '*' will not be added as part of the variable name when you
   306        attempt multiplication without a space [GH-2505]
   307    * core: fix target dependency calculation across module boundaries [GH-2555]
   308    * command/*: fixed bug where variable input was not asked for unset
   309        vars if terraform.tfvars existed [GH-2502]
   310    * command/apply: prevent output duplication when reporting errors [GH-2267]
   311    * command/apply: destroyed orphan resources are properly counted [GH-2506]
   312    * provider/aws: loading credentials from the environment (vars, EC2 role,
   313        etc.) is more robust and will not ask for credentials from stdin [GH-1841]
   314    * provider/aws: fix panic when route has no `cidr_block` [GH-2215]
   315    * provider/aws: fix issue preventing destruction of IAM Roles [GH-2177]
   316    * provider/aws: fix issue where Security Group Rules could collide and fail
   317        to save to the state file correctly [GH-2376]
   318    * provider/aws: fix issue preventing destruction self referencing Securtity
   319       Group Rules [GH-2305]
   320    * provider/aws: fix issue causing perpetual diff on ELB listeners
   321        when non-lowercase protocol strings were used [GH-2246]
   322    * provider/aws: corrected frankfurt S3 website region [GH-2259]
   323    * provider/aws: `aws_elasticache_cluster` port is required [GH-2160]
   324    * provider/aws: Handle AMIs where RootBlockDevice does not appear in the
   325        BlockDeviceMapping, preventing root_block_device from working [GH-2271]
   326    * provider/aws: fix `terraform show` with remote state [GH-2371]
   327    * provider/aws: detect `instance_type` drift on `aws_instance` [GH-2374]
   328    * provider/aws: fix crash when `security_group_rule` referenced non-existent
   329        security group [GH-2434]
   330    * provider/aws: `aws_launch_configuration` retries if IAM instance
   331        profile is not ready yet. [GH-2452]
   332    * provider/aws: `fqdn` is populated during creation for `aws_route53_record` [GH-2528]
   333    * provider/aws: retry VPC delete on DependencyViolation due to eventual
   334        consistency [GH-2532]
   335    * provider/aws: VPC peering connections in "failed" state are deleted [GH-2544]
   336    * provider/aws: EIP deletion works if it was manually disassociated [GH-2543]
   337    * provider/aws: `elasticache_subnet_group.subnet_ids` is now a required argument [GH-2534]
   338    * provider/aws: handle nil response from VPN connection describes [GH-2533]
   339    * provider/cloudflare: manual record deletion doesn't cause error [GH-2545]
   340    * provider/digitalocean: handle case where droplet is deleted outside of
   341        terraform [GH-2497]
   342    * provider/dme: No longer an error if record deleted manually [GH-2546]
   343    * provider/docker: Fix issues when using containers with links [GH-2327]
   344    * provider/openstack: fix panic case if API returns nil network [GH-2448]
   345    * provider/template: fix issue causing "unknown variable" rendering errors
   346        when an existing set of template variables is changed [GH-2386]
   347    * provisioner/chef: improve the decoding logic to prevent parameter not found errors [GH-2206]
   348  
   349  ## 0.5.3 (June 1, 2015)
   350  
   351  IMPROVEMENTS:
   352  
   353    * **New resource: `aws_kinesis_stream`** [GH-2110]
   354    * **New resource: `aws_iam_server_certificate`** [GH-2086]
   355    * **New resource: `aws_sqs_queue`** [GH-1939]
   356    * **New resource: `aws_sns_topic`** [GH-1974]
   357    * **New resource: `aws_sns_topic_subscription`** [GH-1974]
   358    * **New resource: `aws_volume_attachment`** [GH-2050]
   359    * **New resource: `google_storage_bucket`** [GH-2060]
   360    * provider/aws: support ec2 termination protection [GH-1988]
   361    * provider/aws: support for RDS Read Replicas [GH-1946]
   362    * provider/aws: `aws_s3_bucket` add support for `policy` [GH-1992]
   363    * provider/aws: `aws_ebs_volume` add support for `tags` [GH-2135]
   364    * provider/aws: `aws_elasticache_cluster` Confirm node status before reporting
   365        available
   366    * provider/aws: `aws_network_acl` Add support for ICMP Protocol [GH-2148]
   367    * provider/aws: New `force_destroy` parameter for S3 buckets, to destroy
   368        Buckets that contain objects [GH-2007]
   369    * provider/aws: switching `health_check_type` on ASGs no longer requires
   370        resource refresh [GH-2147]
   371    * provider/aws: ignore empty `vpc_security_group_ids` on `aws_instance` [GH-2311]
   372  
   373  BUG FIXES:
   374  
   375    * provider/aws: Correctly handle AWS keypairs which no longer exist [GH-2032]
   376    * provider/aws: Fix issue with restoring an Instance from snapshot ID [GH-2120]
   377    * provider/template: store relative path in the state [GH-2038]
   378    * provisioner/chef: fix interpolation in the Chef provisioner [GH-2168]
   379    * provisioner/remote-exec: Don't prepend shebang on scripts that already
   380        have one [GH-2041]
   381  
   382  ## 0.5.2 (May 15, 2015)
   383  
   384  FEATURES:
   385  
   386    * **Chef provisioning**: You can now provision new hosts (both Linux and
   387       Windows) with [Chef](https://chef.io) using a native provisioner [GH-1868]
   388  
   389  IMPROVEMENTS:
   390  
   391    * **New config function: `formatlist`** - Format lists in a similar way to `format`.
   392      Useful for creating URLs from a list of IPs. [GH-1829]
   393    * **New resource: `aws_route53_zone_association`**
   394    * provider/aws: `aws_autoscaling_group` can wait for capacity in ELB
   395        via `min_elb_capacity` [GH-1970]
   396    * provider/aws: `aws_db_instances` supports `license_model` [GH-1966]
   397    * provider/aws: `aws_elasticache_cluster` add support for Tags [GH-1965]
   398    * provider/aws: `aws_network_acl` Network ACLs can be applied to multiple subnets [GH-1931]
   399    * provider/aws: `aws_s3_bucket` exports `hosted_zone_id` and `region` [GH-1865]
   400    * provider/aws: `aws_s3_bucket` add support for website `redirect_all_requests_to` [GH-1909]
   401    * provider/aws: `aws_route53_record` exports `fqdn` [GH-1847]
   402    * provider/aws: `aws_route53_zone` can create private hosted zones [GH-1526]
   403    * provider/google: `google_compute_instance` `scratch` attribute added [GH-1920]
   404  
   405  BUG FIXES:
   406  
   407    * core: fix "resource not found" for interpolation issues with modules
   408    * core: fix unflattenable error for orphans [GH-1922]
   409    * core: fix deadlock with create-before-destroy + modules [GH-1949]
   410    * core: fix "no roots found" error with create-before-destroy [GH-1953]
   411    * core: variables set with environment variables won't validate as
   412        not set without a default [GH-1930]
   413    * core: resources with a blank ID in the state are now assumed to not exist [GH-1905]
   414    * command/push: local vars override remote ones [GH-1881]
   415    * provider/aws: Mark `aws_security_group` description as `ForceNew` [GH-1871]
   416    * provider/aws: `aws_db_instance` ARN value is correct [GH-1910]
   417    * provider/aws: `aws_db_instance` only submit modify request if there
   418        is a change. [GH-1906]
   419    * provider/aws: `aws_elasticache_cluster` export missing information on cluster nodes [GH-1965]
   420    * provider/aws: bad AMI on a launch configuration won't block refresh [GH-1901]
   421    * provider/aws: `aws_security_group` + `aws_subnet` - destroy timeout increased
   422      to prevent DependencyViolation errors. [GH-1886]
   423    * provider/google: `google_compute_instance` Local SSDs no-longer cause crash
   424        [GH-1088]
   425    * provider/google: `google_http_health_check` Defaults now driven from Terraform,
   426        avoids errors on update [GH-1894]
   427    * provider/google: `google_compute_template` Update Instance Template network
   428        definition to match changes to Instance [GH-980]
   429    * provider/template: Fix infinite diff [GH-1898]
   430  
   431  ## 0.5.1 (never released)
   432  
   433  This version was never released since we accidentally skipped it!
   434  
   435  ## 0.5.0 (May 7, 2015)
   436  
   437  BACKWARDS INCOMPATIBILITIES:
   438  
   439    * provider/aws: Terraform now remove the default egress rule created by AWS in
   440      a new security group.
   441  
   442  FEATURES:
   443  
   444    * **Multi-provider (a.k.a multi-region)**: Multiple instances of a single
   445       provider can be configured so resources can apply to different settings.
   446       As an example, this allows Terraform to manage multiple regions with AWS.
   447    * **Environmental variables to set variables**: Environment variables can be
   448       used to set variables. The environment variables must be in the format
   449       `TF_VAR_name` and this will be checked last for a value.
   450    * **New remote state backend: `s3`**: You can now store remote state in
   451       an S3 bucket. [GH-1723]
   452    * **Automatic AWS retries**: This release includes a lot of improvement
   453       around automatic retries of transient errors in AWS. The number of
   454       retry attempts is also configurable.
   455    * **Templates**: A new `template_file` resource allows long strings needing
   456       variable interpolation to be moved into files. [GH-1778]
   457    * **Provision with WinRM**: Provisioners can now run remote commands on
   458       Windows hosts. [GH-1483]
   459  
   460  IMPROVEMENTS:
   461  
   462    * **New config function: `length`** - Get the length of a string or a list.
   463        Useful in conjunction with `split`. [GH-1495]
   464    * **New resource: `aws_app_cookie_stickiness_policy`**
   465    * **New resource: `aws_customer_gateway`**
   466    * **New resource: `aws_ebs_volume`**
   467    * **New resource: `aws_elasticache_cluster`**
   468    * **New resource: `aws_elasticache_security_group`**
   469    * **New resource: `aws_elasticache_subnet_group`**
   470    * **New resource: `aws_iam_access_key`**
   471    * **New resource: `aws_iam_group_policy`**
   472    * **New resource: `aws_iam_group`**
   473    * **New resource: `aws_iam_instance_profile`**
   474    * **New resource: `aws_iam_policy`**
   475    * **New resource: `aws_iam_role_policy`**
   476    * **New resource: `aws_iam_role`**
   477    * **New resource: `aws_iam_user_policy`**
   478    * **New resource: `aws_iam_user`**
   479    * **New resource: `aws_lb_cookie_stickiness_policy`**
   480    * **New resource: `aws_proxy_protocol_policy`**
   481    * **New resource: `aws_security_group_rule`**
   482    * **New resource: `aws_vpc_dhcp_options_association`**
   483    * **New resource: `aws_vpc_dhcp_options`**
   484    * **New resource: `aws_vpn_connection_route`**
   485    * **New resource: `google_dns_managed_zone`**
   486    * **New resource: `google_dns_record_set`**
   487    * **Migrate to upstream AWS SDK:** Migrate the AWS provider to
   488        [awslabs/aws-sdk-go](https://github.com/awslabs/aws-sdk-go),
   489        the official `awslabs` library. Previously we had forked the library for
   490        stability while `awslabs` refactored. Now that work has completed, and we've
   491        migrated back to the upstream version.
   492    * core: Improve error message on diff mismatch [GH-1501]
   493    * provisioner/file: expand `~` in source path [GH-1569]
   494    * provider/aws: Better retry logic, now retries up to 11 times by default
   495        with exponentional backoff. This number is configurable. [GH-1787]
   496    * provider/aws: Improved credential detection [GH-1470]
   497    * provider/aws: Can specify a `token` via the config file [GH-1601]
   498    * provider/aws: Added new `vpc_security_group_ids` attribute for AWS
   499        Instances. If using a VPC, you can now modify the security groups for that
   500        Instance without destroying it [GH-1539]
   501    * provider/aws: White or blacklist account IDs that can be used to
   502        protect against accidents. [GH-1595]
   503    * provider/aws: Add a subset of IAM resources [GH-939]
   504    * provider/aws: `aws_autoscaling_group` retries deletes through "in progress"
   505        errors [GH-1840]
   506    * provider/aws: `aws_autoscaling_group` waits for healthy capacity during
   507        ASG creation [GH-1839]
   508    * provider/aws: `aws_instance` supports placement groups [GH-1358]
   509    * provider/aws: `aws_eip` supports network interface attachment [GH-1681]
   510    * provider/aws: `aws_elb` supports in-place changing of listeners [GH-1619]
   511    * provider/aws: `aws_elb` supports connection draining settings [GH-1502]
   512    * provider/aws: `aws_elb` increase default idle timeout to 60s [GH-1646]
   513    * provider/aws: `aws_key_pair` name can be omitted and generated [GH-1751]
   514    * provider/aws: `aws_network_acl` improved validation for network ACL ports
   515        and protocols [GH-1798] [GH-1808]
   516    * provider/aws: `aws_route_table` can target network interfaces [GH-968]
   517    * provider/aws: `aws_route_table` can specify propagating VGWs [GH-1516]
   518    * provider/aws: `aws_route53_record` supports weighted sets [GH-1578]
   519    * provider/aws: `aws_route53_zone` exports nameservers [GH-1525]
   520    * provider/aws: `aws_s3_bucket` website support [GH-1738]
   521    * provider/aws: `aws_security_group` name becomes optional and can be
   522        automatically set to a unique identifier; this helps with
   523        `create_before_destroy` scenarios [GH-1632]
   524    * provider/aws: `aws_security_group` description becomes optional with a
   525        static default value [GH-1632]
   526    * provider/aws: automatically set the private IP as the SSH address
   527        if not specified and no public IP is available [GH-1623]
   528    * provider/aws: `aws_elb` exports `source_security_group` field [GH-1708]
   529    * provider/aws: `aws_route53_record` supports alias targeting [GH-1775]
   530    * provider/aws: Remove default AWS egress rule for newly created Security Groups [GH-1765]
   531    * provider/consul: add `scheme` configuration argument [GH-1838]
   532    * provider/docker: `docker_container` can specify links [GH-1564]
   533    * provider/google: `resource_compute_disk` supports snapshots [GH-1426]
   534    * provider/google: `resource_compute_instance` supports specifying the
   535        device name [GH-1426]
   536    * provider/openstack: Floating IP support for LBaaS [GH-1550]
   537    * provider/openstack: Add AZ to `openstack_blockstorage_volume_v1` [GH-1726]
   538  
   539  BUG FIXES:
   540  
   541    * core: Fix graph cycle issues surrounding modules [GH-1582] [GH-1637]
   542    * core: math on arbitrary variables works if first operand isn't a
   543        numeric primitive. [GH-1381]
   544    * core: avoid unnecessary cycles by pruning tainted destroys from
   545        graph if there are no tainted resources [GH-1475]
   546    * core: fix issue where destroy nodes weren't pruned in specific
   547        edge cases around matching prefixes, which could cause cycles [GH-1527]
   548    * core: fix issue causing diff mismatch errors in certain scenarios during
   549        resource replacement [GH-1515]
   550    * core: dependencies on resources with a different index work when
   551        count > 1 [GH-1540]
   552    * core: don't panic if variable default type is invalid [GH-1344]
   553    * core: fix perpetual diff issue for computed maps that are empty [GH-1607]
   554    * core: validation added to check for `self` variables in modules [GH-1609]
   555    * core: fix edge case where validation didn't pick up unknown fields
   556        if the value was computed [GH-1507]
   557    * core: Fix issue where values in sets on resources couldn't contain
   558        hyphens. [GH-1641]
   559    * core: Outputs removed from the config are removed from the state [GH-1714]
   560    * core: Validate against the worst-case graph during plan phase to catch cycles
   561        that would previously only show up during apply [GH-1655]
   562    * core: Referencing invalid module output in module validates [GH-1448]
   563    * command: remote states with uppercase types work [GH-1356]
   564    * provider/aws: Support `AWS_SECURITY_TOKEN` env var again [GH-1785]
   565    * provider/aws: Don't save "instance" for EIP if association fails [GH-1776]
   566    * provider/aws: launch configuration ID set after create success [GH-1518]
   567    * provider/aws: Fixed an issue with creating ELBs without any tags [GH-1580]
   568    * provider/aws: Fix issue in Security Groups with empty IPRanges [GH-1612]
   569    * provider/aws: manually deleted S3 buckets are refreshed properly [GH-1574]
   570    * provider/aws: only check for EIP allocation ID in VPC [GH-1555]
   571    * provider/aws: raw protocol numbers work in `aws_network_acl` [GH-1435]
   572    * provider/aws: Block devices can be encrypted [GH-1718]
   573    * provider/aws: ASG health check grace period can be updated in-place [GH-1682]
   574    * provider/aws: ELB security groups can be updated in-place [GH-1662]
   575    * provider/aws: `aws_main_route_table_association` can be deleted
   576        manually [GH-1806]
   577    * provider/docker: image can reference more complex image addresses,
   578        such as with private repos with ports [GH-1818]
   579    * provider/openstack: region config is not required [GH-1441]
   580    * provider/openstack: `enable_dhcp` for networking subnet should be bool [GH-1741]
   581    * provisioner/remote-exec: add random number to uploaded script path so
   582        that parallel provisions work [GH-1588]
   583    * provisioner/remote-exec: chmod the script to 0755 properly [GH-1796]
   584  
   585  ## 0.4.2 (April 10, 2015)
   586  
   587  BUG FIXES:
   588  
   589    * core: refresh won't remove outputs from state file [GH-1369]
   590    * core: clarify "unknown variable" error [GH-1480]
   591    * core: properly merge parent provider configs when asking for input
   592    * provider/aws: fix panic possibility if RDS DB name is empty [GH-1460]
   593    * provider/aws: fix issue detecting credentials for some resources [GH-1470]
   594    * provider/google: fix issue causing unresolvable diffs when using legacy
   595        `network` field on `google_compute_instance` [GH-1458]
   596  
   597  ## 0.4.1 (April 9, 2015)
   598  
   599  IMPROVEMENTS:
   600  
   601    * provider/aws: Route 53 records can now update `ttl` and `records` attributes
   602        without destroying/creating the record [GH-1396]
   603    * provider/aws: Support changing additional attributes of RDS databases
   604        without forcing a new resource  [GH-1382]
   605  
   606  BUG FIXES:
   607  
   608    * core: module paths in ".terraform" are consistent across different
   609        systems so copying your ".terraform" folder works. [GH-1418]
   610    * core: don't validate providers too early when nested in a module [GH-1380]
   611    * core: fix race condition in `count.index` interpolation [GH-1454]
   612    * core: properly initialize provisioners, fixing resource targeting
   613        during destroy [GH-1544]
   614    * command/push: don't ask for input if terraform.tfvars is present
   615    * command/remote-config: remove spurrious error "nil" when initializing
   616        remote state on a new configuration. [GH-1392]
   617    * provider/aws: Fix issue with Route 53 and pre-existing Hosted Zones [GH-1415]
   618    * provider/aws: Fix refresh issue in Route 53 hosted zone [GH-1384]
   619    * provider/aws: Fix issue when changing map-public-ip in Subnets #1234
   620    * provider/aws: Fix issue finding db subnets [GH-1377]
   621    * provider/aws: Fix issues with `*_block_device` attributes on instances and
   622        launch configs creating unresolvable diffs when certain optional
   623        parameters were omitted from the config [GH-1445]
   624    * provider/aws: Fix issue with `aws_launch_configuration` causing an
   625        unnecessary diff for pre-0.4 environments [GH-1371]
   626    * provider/aws: Fix several related issues with `aws_launch_configuration`
   627        causing unresolvable diffs [GH-1444]
   628    * provider/aws: Fix issue preventing launch configurations from being valid
   629        in EC2 Classic [GH-1412]
   630    * provider/aws: Fix issue in updating Route 53 records on refresh/read. [GH-1430]
   631    * provider/docker: Don't ask for `cert_path` input on every run [GH-1432]
   632    * provider/google: Fix issue causing unresolvable diff on instances with
   633        `network_interface` [GH-1427]
   634  
   635  ## 0.4.0 (April 2, 2015)
   636  
   637  BACKWARDS INCOMPATIBILITIES:
   638  
   639    * Commands `terraform push` and `terraform pull` are now nested under
   640      the `remote` command: `terraform remote push` and `terraform remote pull`.
   641      The old `remote` functionality is now at `terraform remote config`. This
   642      consolidates all remote state management under one command.
   643    * Period-prefixed configuration files are now ignored. This might break
   644      existing Terraform configurations if you had period-prefixed files.
   645    * The `block_device` attribute of `aws_instance` has been removed in favor
   646      of three more specific attributes to specify block device mappings:
   647      `root_block_device`, `ebs_block_device`, and `ephemeral_block_device`.
   648      Configurations using the old attribute will generate a validation error
   649      indicating that they must be updated to use the new fields [GH-1045].
   650  
   651  FEATURES:
   652  
   653    * **New provider: `dme` (DNSMadeEasy)** [GH-855]
   654    * **New provider: `docker` (Docker)** - Manage container lifecycle
   655        using the standard Docker API. [GH-855]
   656    * **New provider: `openstack` (OpenStack)** - Interact with the many resources
   657        provided by OpenStack. [GH-924]
   658    * **New feature: `terraform_remote_state` resource** - Reference remote
   659        states from other Terraform runs to use Terraform outputs as inputs
   660        into another Terraform run.
   661    * **New command: `taint`** - Manually mark a resource as tainted, causing
   662        a destroy and recreate on the next plan/apply.
   663    * **New resource: `aws_vpn_gateway`** [GH-1137]
   664    * **New resource: `aws_elastic_network_interfaces`** [GH-1149]
   665    * **Self-variables** can be used to reference the current resource's
   666        attributes within a provisioner. Ex. `${self.private_ip_address}` [GH-1033]
   667    * **Continuous state** saving during `terraform apply`. The state file is
   668        continuously updated as apply is running, meaning that the state is
   669        less likely to become corrupt in a catastrophic case: terraform panic
   670        or system killing Terraform.
   671    * **Math operations** in interpolations. You can now do things like
   672        `${count.index + 1}`. [GH-1068]
   673    * **New AWS SDK:** Move to `aws-sdk-go` (hashicorp/aws-sdk-go),
   674        a fork of the official `awslabs` repo. We forked for stability while
   675        `awslabs` refactored the library, and will move back to the officially
   676        supported version in the next release.
   677  
   678  IMPROVEMENTS:
   679  
   680    * **New config function: `format`** - Format a string using `sprintf`
   681        format. [GH-1096]
   682    * **New config function: `replace`** - Search and replace string values.
   683        Search can be a regular expression. See documentation for more
   684        info. [GH-1029]
   685    * **New config function: `split`** - Split a value based on a delimiter.
   686        This is useful for faking lists as parameters to modules.
   687    * **New resource: `digitalocean_ssh_key`** [GH-1074]
   688    * config: Expand `~` with homedir in `file()` paths [GH-1338]
   689    * core: The serial of the state is only updated if there is an actual
   690        change. This will lower the amount of state changing on things
   691        like refresh.
   692    * core: Autoload `terraform.tfvars.json` as well as `terraform.tfvars` [GH-1030]
   693    * core: `.tf` files that start with a period are now ignored. [GH-1227]
   694    * command/remote-config: After enabling remote state, a `pull` is
   695        automatically done initially.
   696    * providers/google: Add `size` option to disk blocks for instances. [GH-1284]
   697    * providers/aws: Improve support for tagging resources.
   698    * providers/aws: Add a short syntax for Route 53 Record names, e.g.
   699        `www` instead of `www.example.com`.
   700    * providers/aws: Improve dependency violation error handling, when deleting
   701        Internet Gateways or Auto Scaling groups [GH-1325].
   702    * provider/aws: Add non-destructive updates to AWS RDS. You can now upgrade
   703        `engine_version`, `parameter_group_name`, and `multi_az` without forcing
   704        a new database to be created.[GH-1341]
   705    * providers/aws: Full support for block device mappings on instances and
   706        launch configurations [GH-1045, GH-1364]
   707    * provisioners/remote-exec: SSH agent support. [GH-1208]
   708  
   709  BUG FIXES:
   710  
   711    * core: module outputs can be used as inputs to other modules [GH-822]
   712    * core: Self-referencing splat variables are no longer allowed in
   713        provisioners. [GH-795][GH-868]
   714    * core: Validate that `depends_on` doesn't contain interpolations. [GH-1015]
   715    * core: Module inputs can be non-strings. [GH-819]
   716    * core: Fix invalid plan that resulted in "diffs don't match" error when
   717        a computed attribute was used as part of a set parameter. [GH-1073]
   718    * core: Fix edge case where state containing both "resource" and
   719        "resource.0" would ignore the latter completely. [GH-1086]
   720    * core: Modules with a source of a relative file path moving up
   721        directories work properly, i.e. "../a" [GH-1232]
   722    * providers/aws: manually deleted VPC removes it from the state
   723    * providers/aws: `source_dest_check` regression fixed (now works). [GH-1020]
   724    * providers/aws: Longer wait times for DB instances.
   725    * providers/aws: Longer wait times for route53 records (30 mins). [GH-1164]
   726    * providers/aws: Fix support for TXT records in Route 53. [GH-1213]
   727    * providers/aws: Fix support for wildcard records in Route 53. [GH-1222]
   728    * providers/aws: Fix issue with ignoring the 'self' attribute of a
   729        Security Group rule. [GH-1223]
   730    * providers/aws: Fix issue with `sql_mode` in RDS parameter group always
   731        causing an update. [GH-1225]
   732    * providers/aws: Fix dependency violation with subnets and security groups
   733        [GH-1252]
   734    * providers/aws: Fix issue with refreshing `db_subnet_groups` causing an error
   735        instead of updating state [GH-1254]
   736    * providers/aws: Prevent empty string to be used as default
   737        `health_check_type` [GH-1052]
   738    * providers/aws: Add tags on AWS IG creation, not just on update [GH-1176]
   739    * providers/digitalocean: Waits until droplet is ready to be destroyed [GH-1057]
   740    * providers/digitalocean: More lenient about 404's while waiting [GH-1062]
   741    * providers/digitalocean: FQDN for domain records in CNAME, MX, NS, etc.
   742        Also fixes invalid updates in plans. [GH-863]
   743    * providers/google: Network data in state was not being stored. [GH-1095]
   744    * providers/heroku: Fix panic when config vars block was empty. [GH-1211]
   745  
   746  PLUGIN CHANGES:
   747  
   748    * New `helper/schema` fields for resources: `Deprecated` and `Removed` allow
   749        plugins to generate warning or error messages when a given attribute is used.
   750  
   751  ## 0.3.7 (February 19, 2015)
   752  
   753  IMPROVEMENTS:
   754  
   755    * **New resources: `google_compute_forwarding_rule`, `google_compute_http_health_check`,
   756        and `google_compute_target_pool`** - Together these provide network-level
   757        load balancing. [GH-588]
   758    * **New resource: `aws_main_route_table_association`** - Manage the main routing table
   759        of a VPC. [GH-918]
   760    * **New resource: `aws_vpc_peering_connection`** [GH-963]
   761    * core: Formalized the syntax of interpolations and documented it
   762        very heavily.
   763    * core: Strings in interpolations can now contain further interpolations,
   764        e.g.: `foo ${bar("${baz}")}`.
   765    * provider/aws: Internet gateway supports tags [GH-720]
   766    * provider/aws: Support the more standard environmental variable names
   767        for access key and secret keys. [GH-851]
   768    * provider/aws: The `aws_db_instance` resource no longer requires both
   769        `final_snapshot_identifier` and `skip_final_snapshot`; the presence or
   770        absence of the former now implies the latter. [GH-874]
   771    * provider/aws: Avoid unnecessary update of `aws_subnet` when
   772        `map_public_ip_on_launch` is not specified in config. [GH-898]
   773    * provider/aws: Add `apply_method` to `aws_db_parameter_group` [GH-897]
   774    * provider/aws: Add `storage_type` to `aws_db_instance` [GH-896]
   775    * provider/aws: ELB can update listeners without requiring new. [GH-721]
   776    * provider/aws: Security group support egress rules. [GH-856]
   777    * provider/aws: Route table supports VPC peering connection on route. [GH-963]
   778    * provider/aws: Add `root_block_device` to `aws_db_instance` [GH-998]
   779    * provider/google: Remove "client secrets file", as it's no longer necessary
   780        for API authentication [GH-884].
   781    * provider/google: Expose `self_link` on `google_compute_instance` [GH-906]
   782  
   783  BUG FIXES:
   784  
   785    * core: Fixing use of remote state with plan files. [GH-741]
   786    * core: Fix a panic case when certain invalid types were used in
   787        the configuration. [GH-691]
   788    * core: Escape characters `\"`, `\n`, and `\\` now work in interpolations.
   789    * core: Fix crash that could occur when there are exactly zero providers
   790        installed on a system. [GH-786]
   791    * core: JSON TF configurations can configure provisioners. [GH-807]
   792    * core: Sort `depends_on` in state to prevent unnecessary file changes. [GH-928]
   793    * core: State containing the zero value won't cause a diff with the
   794        lack of a value. [GH-952]
   795    * core: If a set type becomes empty, the state will be properly updated
   796        to remove it. [GH-952]
   797    * core: Bare "splat" variables are not allowed in provisioners. [GH-636]
   798    * core: Invalid configuration keys to sub-resources are now errors. [GH-740]
   799    * command/apply: Won't try to initialize modules in some cases when
   800        no arguments are given. [GH-780]
   801    * command/apply: Fix regression where user variables weren't asked [GH-736]
   802    * helper/hashcode: Update `hash.String()` to always return a positive index.
   803        Fixes issue where specific strings would convert to a negative index
   804        and be omitted when creating Route53 records. [GH-967]
   805    * provider/aws: Automatically suffix the Route53 zone name on record names. [GH-312]
   806    * provider/aws: Instance should ignore root EBS devices. [GH-877]
   807    * provider/aws: Fix `aws_db_instance` to not recreate each time. [GH-874]
   808    * provider/aws: ASG termination policies are synced with remote state. [GH-923]
   809    * provider/aws: ASG launch configuration setting can now be updated in-place. [GH-904]
   810    * provider/aws: No read error when subnet is manually deleted. [GH-889]
   811    * provider/aws: Tags with empty values (empty string) are properly
   812        managed. [GH-968]
   813    * provider/aws: Fix case where route table would delete its routes
   814        on an unrelated change. [GH-990]
   815    * provider/google: Fix bug preventing instances with metadata from being
   816        created [GH-884].
   817  
   818  PLUGIN CHANGES:
   819  
   820    * New `helper/schema` type: `TypeFloat` [GH-594]
   821    * New `helper/schema` field for resources: `Exists` must point to a function
   822        to check for the existence of a resource. This is used to properly
   823        handle the case where the resource was manually deleted. [GH-766]
   824    * There is a semantic change in `GetOk` where it will return `true` if
   825        there is any value in the diff that is _non-zero_. Before, it would
   826        return true only if there was a value in the diff.
   827  
   828  ## 0.3.6 (January 6, 2015)
   829  
   830  FEATURES:
   831  
   832    * **New provider: `cloudstack`**
   833  
   834  IMPROVEMENTS:
   835  
   836    * **New resource: `aws_key_pair`** - Import a public key into AWS. [GH-695]
   837    * **New resource: `heroku_cert`** - Manage Heroku app certs.
   838    * provider/aws: Support `eu-central-1`, `cn-north-1`, and GovCloud. [GH-525]
   839    * provider/aws: `route_table` can have tags. [GH-648]
   840    * provider/google: Support Ubuntu images. [GH-724]
   841    * provider/google: Support for service accounts. [GH-725]
   842  
   843  BUG FIXES:
   844  
   845    * core: temporary/hidden files that look like Terraform configurations
   846        are no longer loaded. [GH-548]
   847    * core: Set types in resources now result in deterministic states,
   848        resulting in cleaner plans. [GH-663]
   849    * core: fix issue where "diff was not the same" would come up with
   850        diffing lists. [GH-661]
   851    * core: fix crash where module inputs weren't strings, and add more
   852        validation around invalid types here. [GH-624]
   853    * core: fix error when using a computed module output as an input to
   854        another module. [GH-659]
   855    * core: map overrides in "terraform.tfvars" no longer result in a syntax
   856        error. [GH-647]
   857    * core: Colon character works in interpolation [GH-700]
   858    * provider/aws: Fix crash case when internet gateway is not attached
   859        to any VPC. [GH-664]
   860    * provider/aws: `vpc_id` is no longer required. [GH-667]
   861    * provider/aws: `availability_zones` on ELB will contain more than one
   862        AZ if it is set as such. [GH-682]
   863    * provider/aws: More fields are marked as "computed" properly, resulting
   864        in more accurate diffs for AWS instances. [GH-712]
   865    * provider/aws: Fix panic case by using the wrong type when setting
   866        volume size for AWS instances. [GH-712]
   867    * provider/aws: route table ignores routes with 'EnableVgwRoutePropagation'
   868        origin since those come from gateways. [GH-722]
   869    * provider/aws: Default network ACL ID and default security group ID
   870        support for `aws_vpc`. [GH-704]
   871    * provider/aws: Tags are not marked as computed. This introduces another
   872        issue with not detecting external tags, but this will be fixed in
   873        the future. [GH-730]
   874  
   875  ## 0.3.5 (December 9, 2014)
   876  
   877  FEATURES:
   878  
   879   * **Remote State**: State files can now be stored remotely via HTTP,
   880       Consul, or HashiCorp's Atlas.
   881   * **New Provider: `atlas`**: Retrieve artifacts for deployment from
   882       HashiCorp's Atlas service.
   883   * New `element()` function to index into arrays
   884  
   885  IMPROVEMENTS:
   886  
   887    * provider/aws: Support tenancy for aws\_instance
   888    * provider/aws: Support block devices for aws\_instance
   889    * provider/aws: Support virtual\_name on block device
   890    * provider/aws: Improve RDS reliability (more grace time)
   891    * provider/aws: Added aws\_db\_parameter\_group resource
   892    * provider/aws: Added tag support to aws\_subnet
   893    * provider/aws: Routes in RouteTable are optional
   894    * provider/aws: associate\_public\_ip\_address on aws\_launch\_configuration
   895    * provider/aws: Added aws\_network\_acl
   896    * provider/aws: Ingress rules in security groups are optional
   897    * provider/aws: Support termination policy for ASG
   898    * provider/digitalocean: Improved droplet size compatibility
   899  
   900  BUG FIXES:
   901  
   902    * core: Fixed issue causing double delete. [GH-555]
   903    * core: Fixed issue with create-before-destroy not being respected in
   904        some circumstances.
   905    * core: Fixing issue with count expansion with non-homogenous instance
   906        plans.
   907    * core: Fix issue with referencing resource variables from resources
   908        that don't exist yet within resources that do exist, or modules.
   909    * core: Fixing depedency handling for modules
   910    * core: Fixing output handling [GH-474]
   911    * core: Fixing count interpolation in modules
   912    * core: Fixing multi-var without module state
   913    * core: Fixing HCL variable declaration
   914    * core: Fixing resource interpolation for without state
   915    * core: Fixing handling of computed maps
   916    * command/init: Fixing recursion issue [GH-518]
   917    * command: Validate config before requesting input [GH-602]
   918    * build: Fixing GOPATHs with spaces
   919  
   920  MISC:
   921  
   922    * provider/aws: Upgraded to helper.Schema
   923    * provider/heroku: Upgraded to helper.Schema
   924    * provider/mailgun: Upgraded to helper.Schema
   925    * provider/dnsimple: Upgraded to helper.Schema
   926    * provider/cloudflare: Upgraded to helper.Schema
   927    * provider/digitalocean: Upgraded to helper.Schema
   928    * provider/google: Upgraded to helper.Schema
   929  
   930  ## 0.3.1 (October 21, 2014)
   931  
   932  IMPROVEMENTS:
   933  
   934    * providers/aws: Support tags for security groups.
   935    * providers/google: Add "external\_address" to network attributes [GH-454]
   936    * providers/google: External address is used as default connection host. [GH-454]
   937    * providers/heroku: Support `locked` and `personal` booleans on organization
   938        settings. [GH-406]
   939  
   940  BUG FIXES:
   941  
   942    * core: Remove panic case when applying with a plan that generates no
   943        new state. [GH-403]
   944    * core: Fix a hang that can occur with enough resources. [GH-410]
   945    * core: Config validation will not error if the field is being
   946        computed so the value is still unknown.
   947    * core: If a resource fails to create and has provisioners, it is
   948        marked as tainted. [GH-434]
   949    * core: Set types are validated to be sets. [GH-413]
   950    * core: String types are validated properly. [GH-460]
   951    * core: Fix crash case when destroying with tainted resources. [GH-412]
   952    * core: Don't execute provisioners in some cases on destroy.
   953    * core: Inherited provider configurations will be properly interpolated. [GH-418]
   954    * core: Refresh works properly if there are outputs that depend on resources
   955        that aren't yet created. [GH-483]
   956    * providers/aws: Refresh of launch configs and autoscale groups load
   957        the correct data and don't incorrectly recreate themselves. [GH-425]
   958    * providers/aws: Fix case where ELB would incorrectly plan to modify
   959        listeners (with the same data) in some cases.
   960    * providers/aws: Retry destroying internet gateway for some amount of time
   961        if there is a dependency violation since it is probably just eventual
   962        consistency (public facing resources being destroyed). [GH-447]
   963    * providers/aws: Retry deleting security groups for some amount of time
   964        if there is a dependency violation since it is probably just eventual
   965        consistency. [GH-436]
   966    * providers/aws: Retry deleting subnet for some amount of time if there is a
   967        dependency violation since probably asynchronous destroy events take
   968        place still. [GH-449]
   969    * providers/aws: Drain autoscale groups before deleting. [GH-435]
   970    * providers/aws: Fix crash case if launch config is manually deleted. [GH-421]
   971    * providers/aws: Disassociate EIP before destroying.
   972    * providers/aws: ELB treats subnets as a set.
   973    * providers/aws: Fix case where in a destroy/create tags weren't reapplied. [GH-464]
   974    * providers/aws: Fix incorrect/erroneous apply cases around security group
   975        rules. [GH-457]
   976    * providers/consul: Fix regression where `key` param changed to `keys. [GH-475]
   977  
   978  ## 0.3.0 (October 14, 2014)
   979  
   980  FEATURES:
   981  
   982    * **Modules**: Configuration can now be modularized. Modules can live on
   983      GitHub, BitBucket, Git/Hg repos, HTTP URLs, and file paths. Terraform
   984      automatically downloads/updates modules for you on request.
   985    * **New Command: `init`**. This command initializes a Terraform configuration
   986      from an existing Terraform module (also new in 0.3).
   987    * **New Command: `destroy`**. This command destroys infrastructure
   988      created with `apply`.
   989    * Terraform will ask for user input to fill in required variables and
   990      provider configurations if they aren't set.
   991    * `terraform apply MODULE` can be used as a shorthand to quickly build
   992      infrastructure from a module.
   993    * The state file format is now JSON rather than binary. This allows for
   994      easier machine and human read/write. Old binary state files will be
   995      automatically upgraded.
   996    * You can now specify `create_before_destroy` as an option for replacement
   997      so that new resources are created before the old ones are destroyed.
   998    * The `count` metaparameter can now contain interpolations (such as
   999      variables).
  1000    * The current index for a resource with a `count` set can be interpolated
  1001      using `${count.index}`.
  1002    * Various paths can be interpolated with the `path.X` variables. For example,
  1003      the path to the current module can be interpolated using `${path.module}`.
  1004  
  1005  IMPROVEMENTS:
  1006  
  1007    * config: Trailing commas are now allowed for the final elements of lists.
  1008    * core: Plugins are loaded from `~/.terraform.d/plugins` (Unix) or
  1009      `%USERDATA%/terraform.d/plugins` (Windows).
  1010    * command/show: With no arguments, it will show the default state. [GH-349]
  1011    * helper/schema: Can now have default values. [GH-245]
  1012    * providers/aws: Tag support for most resources.
  1013    * providers/aws: New resource `db_subnet_group`. [GH-295]
  1014    * providers/aws: Add `map_public_ip_on_launch` for subnets. [GH-285]
  1015    * providers/aws: Add `iam_instance_profile` for instances. [GH-319]
  1016    * providers/aws: Add `internal` option for ELBs. [GH-303]
  1017    * providers/aws: Add `ssl_certificate_id` for ELB listeners. [GH-350]
  1018    * providers/aws: Add `self` option for security groups for ingress
  1019        rules with self as source. [GH-303]
  1020    * providers/aws: Add `iam_instance_profile` option to
  1021        `aws_launch_configuration`. [GH-371]
  1022    * providers/aws: Non-destructive update of `desired_capacity` for
  1023        autoscale groups.
  1024    * providers/aws: Add `main_route_table_id` attribute to VPCs. [GH-193]
  1025    * providers/consul: Support tokens. [GH-396]
  1026    * providers/google: Support `target_tags` for firewalls. [GH-324]
  1027    * providers/google: `google_compute_instance` supports `can_ip_forward` [GH-375]
  1028    * providers/google: `google_compute_disk` supports `type` to support disks
  1029        such as SSDs. [GH-351]
  1030    * provisioners/local-exec: Output from command is shown in CLI output. [GH-311]
  1031    * provisioners/remote-exec: Output from command is shown in CLI output. [GH-311]
  1032  
  1033  BUG FIXES:
  1034  
  1035    * core: Providers are validated even without a `provider` block. [GH-284]
  1036    * core: In the case of error, walk all non-dependent trees.
  1037    * core: Plugin loading from CWD works properly.
  1038    * core: Fix many edge cases surrounding the `count` meta-parameter.
  1039    * core: Strings in the configuration can escape double-quotes with the
  1040        standard `\"` syntax.
  1041    * core: Error parsing CLI config will show properly. [GH-288]
  1042    * core: More than one Ctrl-C will exit immediately.
  1043    * providers/aws: autoscaling_group can be launched into a vpc [GH-259]
  1044    * providers/aws: not an error when RDS instance is deleted manually. [GH-307]
  1045    * providers/aws: Retry deleting subnet for some time while AWS eventually
  1046        destroys dependencies. [GH-357]
  1047    * providers/aws: More robust destroy for route53 records. [GH-342]
  1048    * providers/aws: ELB generates much more correct plans without extranneous
  1049        data.
  1050    * providers/aws: ELB works properly with dynamically changing
  1051        count of instances.
  1052    * providers/aws: Terraform can handle ELBs deleted manually. [GH-304]
  1053    * providers/aws: Report errors properly if RDS fails to delete. [GH-310]
  1054    * providers/aws: Wait for launch configuration to exist after creation
  1055        (AWS eventual consistency) [GH-302]
  1056  
  1057  ## 0.2.2 (September 9, 2014)
  1058  
  1059  IMPROVEMENTS:
  1060  
  1061    * providers/amazon: Add `ebs_optimized` flag. [GH-260]
  1062    * providers/digitalocean: Handle 404 on delete
  1063    * providers/digitalocean: Add `user_data` argument for creating droplets
  1064    * providers/google: Disks can be marked `auto_delete`. [GH-254]
  1065  
  1066  BUG FIXES:
  1067  
  1068    * core: Fix certain syntax of configuration that could cause hang. [GH-261]
  1069    * core: `-no-color` flag properly disables color. [GH-250]
  1070    * core: "~" is expanded in `-var-file` flags. [GH-273]
  1071    * core: Errors with tfvars are shown in console. [GH-269]
  1072    * core: Interpolation function calls with more than two args parse. [GH-282]
  1073    * providers/aws: Refreshing EIP from pre-0.2 state file won't error. [GH-258]
  1074    * providers/aws: Creating EIP without an instance/network won't fail.
  1075    * providers/aws: Refreshing EIP manually deleted works.
  1076    * providers/aws: Retry EIP delete to allow AWS eventual consistency to
  1077        detect it isn't attached. [GH-276]
  1078    * providers/digitalocean: Handle situations when resource was destroyed
  1079        manually. [GH-279]
  1080    * providers/digitalocean: Fix a couple scenarios where the diff was
  1081        incorrect (and therefore the execution as well).
  1082    * providers/google: Attaching a disk source (not an image) works
  1083        properly. [GH-254]
  1084  
  1085  ## 0.2.1 (August 31, 2014)
  1086  
  1087  IMPROVEMENTS:
  1088  
  1089    * core: Plugins are automatically discovered in the executable directory
  1090        or pwd if named properly. [GH-190]
  1091    * providers/mailgun: domain records are now saved to state
  1092  
  1093  BUG FIXES:
  1094  
  1095    * core: Configuration parses when identifier and '=' have no space. [GH-243]
  1096    * core: `depends_on` with `count` generates the proper graph. [GH-244]
  1097    * core: Depending on a computed variable of a list type generates a
  1098        plan without failure. i.e. `${type.name.foos.0.bar}` where `foos`
  1099        is computed. [GH-247]
  1100    * providers/aws: Route53 destroys in parallel work properly. [GH-183]
  1101  
  1102  ## 0.2.0 (August 28, 2014)
  1103  
  1104  BACKWARDS INCOMPATIBILITIES:
  1105  
  1106    * We've replaced the configuration language in use from a C library to
  1107      a pure-Go reimplementation. In the process, we removed some features
  1108      of the language since it was too flexible:
  1109      * Semicolons are no longer valid at the end of lines
  1110      * Keys cannot be double-quoted strings: `"foo" = "bar"` is no longer
  1111        valid.
  1112      * JSON style maps `{ "foo": "bar" }` are no longer valid outside of JSON.
  1113        Maps must be in the format of `{ foo = "bar" }` (like other objects
  1114        in the config)
  1115    * Heroku apps now require (will not validate without) `region` and
  1116      `name` due to an upstream API change. [GH-239]
  1117  
  1118  FEATURES:
  1119  
  1120    * **New Provider: `google`**: Manage Google Compute instances, disks,
  1121        firewalls, and more.
  1122    * **New Provider: `mailgun`**: Manage mailgun domains.
  1123    * **New Function: `concat`**: Concatenate multiple strings together.
  1124      Example: `concat(var.region, "-", var.channel)`.
  1125  
  1126  IMPROVEMENTS:
  1127  
  1128    * core: "~/.terraformrc" (Unix) or "%APPDATA%/terraform.rc" (Windows)
  1129      can be used to configure custom providers and provisioners. [GH-192]
  1130    * providers/aws: EIPs now expose `allocation_id` and `public_ip`
  1131        attributes.
  1132    * providers/aws: Security group rules can be updated without a
  1133        destroy/create.
  1134    * providers/aws: You can enable and disable dns settings for VPCs. [GH-172]
  1135    * providers/aws: Can specify a private IP address for `aws_instance` [GH-217]
  1136  
  1137  BUG FIXES:
  1138  
  1139    * core: Variables are validated to not contain interpolations. [GH-180]
  1140    * core: Key files for provisioning can now contain `~` and will be expanded
  1141        to the user's home directory. [GH-179]
  1142    * core: The `file()` function can load files in sub-directories. [GH-213]
  1143    * core: Fix issue where some JSON structures didn't map properly into
  1144       Terraform structures. [GH-177]
  1145    * core: Resources with only `file()` calls will interpolate. [GH-159]
  1146    * core: Variables work in block names. [GH-234]
  1147    * core: Plugins are searched for in the same directory as the executable
  1148        before the PATH. [GH-157]
  1149    * command/apply: "tfvars" file no longer interferes with plan apply. [GH-153]
  1150    * providers/aws: Fix issues around failing to read EIPs. [GH-122]
  1151    * providers/aws: Autoscaling groups now register and export load
  1152      balancers. [GH-207]
  1153    * providers/aws: Ingress results are treated as a set, so order doesn't
  1154        matter anymore. [GH-87]
  1155    * providers/aws: Instance security groups treated as a set [GH-194]
  1156    * providers/aws: Retry Route53 requests if operation failed because another
  1157        operation is in progress [GH-183]
  1158    * providers/aws: Route53 records with multiple record values work. [GH-221]
  1159    * providers/aws: Changing AMI doesn't result in errors anymore. [GH-196]
  1160    * providers/heroku: If you delete the `config_vars` block, config vars
  1161        are properly nuked.
  1162    * providers/heroku: Domains and drains are deleted before the app.
  1163    * providers/heroku: Moved from the client library bgentry/heroku-go to
  1164        cyberdelia/heroku-go [GH-239].
  1165    * providers/heroku: Plans without a specific plan name for
  1166        heroku\_addon work. [GH-198]
  1167  
  1168  PLUGIN CHANGES:
  1169  
  1170    * **New Package:** `helper/schema`. This introduces a high-level framework
  1171      for easily writing new providers and resources. The Heroku provider has
  1172      been converted to this as an example.
  1173  
  1174  ## 0.1.1 (August 5, 2014)
  1175  
  1176  FEATURES:
  1177  
  1178    * providers/heroku: Now supports creating Heroku Drains [GH-97]
  1179  
  1180  IMPROVEMENTS:
  1181  
  1182    * providers/aws: Launch configurations accept user data [GH-94]
  1183    * providers/aws: Regions are now validated [GH-96]
  1184    * providers/aws: ELB now supports health check configurations [GH-109]
  1185  
  1186  BUG FIXES:
  1187  
  1188    * core: Default variable file "terraform.tfvars" is auto-loaded. [GH-59]
  1189    * core: Multi-variables (`foo.*.bar`) work even when `count = 1`. [GH-115]
  1190    * core: `file()` function can have string literal arg [GH-145]
  1191    * providers/cloudflare: Include the proper bins so the cloudflare
  1192        provider is compiled
  1193    * providers/aws: Engine version for RDS now properly set [GH-118]
  1194    * providers/aws: Security groups now depend on each other and
  1195    * providers/aws: DB instances now wait for destroys, have proper
  1196        dependencies and allow passing skip_final_snapshot
  1197    * providers/aws: Add associate_public_ip_address as an attribute on
  1198        the aws_instance resource [GH-85]
  1199    * providers/aws: Fix cidr blocks being updated [GH-65, GH-85]
  1200    * providers/aws: Description is now required for security groups
  1201    * providers/digitalocean: Private IP addresses are now a separate
  1202        attribute
  1203    * provisioner/all: If an SSH key is given with a password, a better
  1204        error message is shown. [GH-73]
  1205  
  1206  ## 0.1.0 (July 28, 2014)
  1207  
  1208    * Initial release