7719 commits

Author	SHA1	Message	Date
Martin Atkins	eab6920d7e	website: S3 backend documentation recommends "aws login" ... The recent addition of "aws login" to AWS CLI finally gives a user-friendly best practice way to acquire AWS credentials for use in interactive workflows. Combined with the pre-existing support for authenticating using JSON web tokens (by "web identity", as AWS calls it), there's no longer any good reason for most users of this backend to explicitly configure AWS credentials. Now that OpenTofu itself supports using credentials issued by "aws login", this reorganizes our documentation to begin with opinionated recommendations for how to provide credentials for the S3 backend in both interactive and non-interactive settings, and explicitly documents the inline static configuration settings as an absolute last resort not recommended in any cases. This new documentation also includes links to the relevant parts of the AWS CLI documentation, since there's a lot of extra detail there which may be useful for someone trying to debug why their setup isn't working. Signed-off-by: Martin Atkins <mart@degeneration.co.uk>	2026-02-13 08:32:44 -08:00
James Humphries	129a33c445	docs: clarify that uuid() function does not produce RFC 4122 compliant v4 uuids (#3763) ... Signed-off-by: James Humphries <james@james-humphries.co.uk>	2026-02-13 09:09:31 +00:00
Andrei Ciobanu	b108d3fb53	Add universe_domain to the gcs backend (#3758) ... Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>	2026-02-12 11:46:18 +00:00
Andrei Ciobanu	67d602eb17	Add -show-sensitive to the commands docs (#3720) ... Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>	2026-02-03 14:55:22 +02:00
Andrei Ciobanu	d24b85fc68	Typo fix in the pg backend. Fix for #3700 (#3704) ... Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>	2026-01-27 13:22:40 +02:00
Andrei Ciobanu	8e808f3cc2	Make it clear for the external key providers when it needs to generate decryption key (#3672) ... Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>	2026-01-27 12:20:23 +02:00
Andrei Ciobanu	c7f46c713a	Enhance the documentation and the integration tests for the pg backend (#3700) ... Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>	2026-01-27 10:17:07 +02:00
Christian Mesh	6280691025	Support dual output streams in most commands (#3606) ... Signed-off-by: Christian Mesh <christianmesh1@gmail.com> Co-authored-by: Diógenes Fernandes <diofeher@gmail.com>	2026-01-20 14:08:10 -05:00
Andrei Ciobanu	66983273e5	Key provider decoding moved from gohcl to hcl/v2 (#3654) ... Signed-off-by: Christian Mesh <christianmesh1@gmail.com> Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org> Co-authored-by: Christian Mesh <christianmesh1@gmail.com>	2026-01-15 17:51:16 +02:00
Andrei Ciobanu	6b3119c5c7	[main] Port the changes done in v1.10 for migration and installation guides (#3656) ... Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>	2026-01-12 08:08:52 -05:00
Martin Atkins	65ee51c736	website: Boolean operator short-circuit was added in OpenTofu v1.10 (#3645) ... Signed-off-by: Martin Atkins <mart@degeneration.co.uk>	2026-01-07 15:58:18 +00:00
Ilia Gogotchuri	1eacb9a046	Retaining resources during destruction - New flag -suppress-forget-errors (#3588) ... Signed-off-by: Ilia Gogotchuri <ilia.gogotchuri0@gmail.com>	2025-12-16 15:41:03 +04:00
H.K.	88c59b6b25	Update JSON syntax documentation for variables in module & terraform blocks (#3587) ... Signed-off-by: H.K. <angivare-contact@yahoo.fr>	2025-12-15 07:54:55 -05:00
James Humphries	da2da475a0	Improve documentation around enabled meta-argument (#3576) ... Signed-off-by: James Humphries <james@james-humphries.co.uk>	2025-12-11 10:37:16 +00:00
James Humphries	f559cdd1bf	Small tweaks to ephemeral variable documentation (#3577) ... Signed-off-by: James Humphries <james@james-humphries.co.uk>	2025-12-11 10:37:11 +00:00
Andrei Ciobanu	1907ce104c	Update index to mention the new version (#3556) ... Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>	2025-12-09 18:05:48 +02:00
Ilia Gogotchuri	fd19a3763f	Retain resource instances with a new lifecycle argument - destroy (#3409) ... Signed-off-by: Ilia Gogotchuri <ilia.gogotchuri0@gmail.com> Co-authored-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>	2025-12-04 18:49:57 +04:00
Martin Atkins	82fdad27fc	website: "tofu providers schema" nested_type docs ... At some point after this documentation was originally written the schema structure grew to include the possibility of structural attribute types, represented using "nested_type" instead of "type" in the attribute definition, but it seems that the documentation was not updated to mention that. This is just a minimal extra note about that focused mainly on just acknowledging that this possibility exists at all, in case anyone is relying on these docs to build something to parse this format. It would probably be helpful to expand both this and the existing documentation to specify the format more precisely, but my focus here is just on quickly filling in this missing piece so that the documentation is complete, even if not detailed and precise. Signed-off-by: Martin Atkins <mart@degeneration.co.uk>	2025-11-19 07:20:49 -08:00
Andrei Ciobanu	c29cd93f21	[main] Fixes for GH workflows for older OpenTofu versions (#3485) ... Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>	2025-11-11 11:12:20 +02:00
Martin Atkins	e389a7f2fa	website: Warn about "tofu output -raw" in a terminal ... By design the "-raw" option to "tofu output" writes the literal output value directly to stdout without any quoting or escaping, and so it's risky to use it with an output value that could be controlled by an attacker when stdout is a terminal. This risk is inherent in the purpose of this option and is part of the reason why this is not the default behavior (OpenTofu returns a quoted representation of an output string by default) so here we just make that risk explicit in the documentation, in the hope that operators will use this operation mindfully. Signed-off-by: Martin Atkins <mart@degeneration.co.uk>	2025-11-10 09:49:35 -08:00
nemobis	6d0d9b8773	docs: Fix typo in sensitive.mdx (#3431) ... Signed-off-by: nemobis <federico.leva@relexsolutions.com>	2025-10-30 15:11:44 -05:00
Andrei Ciobanu	ab51186a30	Add examples on how to use 'state_tags' and 'lock_tags' (#3437) ... Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>	2025-10-29 11:23:59 +02:00
Martin Atkins	68fbe8d8d7	website: "element" function supports negative indices ... We got this new functionality from an upgrade of the upstream cty library, but we didn't update the docs to mention it. The examples in this doc were also evidently generated with a much older version of OpenTofu's predecessor, because the illustrated output was not shown as a quoted string. The example output now matches how the current version of "tofu console" would describe these results. Signed-off-by: Martin Atkins <mart@degeneration.co.uk>	2025-10-28 15:11:26 -07:00
Andrei Ciobanu	934be4ad5e	Glossary - initial version (#3411) ... Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>	2025-10-28 11:41:31 +02:00
Christian Mesh	f161c7cc27	Update what's new page for 1.11 (#3425) ... Signed-off-by: Christian Mesh <christianmesh1@gmail.com>	2025-10-23 11:32:36 -04:00
James Humphries	9eaba0d83d	No longer mention that deprecation of module variables and outputs is experimental (#3417) ... Signed-off-by: James Humphries <james@james-humphries.co.uk>	2025-10-23 14:48:10 +01:00
Andrei Ciobanu	4f57c826f0	Add download_retry_count for direct and network_mirror in CLI configuration (#3368) ... Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>	2025-10-18 11:42:25 +03:00
Martin Atkins	dc9bec611c	website: Reorganize and tidy some lifecycle-related information ... Over time the discussion about "lifecycle" blocks in the documentation became confusing because the docs originally written for managed resource lifecycle got partially generalized for resources of other modes and for module calls, even though each of those has a completely different lifecycle and thus a different set of lifecycle settings. This is a first pass at trying to reorganize that so that the "lifecycle" page is really just an index of all of the different kinds of lifecycle block that exist in the language, while the main documentation for each use of that block type now belongs with the documentation of the block it's nested within. While working on this I also found that there was some duplication inside the "data sources" page where the same information was described multiple times, and a few other cases where things had become inconsistent over time. This also includes a little extra content to try to clarify the difference between managed, data, and ephemeral resources and to make it explicit that the "Resources" section is focused only on managed resources because that is the primary resource mode. As usual there's lots more that could be done here -- this documentation has gradually evolved over time and is full of weird quirks due to that evolution -- but I decided to draw a line here so that the diff wouldn't get too large. Signed-off-by: Martin Atkins <mart@degeneration.co.uk>	2025-10-17 15:08:14 -07:00
Diógenes Fernandes	d42dcc3b0a	Add docs for the conditional enabled lifecycle attribute (#3380) ... Signed-off-by: Diogenes Fernandes <diofeher@gmail.com> Co-authored-by: Martin Atkins <mart@degeneration.co.uk> Co-authored-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>	2025-10-16 13:10:00 -03:00
Andrei Ciobanu	7bcc6464ed	Add a note about the lack of feedback on the experimental encryption method and key_provider (#3323) ... Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org> Signed-off-by: Andrei Ciobanu <andreic9203@gmail.com> Co-authored-by: Diógenes Fernandes <diofeher@gmail.com>	2025-10-03 15:33:46 +03:00
Mick Tarsel	cd21e74e75	Remove Community Supported Archs (#3321) ... Signed-off-by: Mick Tarsel <mtarsel@gmail.com>	2025-09-30 19:12:05 -03:00
Magicalcrow	4fbbea6f4b	Fix typos in uuid and uuidv5 docs ... Signed-off-by: Magicalcrow <simondiev@gmail.com>	2025-09-30 09:00:55 -07:00
Larry Bordowitz	bcbfebce3d	Implement the Azure Key Provider ... This uses the same auth package as the newly-rewritten Azure State Backend, so many of the properties and environment variables are the same. I have put this through both the compliance test as well as built the binary and run some end-to-end tests, and found that it appropriately uses the Azure key as expected. Signed-off-by: Larry Bordowitz <laurence.bordowitz@gmail.com>	2025-09-29 06:19:02 -04:00
Martin Atkins	116826c32f	website: S3 module sources now support all standard AWS credential sources ... As of go-getter v1.8.0, which we already upgraded in an earlier commit, the S3 "getter" now uses the AWS SDK's default credentials chain configuration and so follows the same set of credentials-searching strategies that AWS CLI and other AWS SDK applications would follow. We learned this only after having already merged that upgrade, so this is a retroactive documentation and changelog update to describe the change. Since go-getter is now delegating this whole question to the AWS SDK, our future upgrades of the AWS SDK will automatically adopt any upstream changes to the default credentials chain and so our documentation about this is now more general than before: the intention is that our users can generally assume that OpenTofu should support everything that is documented as supported for the AWS CLI, instead of us listing out an explicit search sequence that will be long and inevitably become outdated again. Signed-off-by: Martin Atkins <mart@degeneration.co.uk>	2025-09-23 16:38:37 -07:00
James Humphries	0a811e463d	docs: Include link to search.opentofu.org in use-cases.mdx (#3295) ... Signed-off-by: James Humphries <james@james-humphries.co.uk>	2025-09-22 12:10:57 +01:00
Andrei Ciobanu	aa403e5f99	Add warning about -target arg usage with individual resource instance address (#3280) ... Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>	2025-09-19 09:39:22 +03:00
Larry Bordowitz	0090e8a18c	Add new configuration to AzureRM Backend (#3251) ... Signed-off-by: Larry Bordowitz <laurence.bordowitz@gmail.com>	2025-09-15 19:22:17 +01:00
Martin Atkins	2d2b08517e	cliconfig: Registry protocol retry count and timeout settings ... These were previously settable only via environment variables. These are now handled as part of CLI Configuration and so also settable in a new "registry_protocols" block in a CLI configuration file, with the environment variables now treated as if they are an additional virtual configuration file containing the corresponding settings. This handles our settings in our modern style where package cliconfig is responsible for deciding the configuration and then package main reacts to that configuration without being aware of how it is decided. Signed-off-by: Martin Atkins <mart@degeneration.co.uk>	2025-09-10 11:45:38 -07:00
Christian Mesh	c8b58e949b	Address review comments ... Co-authored-by: James Humphries <James@james-humphries.co.uk> Co-authored-by: Ilia Gogotchuri <ilia.gogotchuri0@gmail.com> Signed-off-by: Christian Mesh <christianmesh1@gmail.com>	2025-09-10 07:45:23 -04:00
Andrei Ciobanu	57057aef27	Add docs for all ephemeral constructs (#3209) ... Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org> Signed-off-by: Christian Mesh <christianmesh1@gmail.com> Co-authored-by: Christian Mesh <christianmesh1@gmail.com> Co-authored-by: Diógenes Fernandes <diofeher@opentofu.org> Signed-off-by: Christian Mesh <christianmesh1@gmail.com>	2025-09-10 07:45:23 -04:00
Christian Mesh	6437bfe01f	Add tofu.applying (and terraform.applying) (#3170) ... Signed-off-by: Christian Mesh <christianmesh1@gmail.com>	2025-09-10 07:45:23 -04:00
Christian Mesh	60b268200c	Add ephemeralasnull() function (#3154) ... Signed-off-by: Christian Mesh <christianmesh1@gmail.com> Co-authored-by: Martin Atkins <mart@degeneration.co.uk> Signed-off-by: Christian Mesh <christianmesh1@gmail.com>	2025-09-10 07:45:23 -04:00
Martin Atkins	528b778363	website: ORAS v1.3 variant of provider OCI mirror construction ... ORAS v1.3.0 introduces some new features that allow directly building an index manifest in the form that OpenTofu expects, so it's no longer necessary to edit that index manifest manually. Signed-off-by: Martin Atkins <mart@degeneration.co.uk>	2025-09-09 13:22:48 -07:00
Larry Bordowitz	63e8845ad9	Refactor the azurerm backend (#3034) ... Signed-off-by: Larry Bordowitz <laurence.bordowitz@gmail.com>	2025-09-03 11:06:11 -04:00
Martin Atkins	9a161adbe3	go.mod: Upgrade to Go 1.25 (#3166) ... Signed-off-by: Martin Atkins <mart@degeneration.co.uk>	2025-08-22 07:10:11 -04:00
Diógenes Fernandes	11d416edf9	add for_each attribute to the mock_provider block (#3087) ... Signed-off-by: Diogenes Fernandes <diofeher@gmail.com>	2025-08-18 10:36:04 -03:00
Andrei Ciobanu	e342597e17	Print docker logs of the failing check for easier debug in CI (#3139) ... Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>	2025-08-13 17:47:26 +03:00
James Humphries	9d47636173	Clarify dynamodb vs s3-native locking guidance (#3109) ... Signed-off-by: James Humphries <james@james-humphries.co.uk>	2025-08-11 10:46:46 +01:00
Aaron George	e802c63f58	Add tag options for S3 state backend objects (#3038) ... Signed-off-by: Aaron George <aarongeorge1994+github@gmail.com> Co-authored-by: Andrei Ciobanu <andreic9203@gmail.com>	2025-08-07 10:39:19 +03:00
Andrei Ciobanu	01493c357f	Update apply documentation with the newly accepted -var/-var-file arguments (#3091) ... Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>	2025-08-01 16:25:39 +03:00