[v16] RFD 173 implementation: Terraform provider UX improvements#44690
[v16] RFD 173 implementation: Terraform provider UX improvements#44690marcoandredinis merged 6 commits intobranch/v16from
Conversation
|
🤖 Vercel preview here: https://docs-qv61vdk6s-goteleport.vercel.app/docs/ver/preview |
|
🤖 Vercel preview here: https://docs-95p6wp3z7-goteleport.vercel.app/docs/ver/preview |
e238e1a to
7852fa3
Compare
|
🤖 Vercel preview here: https://docs-l458ncr1r-goteleport.vercel.app/docs/ver/preview |
7852fa3 to
63766c1
Compare
|
🤖 Vercel preview here: https://docs-eq3ilohu1-goteleport.vercel.app/docs/ver/preview |
|
🤖 Vercel preview here: https://docs-lkntynwc4-goteleport.vercel.app/docs/ver/preview |
|
@hugoShaka - this PR will require admin approval to merge due to its size. Consider breaking it up into a series smaller changes. |
|
Requires: #45101 |
4e1236d to
55dda2d
Compare
|
🤖 Vercel preview here: https://docs-hii4rfvgj-goteleport.vercel.app/docs/ver/preview |
* Introduce the `tctl terrafor env` command * fix tests * address marco's feedback + use correct b64 lib * add license * add created-by label as specified in the RFD * Update tool/tctl/common/terraform_command.go Co-authored-by: Roman Tkachenko <roman@goteleport.com> * Apply suggestions from code review Co-authored-by: Roman Tkachenko <roman@goteleport.com> * Have telpeort create the Terraform default role * rename use-existing-role -> role, and stop hijacking identity.SSHCACertBytes * Make the terraform provider role a real preset, rename to 'terraform-provider' * lint * Fix tbot's invocation after rebase --------- Co-authored-by: Roman Tkachenko <roman@goteleport.com>
* Refactor Terraform credential loading * Warn about expiry * kip expired credentials * fixup! kip expired credentials * Use constants everywhere + add godocs * fixup! Use constants everywhere + add godocs * Address marco's feedback * fixup! Address marco's feedback * tidy go mod * lint * re-render TF docs
* Add Terraform Provider native MachineID support * Reject 'token' join method * lint: fix imports * re-render TF docs * fix tests + add license * lint
55dda2d to
6371169
Compare
6371169 to
62844ea
Compare
|
🤖 Vercel preview here: https://docs-q1qjkdkr6-goteleport.vercel.app/docs/ver/preview |
|
🤖 Vercel preview here: https://docs-9xwsadr1b-goteleport.vercel.app/docs/ver/preview |
MERGE THIS BEFORE RELEASING 16.2
This PR backports the complete RFD 173 implementation to branch/v16.
Backported PRs are:
tctl terraform envcommand Introduce thetctl terraform envcommand #43664Changelog: Add a
tctl terraform envcommand to simplify running the Teleport Terraform provider locally.Changelog: Add native MachineID support to the Terraform provider. Environments with delegated joining methods such as GitHub Actions, GitLab CI, CircleCI, GCP, or AWS can run the Terraform provider without having to setup
tbot.Changelog: The Terraform Provider now sequentially tries every credential source and provide more actionable error messages if it cannot connect.
Changelog: When the Terraform provider finds expired credentials it will now fail fast with a clear error instead of hanging for 30 seconds and sending potentially misleading error about certificates being untrusted.