●Change8

v1.11.0-rc3

📦 terraformView on GitHub →
✨ 8 features🐛 4 fixes⚡ 1 deprecations🔧 12 symbols

Summary

Terraform 1.11.0-rc3 introduces write-only resource attributes, GA for S3 native state locking, and GA for JUnit XML test reporting. It also includes significant updates to the Azure backend authentication and enhancements to the 'terraform test' command.

Migration Steps

  1. To adopt S3 native state locking, add 'use_lockfile = true' to your S3 backend configuration and migrate away from DynamoDB locking arguments.

✨ New Features

  • Add write-only attributes to resources which are not persisted in state and support ephemeral values.
  • The -junit-xml option for 'terraform test' is now generally available for creating test reports.
  • S3 native state locking is now generally available via the 'use_lockfile' argument.
  • Provider installation now supports .netrc file credentials for registry downloads.
  • Added 'override_during' attribute to 'terraform test' to allow mocked values during plan phases.
  • Added 'state_key' attribute for 'run' blocks in 'terraform test' to control internal state file usage.
  • Azure backend updated with new authentication properties: use_cli, use_aks_workload_identity, client_id_file_path, client_certificate, and client_secret_file_path.
  • Official Docker image now includes the ca-certificates package.

🐛 Bug Fixes

  • Corrected error message when ephemeral values are included in provisioner output.
  • Changed misleading error to a warning when attempting to override a variable during apply via TF_VAR_ environment variables.
  • Fixed crash in backends when interrupting during interactive prompts.
  • Fixed hanging behavior when applying a saved plan with -auto-approve using the cloud backend.

🔧 Affected Symbols

terraform testterraform test -junit-xmlbackend.s3.use_lockfilebackend.azurermbackend.azurerm.use_clibackend.azurerm.use_aks_workload_identitybackend.azurerm.client_id_file_pathbackend.azurerm.client_certificatebackend.azurerm.client_secret_file_pathterraform test.run.state_keyterraform test.override_duringinit

⚡ Deprecations

  • DynamoDB-related arguments for S3 state locking are deprecated in favor of the new S3 native locking mechanism (use_lockfile).