73 Commits
Author SHA1 Message Date
Bharath Gajjala 1ca8587e98 feat(oidc): add provider_type support to boundary_auth_method_oidc re… (#845)
* chore(deps): bump Boundary, API, and SDK modules to latest main

* feat(oidc): add provider_type support to boundary_auth_method_oidc resource
2026-09-25 11:15:22 -05:00
richardtrinh1 88d5ef93ed docs(worker): clarify Boundary worker registration workflows (#841)
* docs: clarify Boundary worker registration workflows

* update registration documentation wording
2026-09-24 12:04:57 -06:00
Amit Kotagi f059618167 feat(proj-alias): support project scoped alias via suffixes (#824)
* feat(proj-alias): support project scoped alias via suffixes

* fix: generate resouce docs using make gen

* fix: address review comments

* chore: make gen changes

* fix(proja-alias): validate scope id before calling remove alias suffix

* fix: filter unknown scopes in validation
2026-07-17 18:33:02 +05:30
Andrew Gaffney ffc88e48e4 feat(provider): Implement Vault Ldap Resource (#778) 2026-02-02 10:36:20 -05:00
Bharath Gajjala d738671047 Password Credential support (#758)
* feat(password credential): Add password credential type support

* build(deps): upgrade Boundary to v0.21.0 and update dependencies

* chore: update go.mod and go.sum from main

* Dependency cleanup
2025-12-16 22:29:42 -05:00
Rayenn Hamrouni 8c933816a5 feat: Add is_primary_for_scope attribute to boundary_auth_method and boundary_auth_method_password resources (#753) 2025-11-11 13:55:33 -08:00
Rayenn Hamrouni e9f7b89ad2 feat: Add boundary_role data source (#743) 2025-10-10 08:29:39 -07:00
Louis Ruch 19ecce6754 chore: run make gen (#751) 2025-10-09 11:46:49 -07:00
HugoandApril-May 182352b6d4 feat(provider): Implement boundary_credential_username_password_domain resource
This resource creates a static "Username, Password & Domain" credential in
Boundary.

The "username" field is required. It can also contain the domain in one of two
formats:
  - "username@domain.com"
  - "domain.com\username"

The "password" field is required.

The "domain" field is optional but the domain data itself is required (ie. it
must be provided as part of the username or in the dedicated "domain" field)

Co-authored-by: April-May <18632637+AprilMay0@users.noreply.github.com>
2025-09-05 17:04:22 +01:00
Bruno Schaatsbergen a256b763ae docs: separate worker and controller led resources (#619)
* docs: separate worker and controller led resources

* docs: change title for consistency

* docs: make docs

* chore: use unique names for workers and add an 'Example Usage' section
2024-07-22 09:24:22 -04:00
Bruno Schaatsbergen f6539b969c chore: replace deprecated arguments in provider example (#617)
* chore: replace deprecated arguments in provider example

* chore: fix extra newline

* Revert "chore: fix extra newline"

This reverts commit cf2de60acfcf6c9499d0306243041f950a0851f6.

* Revert "chore: replace deprecated arguments in provider example"

This reverts commit 49a336f7684707edb36021eef7d11bb92e4fa1b4.

* chore: change example

* chore: update example in README

* chore: create a tests for the deprecated auth method
2024-07-15 10:02:58 -04:00
Todd 53c2a5769c Add target alias resource (#571)
* Add target alias resource

* increment the number of authorize_acctions returned on an admin user
2024-05-01 09:37:45 -07:00
daniandDanielle Miu 7e7707d3af feat(policies): support storage policies within terraform (#558)
Co-authored-by: Danielle Miu <29378233+DanielleMiu@users.noreply.github.com>
2024-02-13 16:22:18 -08:00
Jeff Mitchell 8c12b27f8f Add support for grant_scope_ids (#562) 2024-02-13 15:01:48 -05:00
Elim Tsiagbey 933192280b docs: Add required field for storage bucket example (#557)
Update example for dynamic credential for storage bucket to include `disable_credential_rotation` attribute. `disable_credential_rotation` needs to be set to true when configuring dynamic credentials
2024-02-06 11:00:46 -05:00
Louis Ruch af4f61199a chore: add changelog for release 2024-02-01 14:10:28 -08:00
prsekar 417bad5d36 Handle grant string id to ids 2024-02-01 11:21:33 -08:00
Damian Debkowski a65623e36a allow dynamic credentials for storage buckets (#549) 2024-01-30 09:23:09 -08:00
Elim Tsiagbey 9e30a68a61 feat(oidc): OIDC Prompt Support (#519)
* feat(oidc): OIDC Prompt Support

Boundary OIDC method does not currently support passing in prompts during authentication. This change adds the capability of passing OIDC prompts. Prompts are optional OIDC parameters that determine the behaviour of the authentication server: https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest

Add new optional `prompts` option to `boundary_auth_method_oidc` resource. `prompts` option are optional OIDC parameters that determine the behavior of the authentication server.
2023-12-13 16:05:01 -05:00
Michael Li 61c0ac92b3 feat: Add boundary_auth_method data source (#505) 2023-12-12 13:36:37 -08:00
Michael Li dc3adfa96a feat: Add boundary_group data source (#503)
* refact: Move groupMemberIdsKey const

* feat: Add `boundary_group` data source

* CR
2023-11-02 14:37:02 -04:00
Michael Li b181e37a36 doc: Add examples for using LDAP (#506) 2023-10-27 14:42:17 -04:00
Michael Li bb5ed8609c feat: Add boundary_account data source (#493)
* feat: Add boundary_account data source

* CR
2023-10-26 12:52:23 -04:00
Michael Li 8bb1823ab4 doc: Fix linter errors (#502) 2023-10-26 12:47:49 -04:00
Michael Li 63a1d9a5e9 fix: Address conflict in boundary_scope data source schema (#492)
* fix: Modify error message

* refact: Rename keys for consistency

* fix: Use scope_id in boundary_scope

The examples for the boundary_scope data source suggest to use `parent_scope_id`, but the provider is actually expecting `scope_id`.
2023-10-24 15:45:07 -04:00
drewmullen 0f2473a1d7 New Data source data.boundary_user (#468) 2023-10-17 16:36:51 -07:00
Mark Christopher WestandJim b06da56d75 Document OIDC Auth Method Resource (#467)
* Document OIDC Auth Method Resource

* fixup! Document OIDC Auth Method Resource

---------

Co-authored-by: Jim <jlambert@hashicorp.com>
2023-10-12 13:29:42 -04:00
Jim 9d351f8112 workflows: add make-gen-delta to chk for changes from 'make gen' (#486) 2023-10-12 13:28:38 -04:00
grantorchard c3b08a1b4f add scope datasource, tests, and docs (#474)
* add scope datasource, tests, and docs

* add details on the global scope to docs
2023-10-11 08:21:48 -07:00
Uruemu S Aganbi 4b0a161ce2 Correct boundary_worker resource example (#438)
* Correct `boundary_worker` resource example

* regenerate docs
2023-08-22 12:48:34 -04:00
stellarsquall 6d3f89038c fixes worker-led resource name and descriptions 2023-08-15 15:34:14 -05:00
Elim Tsiagbey 605d124d51 feat: add target resource session recording support (#421)
* feat: add target session recording support

- add new optional `enable_session_recording` field for enabling or disabling session recording
- add new optional `storage_bucket_id` field for setting the storage bucket for the target
- These new fields are applicable to Boundary HCP/ENT

### Considerations
- There is no test coverage yet until we add support for testing enterprise only features. Manually tested the changes
2023-06-30 13:11:15 -04:00
Elim Tsiagbey 9186304d5d feat: add storage bucket resource (#417)
* feat: add storage bucket resource

- Create a new resource for storage bucket
- Add examples and docs for how to use new resource
- Tests added but they do not run on purpose and have not been validated yet because we cannot run tests for enterprise features yet. That will be addressed separately

## Considerations
- Even though only AWS can be supported today, still added the `pluginID` & `pluginName` fields so it's easy to extend once other plugin types are supported
- There is some logic around handling secrets sent to Boundary and validating secret HMAC changes that exist from `boundary_host_catalog_plugin` that was introduced in [PR-159](https://github.com/hashicorp/terraform-provider-boundary/pull/159). Used the same logic we've been using for that
2023-06-28 10:38:22 -04:00
Elim Tsiagbey 1c05eab410 docs: update host set plugin filters examples (#420)
This change is to update the example docs for `host_set_plugin` filters attribute to use a list strings instead of just strings.

WIthout using a list of strings, Terraform will falsely detect diffs with host set plugin `filters`.


AWS host set plugin expects filters attributes to be passed as a list of strings instead of strings. It is currently backwards compatible with strings due to the migration [normalizeData func](https://github.com/hashicorp/boundary-plugin-aws/blob/7bf9fe2ecf1f20d7ff8aea8306909abcde1d17a4/plugin/service/host/plugin.go#L256) on AWS host plugin.

Previously this was not working but [Boundary PR-3338](https://github.com/hashicorp/boundary/pull/3338) fixed the bug.
2023-06-23 14:21:21 -04:00
Chris van Meer e7ed748b76 Fix wrong plugin reference in comment (#403) 2023-05-10 13:13:22 -07:00
Elim Tsiagbey 32c081aec9 chore: Deprecate type field for boundary_account_password (#396)
* Deprecate type field for boundary_account_password
2023-05-09 09:55:17 -04:00
Elim Tsiagbey 0191874b23 feature: Use default auth method if no auth method ID is provided for provider (#385)
* Use default auth method if no auth method ID is provided for provider
2023-04-28 13:13:11 -04:00
Louis Ruch 6ff02f4e6b chore: run go generate 2023-03-21 20:38:03 -07:00
mocofound 93689e92a4 spelling: host_set_plugin exmaple to example 2023-03-21 20:32:53 -07:00
grantorchardandJohan Brandhorst-Satzkorn 9fca93399b Docs update (#309)
* add initial prototype of self managed worker resource and associated tests

* Add self managed worker resource and associated tests

* Update internal/provider/resource_self_managed_worker.go

Accept suggested schema changes for tags

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* add environment variable check for worker led auth testing

* change resource name from self_managed_worker to worker for consistency with the api

* update tag schemas, ensure all attributes have descriptions

* add generated docs for worker

* add examples for worker resource

* add examples for worker resource

* remove merge conflict

* Remove funtionality for reflecting tags in the schema

* remove unused attributes (all tags) from schema, updates tests to use 'boundary_worker' on resource checks

* update example for inclusion in the website docs

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
2023-02-17 12:35:00 -08:00
Timothy Messier 55d8778edf feat: Add support for vault ssh certificate credential libraries 2023-02-15 10:54:21 -05:00
Hugo bd9cc97362 feat(provider/target): Enable target with address configurations (#308) 2023-02-10 15:13:52 +00:00
Timothy Messier 340b6d29bf chore: Remove copywrites from example files (#321)
These files are uses as input for generated doc files, as such they can
be ignored by `copywrite`.
2023-02-09 10:39:09 -05:00
hashicorp-copywrite[bot] f9819533db [COMPLIANCE] Add Copyright and License Headers (#312)
Co-authored-by: hashicorp-copywrite[bot] <110428419+hashicorp-copywrite[bot]@users.noreply.github.com>
2023-01-03 17:19:20 -05:00
Louis Ruch 5e20d1005e chore: Prep for release
Release / go-version (push) Successful in 9s
Release / release-notes (push) Successful in 25s
Release / Terraform Provider Release (push) Failing after 0s
2022-11-29 14:03:43 -08:00
grantorchardandJohan Brandhorst-Satzkorn cfc57d5e25 Add support for boundary_self_managed_worker resource. (#293)
* add initial prototype of self managed worker resource and associated tests

* Add self managed worker resource and associated tests

* Update internal/provider/resource_self_managed_worker.go

Accept suggested schema changes for tags

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* add environment variable check for worker led auth testing

* change resource name from self_managed_worker to worker for consistency with the api

* update tag schemas, ensure all attributes have descriptions

* add generated docs for worker

* add examples for worker resource

* add examples for worker resource

* remove merge conflict

* Remove funtionality for reflecting tags in the schema

* remove unused attributes (all tags) from schema, updates tests to use 'boundary_worker' on resource checks

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
2022-11-24 11:28:27 -05:00
Damian Debkowski 807db1bef1 Support Vault Credential Library Mapping Overrides (#287) 2022-10-13 09:53:42 -07:00
Louis Ruch 622fca1c0e chore: run go generate
Release / go-version (push) Successful in 2s
Release / release-notes (push) Successful in 4s
Release / Terraform Provider Release (push) Failing after 0s
2022-10-04 10:22:37 -07:00
Damian Debkowski 7ae01cc6e0 feat: add support for json credentials (#271) 2022-09-29 10:31:11 -07:00
Damian Debkowski 292204caf0 chore: generate missing docs (#274) 2022-09-21 13:45:56 -07:00