* feat: add storage bucket resource
- Create a new resource for storage bucket
- Add examples and docs for how to use new resource
- Tests added but they do not run on purpose and have not been validated yet because we cannot run tests for enterprise features yet. That will be addressed separately
## Considerations
- Even though only AWS can be supported today, still added the `pluginID` & `pluginName` fields so it's easy to extend once other plugin types are supported
- There is some logic around handling secrets sent to Boundary and validating secret HMAC changes that exist from `boundary_host_catalog_plugin` that was introduced in [PR-159](https://github.com/hashicorp/terraform-provider-boundary/pull/159). Used the same logic we've been using for that
* add test coverage for authenticating with recovery kms mechanism & oidc primary auth method
* Skip fetching default auth method when recovery_kms_hcl is set or the client token isn't null
* chore: point to boundary ldap bits
* refactor (test): common auth method test funcs
* chore (deps): add gldap for test ldap directory
* feature: add LDAP auth-method, accounts and managed groups support
* add initial prototype of self managed worker resource and associated tests
* Add self managed worker resource and associated tests
* Update internal/provider/resource_self_managed_worker.go
Accept suggested schema changes for tags
Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
* add environment variable check for worker led auth testing
* change resource name from self_managed_worker to worker for consistency with the api
* update tag schemas, ensure all attributes have descriptions
* add generated docs for worker
* add examples for worker resource
* add examples for worker resource
* remove merge conflict
* Remove funtionality for reflecting tags in the schema
* remove unused attributes (all tags) from schema, updates tests to use 'boundary_worker' on resource checks
Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
* add username password resource
* fix a few bugs in the tf code as well as complete tests with copied crypto code
* address PR comments
* clean up all of the hmac testing code
* remove plan only in test and fix some descriptions per PR
* added static store plus single test
* revert gomod and gosum changes
* upgrade boundary version from 0.8.1 to 0.9.1
* merged 0.9.1 update and cleaned up test file
* added example for static store, cleanup store and testfile for PR
* update scope test to ignore auto_create_admin_role needed for static credential store test
* update schema function and test comment
* remove auto_create_admin_role in favor of depends_on, and remove all references to the former
After moving to go-kms-wrapping V2, the Boundary Terraform Provider
did not load all KMS plugins resulting in an error when trying to
create a wrapper for any type other than aead:
Error: error reading wrappers from "recovery_kms_hcl":
Error configuring kms: plugin is nil
* feat: add managed group resource
* feat: add tests for managed group resource
* update go.sum
* update tests
* simplify the managed group resource
* use WithDefaultPasswordAuthMethodId
* Managed groups (#129)
* docs: update host catalog resource with correct value for type attribute
* build: add Makefile target for auto-generating docs
* bugfix: make OIDC account attribute for subject ForceNew
* docs: update auto-generated docs
* Add credential library resource for Vault (#114)
* Integrate with Vault to retrieve and manage per session credentials
Co-authored-by: Louis Ruch <louisruch@gmail.com>
* Update token/clientKey on hmac change (#125)
* Update token/clientKey on hmac change
* Update changelog
* Update docs
* Prep for 1.0.3
* v1.0.3
* Update terraform-plugin-sdk
* Fix Typo
* Adopt American spelling
* fix the parameter that is actually being sent as the auth method id
Co-authored-by: Jeff Malnick <malnick@gmail.com>
Co-authored-by: Louis Ruch <louisruch@gmail.com>
Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
Co-authored-by: tf-release-bot <terraform@hashicorp.com>
Co-authored-by: Lewis Cowper <593574+lewiscowper@users.noreply.github.com>
* nits and updates
* OIDC auth method + get filter from attributes
* Add changelog
* Fix schema description
Co-authored-by: Riley Guerin <rileytg@users.noreply.github.com>
Co-authored-by: Louis Ruch <louisruch@gmail.com>
Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
Co-authored-by: tf-release-bot <terraform@hashicorp.com>
Co-authored-by: Lewis Cowper <593574+lewiscowper@users.noreply.github.com>
* Cleanup some of the repo, prep for release
* Rework docs to new registry structure
* Add docs generator tooling
* Generate the docs
* update deps
* docs: add docs generation command to readme
Co-authored-by: Jeff Malnick <malnick@gmail.com>
* Begin API updating
* Update scope and user providers
* Update group resource
* Update to TF plugin SDK v2
* Finish recovery KMS workflow
This also modifies groups tests to use it. It's easy to verify from the
controller output that it's being used since it causes warnings to be
printed.
* Finish porting group resource to proposed new paradigm
* Minor cleanup
* Allow specifying a particular token for auth
* base_url -> addr
* Add test using token
* Add set calls to Update
* Update SDK
* Update SDK
* Update user and scope
* Half of host catalog and some consolidation
* Finish host catalog
* Add host resource
* Add host set resource
* Update targets
* Some updates to newer API
* Start updating to response map standards
* Finish updating already ported resources to new paradigm
* Finish existing resource porting
* Update target to exercise default port
* Adapt target to using json.Number
* Add auth method and account resources
* chore: update provider.go to latest SDK
* chore: update resource_group.go to latest SDK
* chore: update resource_host_catalog.go to latest SDK
* chore: update resource_project.go to latest SDK
* chore: update resource_role.go to latest SDK
* chore: fix group resource to use project client
* chore: update resource_users.go to latest SDK
* chore: update resource_group_test.go to latest SDK
* chore: refactor resource_host_catalog_test.go to latest sdk
* chore: refactor resource_project_test.go to latest sdk
* chore: refactor resource_user_test.go to latest sdk
* chore: update to latest SDK usage
* update to use latest test controller
* feat: make project_id optional and override scope if set
* test: test org and project level group creation
* chore: pass around authToken info for using principal ID in setting grant scope
* build: update deps
* Add watchtower provider using the auto generated go sdk.
* Add read and create for project resources.
* Add provider internal validate test.
* Update the project module to be terraform-provider-watchtower
* Organize the ResourceData to Project and vis versa logic into their own helper methods.
* Adding tests for going ResourceData to Project and vis versa.
* provider_update
* Single acceptance test written and correctly failing.
* Implement update and delete. Always run Acceptance Testing
* Move project field names into constants.
* Allow tests to use the apiError response for checking error code.
* Correcting the naming of key value consts.
* Rely on "make testacc" for acceptance testing instead of always running it.
* Updating dependencies to use the new TestController creation.
drewmullen
grantorchard
Elim Tsiagbey
Jim
Timothy Messier
hashicorp-copywrite[bot]
Damian Debkowski
Louis Ruch
Danielle
Olivier Boukili
Paul TyngandJeff Malnick
Todd Knight