azure-pipelines-tasks-terraform

azure-pipelines-tasks-terraform copied to clipboard

Improve build pipeline

1

Currently the whole pipeline is running in Azure Devops. This allows integration testing of the tasks. However, this means that Pull Requests do not run even the unit tests, making...

jason-johnson

Add support for -backend-config=PATH when using terraform init

2

It would be nice to add support for the backend-config option, when using terraform init, to outsource the configuration of the remote state. - task: TerraformCLI@0 displayName: 'terraform init' inputs:...

Degooya

Feature request -- Enable AWS OIDC connections as well as secret and access key

6

Hi currently this task requires a secret and access key setup in the service connection. Would you be able to extend it to grab temporary credentials from OIDC from the...

interestinginteger123

Use TF_IN_AUTOMATION: 'True' by default

2

This is an improvement request. It would be nice that the environment variable `TF_IN_AUTOMATION` is set to `True` by default.

RockyMM

Update azure-pipelines-task-lib to latest

2

Please update the azure-pipelines-task-lib to i think 4.10.0 as this resolves a lot of security issues. That would at least fix mockery which is like 7 years old ;p work...

riemers

Multi region AWS Services?

3

Hello! We are still using the old (Charles Zipp) extension that this one replaces and looking to upgrade. One of the driving factors is the need to deploy multi-region services...

brandonbrinkley

I just enabled azure container and blob versions. Do we have to explicitly state to use the latest container/blob version or is 'latest' default?

2

Using terraformcli@0 at the moment. Do you recommend upgrading to terraformcli@1 and why? I just enabled azure container and blob versions. Do we have to explicitly state to use the...

jasong1978

Severe Security flaw: OIDC Token printed as Plain text in the pipeline run log for Service Connections configured with Workload Identity Federation

2

**Describe the bug** TerraformCLI@1 task prints the OIDC token as is in plain text when performing init, plan and apply, which is a serious security risk! as anyone having pipeline...

hari2anand

AWS - Does Terraform Init Task Support DynamoDB Backend for Locking with S3 State Files?

3

If you want to use DynamoDB in collaboration with S3 to handle locking and state checksum management, can you do that with the TerraformCLI@0 init task? I searched around the...

brandtaderrick

Terraform apply fails with clientCredentialsToken already expired

1

**Describe the bug** Terraform apply sometimes fails in DevOps pipelines using OIDC authentication due to expired credentials: `Error: error loading state: autorest/Client#Do: Preparing request failed: StatusCode=0 -- Original Error: clientCredentialsToken:...

rob-zz