CHANGELOG.md

Boundary Terraform Provider CHANGELOG

Canonical reference for changes, improvements, and bugfixes for the Boundary Terraform provider.

Next

1.1.15 (May 1, 2024)

New and Improved

• Add support for a target alias as a resource (PR)

1.1.14 (February 14, 2024)

New and Improved

• Support the multi-value grant_scope_ids field in the role provider (PR)

• Support Boundary Storage Policies (PR)

1.1.13 (February 1, 2024)

New and Improved

• Allow dynamic credentials when configuring storage buckets (PR)

1.1.12 (January 8, 2024)

New and Improved

• Add support to configure valid_principals with Vault SSH Certificate Credential Library (PR)

1.1.11 (December 13, 2023)

New and Improved

• Add support for OIDC prompts. Using prompts, the Relying Party (RP) can customize the authentication and authorization flow to suit their specific needs and improve the user experience. OIDC Authentication request server. (PR)
• Add boundary_auth_method data source (PR)
• Add boundary_group data source (PR)
• Add boundary_account data source (PR)
• Add boundary_user data source (PR)

Bug Fix

• Fix boundary_worker overwriting worker generated auth token during (PR)

1.1.10 (October 11, 2023)

New and Improved

• Add support for Scope datasource (PR)
• LDAP: Add support for maximum_page_size and dereference_aliases (PR)

1.1.9 (July 19, 2023)

New and Improved

• Add support for a storage bucket as a resource (PR)
• Add option to enable session recording on a target resource (PR)
• Update docs for host set plugin filters examples (PR)

1.1.8 (June 13, 2023)

New and Improved

• Add support for target default client port (PR)
• Add support for using ldap primary auth method (PR)

Deprecations/Changes

• Deprecate password_auth_method_login_name & password_auth_method_password for Terraform Provider. password_auth_method_login_name & password_auth_method_password fields have been set to deprecated with a recommendation to use auth_method_login_name & auth_method_password fields instead. (PR)
• Deprecate type field for boundary_account_password (PR)
• Deprecate type field for boundary_account_ldap (PR)

1.1.7 (May 12, 2023)

Bug Fix

• Fix default auth method with recovery kms (PR)

1.1.6 (May 5, 2023)

New and Improved

• Add support for using default auth method if no auth method ID is provided for provider (PR)
• Fix typo in Managed Group resource page (PR)

Bug Fix

• Force new resource on credential_type change (PR)

1.1.5 (April 21, 2023)

New and Improved

• Add support for credential store vault worker filters (PR)

Bug Fix

• Allow users to set OIDC maxAge value to 0 to require immediate reauth (PR)

1.1.4 (February 15, 2023)

New and Improved

• Add support for worker egress and ingress filters (PR)
• Add support for vault ssh certificate credential libraries (PR)
• Add support for targets with address configurations (PR)

1.1.3 (November 29, 2022)

New and Improved

• Add support for a workers as a resource (PR).

1.1.2 (October 18, 2022)

New and Improved

• Add support for setting mapping overrides for vault credential libraries (PR).

Bug Fixes

• Improve error message when authenticating to boundary (PR).
• Set state before returning an error when creating a resource (PR)

1.1.1 (October 12, 2022)

Bug Fixes

• The plugin cleanup function is being called before the entire Terraform workflow is complete. (Issue), (PR).

1.1.0 (October 4, 2022)

New and Improved

• Add support for JSON credentials (PR).
• Add support for setting the plugin execution directory from the config (PR).

Deprecations/Changes

• Fix panic resulting from expired Vault credential store tokens (Issue, PR).
• Remove application_credential_source_ids of the target resource which was deprecated in 1.0.12 (PR).
• Remove default_role from the role resource, this schema was never supported and was included mistakenly (Issue, PR).

1.0.12 (September 13, 2022)

New and Improved

• Add support for SSH targets (PR).

Deprecations/Changes

• Deprecate application_credential_source_ids of the target resource (PR).

1.0.11 (August 26, 2022)

New and Improved

• Add support for SSH private key credentials (PR).
• Add support for credential type in Vault libraries (PR).

1.0.10 (August 10, 2022)

New and Improved

• Adds support for static credential stores (PR).
• Adds support for username password credentials (PR).

1.0.9 (June 6, 2022)

Bug Fixes

• The bug fix released in 1.0.8 to resolve the plugin is nil error only worked for Linux AMD64. This was due to a build issue where the plugin binaries were only built for Linux AMD64. Other platforms would receive an error similar to:

        Error: error reading wrappers from "recovery_kms_hcl":
        Error configuring kms: error fetching kms plugin rpc client: 
        fork/exec boundary-plugin-kms-awskms.gz: exec format error
  

  (Issue), (PR).

1.0.8 (June 1, 2022)

Bug Fixes

• After moving to go-kms-wrapping V2, the Boundary Terraform Provider did not load all KMS plugins resulting in an error when trying to create a wrapper for any type other than 'aead':

        Error: error reading wrappers from "recovery_kms_hcl":
        Error configuring kms: plugin is nil
  

  (Issue), (PR).

1.0.7 (May 16, 2022)

Deprecations/Changes

• Undoes an erroneous deprecation of the login_name and password fields in resource_account_password and resource_account. Deprecates resource_account that was replaced with resource_account_password (PR).

1.0.6 (January 21, 2022)

New and Improved

• Adds dynamic host plugin catalog/set (PR).
• Adds support for insecure TLS to Boundary (PR).

Deprecations/Changes

• Removes fields host_set_ids and application_credential_library_ids of the target resource, which were deprecated in 1.0.5 (PR).

1.0.5 (September 09, 2021)

Deprecations/Changes

• Deprecate fields host_set_ids and application_credential_library_ids of the target resource. See boundary 0.5.0 changelog for more detail on the deprecation. (PR).

1.0.4 (August 19, 2021)

New and Improved

• Adds managed groups resource (PR).

1.0.3 (June 30, 2021)

New and Improved

• Adds credential library resource for Vault (PR).
• Adds credential store resource for Vault (PR 1), (PR 2).
• Adds claim scopes attribute to OIDC auth method (PR).
• Adds account claim maps attribute to OIDC auth method (PR).

Bug Fixes

• Make OIDC account attribute for subject ForceNew (Issue), (PR).
• Update static type attribute for host catalog resource (Issue), (PR).

1.0.2 (May 06, 2021)

New and Improved

• Adds OIDC account resource (PR).
• Adds OIDC auth method resource (PR).

Deprecations/Changes

• Deprecates fields on resource_auth_method that will be replaced in the future with generic attributes attribute.

1.0.1 (February 02, 2021)

New and Improved

• Adds worker filter to target resource (PR).

1.0.0 (January 20, 2021)

We are bumping the version of the Boundary Terraform provider to v1.0.0 and will release new versions of the provider at its own cadence instead of keeping it in lockstep with Boundary.

Bug Fixes

• During terraform apply, do not update existing user account passwords when the password field is updated in the tf file. (Issue), (PR).

0.1.4 (January 14, 2021)

New and Improved

Update provider to handle new domain errors (PR).

0.1.0 (October 14, 2020)

Initial release!