chore(deps): update terraform gitlab to v17
This MR contains the following updates:
Package | Type | Update | Change |
---|---|---|---|
gitlab (source) | required_provider | major |
~> 16.11 -> ~> 17.0
|
Release Notes
gitlabhq/terraform-provider-gitlab (gitlab)
v17.6.1
This release was tested against GitLab 17.6, 17.5, and 17.4 for both CE and EE
IMPROVEMENTS (1 change)
- resource/gitlab_group_service_account_token: Add support for
rotation_configuration
with a limited set of attributes by @heidi.berry (merge request)
BUG FIXES (2 changes)
- resource/gitlab_project_compliance_frameworks: Fixed an issue where project compliance frameworks didn't delete compliance frameworks properly. Fixed a bug where compliance frameworks weren't set properly on a project where they were removed outside of TF by @mness (merge request)
- resource/gitlab_group: Fixed an issue where an
allowed_email_domain_list
added outside of TF would be unset when upgrading the provider to 17.6 by @PatrickRice (merge request)
v17.6.0
This release was tested against GitLab 17.6, 17.5, and 17.4 for both CE and EE
FEATURES (4 changes)
-
New Resource resource/gitlab_project_compliance_frameworks: Add new resource
gitlab_project_compliance_frameworks
, allowing managing multiple compliance frameworks on a single project by @mness (merge request) -
New Datasource datasource/gitlab_group_billable_member_memberships: Add new data source
gitlab_group_billable_member_memberships
by @mdroessler (merge request) -
New Datasource datasource/gitlab_project_environments: Add new data source
gitlab_project_environments
by @ruben.aleman (merge request) -
New Datasource data/gitlab_runners: Add new data source
gitlab_runners
by @ruben.aleman (merge request)
IMPROVEMENTS (17 changes)
- docs: add import block examples to resources by @ruben.aleman (merge request)
- data/gitlab_project: Add
ci_pipeline_variables_minimum_role
setting by @hfyngvason (merge request) - data/gitlab_projects: Add
ci_pipeline_variables_minimum_role
setting by @hfyngvason (merge request) - data/gitlab_metadata: Add
external_kas_proxy_url
setting by @timofurrer (merge request) - resource/gitlab_user_runner: Add
maintenance_note
setting by @ruben.aleman (merge request) - resource/gitlab_group: Add
allowed_email_domains_list
setting by @jeremad (merge request) - resource/gitlab_project: Add
ci_pipeline_variables_minimum_role
setting by @hfyngvason (merge request) - resource/gitlab_project_environment: Add support for multiple attributes related to cluster agents by @timofurrer (merge request)
- resource/gitlab_project_hook: Add
custom_headers
support by @PatrickRice (merge request) - resource/gitlab_group_hook: Add
custom_headers
support by @PatrickRice (merge request) - resource/gitlab_branch_protection: Add
deploy_key
support toallowed_to_push
by @nicolas.boussuge.fintech (merge request) - resource/gitlab_group_security_policy_attachment: Update documentation to make usage with compliance frameworks and policies more clear by @odupre (merge request)
- resource/personal_access_token: Remove the "RequiresReplace()" modifier on rotation_config for access tokens by @PatrickRice (merge request)
- resource/project_access_token: Remove the "RequiresReplace()" modifier on rotation_config for access tokens by @PatrickRice (merge request)
- resource/group_access_token: Remove the "RequiresReplace()" modifier on rotation_config for access tokens by @PatrickRice (merge request)
- resource/gitlab_service_account_access_token: Improve example documentation and include better information on required permissions for gitlab.com by @heidi.berry (merge request)
- resource/gitlab_member_role: Add documentation examples and import examples by @john.shimmin (merge request)
BUG FIXES (8 changes)
- resource/gitlab_group_label: Fix an issue where
apply
fails when changing thename
attribute by @krzywykrzych (merge request) - resource/gitlab_application_settings: Fix panic when using
valid_runner_registrars
by @PatrickRice (merge request) - resource/gitlab_service_account_access_token: Fix an issue where non-admin tokens cannot use the service account access token resource by @PatrickRice (merge request)
- resource/gitlab_service_account_access_token: Fix invalid HCL in the example by @telliffoshea (merge request)
- resource/gitlab_member_role: Fix an issue where
enabled_permissions
could cause issues due to sorting by @john.shimmin (merge request) - resource/gitlab_group_access_token: Fix an issue where removing
rotation_configuration
after anapply
operation caused a provider panic by @PatrickRice (merge request) - resource/gitlab_project_access_token: Fix an issue where removing
rotation_configuration
after anapply
operation caused a provider panic by @PatrickRice (merge request) - resource/gitlab_personal_access_token: Fix an issue where removing
rotation_configuration
after anapply
operation caused a provider panic by @PatrickRice (merge request)
v17.5.0
This release was tested against GitLab 17.5, 17.4, and 17.3 for both CE and EE
FEATURES (4 changes)
- New Resource resource/gitlab_group_service_account: Allows creating service accounts for a gitlab group by @michal.szczepek (merge request)
- New Resource resource/gitlab_group_service_account_token: Allows creating service account tokens for a service account by @michal.szczepek (merge request)
- New Datasource data/gitlab_group_service_account: Allows creating service accounts for a gitlab group by @michal.szczepek (merge request)
- New Datasource data/gitlab_group_provisioned_users: Allows listing users provisioned by an Identity Provider by @nvh04121 (merge request)
IMPROVEMENTS (9 changes)
- provider/gitlab: Add support for
headers
to the provider to allow setting custom headers by @ruben.aleman (merge request) - resource/gitlab_application_settings: Add support for 20 additional new fields by @Jitsusama (merge request)
- resource/gitlab_application_settings: Add support for 23 (for a total of 43 in 17.5) additional new fields by @Jitsusama (merge request)
- resource/gitlab_project: Support
allow_pipeline_trigger_approve_deployment
by @loozhengyuan (merge request) - resource/gitlab_project: Support
model_experiments_access_level
andmodel_registry_access_level
by @jeremad (merge request) - resource/gitlab_group: Add support for specifying the default branch by @jae-sorcero (merge request)
- resource/gitlab_group: Add
no one
as a valid permissions when usingdefault_branch_protection_defaults
by @jae-sorcero (merge request) - resource/gitlab_personal_access_token: Add support for
rotation_configuration
by @ruben.aleman (merge request) - data/gitlab_pipeline_schedules: Add
id
for each schedule found using the datasource by @nicolas.boussuge.fintech (merge request)
BUG FIXES (1 change)
- resource/gitlab_project: Only apply
use_custom_template
during creation if the value istrue
. Fixes an issue where usinguse_custom_template = false
would cause a 500 error by @PatrickRice (merge request)
v17.4.0
This release was tested against GitLab 17.4, 17.3, and 17.2 for both CE and EE
FEATURES (4 changes)
- New Resource resource/gitlab_member_role: Allows creating custom roles at an instance or group level by @slaup1 (merge request)
- New Resource resource/user_impersonation_token: Adds support for generating an impersonation token with an admin user by @slaup1 (merge request)
- New Datasource data/gitlab_protected_tag(s): Two new datasources allow retrieving a single tag or list of tags by project by @mness (merge request)
- New Datasource data/gitlab_pipeline_schedule(s): Two new datasources allow retrieving a single pipeline schedule or list of pipeline scheduled by project by @heidi.berry (merge request)
IMPROVEMENTS (12 changes)
- resource/gitlab_group: Add support for
default_branch_protection_defaults
by @heidi.berry (merge request) - resource/gitlab_group: Add support for
reject_non_dco_commits
by @mness (merge request) - resource/gitlab_project_approval_rule: Add support for
report_type
, allowing the creation ofCoverage-Check
rules by @MDeVilliers1 (merge request) - resource/gitlab_group_label: Update format of the resource ID to allow
name
updates by @nvh04121 (merge request) - resource/gitlab_group_label: Updating
name
no longer forces destroy/creation of the label by @PatrickRice (merge request - resource/gitlab_service_jira: Aligned fields to upstream API, adding support for 9 new fields by @deepflame (merge request
- resource/gitlab_application_settings: Add support for 25 new fields by @Jitsusama (merge request)
- resource/gitlab_project: Add support for
pre_receive_secret_detection_enabled
by @PatrickRice (merge request) - resource/gitlab_project: Add support for
reject_non_dco_commits
by @mness (merge request) - resource/gitlab_project_push_rules: Add support for
reject_non_dco_commits
by @mness (merge request) - resource/gitlab_user: Add support for
extern_uid
andexternal_provider
by @heidi.berry (merge request) - docs/use-case-tech-lead-bootstrapping-small-team: Added new documentation to the provider with an example of creating a small team using GitLab by @Jitsusama (merge request)
BUG FIXES (2 changes)
- resource/gitlab_user_runner: Fix an issue where managing an imported runner would fail with an error that
token
was unknown by @PatrickRice (merge request) - resource/gitlab_personal_access_token: Fix an issue where tokens with no expiration date encountered a provider error by @PatrickRice (merge request)
v17.3.1
This release was tested against GitLab 17.3, 17.2, and 17.1 for both CE and EE
IMPROVEMENTS (1 change)
- The provider now uses an exponential backoff when no RateLimit-Reset headers are sent from GitLab by @PatrickRice (merge request)
BUG FIXES (7 changes)
- resource/gitlab_project_access_token: Fixed an error when applying an update using a plan file that could cause the ID to return an error when rotating by @PatrickRice (merge request)
- resource/gitlab_project_access_token: Fixed an error when applying an update using a plan from from a previous day to rotate an access token by @PatrickRice (merge request)
- resource/gitlab_group_access_token: Fixed an error when applying an update using a plan file that could cause the ID to return an error when rotating by @PatrickRice (merge request)
- resource/gitlab_group_access_token: Fixed an error when applying an update using a plan from from a previous day to rotate an access token by @PatrickRice (merge request)
- resource/gitlab_group_protected_environment: Updated documentation for
deploy_access_levels
to be more specific by @mness (merge request) - resource/gitlab_project_protected_environment: Updated documentation for
deploy_access_levels
to be more specific by @mness (merge request) - resource/gitlab_group_saml_link: Updated documentation for
access_level
to be more descriptive when using custom roles by @PatrickRice (merge request)
v17.3.0
This release was tested against GitLab 17.3, 17.2, and 17.1 for both CE and EE
IMPROVEMENTS (8 changes)
- New Resource resource/gitlab_group_security_policy_attachment: Add new resource for association security policy projects to a group by @PatrickRice (merge request)
- New Datasource data/gitlab_group_ids: Add new datasource retrieving group ID, Full Path, or GraphQL ID based on group ID or Url-encoded path by @PatrickRice (merge request)
- New Datasource data/gitlab_project_ids: Add new datasource retrieving project ID, Full Path, or GraphQL ID based on project ID or Url-encoded path by @PatrickRice (merge request)
- resource/gitlab_project_job_token_scopes: Add support for
target_group_ids
, allowing groups to be used in the allow list by @chapsuK (merge request) - resource/gitlab_group: Add support for
permanently_remove_on_delete
, allowing groups to be permanently deleted on destroy instead of entering a waiting period by @PatrickRice (merge request) - resource/gitlab_application_settings: Add support for
max_terraform_state_size_bytes
, allowing configuration of terraform state size at an instance level by @christian.affolter (merge request) - resource/gitlab_project_push_rules:
gitlab_project_push_rules
will now take over ownership of existing push rules, since a default set is created on project creation by @mness (merge request) - resource/gitlab_project_job_token_scopes: Added support for
project
, allowing the use of the resource by project ID or url-encoded path by @heidi.berry (merge request)
BUG FIXES (4 changes)
- resource/gitlab_group_access_token: Fix example to use the proper resource by @blrz (merge request)
- resource/gitlab_group_security_policy_attachment: Fix example to use the proper resource by @calebw (merge request)
- resource/gitlab_project_security_policy_attachment: Fix example to use the proper resource by @calebw (merge request)
- resource/gitlab_user_runner: Fix description to remove typo in
group_type
by @clemenschuaccso (merge request)
v17.2.0
This release was tested against GitLab 17.2, 17.1, and 17.0 for both CE and EE
BREAKING CHANGES (1 change)
Note: As a security related change, this breaking change is allowed outside a major release. If a non-sensitive token is required for migration purposes users can use the nonsensitive()
TF function.
- resource/gitlab_cluster_agent_token: Mark GitLab cluster agent token as sensitive by @CarbonCollins (merge request)
IMPROVEMENTS (1 change)
- New Resource resource/gitlab_project_security_policy_attachment: Add new resource for associating security policy projects to a project by @PatrickRice (merge request)
- resource/gitlab_personal_access_token: Migrate
gitlab_personal_access_token
from SDK to TF Plugin Framework by @theipster (merge request)
BUG FIXES (4 changes)
- resource/gitlab_deploy_key: Fix deploy key documentation reference to point to the correct resource for enabling a pre-existing deploy key by @blrz (merge request)
- resource/gitlab_user_runner: Fix an issue with gitlab_user_runner causing inconsistent TF plans by @PatrickRice (merge request)
v17.1.0
This release was tested against GitLab 17.1, 17.0, and 16.11 for both CE and EE
BUG FIXES (3 changes)
- resource/gitlab_project_job_token_scopes: Correct examples for resource project_job_token_scopes by @heidi.berry (merge request)
- resource/gitlab_group_access_token: Fix an issue where using access tokens with a
time
provider caused segfaults by @PatrickRice (merge request) - resource/gitlab_project_access_token: Fix an issue where using access tokens with a
time
provider caused segfaults by @PatrickRice (merge request)
IMPROVEMENTS (8 changes)
- New Resource resource/gitlab_telegram_integration: Implement Telegram Integration by @alxrem (merge request)
- resource/gitlab_group_saml_link: Add ability to set custom roles on group SAML links by @heidi.berry (merge request)
- resource/gitlab_integration_slack: Add confidential_note_channel to slack integration by @0oMarko0 (merge request)
- resource/gitlab_personal_access_token: Implement manage_runner access token scope (merge request)
- resource/gitlab_personal_access_token: Mark
expires_at
attribute as optional by @erezo9 (merge request) - resource/gitlab_group_access_token: Fixed several documentation issues with access token resources by @theipster (merge request)
- resource/gitlab_project_access_token: Fixed several documentation issues with access token resources by @theipster (merge request)
- resource/gitlab_project: Update
initialize_with_readme
to add border case documentation by @PatrickRice (merge request)
v17.0.1
This release was tested against GitLab 17.0, 16.11, and 16.10 for both CE and EE
BUG FIXES:
- Fixed an issue where sensitive tokens were not masked properly in debug log files (!1997)
v17.0.0
This release was tested against GitLab 17.0, 16.11, and 16.10 for both CE and EE
KNOWN ISSUES:
-
gitlab_current_user
returns an empty string forpublic_email
(#6305)
BREAKING CHANGES:
- resources/project_protected_environment: Removed support for
required_approval_count
field, userequired_approvals
inapproval_rules
ordeploy_access_level
instead (!1940) - resources/group_protected_environment: Removed support for
required_approval_count
field, userequired_approvals
inapproval_rules
ordeploy_access_level
instead (!1940) - resources/gitlab_group: Removed a version check related to
commit_committer_check
andreject_unsigned_commits
that would prevent their use in versions prior to GitLab 16.4. If used with versions earlier than 16.4, these attributes will cause an error instead of being excluded. (!1937) - resources/gitlab_group: Removed support for
emails_disabled
, useemails_enabled
instead (!1929) - resources/gitlab_project: Removed support for
emails_disabled
, useemails_enabled
instead (!1929) - resources/gitlab_pipeline_schedule:
ref
now requires the full ref instead of allowing the use of the short ref. If you previously usedmain
, you now need to userefs/heads/main
instead, for example (!1923) - resources/gitlab_pipeline_trigger:
token
can no longer be imported. (!1905) - resources/gitlab_pipeline_trigger: Updating the
project
attribute will now force the creation of a new pipeline trigger (!1905) - data/gitlab_group(s): Removed support for
emails_disabled
, useemails_enabled
instead (!1929) - data/gitlab_project(s): Removed support for
emails_disabled
, useemails_enabled
instead (!1929) - data/gitlab_project(s): Removed support for
public
, usevisibility
instead (!1929) -
master
is no longer a valid access level on any resource that supports the use of access levels. This impacts the resources listed below. (!1903)- gitlab_group_access_token
- gitlab_group_ldap_link
- gitlab_group_membership
- gitlab_group_share_group
- gitlab_project_access_token
- gitlab_project_membership
- gitlab_project_share_group
IMPROVEMENTS:
- New Resource resource/gitlab_integration_jenkins: Allows managing a project Jenkins integration (!1919)
- New Resource resource/gitlab_project_push_rules: Allows managing the lifecycle of push rules on a project (!1893)
- New Resource resource/gitlab_project_job_token_scopes: This resource sets a strict list of project job token scopes, and removes any job token scopes not managed by the resource. This can be useful to explicitly deny job token scopes on a project. (!1907)
- resources/gitlab_pipeline_schedule_variable: Added support for the use of
variable_type
(!1952) - resources/gitlab_group: Added support for the use of
commit_committer_name_check
to thepush_rules
block (!1937) - resources/gitlab_project: Added support for the use of
commit_committer_name_check
to thepush_rules
block (!1918) - resources/gitlab_instance_variable: Added support for the use of
description
(!1950) - resources/gitlab_user_runner: Added example documentation for this resource to make it easier to consume (!1928)
- resources/gitlab_application_settings: Add support for
minimum_password_length
to the resource (!1917) - resources/gitlab_personal_access_token: Updated the API used to read personal access token data, which improves performance of this resource in situations where many tokens are being maintained, and improves reliability of the resource in high concurrency situations (!1908)
- data/gitlab_instance_variable: Added support for
description
(!1950) - provider: Added documentation that the use of Project Access Tokens or Group Access Tokens may not work with all resources (!1928)
BUG FIXES:
- resources/gitlab_pipeline_schedule: Fixed a provider crash in situations where the scheduled pipeline fails to create (!1899)
- resources/gitlab_group: Fixed a provider error when attempting to create groups with
push_rules
on GitLab CE wherepush_rules
are not supported (!1891) - resources/gitlab_group_access_token: Fixed an issue with token rotation using
rotation_configuration
where tokens wouldn't rotate properly afterexpires_at
was stored in state. Added additional debug logging for token rotation. (!1953) - resources/gitlab_group_access_token: Fixed an issue with token rotation where manually managing expiration using
expires_at
would encounter an error after updatingexpires_at
twice (!1916) - resources/gitlab_project_access_token: Fixed an issue with token rotation using
rotation_configuration
where tokens wouldn't rotate properly afterexpires_at
was stored in state. Added additional debug logging for token rotation. (!1953) - resources/gitlab_project_access_token: Fixed an issue with token rotation where manually managing expiration using
expires_at
would encounter an error after updatingexpires_at
twice (!1916) - resources/gitlab_pipeline_trigger: Fixed a bug where applying TF with different users could corrupt the pipeline trigger
token
!1905
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.