v1.1.1

Summary

This release includes bug fixes, security updates, and dependency maintenance.

Highlights

• Bug Fix: Consolidated garbage collection for namespaced and cluster-scoped workspaces
• Security: Updated go.opentelemetry.io/otel/sdk to v1.40.0 addressing security vulnerabilities
• Go Version: Updated to Go 1.25.7

Dependency Updates

• Updated go.uber.org/zap to v1.27.1
• Updated github.com/hashicorp/go-getter to v1.8.4
• Updated google.golang.org/grpc to v1.79.1
• Updated github.com/spf13/afero to v1.15.0
• Updated github.com/makenowjust/heredoc to v2
• Updated Alpine base image to v3.23.3
• Various CI/CD tooling updates (actions/checkout v6, actions/setup-go v6, actions/cache v5)

v1.1.0

Highlights

• Includes remotePullPolicy feature to reduce remote module download costs
• Improved module initialization detection using .terraform.lock.hcl
• Various bug fixes and improvements

What's Changed

• Add remotePullPolicy to reduce remote module download costs by @ytsarev in #232

Full Changelog: v1.0.5...v1.1.0

v1.0.5

What's Changed

• Bump go mod dependencies to fix CVEs by @turkenf in #229
• [main]: Update go.mod dependencies [SECURITY] by @upbound-bot in #230

Full Changelog: v1.0.3...v1.0.5

v1.0.3

What's Changed

• docs: Add troubleshooting docs by @jeanduplessis in #205
• chore(deps): update actions/cache digest to 0400d5f by @renovate[bot] in #195
• chore(deps): update terraform null to v3.2.4 by @renovate[bot] in #199
• chore(deps): update terraform random to v3.7.2 by @renovate[bot] in #200
• chore(deps): update tj-actions/changed-files action to v46.0.5 by @renovate[bot] in #201
• chore(deps): update module github.com/ulikunitz/xz to v0.5.15 [security] by @renovate[bot] in #203
• chore(deps): update actions/checkout action to v4.3.0 by @renovate[bot] in #209
• chore(deps): update actions/setup-go action to v5.5.0 by @renovate[bot] in #210
• chore(deps): update dependency kubernetes-sigs/kind to v0.30.0 by @renovate[bot] in #214
• Bump uptest to v2 by @sergenyalcin in #218
• fix(owners): set correct mail-address by @haarchri in #220
• Bump dependencies by @sergenyalcin in #221
• Update codeowners by @sergenyalcin in #224
• [main]: Update go.mod dependencies [SECURITY] by @upbound-bot in #226

New Contributors

• @haarchri made their first contribution in #220
• @upbound-bot made their first contribution in #226

Full Changelog: v1.0.0...v1.0.3

v0.20.0

Note

The repo at https://github.com/upbound/provider-terraform has been archived. These release notes are for informative purposes only on releases prior to moving the provider source to https://github.com/crossplane-contrib/provider-terraform. If there is a need for historical information question can be asked in #upbound-provider-terraform channel in XP Slack.

What's Changed

• Update Quickstart documentation by @turkenf in https://github.com/upbound/provider-terraform/pull/298
• Update module golang.org/x/crypto to v0.31.0 [SECURITY] by @renovate in https://github.com/upbound/provider-terraform/pull/301
• Update module golang.org/x/net to v0.33.0 [SECURITY] by @turkenf in https://github.com/upbound/provider-terraform/pull/305
• Update actions/cache digest to 1bd1e32 by @renovate in https://github.com/upbound/provider-terraform/pull/299
• Update alpine Docker tag to v3.21.2 by @renovate in https://github.com/upbound/provider-terraform/pull/300
• Update all non-major github action by @renovate in https://github.com/upbound/provider-terraform/pull/311
• Update actions/setup-go action to v5.3.0 by @renovate in https://github.com/upbound/provider-terraform/pull/312
• Add --log-encoding cli option by @Antrakos in https://github.com/upbound/provider-terraform/pull/324
• Update alpine Docker tag to v3.21.3 by @renovate in https://github.com/upbound/provider-terraform/pull/325
• Update all non-major github action by @renovate in https://github.com/upbound/provider-terraform/pull/318
• Prevent external contributors from triggering workflows via PR comments by @turkenf in https://github.com/upbound/provider-terraform/pull/328
• Update actions/cache digest to d4323d4 by @renovate in https://github.com/upbound/provider-terraform/pull/330
• [Backport release-0.20] Update go version to 1.22.12 by @github-actions in https://github.com/upbound/provider-terraform/pull/334

New Contributors

• @Antrakos made their first contribution in https://github.com/upbound/provider-terraform/pull/324

v0.19.0

Note

The repo at https://github.com/upbound/provider-terraform has been archived. These release notes are for informative purposes only on releases prior to moving the provider source to https://github.com/crossplane-contrib/provider-terraform. If there is a need for historical information question can be asked in #upbound-provider-terraform channel in XP Slack.

What's Changed

• Update alpine Docker tag to v3.20.3 by @renovate in https://github.com/upbound/provider-terraform/pull/286
• Update Terraform random to v3.6.3 by @renovate in https://github.com/upbound/provider-terraform/pull/289
• Update Terraform null to v3.2.3 by @renovate in https://github.com/upbound/provider-terraform/pull/288
• Update dependency ubuntu to v24 by @renovate in https://github.com/upbound/provider-terraform/pull/290
• Stop using deprecated upbound/official-provider-ci workflows by @jeanduplessis in https://github.com/upbound/provider-terraform/pull/294

v0.18.0

Note

The repo at https://github.com/upbound/provider-terraform has been archived. These release notes are for informative purposes only on releases prior to moving the provider source to https://github.com/crossplane-contrib/provider-terraform. If there is a need for historical information question can be asked in #upbound-provider-terraform channel in XP Slack.

What's Changed

The release v0.18.0 introduces JSON format for inline module, bug fixes, and dependency updates.

• Update alpine Docker tag to v3.20.2 by @renovate in https://github.com/upbound/provider-terraform/pull/279
• Update Quickstart.md by @tuffacton in https://github.com/upbound/provider-terraform/pull/284
• Write Terraform CLI logs to container stdout by @suramasamy in https://github.com/upbound/provider-terraform/pull/258
• feat: introduce json format for inline module (#165) by @denniskniep in https://github.com/upbound/provider-terraform/pull/283
• Fix CI errors by @bobh66 in https://github.com/upbound/provider-terraform/pull/285

New Contributors

• @tuffacton made their first contribution in https://github.com/upbound/provider-terraform/pull/284
• @suramasamy made their first contribution in https://github.com/upbound/provider-terraform/pull/258
• @denniskniep made their first contribution in https://github.com/upbound/provider-terraform/pull/283

v1.0.0

Release v1.0.0

Caution

This release introduces breaking changes and significant internal upgrades. Please review the release notes thoroughly, make the necessary changes to your manifests, and test thoroughly before upgrading.

Before using any Crossplane v2 capabilities in the provider, we encourage you to familiarize yourself with the changes in v2.

This release introduces:

• Compatibility with Crossplane v2
• Support for Crossplane v2 namespace-scoped Managed Resources (MRs) alongside existing cluster-scoped MRs.
• Upgrade to crossplane-runtime v2.0.0.
• Removal of External Secret Store support.

Please review the breaking changes carefully before upgrading.

Namespace-scope MR Support (Crossplane v2-only)

• New namespace-scoped MR APIs are available under the tf.m.crossplane.io API group.
• All new APIs are at version v1beta1.
• ProviderConfig
  • ProviderConfig.tf.m.crossplane.io is now namespace-scoped.
  • A new cluster-scoped ClusterProviderConfig.tf.m.crossplane.io resource was added; new MRs can reference either ProviderConfig or ClusterProviderConfig via spec.providerConfigRef.kind.
  • spec.providerConfigRef defaults to ClusterProviderConfig with name default when omitted.
• spec.writeConnectionSecretToRef and sensitive parameter refs (e.g., spec.forProvider.fooSecretRef) in namespace-scoped MRs are now local secret references (if no namespace is specified, it defaults to the MR's namespace).
• Cross-resource references are now namespace-scoped by default, however, cross-namespace references are allowed.
• This provider will serve both the new namespace-scoped and cluster-scoped APIs.

Note

Cluster-scoped MRs do NOT implement the above changes and continue operating as before.

Removed Features

• External Secret Store support has been removed from all MRs (spec.publishConnectionDetailsTo is no longer available) as the feature has been removed in Crossplane v2.

Note

The removed feature is the External Secret Store, which allowed storing connection details outside the cluster (e.g., in Vault). Connection secrets for managed resources remain available for storing connection details in Kubernetes Secrets.

Other Notable Changes

• SafeStart capability has been added (Crossplane v2-only): Controllers start once their CRD is installed.
• Repository structure changes:
  • apis, controllers, and examples now have scoped subdirectories: cluster and namespaced.
  • Resource configurations are also scoped; updates must be applied to both where relevant.
  • Examples for namespace-scoped MRs are included.

Note

This PR duplicates most of the controller logic and apis for namespaced MRs with several namespace-specific code modified. A refactoring of types and controllers should follow-up.

Backward Compatibility Notes

• This provider can be installed in Crossplane v1.x environments:
  • Both cluster-scoped and namespace-scoped CRDs will be installed; namespace-scoped CRDs cannot be composed in v1.x.
  • SafeStart will be disabled.
• When upgrading from v1.x providers, review all breaking resource API changes noted above. The package itself is Crossplane v1.x compatible, but there can be resources that have API changes that need adjustment in your control plane.

Upgrade Guide

1. Review all affected resources listed under Breaking API Changes.
2. Update manifests to reflect renamed/removed properties.
3. For Crossplane v2.x users:
   • Ensure secret and reference configurations align with the new namespace-scoped MR behavior.
   • Decide whether to use ProviderConfig or ClusterProviderConfig.
4. Remove any spec.publishConnectionDetailsTo usage.
5. Validate repository structure changes if maintaining custom resource configurations.

What's Changed

• add basic plumbing for provider startup checks by @jastang in #194
• crossplane v2: namespaced MRs by @sergenyalcin in #198
• fix(deps): update module github.com/hashicorp/go-getter to v1.7.9 [security] by @renovate[bot] in #196
• Update secrets for publish provider workflow by @turkenf in #202

New Contributors

• @sergenyalcin made their first contribution in #198

Full Changelog: v0.21.0...v1.0.0

v0.21.0

What's Changed

• chore(deps): update actions/upload-artifact action to v4.6.2 by @renovate in #176
• chore(deps): update tj-actions/changed-files action to v46.0.3 by @renovate in #177
• fix(deps): update module github.com/hashicorp/go-getter to v1.7.8 by @renovate in #178
• fix(deps): update module github.com/google/go-cmp to v0.7.0 by @renovate in #182
• chore(deps): update module golang.org/x/oauth2 to v0.27.0 [security] by @renovate in #174
• chore(deps): update terraform random to v3.7.1 by @renovate in #179
• fix(deps): update module github.com/google/uuid to v1.6.0 by @renovate in #183
• fix(deps): update module github.com/spf13/afero to v1.14.0 by @renovate in #184
• fix(deps): update module go.uber.org/zap to v1.27.0 by @renovate in #185
• chore(config): migrate renovate config by @renovate in #187
• Add notice about not supporting newer TF versions by @jeanduplessis in #188
• chore(deps): update module golang.org/x/net to v0.38.0 [security] by @renovate in #191
• Update go version to 1.23.8 [Security] by @turkenf in #192

New Contributors

• @renovate made their first contribution in #176
• @jeanduplessis made their first contribution in #188
• @turkenf made their first contribution in #192

Full Changelog: v0.20.1...v0.21.0

v0.20.1

What's Changed

• chore(deps): update tj-actions/changed-files action to v46.0.3 by @renovate in #177
• fix(deps): update module github.com/hashicorp/go-getter to v1.7.8 by @renovate in #178
• fix(deps): update module github.com/google/go-cmp to v0.7.0 by @renovate in #182
• chore(deps): update module golang.org/x/oauth2 to v0.27.0 [security] by @renovate in #174
• chore(deps): update terraform random to v3.7.1 by @renovate in #179
• fix(deps): update module github.com/google/uuid to v1.6.0 by @renovate in #183
• fix(deps): update module github.com/spf13/afero to v1.14.0 by @renovate in #184
• fix(deps): update module go.uber.org/zap to v1.27.0 by @renovate in #185
• chore(config): migrate renovate config by @renovate in #187
• Add notice about not supporting newer TF versions by @jeanduplessis in #188

Full Changelog: v0.5.0...v0.20.1