chore(deps): update terraform kubernetes to v2.36.0
-
Review changes -
-
Download -
Patches
-
Plain diff
This MR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| kubernetes (source) | required_provider | minor |
2.12.1 -> 2.36.0
|
Warning Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
hashicorp/terraform-provider-kubernetes (kubernetes)
v2.36.0
ENHANCEMENTS:
-
resource/kubernetes_secret_v1: Add support for write only attributes fordata_woandbinary_data_wo. [GH-2692]
v2.35.1
BUG FIXES:
-
resource/kubernetes_job_v1: revert the changes introduced in v2.34.0, wherettl_seconds_after_finishedwas set to0. [GH-2650] -
resource/kubernetes_daemon_set_v1: fix issue where fieldsspec.strategy.rolling_update.max_surgeandspec.strategy.rolling_update.max_unavailablewere not being validated correctly. [GH-2653]
v2.35.0
FEATURES:
-
resources_kubernetes_daemon_set_v1: Addedmax_surgeargument for torolling_updateblock. [GH-2630]
v2.34.0
ENHANCEMENTS:
- Added
conditionsattribute tokubernetes_nodesdata source, which will provide detailed node health and status information [GH-2612] - Adding the
kubernetes_secret_v1_dataresource to the kubernetes provider. This resource will allow users to manage kubernetes secrets [GH-2604] - Properly handle Kubernetes Jobs with ttl_seconds_after_finished = 0 to prevent unnecessary recreation. [GH-2596]
FEATURES:
- New ephemeral resource:
kubernetes_certificate_signing_request_v1[GH-2628] - New ephemeral resource:
kubernetes_token_request_v1[GH-2628]
v2.33.0
ENHANCEMENTS:
- Add
backoff_per_limit_indexandmax_failed_indexesfields instructure_job.go[GH-2421] - Added support for
namespace_selectorfield inPodAffinityTermto enhance pod affinity and anti-affinity rules, allowing selection of namespaces based on label selectors. [GH-2577] -
kubernetes_manifest- handling "404 Not Found" errors during the deletion of Kubernetes resources, particularly in cases where the resource may have already been deleted by an operator managing the CRD before Terraform attempts to delete it. [GH-2592] -
schema_container.go: Add VolumeDevices [GH-2573]
v2.32.0
FEATURES:
- New data source:
kubernetes_server_version[GH-2306]
ENHANCEMENTS:
-
resource/kubernetes_certificate_signing_request_v1: Add argumentspec.expiration_seconds[GH-2559] -
resource/kubernetes_persistent_volume_v1: supportReadWriteOncePodaccess mode for PVs [GH-2488]
v2.31.0
ENHANCEMENTS:
- Add support for Terraform's experimental deferred actions [GH-2510]
v2.30.0
BUG FIXES:
-
data_source/kubernetes_resources: fix an issue where the provider exit with an error when the data sourcekubernetes_resourcesreceives multiple Kubernetes objects containing tuples with different numbers of elements. [GH-2372] -
kubernetes_manifest: fix issue preventing KUBE_PROXY_URL environment variable from being used in client configuration (#1733) [GH-2485] -
resource/kubernetes_node_taint: Fix the error check for nonexistant nodes so that terraform does not fail if there is a taint in the state file for a node that has been deleted. [GH-2402]
DOCS:
- Migrate legacy structure to new tfplugindocs template structure [GH-2470]
v2.29.0
BUG FIXES:
- data-sources: revert a recently introduced deviation on datasources where querying a non-existent resource would cause an error (#2434). [GH-2464]
v2.28.1
HOTFIX:
-
manifest_decode(): fix handling of manifests containing null values [GH-2461]
v2.28.0
ENHANCEMENTS:
NOTE: Using Provider Defined Functions requires Terraform version 1.8.0.
- Add provider defined functions:
manifest_encode,manifest_decode,manifest_decode_multi[GH-2428]
v2.27.0
ENHANCEMENTS:
-
resource/kubernetes_pod_v1: add missingtopology_spread_constraints:node_affinity_policy,node_taints_policy,match_label_keys,min_domains[GH-2429]
v2.26.0
ENHANCEMENTS:
-
kubernetes/kubernetes_deployment_v1: Add support forHugePagesinemptyDir.medium[GH-2395] -
resource/kubernetes_job_v1: add new attributespec.pod_failure_policyto job spec [GH-2394]
NOTES:
- Bump Kubernetes dependencies from x.27.8 to x.28.6. [GH-2404]
v2.25.2
BUG FIXES:
-
resource/kubernetes_cron_job_v1: fix an issue when the provider forces a resource recreation after upgrading to2.25.0and2.25.1due to changes in the resource schema. [GH-2387] -
resource/kubernetes_cron_job: fix an issue when the provider forces a resource recreation after upgrading to2.25.0and2.25.1due to changes in the resource schema. [GH-2387] -
resource/kubernetes_daemon_set_v1: fix an issue when the provider forces a resource recreation after upgrading to2.25.0and2.25.1due to changes in the resource schema. [GH-2387] -
resource/kubernetes_daemonset: fix an issue when the provider forces a resource recreation after upgrading to2.25.0and2.25.1due to changes in the resource schema. [GH-2387] -
resource/kubernetes_stateful_set_v1: fix an issue when the provider forces a resource recreation after upgrading to2.25.0and2.25.1due to changes in the resource schema. [GH-2387] -
resource/kubernetes_stateful_set: fix an issue when the provider forces a resource recreation after upgrading to2.25.0and2.25.1due to changes in the resource schema. [GH-2387]
NOTES:
- Resources
kubernetes_cron_job_v1andkubernetes_cron_jobgot a new attributespec.job_template.metadata.namespace. It is a stub attribute that does not affect the namespace in which the Pod will be created. The Pod will be created in the same namespace as the main resource. However, modifying this field will force the resource recreation. [GH-2387] - Resources
kubernetes_stateful_set_v1,kubernetes_stateful_set,kubernetes_daemon_set_v1, andkubernetes_daemonsetgot a new attributespec.template.metadata.namespace. It is a stub attribute that does not affect the namespace in which the Pod will be created. The Pod will be created in the same namespace as the main resource. However, modifying this field will force the resource recreation. [GH-2387]
v2.25.1
HOTFIX:
-
kubernetes_manifest: Implement response for GetMetadata protocol function [GH-2384]
v2.25.0
ENHANCEMENTS:
- Add terraform-plugin-framework provider [GH-2347]
-
data_source/kubernetes_persistent_volume_claim_v1: add a new attributespec.volume_mode. [GH-2353] -
data_source/kubernetes_persistent_volume_claim: add a new attributespec.volume_mode. [GH-2353] -
kubernetes/schema_stateful_set_spec.go: Addspec.persistentVolumeClaimRetentionPolicyinkubernetes_stateful_set[GH-2333] -
resource/kubernetes_persistent_volume_claim_v1: add a new attributespec.volume_mode. [GH-2353] -
resource/kubernetes_persistent_volume_claim: add a new attributespec.volume_mode. [GH-2353] -
resource/kubernetes_stateful_set_v1: add a new attributespec.volume_claim_template.spec.volume_mode. [GH-2353] -
resource/kubernetes_stateful_set: add a new attributespec.volume_claim_template.spec.volume_mode. [GH-2353]
BUG FIXES:
-
resource/kubernetes_cron_job_v1: Change the schema to include a namespace injobTemplateresource/kubernetes_stateful_set_v1: Change the schema to include a namespace intemplate[GH-2362] -
resource/kubernetes_ingress_v1: Fix an issue where the emptytlsattribute in the configuration does not generate the corresponding Ingress object without any TLS configuration. [GH-2344] -
resource/kubernetes_ingress: Fix an issue where the emptytlsattribute in the configuration does not generate the corresponding Ingress object without any TLS configuration. [GH-2344]
NOTES:
- We have updated the logic of data sources and now the provider will return all annotations and labels attached to the object, regardless of the
ignore_annotationsandignore_labelsprovider settings. In addition to that, a list of ignored labels when they are attached tokubernetes_job(_v1)andkubernetes_cron_job(_v1)resources were extended with labelsbatch.kubernetes.io/controller-uidandbatch.kubernetes.io/job-namesince they aim to replacecontroller-uidandjob-namein the future Kubernetes releases. [GH-2345]
A special and warm welcome to the first contribution from our teammate @SarahFrench! 
v2.24.0
ENHANCEMENTS:
kubernetes/schema_affinity_spec.go: Add match_fields to nodeAffinity [GH-2296]
kubernetes/schema_pod_spec.go: Add os to podSpecFields [GH-2290]
resource/kubernetes_config_map_v1_data: improve error handling while validating the existence of the target ConfigMap. [GH-2230]
BUG FIXES:
-
resource/kubernetes_labels: Add ["f:metadata"] check in kubernetes_labels to prevent crash with kubernetes_node_taints [GH-2246]
DOCS:
- Add example module for configuring OIDC authentication on EKS [GH-2287]
- Add example module for configuring OIDC authentication on GKE [GH-2319]
NOTES:
- Bump Go version from 1.20 to 1.21. [GH-2337]
- Bump Kubernetes dependencies from x.25.11 to x.27.8.
v2.23.0
FEATURES:
-
resource/kubernetes_cron_job_v1: add a new volume typeephemeraltospec.job_template.spec.template.spec.volumeto support generic ephemeral volumes. [GH-2199] -
resource/kubernetes_cron_job: add a new volume typeephemeraltospec.job_template.spec.template.spec.volumeto support generic ephemeral volumes. [GH-2199] -
resource/kubernetes_daemon_set_v1: add a new volume typeephemeraltospec.template.spec.volumeto support generic ephemeral volumes. [GH-2199] -
resource/kubernetes_daemonset: add a new volume typeephemeraltospec.template.spec..volumeto support generic ephemeral volumes. [GH-2199] -
resource/kubernetes_deployment_v1: add a new volume typeephemeraltospec.template.spec.volumeto support generic ephemeral volumes. [GH-2199] -
resource/kubernetes_deployment: add a new volume typeephemeraltospec.template.spec.volumeto support generic ephemeral volumes. [GH-2199] -
resource/kubernetes_job_v1: add a new volume typeephemeraltospec.template.spec.volumeto support generic ephemeral volumes. [GH-2199] -
resource/kubernetes_job: add a new volume typeephemeraltospec.template.spec.volumeto support generic ephemeral volumes. [GH-2199] -
resource/kubernetes_pod_v1: add a new volume typeephemeraltospec.volumeto support generic ephemeral volumes. [GH-2199] -
resource/kubernetes_pod: add a new volume typeephemeraltospec.volumeto support generic ephemeral volumes. [GH-2199]
ENHANCEMENTS:
-
resource/kubernetes_endpoint_slice_v1: make attributeendpoint.conditionoptional. If you had previously included an empty blockcondition {}in your configuration, we request you to remove it. Doing so will prevent receiving continuous "update in-place" messages while performing the plan and apply operations. [GH-2208] -
resource/kubernetes_pod_v1: add a new attributetarget_stateto specify the Pod phase(s) that indicate whether it was successfully created. [GH-2200] -
resource/kubernetes_pod: add a new attributetarget_stateto specify the Pod phase(s) that indicate whether it was successfully created. [GH-2200]
BUG FIXES:
-
resource/kubernetes_manifest: update flow inwaitblock to fix timeout bug within tf apply where the resource is created and appears in Kubernetes but does not appear in TF state file after deadline. The fix would ensure that the resource has been created in the state file while also tainting the resource requiring the user to make the necessary changes in order for their to not be another timeout error. [GH-2163]
DOCS:
- Fix external broken links in the documentation. [GH-2221]
v2.22.0
FEATURES:
-
kubernetes/data_source_kubernetes_persistent_volume.go: Add data source for Kubernetes Persistent Volume Resource [GH-2118] -
kubernetes/resource_kubernetes_namespace.go: Add attributewait_for_default_service_accountto namespaces which will force Terraform to wait until the default service account has been created by Kubernetes on namespace creation. [GH-2119] -
kubernetes/resource_kubernetes_endpointslice.go: Add kubernetes_endpoint_slice resource [GH-2086]
ENHANCEMENTS:
-
kubernetes/provider.go: Addtls_server_namekubernetes provider options. [GH-1638]
BUG FIXES:
-
resource/kubernetes_manifest: fix an issue in thekubernetes_manifestresource when it panics if tuple attributes within an object have a different number of elements. This leads to the situation when all types of end tuples are getting the same type. [GH-2164] -
resource/kubernetes_manifest: fix an issue with thekubernetes_manifestresource, where an object fails to update correctly when employing wait conditions and thus some attributes are not available for the reference after creation. [GH-2173]
v2.21.1
HOTFIX:
- Revert add "conflictsWith" to provider block schema. [GH-2131]
v2.21.0
FEATURES:
-
resource/kubernetes_runtime_class_v1: Add a new resourcekubernetes_runtime_class_v1. [GH-2080]
ENHANCEMENTS:
-
kubernetes/provider.go: addconflictsWithrules to provider configuration schema [GH-2084] -
kubernetes/resource_kubernetes_service_account.go: Removedefault_secret_namewarning [GH-2085] -
resource/kubernetes_node_taintUpdate import documentation GH-2094
BUG FIXES:
-
resource/kubernetes_node_taint: Don't fail when there is a taint in the state file for a node that no longer exists. [GH-2099] -
resource/kubernetes_job: Fixed a bug where settingbackoff_limitto 6 would reset it to 0
v2.20.0
ENHANCEMENTS:
kubernetes/resource_kubernetes_env.go: add support for initContainers [GH-2067]
kubernetes/resource_kubernetes_node_taint.go: Remove MaxItems from taint attribute [GH-2046]
BUG FIXES:
- Fix diff after import when importing resources containing volume_mount [GH-2061]
-
resource/kubernetes_node_taint: Fix an issue when updating taint does not update the ID in the state file. [GH-2077]
v2.19.0
FEATURES:
New Resource: kubernetes_token_request_v1. [GH-2024]
BUG FIXES:
-
data_source/kubernetes_secret_v1: Fix an issue where data_source cannot read secret created with generate_name. [GH-2028] -
data_source/kubernetes_secret: Fix an issue where data_source cannot read secret created with generate_name. [GH-2028] -
kubernetes/schema_pod_spec.go: Fix unexpected volumes appearing on plan [GH-2006] -
resource/kubernetes_cron_job_v1: Fix annotation logic to prevent internalkeys from being removed in templates [GH-1983] -
resource/kubernetes_manifest: Fix a panic when constructing the diagnostic message about incompatible attribute types [GH-2054] -
resource/kubernetes_manifest: Fix crash when manifest config contains unknown values of unknown type (DynamicPseudoType) [GH-2055]
v2.18.1
HOTFIX:
- kubernetes_manifest: fix crash when waiting on conditions that are not yet present [GH-2008]
v2.18.0
FEATURES:
- New data source:
data_source/kubernetes_nodes. [GH-1921] - New data source:
data_source/kubernetes_resources. [GH-1967] - New resource:
resource/kubernetes_node_taint. [GH-1921]
ENHANCEMENT:
-
resource/kubernetes_annotations: Add a new attributetemplate_annotationsthat allows adding annotations to resources with pod templates. [GH-1972] -
resource/kubernetes_cron_job_v1: Add a new attributespec.timezone. [GH-1971]
BUG FIXES:
-
resource/kubernetes_mutating_webhook_configuration: Fix an issue when the delete operation may not be idempotent. [GH-1999] -
resource/kubernetes_network_policy_v1: Fix an issue when the delete operation may not be idempotent. [GH-1999] -
resource/kubernetes_network_policy: Fix an issue when the delete operation may not be idempotent. [GH-1999] -
resource/kubernetes_persistent_volume_claim_v1: Fix an issue when the delete operation may not be idempotent. [GH-1999] -
resource/kubernetes_persistent_volume_claim: Fix an issue when the delete operation may not be idempotent. [GH-1999] -
resource/kubernetes_storage_class_v1: Fix an issue when changing the value of the attributeallow_volume_expansiondoes not alter Kubernetes resource. [GH-1519] -
resource/kubernetes_storage_class: Fix an issue when changing the value of the attributeallow_volume_expansiondoes not alter Kubernetes resource. [GH-1519]
DOCS:
- New data source:
data_source/kubernetes_nodes. [GH-1921] - New data source:
data_source/kubernetes_resources. [GH-1967] - New resource:
resource/kubernetes_node_taint. [GH-1921] -
provider: Add a note regarding theKUBECONFIGenvironment variable. [GH-1989] -
resource/kubernetes_annotations: Add a new attributetemplate_annotations. [GH-1972] -
resource/kubernetes_job_v1: Add documentation for the attributespec.completion_mode. [GH-1997] -
resource/kubernetes_job: Add documentation for the attributespec.completion_mode. [GH-1997] -
resource/resource_kubernetes_cron_job_v1: Add a new attributespec.timezone. [GH-1971]
v2.17.0
ENHANCEMENT:
- Add a new optional attribute
grpctopod.spec.container.liveness_probe,pod.spec.container.readiness_probe, andpod.spec.container.startup_probe. That affects all resources and data sources that use mentionedpod.spec.containerprobes directly or as a template. [GH-1915] -
resource/kubernetes_cluster_role_binding_v1: add attributegenerate_nameto produce a unique random name [GH-1899] -
resource/kubernetes_cluster_role_binding: add attributegenerate_nameto produce a unique random name [GH-1899] -
resource/kubernetes_cluster_role_v1: add attributegenerate_nameto produce a unique random name [GH-1899] -
resource/kubernetes_cluster_role: add attributegenerate_nameto produce a unique random name [GH-1899] -
resource/kubernetes_ingress_v1: add create and delete timeouts [GH-1936] -
resource/kubernetes_ingress_v1: make the attributespec.ingress_class_namecomputed [GH-1947] -
resource/kubernetes_persistent_volume_v1: add additional validation on the delete operation to make it idempotent [GH-1935] -
resource/kubernetes_persistent_volume: add additional validation on the delete operation to make it idempotent [GH-1935] -
resource/kubernetes_role_binding_v1: add attributegenerate_nameto produce a unique random name [GH-1899] -
resource/kubernetes_role_binding: add attributegenerate_nameto produce a unique random name [GH-1899]
v2.16.1
ENHANCEMENTS:
- Add additional validation on the delete operation to make it idempotent. [GH-1914], [GH-1919], [GH-1898]
This affects the following resources:
kubernetes_api_servicekubernetes_api_service_v1kubernetes_cluster_rolekubernetes_cluster_role_v1kubernetes_cluster_role_bindingkubernetes_cluster_role_binding_v1kubernetes_config_mapkubernetes_config_map_v1kubernetes_daemonsetkubernetes_daemon_set_v1kubernetes_deploymentkubernetes_deployment_v1kubernetes_endpointskubernetes_endpoints_v1kubernetes_horizontal_pod_autoscalerkubernetes_horizontal_pod_autoscaler_v1kubernetes_horizontal_pod_autoscaler_v2beta2kubernetes_horizontal_pod_autoscaler_v2kubernetes_mutating_webhook_configurationkubernetes_mutating_webhook_configuration_v1kubernetes_network_policykubernetes_network_policy_v1kubernetes_persistent_volume_claimkubernetes_persistent_volume_claim_v1kubernetes_podkubernetes_pod_v1kubernetes_pod_disruption_budgetkubernetes_pod_disruption_budget_v1kubernetes_pod_security_policykubernetes_pod_security_policy_v1beta1kubernetes_priority_classkubernetes_replication_controllerkubernetes_resource_quotakubernetes_rolekubernetes_role_bindingkubernetes_secretkubernetes_namespacekubernetes_servicekubernetes_service_accountkubernetes_stateful_setkubernetes_storage_classkubernetes_validating_webhook_configurationkubernetes_validating_webhook_configuration_v1
Special thanks to @sheneska for making these changes as part of her internship @hashicorp!
v2.16.0
FEATURES:
- New data source:
kubernetes_endpoints_v1[GH-1805]
ENHANCEMENT:
- Add a new optional attribute
runtime_class_nametopod.spec. That affects all resources and data sources that usepod.specdirectly or as a template. [GH-1895] - Add a new optional attribute
fs_group_change_policytopod.spec.security_context. That affects all resources and data sources that usepod.specdirectly or as a template. [GH-1892] - The kubernetes status field is now available in the
kubernetes_resourcedatasource [GH-1802] -
r/kubernetes_pod_v1: changing values ofspec.container.resources.limitsorspec.container.resources.requestswill force resource recreation. [GH-1889] -
r/kubernetes_pod: changing values ofspec.container.resources.limitsorspec.container.resources.requestswill force resource recreation. [GH-1889]
BUG FIXES:
- Fix an issue when changing values of
spec.container.resources.limitsorspec.container.resources.requestsdoes not update appropriate Kubernetes resources. Affected resources:kubernetes_pod,kubernetes_pod_v1. [GH-1889] - Fix an issue when empty values of
spec.container.resources.limitsorspec.container.resources.requestsproduce continuous diff output duringplanalthough no real changes were made. Affected resources:kubernetes_pod,kubernetes_pod_v1,kubernetes_daemonset,kubernetes_daemon_set_v1,kubernetes_deployment,kubernetes_deployment_v1. [GH-1889] - Fix an issue with timeouts for
StatefulSet,Deployment, andDaemonSetresources when in some cases changes ofUpdateorCreatetimeout doesn't affect related actions. [GH-1902]
DOCS:
-
resource/kubernetes_service_account_v1: mark attributedefault_secret_nameas deprecated [GH-1883] -
resource/kubernetes_service_account: mark attributedefault_secret_nameas deprecated [GH-1883]
Thanks to all our contributors! 
v2.15.0
ENHANCEMENT:
- Add new resource resource_kubernetes_env [GH-1838]
- Add "field_manager" attribute to kubernetes_labels, kubernetes_annotations, kubernetes_config_map_v1_data [GH-1831]
- r/kubernetes_horizontal_pod_autoscaler_v2: make attribute
spec.behavior.scale_downcomputed [GH-1853] - r/kubernetes_horizontal_pod_autoscaler_v2: make attribute
spec.behavior.scale_upcomputed [GH-1853] - r/kubernetes_horizontal_pod_autoscaler_v2: make attribute
spec.behaviorcomputed [GH-1853] - r/kubernetes_horizontal_pod_autoscaler_v2beta2: make attribute
spec.behavior.scale_downcomputed [GH-1853] - r/kubernetes_horizontal_pod_autoscaler_v2beta2: make attribute
spec.behavior.scale_upcomputed [GH-1853] - r/kubernetes_horizontal_pod_autoscaler_v2beta2: make attribute
spec.behaviorcomputed [GH-1853]
v2.14.0
ENHANCEMENT:
- Added "preemption_policy" attribute to the priority_class resource. [GH-1846]
- new attribute: Add immutable attribute to resource_config_map [GH-1849]
- resource/kubernetes_secret: Add a new attribute
wait_for_service_account_tokenand correspondingcreatetimeout resource/kubernetes_secret_v1: Add a new attributewait_for_service_account_tokenand correspondingcreatetimeout [GH-1833]
DOCS:
- r/kubernetes_service: make
spec.portblock optional [GH-1856] - r/kubernetes_service_v1: make
spec.portblock optional [GH-1856]
v2.13.1
BUG FIXES:
- [TK-78009] Fix propagation of non-fatal Diagnostics in the type morphing logic
v2.13.0
BUG FIXES:
- Starting from Kubernetes 1.24.0 service account token is not automatically generated, thus it has to create separately. The following resources were updated to handle this change:
d/kubernetes_service_account,r/kubernetes_default_service_account,r/kubernetes_service_account. For Kubernetes clusters running v1.24+default_secret_namewill be empty. A warning message will be printed once any of the above resources are in use. (#1792)
IMPROVEMENTS:
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.