Terraform Enterprise v202202-1 (599)

Deprecations

The Terraform Enterprise April 2022 release will:

1. Remove the demo operational mode, which is also known as the proof of concept (PoC) operational mode. The mounted disk operational mode will replace the demo operational mode for both non-production and production Terraform Enterprise environments. To check which mode your installation is using, run replicatedctl app-config export --template '{{ .installation_type.Value }}'. The value poc indicates that your installation is using the demo operational mode. The April 2022 release notes will contain more information about how to migrate.
2. Update the names of containers, which may break container monitoring or custom tooling that identifies containers by name. The April 2022 release notes will explain these name changes in more detail and provide a complete list of old and new container names.
3. Change the default value of restrict_worker_metadata_access to 1 (true) instead of 0 (false). If you rely on the instance metadata endpoint (and make use of its instance profile), you must explicitly set the restrict_worker_metadata_access configuration flag in replicated.conf to 0.

Features

1. Changed tag name restrictions to include letters, numbers, colons, hyphens, and underscores; and must begin and end with an alphanumeric character.
2. Added the ability to fuzzy find or find an exact match for Terraform versions using query parameters.

Bug Fixes

1. Fixed rendering of multi-paragraph Terraform diagnostic messages.
2. Fixed run source UI "triggered from CLI" when using CLI cloud integration.
3. Fixed deprecated-reason to be null if tool version is un-deprecated in the Terraform Versions API.
4. Fixed slow initial UI load for users who belong to hundreds of organizations.
5. Fixed bug to disallow workspace from being renamed when a run has not completed.
6. Fixed a UI issue where newly created organization API tokens weren't shown when the previous one was recently deleted.
7. Updated Sentinel to 0.18.6

Security

1. Modified Terraform Enterprise application logging configuration to remediate inadvertent capture of HTTP request bodies (CVE-2022-25374).
2. Enables ACLs for the internally-managed Nomad service so that requests to Nomad must be authenticated.
3. Fixed rate limiting to be based on the AuthenticationToken instead of remote IP in some cases.
4. Updated the version of Rails to address CVE 2022-23633.
5. Updated the version of the internally-managed Vault server to 1.9.3.
6. Updated the version of the internally-managed Nomad server to 1.2.4.
7. Ongoing container updates to address reported vulnerabilities in underlying packages / dependencies.