Terraform Enterprise v202409-2 (789)

Last required release: v202406-1 (776)

Flexible Deployment Options terraform-enterprise container digest: amd64/linux sha256:0be28e68ff83dcafe379aa955ce9065a3303f0fa4107e8758d9cf852fbaf98e1

Changes Since v202409-1

1. The tfectl node drain now properly finishes the node draining process.

Known Issues

1. [Updated September 30, 2024] Some deployments are experiencing memory growth issues on v202401-1 or higher, sometimes resulting in out of memory errors that require a restart to resolve. This issue is currently being investigated. It is strongly recommended that you test in a non-production environment before deploying v202401-1 or higher in production, and monitor memory for unexpected growth. This message will be updated when a fix is available in a published release.
2. [Updated November 25, 2024] Terraform Enterprise does not currently support using a username provided via REDIS_USER for authenticating with an external Redis instance. To use authentication with Redis, configure Redis to require only a password for the default user by updating your Redis configuration file (redis.conf) as follows, replacing <your password> accordingly:

requirepass <your password>

In the Terraform Enterprise environment, set only the REDIS_PASSWORD variable with the corresponding value.

Deprecations

1. The terraform-build-worker-plan-timeout and terraform-build-worker-apply-timeout attributes in the admin organization and general settings API have been deprecated and will be removed in a future release of Terraform Enterprise. Use the new plan-timeout and apply-timeout attributes instead.

2. Terraform Enterprise now supports new deployment options and will end support for the Replicated Native Scheduler option. The final Replicated release of Terraform Enterprise will be in November 2024. HashiCorp will support this release until April 1, 2026.

   To ensure you continue to receive the latest features and fixes, including security updates, please plan to migrate to a new deployment option by November 2024. For more information, check out Flexible Deployment Options or contact your HashiCorp account representative.

3. The variables API endpoint, /vars, is deprecated and will be removed in a future release. All existing integrations with this API should transition to the workspace variables API /workspaces/:workspace_id/vars.

4. PostgreSQL v12 will reach end of life on November 12 2024 and will no longer be supported in Terraform Enterprise after that date. Please refer to PostgreSQL Requirements for Terraform Enterprise for a complete list of supported versions.

Improvements

1. A run task's associated workspaces are now paginated on the page where you edit run tasks, reducing load times for run tasks associated with many workspaces.
2. Users with VCS workspaces that contain README files may see improved response times during workspace updates.
3. New tfectl commands have been added to retrive the application version, tfectl app version, and the last completed database migrtion, tfectl db last-applied-migration.

Bug Fixes

1. You can now delete organizations that contain on-demand policy evaluations.
2. Previously single resource instance created with terraform count statement or for-each in HCP could not be replaced because the state-parser did not parse the index_key. Single resource instances can now be replaced.
3. Workspace Notifications have been updated to work with workflows in Microsoft Teams.

Security

1. The ruby-saml gem has been updated to v1.17.0 to address CVE-2024-45409. Analysis of Terraform Enterprise specific exposure to this issue is currently in progress and a HashiCorp security bulletin will be published if determined appropriate.
2. Container and binary updates address reported vulnerabilities (CVEs) in underlying base images, packages, and dependencies.