» TFE Release v202109-2 (568)

» Application Level Bug Fixes Since v202109-1

  1. Updated Fluent Bit to v1.8.7 to fix a DNS resolution issue which prevents operators from sending logs to Datadog.

» Deprecation Notice

The following operating systems are no longer supported:

  • Ubuntu 14
  • Debian 7

» Application Level Features

  1. Added Terraform CLI versions up through 1.1.0-alpha20210811 to Terraform Enterprise.
  2. Added 'capacity_cpus' Replicated configuration option to limit the number of CPU cores available to individual Terraform runs.
  3. Changed structured run UI to always show error logs immediately.
  4. Changed apply UI to show "no changes" for runs which only change outputs.
  5. Changed apply UI to hide output values by default, and improved display of complex values.
  6. Added advanced UI for Terraform Plan, including an interactive diff.
  7. Added support for Terraform Cloud Agents.
  8. Added support for forwarding Terraform Enterprise logs to one or more external destinations.

» Application Level Bug Fixes

  1. Fixed sidekiq admin panel to be accessible to Configuration and Support admin RBAC roles.
  2. Changed apply progress UI for to clarify the final state of replaced resources.
  3. Updated Nomad to 1.1.4
  4. Updated Vault to 1.8.2
  5. Fixed registry modules with errors so that they are accessible.
  6. Updated Sentinel to 0.18.4
  7. Updated Telegraf to 1.19.3 to fix a panic: runtime error: slice bounds out of range error.
  8. Updated InfluxDB to 1.8.9.

» Application Level Security Fixes

  1. Hid the upload-url attribute on ConfigurationVersion API resources after the initial create action in order to prevent a privilege escalation.
  2. Mitigated a potential Host header injection vulnerability.
  3. Ongoing container updates to address reported vulnerabilities in underlying packages / dependencies.

» API

  1. Introduced the State Version Outputs endpoint to retrieve the Outputs for a given State Version
  2. Breaking Security fix to Configuration versions: upload-url attribute for uploading configuration files is now only available on the create response.