Add tls_server_name kubernetes provider options.

.changelog/1012.txt

@@ -0,0 +1,7 @@
+```release-note:feature
+`provider`: Add a new attribute `burst_limit` for client-side throttling limit configuration.
+```
+
+```release-note:doc
+`provider`: Add a new attribute `burst_limit`.
+```

.changelog/1026.txt

@@ -0,0 +1,3 @@
+```release-note:doc
+`resource/helm_release`: Add usage examples for `GCS` and `S3` plugins.
+```

.changelog/1027.txt

@@ -0,0 +1,3 @@
+```release-note:doc
+`data_source/helm_template`: Correct some errors in examples.
+```

.changelog/1029.txt

@@ -0,0 +1,3 @@
+```release-note:dependency
+Bump `github.com/containerd/containerd` from `1.6.6` to `1.6.12`
+```

.changelog/1030.txt

@@ -0,0 +1,3 @@
+```release-note:doc
+`resource/helm_release`: Add usage example for `OCI` repositories.
+```

.changelog/1036.txt

@@ -0,0 +1,3 @@
+```release-note:dependency
+Bump `helm.sh/helm/v3` from `3.9.4` to `3.11.0`
+```

.changelog/1037.txt

@@ -0,0 +1,7 @@
+```release-note:dependency
+Bump `k8s.io/client-go` from `0.24.2` to `0.26.1`
+```
+
+```release-note:note
+`provider`: `kubernetes.exec.api_version` no longer supports `client.authentication.k8s.io/v1alpha1`. Please, switch to `client.authentication.k8s.io/v1beta1` or `client.authentication.k8s.io/v1`.
+```

.changelog/1050.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+`data_source/helm_template`: Add a new attribute `crds` which when `include_crds` is set to `true` will be populated with a list of the manifests from the `crds/` folder of the chart.
+```
+
+```release-note:doc
+`data_source/helm_template`: Add a new attribute `crds`
+```

.changelog/1051.txt

@@ -0,0 +1,3 @@
+```release-note:doc
+`provider`: Add a note regarding the `KUBECONFIG` environment variable.
+```

.changelog/1054.txt

@@ -0,0 +1,3 @@
+```release-note:dependency
+Bump `helm.sh/helm/v3` from `3.11.0` to `3.11.1`
+```

.changelog/1055.txt

@@ -0,0 +1,3 @@
+```release-note:dependency
+Bump `golang.org/x/crypto` from `0.5.0` to `0.6.0`
+```

.changelog/1071.txt

@@ -0,0 +1,3 @@
+```release-note:feature
+`helm/resource_release.go`: Add `set_list` attribute
+```

.changelog/1097.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+`helm/resource_release.go`: Always recompute metadata when a release is updated
+```

.changelog/1143.txt

@@ -0,0 +1,3 @@
+```release-note:dependency
+Bump `helm.sh/helm/v3` from `3.11.2` to `3.12.0`
+```

.changelog/1153.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+`helm/resource_release.go`: Fix: only recompute metadata if version actually changes 
+```

.changelog/839.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+`kubernetes/provider.go`: Add `tls_server_name` kubernetes provider options.
+```

.changelog/862.txt

@@ -0,0 +1,3 @@
+```release-note:feature
+Add support for configuring OCI registries inside provider block
+```

.changelog/903.txt

@@ -0,0 +1,3 @@
+```release-note:feature
+Show Manifest when creating release
+```

.changelog/945.txt

@@ -0,0 +1,3 @@
+```release-note:note
+Upgrade Helm to v3.9.4
+```

.changelog/950.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+Crash: Fix `show_only` crash when string is empty
+```

.changelog/966.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+Crash Fix: Fix Unknown Value in Manifest Diff
+```

.changelog/982.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+`resource/helm_release`: Fix an issue when the provider crashes with the error message `Provider produced inconsistent final plan` after upgrading from `v2.5.1` to `v2.6.0` and higher. That happened due to changes in the provider schema and the introduction of a new attribute `pass_credentials` that was not properly handled.
+```

.changelog/changelog.tmpl

@@ -0,0 +1,71 @@
+{{- if index .NotesByType "breaking-change" -}}
+BREAKING CHANGES:
+
+{{range index .NotesByType "breaking-change" -}}
+* {{ template "note" . }}
+{{ end -}}
+{{- end -}}
+
+{{- if .NotesByType.security }}
+SECURITY:
+
+{{range .NotesByType.security -}}
+* {{ template "note" . }}
+{{ end -}}
+{{- end -}}
+
+{{- if .NotesByType.feature }}
+FEATURES:
+
+{{range .NotesByType.feature -}}
+* {{ template "note" . }}
+{{ end -}}
+{{- end -}}
+
+{{- if .NotesByType.enhancement }}
+ENHANCEMENT:
+
+{{range .NotesByType.enhancement -}}
+* {{ template "note" . }}
+{{ end -}}
+{{- end -}}
+
+{{- if .NotesByType.deprecation }}
+DEPRECATIONS:
+
+{{range .NotesByType.deprecation -}}
+* {{ template "note" . }}
+{{ end -}}
+{{- end -}}
+
+{{- if .NotesByType.bug }}
+BUG FIXES:
+
+{{range .NotesByType.bug -}}
+* {{ template "note" . }}
+{{ end -}}
+{{- end -}}
+
+{{- if .NotesByType.doc }}
+DOCS:
+
+{{range .NotesByType.doc -}}
+* {{ template "note" . }}
+{{ end -}}
+{{- end -}}
+
+{{- if .NotesByType.dependency }}
+DEPENDENCIES:
+
+{{range .NotesByType.dependency -}}
+* {{ template "note" . }}
+{{ end -}}
+{{- end -}}
+
+{{- if .NotesByType.note }}
+NOTES:
+
+{{range .NotesByType.note -}}
+* {{ template "note" . }}
+{{ end -}}
+{{- end -}}

.changelog/note.tmpl

@@ -0,0 +1,3 @@
+{{- define "note" -}}
+{{.Body}}{{if not (stringHasPrefix .Issue "_")}} [[GH-{{- .Issue -}}](https://github.com/hashicorp/terraform-provider-helm/issues/{{- .Issue -}})]{{end}}
+{{- end -}}

.copywrite.hcl

@@ -0,0 +1,15 @@
+schema_version = 1
+
+project {
+  license        = "MPL-2.0"
+  copyright_year = 2017
+  header_ignore  = [
+    ".changelog/**",
+    ".github/**",
+    ".goreleaser.yml",
+    ".markdownlint.yml",
+    ".release/**",
+    "helm/testdata/**",
+    "vendor/**",
+  ]
+}

.github/CODEOWNERS

@@ -0,0 +1 @@
+* @hashicorp/terraform-ecosystem-kubernetes

.github/ISSUE_TEMPLATE/question.md

@@ -13,17 +13,22 @@ Please understand that we make a best effort attempt to address questions, but o
 If you prefer, you can also ask your question in the Kubernetes community Slack channel [#terraform-providers](https://kubernetes.slack.com/messages/CJY6ATQH4). ([Sign up here](http://slack.k8s.io/))
 
 ## Terraform version, Kubernetes provider version and Kubernetes version
+
 ```
 Terraform version:
 Helm Provider version:
 Kubernetes version:
 ```
 ## Terraform configuration
+
 ```hcl
 Enter your configuration here.
 ```
 
 ## Question
-```
+
+<!---
+
 Enter your question here.
-```
+
+--->

.github/dependabot.yml

@@ -0,0 +1,14 @@
+version: 2
+updates:
+  - package-ecosystem: "gomod" 
+    directory: "/" 
+    schedule:
+      interval: "daily"
+    commit-message:
+      prefix: "🌱"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    commit-message:
+      prefix: "🤖"

.github/workflows/changelog-checker.yml

@@ -0,0 +1,36 @@
+# This workflow checks that there is either a 'pr/no-changelog' label applied to a PR
+# or there is a .changelog/<pr number>.txt file associated with a PR for a changelog entry
+name: Changelog Entry
+
+on:
+  pull_request:
+    types: [opened, synchronize, labeled]
+    # Runs on PRs to main and all release branches
+    branches:
+      - main
+
+jobs:
+  # checks that a .changelog entry is present for a PR
+  changelog-check:
+    # If there  a `pr/no-changelog` label we ignore this check
+    if: "!contains(github.event.pull_request.labels.*.name, 'pr/no-changelog') || github.event.pull_request.user.login == 'dependabot'"
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+          fetch-depth: 0 # by default the checkout action doesn't checkout all branches
+      - name: Check for changelog entry in diff
+        run: |
+          # check if there is a diff in the .changelog directory
+          changelog_files=$(git --no-pager diff --name-only HEAD "$(git merge-base HEAD "origin/${{ github.event.pull_request.base.ref }}")" -- .changelog/${{ github.event.pull_request.number }}.txt)
+
+          # If we do not find a file in .changelog/, we fail the check
+          if [ -z "$changelog_files" ]; then
+            # Fail status check when no .changelog entry was found on the PR
+            echo "Did not find a .changelog entry and the 'pr/no-changelog' label was not applied. Reference - https://github.com/hashicorp/terraform-provider-helm/tree/main/.github/workflows/CHANGELOG_GUIDE.md"
+            exit 1
+          else
+            echo "Found .changelog entry in PR!"
+          fi

.github/workflows/codeql-analysis.yml

@@ -30,20 +30,16 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
       with:
         # We must fetch at least the immediate parents so that if this is
         # a pull request then we can checkout the head.
         fetch-depth: 2
 
-    # If this run was triggered by a pull request event, then checkout
-    # the head of the pull request instead of the merge commit.
-    - run: git checkout HEAD^2
-      if: ${{ github.event_name == 'pull_request' }}
-
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v1
+      uses: github/codeql-action/init@168b99b3c22180941ae7dbdd5f5c9678ede476ba # v2
+
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -54,7 +50,8 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v1
+      uses: github/codeql-action/autobuild@168b99b3c22180941ae7dbdd5f5c9678ede476ba # v2
+
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -68,4 +65,4 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v1
+      uses: github/codeql-action/analyze@168b99b3c22180941ae7dbdd5f5c9678ede476ba # v2

.github/workflows/hc-copywrite.yml

@@ -0,0 +1,25 @@
+name: HashiCorp Copywrite
+
+on:
+  schedule:
+    - cron: '30 2 * * *'
+  pull_request:
+    branches:
+      - main
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+jobs:
+  copywrite:
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+
+    - name: Install copywrite
+      uses: hashicorp/setup-copywrite@867a1a2a064a0626db322392806428f7dc59cb3e # v1.1.2
+
+    - name: Validate Header Compliance
+      run: copywrite headers --plan

.github/workflows/issue-comment-created.yml

@@ -8,7 +8,7 @@ jobs:
   issue_comment_triage:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions-ecosystem/action-remove-labels@v1
+      - uses: actions-ecosystem/action-remove-labels@2ce5d41b4b6aa8503e285553f75ed56e0a40bae0 # v1.3.0
         with:
           labels: |
             stale

.github/workflows/issue-opened.yml

@@ -8,8 +8,9 @@ jobs:
   issue_triage:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
-    - uses: github/issue-labeler@v2
+    - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+    - uses: github/issue-labeler@cd54a96bcc32e2a890e865b2eceffee3fc458b9d # v3.0
       with:
         repo-token: "${{ secrets.GITHUB_TOKEN }}"
         configuration-path: .github/labeler-issue-triage.yml
+        enable-versioned-regex: 0

.github/workflows/lock.yml

@@ -8,7 +8,7 @@ jobs:
   lock:
     runs-on: ubuntu-latest
     steps:
-      - uses: dessant/lock-threads@v2
+      - uses: dessant/lock-threads@c1b35aecc5cdb1a34539d14196df55838bb2f836 # v4.0.0
         with:
           github-token: ${{ github.token }}
           issue-lock-comment: >

.github/workflows/prune_stale_issues.yml

@@ -7,9 +7,9 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/stale@v1.1.0
+    - uses: actions/stale@1160a2240286f5da8ec72b1c0816ce2481aabf84 # v8.0.0
       with:
-        repo-token: ${{ secrets.k8s_github_actions }}
-        stale-issue-message: 'This issue has been open 365 days with no activity. If this issue is reproducible with the latest version of the provider and with Terraform 0.12/0.13, please comment so we can prioritize. Otherwise this issue will be closed in 30 days.'
+        repo-token: ${{ secrets.GITHUB_TOKEN }}
+        stale-issue-message: 'Marking this issue as stale due to inactivity. If this issue receives no comments in the next 30 days it will automatically be closed. If this issue was automatically closed and you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. This helps our maintainers find and focus on the active issues. Maintainers may also remove the stale label at their discretion. Thank you!'
         days-before-stale: 365
-        days-before-close: 30
+        days-before-close: 30