terraform-bundle option to change releaseHost = "https://releases.hashicorp.com"

[oonisim]

Current Terraform Version

0.12

Use-cases

Allow the terraform to be used in the security aware, no internet access environment.

For any enterprise environment that is serious about security, they would place a mechanism to prevent software from being directly installed from the Internet. Instead, will have internal repositories.

In such an environment, tools forcing to have the Internet connections will not be approved.

terraform-bundle is yet another tool to force connecting to the Internet to avoid terraform init from connecting to the Internet. In the end, it still stands "to use terraform, the Internet connection is must".

Attempted Solutions

Proposal

Have one option to specify the internal repository URL instead of hard-coded "https://releases.hashicorp.com" in https://github.com/hashicorp/terraform/blob/master/tools/terraform-bundle/package.go.

References

[apparentlymart]

Hi @oonisim! Thanks for this feature request.

The purpose of terraform-bundle is to be run in a location where access to the releases server is available to produce a distribution that can then be used without accessing the releases server. In other words, it allows you to separate that step from terraform init into a separate step to be run once from an Internet-connected system, and then that result to be used many times without accessing the releases server anymore.

If you don't want to use the releases server at all, you can just replicate what it does in your own systems: take the contents of the distribution zip files for Terraform and plugins and put them all together in a single .zip file.

We don't have any plans to add new features to terraform-bundle. It is a specialized tool with only one purpose in mind, and that purpose is already planned to be replaced by first-class support for installing from other hosts, as described in #15252.