Skip to content

Update all tf recipes with Terraform lock file (.terraform.lock.hcl) file to ensure integrity. #93

@nithyatsu

Description

@nithyatsu

The .terraform.lock.hcl file is automatically generated when we run terraform init.
It locks provider versions and includes SHA-256 digests to ensure integrity.
This prevents Terraform from downloading a tampered or unexpected provider binary in future runs.

When we author tf recipes, we should run a tf init and generate this file. We should then include it in the recipe folder so that when radius downloads the folder and runs tf init as part of rad deploy, it already finds a lock file and uses it to ensure the contents of the recipe is not tampered.

cc @DariuszPorowski , @vhiremath

Metadata

Metadata

Assignees

No one assigned

    Labels

    triagedThis item has been triaged by project maintainers and is in the backlog

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions