Repository: carlpett/terraform-provider-sops
Branch: master
Commit: 129590bb1ae4
Files: 56
Total size: 183.9 KB
Directory structure:
gitextract_d3abhnqd/
├── .github/
│ └── workflows/
│ ├── nightly-govulncheck.yaml
│ ├── release.yml
│ └── test.yml
├── .gitignore
├── GNUmakefile
├── LICENSE
├── README.md
├── docker/
│ ├── Dockerfile
│ └── hooks/
│ └── build
├── docs/
│ ├── data-sources/
│ │ ├── external.md
│ │ └── file.md
│ ├── ephemeral-resources/
│ │ ├── external.md
│ │ └── file.md
│ ├── guides/
│ │ └── legacy_usage.md
│ └── index.md
├── examples/
│ ├── README.md
│ ├── data-sources/
│ │ ├── sops_external/
│ │ │ └── data-source.tf
│ │ └── sops_file/
│ │ └── data-source.tf
│ ├── ephemeral-resources/
│ │ ├── sops_external/
│ │ │ └── ephemeral-resources.tf
│ │ └── sops_file/
│ │ └── ephemeral-resources.tf
│ └── provider/
│ └── provider.tf
├── go.mod
├── go.sum
├── main.go
├── sops/
│ ├── data.go
│ ├── data_sops_external.go
│ ├── data_sops_external_test.go
│ ├── data_sops_file.go
│ ├── data_sops_file_test.go
│ ├── ephemeral_sops_external.go
│ ├── ephemeral_sops_external_test.go
│ ├── ephemeral_sops_file.go
│ ├── ephemeral_sops_file_test.go
│ ├── flatten.go
│ ├── flatten_test.go
│ ├── internal/
│ │ ├── dotenv/
│ │ │ ├── dotenv.go
│ │ │ └── dotenv_test.go
│ │ └── ini/
│ │ ├── ini.go
│ │ └── ini_test.go
│ ├── provider.go
│ ├── provider_test.go
│ ├── read_data.go
│ ├── test-fixtures/
│ │ ├── basic.json
│ │ ├── basic.yaml
│ │ ├── complex-list.yaml
│ │ ├── nested.yaml
│ │ ├── raw.txt
│ │ └── simple-list.yaml
│ ├── validate.go
│ └── validate_test.go
├── templates/
│ ├── guides/
│ │ └── legacy_usage.md.tmpl
│ └── index.md.tmpl
├── test/
│ └── testing-key.pgp
└── tools/
├── go.mod
├── go.sum
└── tools.go
================================================
FILE CONTENTS
================================================
================================================
FILE: .github/workflows/nightly-govulncheck.yaml
================================================
# Adapted from https://www.jvt.me/posts/2025/09/11/govulncheck-github-actions/
name: Check dependencies through `govulncheck`
on:
schedule:
- cron: "0 0 * * *"
jobs:
check-for-vulnerabilities:
name: Check for vulnerabilities using `govulncheck`
runs-on: ubuntu-latest
permissions:
security-events: write
contents: read
steps:
- uses: golang/govulncheck-action@b625fbe08f3bccbe446d94fbf87fcc875a4f50ee # v1.0.4
with:
output-format: sarif
output-file: govulncheck.sarif
- name: Upload SARIF file
uses: github/codeql-action/upload-sarif@192325c86100d080feab897ff886c34abd4c83a3 # v3.30.2
with:
sarif_file: govulncheck.sarif
category: govulncheck
================================================
FILE: .github/workflows/release.yml
================================================
name: Release
on:
push:
tags:
- v*
# Request permissions to write (edit, create) new releases
permissions:
contents: write
jobs:
release:
name: Release
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v3
- name: Setup go
uses: actions/setup-go@v6
with:
go-version-file: 'go.mod'
- name: Build
run: go build -v .
- name: Import test GPG key
run: gpg --import test/testing-key.pgp
- name: Test
run: make test
- name: Crossbuild
run: make crossbuild
- name: Release
run: make release
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
================================================
FILE: .github/workflows/test.yml
================================================
name: Tests
on:
pull_request:
push:
branches:
- master
jobs:
build-and-test:
name: Build and Test
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v3
- name: Setup go
uses: actions/setup-go@v6
with:
go-version-file: 'go.mod'
- name: Build
run: go build -v .
- name: Import test GPG key
run: gpg --import test/testing-key.pgp
- name: Test
run: make test
- name: Crossbuild
run: make crossbuild
dependency-check:
name: Verify dependencies
runs-on: ubuntu-latest
steps:
- name: govulncheck
uses: golang/govulncheck-action@v1
with:
go-version-input: '' # By default set to 'stable', which takes priority over go-version-file
go-version-file: 'go.mod'
================================================
FILE: .gitignore
================================================
bin/
binaries/
releases/
terraform-provider-sops
================================================
FILE: GNUmakefile
================================================
export CGO_ENABLED = 0
VERSION = $(shell git describe --tags --match='v*' --always)
RELEASE = $(patsubst v%,%,$(VERSION))# Remove leading v to comply with Terraform Registry conventions
CROSSBUILD_OS = linux windows darwin
CROSSBUILD_ARCH = 386 amd64 arm64
SKIP_OSARCH = darwin_386 windows_arm64
OSARCH_COMBOS = $(filter-out $(SKIP_OSARCH),$(foreach os,$(CROSSBUILD_OS),$(addprefix $(os)_,$(CROSSBUILD_ARCH))))
default: build
style:
@echo ">> checking code style"
! gofmt -d $(shell find . -name '*.go' -print) | grep '^'
vet:
@echo ">> vetting code"
go vet ./...
test:
@echo ">> testing code"
go test -v ./...
build:
@echo ">> building binaries"
go build -o terraform-provider-sops
generate-documentation:
cd tools; go generate ./...
crossbuild: $(GOPATH)/bin/gox
@echo ">> cross-building"
gox -arch="$(CROSSBUILD_ARCH)" -os="$(CROSSBUILD_OS)" -osarch="$(addprefix !,$(subst _,/,$(SKIP_OSARCH)))" \
-output="binaries/$(VERSION)/{{.OS}}_{{.Arch}}/terraform-provider-sops_$(VERSION)"
$(GOPATH)/bin/gox:
@go install github.com/mitchellh/gox@latest
# This uses the `gh` tool, which is preinstalled on GitHub Actions runners.
release: crossbuild
@echo ">> uploading release $(VERSION)"
mkdir -p releases
set -e; for OSARCH in $(OSARCH_COMBOS); do \
zip -j releases/terraform-provider-sops_$(RELEASE)_$$OSARCH.zip binaries/$(VERSION)/$$OSARCH/terraform-provider-sops_* > /dev/null; \
gh release upload $(VERSION) "releases/terraform-provider-sops_$(RELEASE)_$$OSARCH.zip#terraform-provider-sops_$(RELEASE)_$$OSARCH.zip"; \
done
@echo ">>> generating sha256sums:"
cd releases; sha256sum *.zip | tee terraform-provider-sops_$(RELEASE)_SHA256SUMS
gh release upload $(VERSION) "releases/terraform-provider-sops_$(RELEASE)_SHA256SUMS#terraform-provider-sops_$(RELEASE)_SHA256SUMS"
.PHONY: all style vet test build crossbuild release generate-documentation
================================================
FILE: LICENSE
================================================
Mozilla Public License Version 2.0
==================================
1. Definitions
--------------
1.1. "Contributor"
means each individual or legal entity that creates, contributes to
the creation of, or owns Covered Software.
1.2. "Contributor Version"
means the combination of the Contributions of others (if any) used
by a Contributor and that particular Contributor's Contribution.
1.3. "Contribution"
means Covered Software of a particular Contributor.
1.4. "Covered Software"
means Source Code Form to which the initial Contributor has attached
the notice in Exhibit A, the Executable Form of such Source Code
Form, and Modifications of such Source Code Form, in each case
including portions thereof.
1.5. "Incompatible With Secondary Licenses"
means
(a) that the initial Contributor has attached the notice described
in Exhibit B to the Covered Software; or
(b) that the Covered Software was made available under the terms of
version 1.1 or earlier of the License, but not also under the
terms of a Secondary License.
1.6. "Executable Form"
means any form of the work other than Source Code Form.
1.7. "Larger Work"
means a work that combines Covered Software with other material, in
a separate file or files, that is not Covered Software.
1.8. "License"
means this document.
1.9. "Licensable"
means having the right to grant, to the maximum extent possible,
whether at the time of the initial grant or subsequently, any and
all of the rights conveyed by this License.
1.10. "Modifications"
means any of the following:
(a) any file in Source Code Form that results from an addition to,
deletion from, or modification of the contents of Covered
Software; or
(b) any new file in Source Code Form that contains any Covered
Software.
1.11. "Patent Claims" of a Contributor
means any patent claim(s), including without limitation, method,
process, and apparatus claims, in any patent Licensable by such
Contributor that would be infringed, but for the grant of the
License, by the making, using, selling, offering for sale, having
made, import, or transfer of either its Contributions or its
Contributor Version.
1.12. "Secondary License"
means either the GNU General Public License, Version 2.0, the GNU
Lesser General Public License, Version 2.1, the GNU Affero General
Public License, Version 3.0, or any later versions of those
licenses.
1.13. "Source Code Form"
means the form of the work preferred for making modifications.
1.14. "You" (or "Your")
means an individual or a legal entity exercising rights under this
License. For legal entities, "You" includes any entity that
controls, is controlled by, or is under common control with You. For
purposes of this definition, "control" means (a) the power, direct
or indirect, to cause the direction or management of such entity,
whether by contract or otherwise, or (b) ownership of more than
fifty percent (50%) of the outstanding shares or beneficial
ownership of such entity.
2. License Grants and Conditions
--------------------------------
2.1. Grants
Each Contributor hereby grants You a world-wide, royalty-free,
non-exclusive license:
(a) under intellectual property rights (other than patent or trademark)
Licensable by such Contributor to use, reproduce, make available,
modify, display, perform, distribute, and otherwise exploit its
Contributions, either on an unmodified basis, with Modifications, or
as part of a Larger Work; and
(b) under Patent Claims of such Contributor to make, use, sell, offer
for sale, have made, import, and otherwise transfer either its
Contributions or its Contributor Version.
2.2. Effective Date
The licenses granted in Section 2.1 with respect to any Contribution
become effective for each Contribution on the date the Contributor first
distributes such Contribution.
2.3. Limitations on Grant Scope
The licenses granted in this Section 2 are the only rights granted under
this License. No additional rights or licenses will be implied from the
distribution or licensing of Covered Software under this License.
Notwithstanding Section 2.1(b) above, no patent license is granted by a
Contributor:
(a) for any code that a Contributor has removed from Covered Software;
or
(b) for infringements caused by: (i) Your and any other third party's
modifications of Covered Software, or (ii) the combination of its
Contributions with other software (except as part of its Contributor
Version); or
(c) under Patent Claims infringed by Covered Software in the absence of
its Contributions.
This License does not grant any rights in the trademarks, service marks,
or logos of any Contributor (except as may be necessary to comply with
the notice requirements in Section 3.4).
2.4. Subsequent Licenses
No Contributor makes additional grants as a result of Your choice to
distribute the Covered Software under a subsequent version of this
License (see Section 10.2) or under the terms of a Secondary License (if
permitted under the terms of Section 3.3).
2.5. Representation
Each Contributor represents that the Contributor believes its
Contributions are its original creation(s) or it has sufficient rights
to grant the rights to its Contributions conveyed by this License.
2.6. Fair Use
This License is not intended to limit any rights You have under
applicable copyright doctrines of fair use, fair dealing, or other
equivalents.
2.7. Conditions
Sections 3.1, 3.2, 3.3, and 3.4 are conditions of the licenses granted
in Section 2.1.
3. Responsibilities
-------------------
3.1. Distribution of Source Form
All distribution of Covered Software in Source Code Form, including any
Modifications that You create or to which You contribute, must be under
the terms of this License. You must inform recipients that the Source
Code Form of the Covered Software is governed by the terms of this
License, and how they can obtain a copy of this License. You may not
attempt to alter or restrict the recipients' rights in the Source Code
Form.
3.2. Distribution of Executable Form
If You distribute Covered Software in Executable Form then:
(a) such Covered Software must also be made available in Source Code
Form, as described in Section 3.1, and You must inform recipients of
the Executable Form how they can obtain a copy of such Source Code
Form by reasonable means in a timely manner, at a charge no more
than the cost of distribution to the recipient; and
(b) You may distribute such Executable Form under the terms of this
License, or sublicense it under different terms, provided that the
license for the Executable Form does not attempt to limit or alter
the recipients' rights in the Source Code Form under this License.
3.3. Distribution of a Larger Work
You may create and distribute a Larger Work under terms of Your choice,
provided that You also comply with the requirements of this License for
the Covered Software. If the Larger Work is a combination of Covered
Software with a work governed by one or more Secondary Licenses, and the
Covered Software is not Incompatible With Secondary Licenses, this
License permits You to additionally distribute such Covered Software
under the terms of such Secondary License(s), so that the recipient of
the Larger Work may, at their option, further distribute the Covered
Software under the terms of either this License or such Secondary
License(s).
3.4. Notices
You may not remove or alter the substance of any license notices
(including copyright notices, patent notices, disclaimers of warranty,
or limitations of liability) contained within the Source Code Form of
the Covered Software, except that You may alter any license notices to
the extent required to remedy known factual inaccuracies.
3.5. Application of Additional Terms
You may choose to offer, and to charge a fee for, warranty, support,
indemnity or liability obligations to one or more recipients of Covered
Software. However, You may do so only on Your own behalf, and not on
behalf of any Contributor. You must make it absolutely clear that any
such warranty, support, indemnity, or liability obligation is offered by
You alone, and You hereby agree to indemnify every Contributor for any
liability incurred by such Contributor as a result of warranty, support,
indemnity or liability terms You offer. You may include additional
disclaimers of warranty and limitations of liability specific to any
jurisdiction.
4. Inability to Comply Due to Statute or Regulation
---------------------------------------------------
If it is impossible for You to comply with any of the terms of this
License with respect to some or all of the Covered Software due to
statute, judicial order, or regulation then You must: (a) comply with
the terms of this License to the maximum extent possible; and (b)
describe the limitations and the code they affect. Such description must
be placed in a text file included with all distributions of the Covered
Software under this License. Except to the extent prohibited by statute
or regulation, such description must be sufficiently detailed for a
recipient of ordinary skill to be able to understand it.
5. Termination
--------------
5.1. The rights granted under this License will terminate automatically
if You fail to comply with any of its terms. However, if You become
compliant, then the rights granted under this License from a particular
Contributor are reinstated (a) provisionally, unless and until such
Contributor explicitly and finally terminates Your grants, and (b) on an
ongoing basis, if such Contributor fails to notify You of the
non-compliance by some reasonable means prior to 60 days after You have
come back into compliance. Moreover, Your grants from a particular
Contributor are reinstated on an ongoing basis if such Contributor
notifies You of the non-compliance by some reasonable means, this is the
first time You have received notice of non-compliance with this License
from such Contributor, and You become compliant prior to 30 days after
Your receipt of the notice.
5.2. If You initiate litigation against any entity by asserting a patent
infringement claim (excluding declaratory judgment actions,
counter-claims, and cross-claims) alleging that a Contributor Version
directly or indirectly infringes any patent, then the rights granted to
You by any and all Contributors for the Covered Software under Section
2.1 of this License shall terminate.
5.3. In the event of termination under Sections 5.1 or 5.2 above, all
end user license agreements (excluding distributors and resellers) which
have been validly granted by You or Your distributors under this License
prior to termination shall survive termination.
************************************************************************
* *
* 6. Disclaimer of Warranty *
* ------------------------- *
* *
* Covered Software is provided under this License on an "as is" *
* basis, without warranty of any kind, either expressed, implied, or *
* statutory, including, without limitation, warranties that the *
* Covered Software is free of defects, merchantable, fit for a *
* particular purpose or non-infringing. The entire risk as to the *
* quality and performance of the Covered Software is with You. *
* Should any Covered Software prove defective in any respect, You *
* (not any Contributor) assume the cost of any necessary servicing, *
* repair, or correction. This disclaimer of warranty constitutes an *
* essential part of this License. No use of any Covered Software is *
* authorized under this License except under this disclaimer. *
* *
************************************************************************
************************************************************************
* *
* 7. Limitation of Liability *
* -------------------------- *
* *
* Under no circumstances and under no legal theory, whether tort *
* (including negligence), contract, or otherwise, shall any *
* Contributor, or anyone who distributes Covered Software as *
* permitted above, be liable to You for any direct, indirect, *
* special, incidental, or consequential damages of any character *
* including, without limitation, damages for lost profits, loss of *
* goodwill, work stoppage, computer failure or malfunction, or any *
* and all other commercial damages or losses, even if such party *
* shall have been informed of the possibility of such damages. This *
* limitation of liability shall not apply to liability for death or *
* personal injury resulting from such party's negligence to the *
* extent applicable law prohibits such limitation. Some *
* jurisdictions do not allow the exclusion or limitation of *
* incidental or consequential damages, so this exclusion and *
* limitation may not apply to You. *
* *
************************************************************************
8. Litigation
-------------
Any litigation relating to this License may be brought only in the
courts of a jurisdiction where the defendant maintains its principal
place of business and such litigation shall be governed by laws of that
jurisdiction, without reference to its conflict-of-law provisions.
Nothing in this Section shall prevent a party's ability to bring
cross-claims or counter-claims.
9. Miscellaneous
----------------
This License represents the complete agreement concerning the subject
matter hereof. If any provision of this License is held to be
unenforceable, such provision shall be reformed only to the extent
necessary to make it enforceable. Any law or regulation which provides
that the language of a contract shall be construed against the drafter
shall not be used to construe this License against a Contributor.
10. Versions of the License
---------------------------
10.1. New Versions
Mozilla Foundation is the license steward. Except as provided in Section
10.3, no one other than the license steward has the right to modify or
publish new versions of this License. Each version will be given a
distinguishing version number.
10.2. Effect of New Versions
You may distribute the Covered Software under the terms of the version
of the License under which You originally received the Covered Software,
or under the terms of any subsequent version published by the license
steward.
10.3. Modified Versions
If you create software not governed by this License, and you want to
create a new license for such software, you may create and use a
modified version of this License if you rename the license and remove
any references to the name of the license steward (except to note that
such modified license differs from this License).
10.4. Distributing Source Code Form that is Incompatible With Secondary
Licenses
If You choose to distribute Source Code Form that is Incompatible With
Secondary Licenses under the terms of this version of the License, the
notice described in Exhibit B of this License must be attached.
Exhibit A - Source Code Form License Notice
-------------------------------------------
This Source Code Form is subject to the terms of the Mozilla Public
License, v. 2.0. If a copy of the MPL was not distributed with this
file, You can obtain one at http://mozilla.org/MPL/2.0/.
If it is not possible or desirable to put the notice in a particular
file, then You may include the notice in a location (such as a LICENSE
file in a relevant directory) where a recipient would be likely to look
for such a notice.
You may add additional accurate notices of copyright ownership.
Exhibit B - "Incompatible With Secondary Licenses" Notice
---------------------------------------------------------
This Source Code Form is "Incompatible With Secondary Licenses", as
defined by the Mozilla Public License, v. 2.0.
================================================
FILE: README.md
================================================
# terraform-sops
A Terraform plugin for using files encrypted with [SOPS](https://github.com/getsops/sops).
**NOTE:** To prevent plaintext secrets from being written to disk, you *must* set up a secure remote state backend. See the [official docs](https://developer.hashicorp.com/terraform/language/state/sensitive-data) on _Sensitive Data in State_ for more information or use [ephemeral block](#example-using-ephemeral-block).
## Example
**NOTE:** All examples assume Terraform 0.13 or newer. For information about usage on older versions, see the [legacy usage docs](docs/legacy_usage.md).
Encrypt a file using Sops: `sops demo-secret.enc.json`
```json
{
"password": "foo",
"db": {"password": "bar"}
}
```
### sops_file
```hcl
terraform {
required_providers {
sops = {
source = "carlpett/sops"
version = "~> 0.5"
}
}
}
data "sops_file" "demo-secret" {
source_file = "demo-secret.enc.json"
}
output "root-value-password" {
# Access the password variable from the map
value = data.sops_file.demo-secret.data["password"]
}
output "mapped-nested-value" {
# Access the password variable that is under db via the terraform map of data
value = data.sops_file.demo-secret.data["db.password"]
}
output "nested-json-value" {
# Access the password variable that is under db via the terraform object
value = jsondecode(data.sops_file.demo-secret.raw).db.password
}
```
Sops also supports encrypting the entire file when in other formats. Such files can also be used by specifying `input_type = "raw"`:
```hcl
data "sops_file" "some-file" {
source_file = "secret-data.txt"
input_type = "raw"
}
output "do-something" {
value = data.sops_file.some-file.raw
}
```
### sops_external
For use with reading files that might not be local.
> `input_type` is required with this data source.
```hcl
terraform {
required_providers {
sops = {
source = "carlpett/sops"
version = "~> 0.5"
}
}
}
# using sops/test-fixtures/basic.yaml as an example
data "local_file" "yaml" {
filename = "basic.yaml"
}
data "sops_external" "demo-secret" {
source = data.local_file.yaml.content
input_type = "yaml"
}
output "root-value-hello" {
value = data.sops_external.demo-secret.data.hello
}
output "nested-yaml-value" {
# Access the password variable that is under db via the terraform object
value = yamldecode(data.sops_file.demo-secret.raw).db.password
}
```
## Install
For Terraform 0.13 and later, specify the source and version in a `required_providers` block:
```hcl
terraform {
required_providers {
sops = {
source = "carlpett/sops"
version = "~> 0.5"
}
}
}
```
## CI usage
For CI, the same variables or context that SOPS uses locally must be provided in the runtime. The provider does not manage the required values.
## Development
Building and testing is most easily performed with `make build` and `make test` respectively.
The PGP key used for encrypting the test cases is found in `test/testing-key.pgp`. You can import it with `gpg --import test/testing-key.pgp`.
To create the Terraform-registry-documentation, simply run `make generate-documentation`
## Transitioning to Terraform 0.13 provider required blocks.
With Terraform 0.13, providers are available/downloaded via the [terraform registry](https://registry.terraform.io/providers/carlpett/sops/latest) via a required_providers block.
```hcl
terraform {
required_providers {
sops = {
source = "carlpett/sops"
version = "~> 0.5"
}
}
}
```
A prerequisite when converting is that you must remove the data source block from the previous SOPS provider in your `terraform.state` file.
This can be done via:
```shell
terraform state replace-provider registry.terraform.io/-/sops registry.terraform.io/carlpett/sops
```
If not you will be greeted with:
```shell
- Finding latest version of -/sops...
Error: Failed to query available provider packages
Could not retrieve the list of available versions for provider -/sops:
provider registry registry.terraform.io does not have a provider named
registry.terraform.io/-/sops
```
## Example using ephemeral block
With Terraform v1.11+ and the SOPS provider v1.3.0+, you can use an ephemeral resource instead of a data source.
This prevents the contents of the secret file from being saved in the Terraform state.
Ephemeral resources can be referenced in `write-only` arguments.
```hcl
terraform {
required_providers {
sops = {
source = "carlpett/sops"
version = "~> 1.3.0"
}
}
}
ephemeral "sops_file" "secrets" {
source_file = "demo-secret.enc.json"
}
resource "aws_ssm_parameter" "sops_secrets" {
name = "my-secrets"
type = "SecureString"
value_wo = jsonencode(ephemeral.sops_file.secrets.raw)
value_wo_version = 1
}
```
See documentation:
* [Ephemeral block](https://developer.hashicorp.com/terraform/language/block/ephemeral)
* [Write-Only arguments](https://developer.hashicorp.com/terraform/language/manage-sensitive-data/write-only)
================================================
FILE: docker/Dockerfile
================================================
FROM hashicorp/terraform:0.12.0
ARG SOPS_PLUGIN_VERSION
ENV SOPS_PLUGIN_VERSION=${SOPS_PLUGIN_VERSION}
RUN wget https://github.com/carlpett/terraform-provider-sops/releases/download/${SOPS_PLUGIN_VERSION}/terraform-provider-sops_${SOPS_PLUGIN_VERSION}_linux_amd64.zip && \
unzip terraform-provider-sops_${SOPS_PLUGIN_VERSION}_linux_amd64.zip && \
mv terraform-provider-sops_${SOPS_PLUGIN_VERSION} /bin/terraform-provider-sops_${SOPS_PLUGIN_VERSION} && \
chmod +x /bin/terraform-provider-sops_${SOPS_PLUGIN_VERSION}
================================================
FILE: docker/hooks/build
================================================
#!/usr/bin/env bash
set -eufo pipefail
if ! echo ${DOCKER_TAG} | grep -qE '^v[0-9\.]+'; then
# If the tag is not a version, use the version of the latest tag
git fetch --tags --unshallow >/dev/null
export DOCKER_TAG=$(git describe --tags --abbrev=0 --match='v*')
echo "Using plugin version ${DOCKER_TAG}"
fi
docker build --build-arg "SOPS_PLUGIN_VERSION=${DOCKER_TAG}" -t "${IMAGE_NAME}" .
================================================
FILE: docs/data-sources/external.md
================================================
---
# generated by https://github.com/hashicorp/terraform-plugin-docs
page_title: "sops_external Data Source - sops"
subcategory: ""
description: |-
Read data from a sops-encrypted string. Useful if the data does not reside on disk locally (otherwise use sops_file).
---
# sops_external (Data Source)
Read data from a sops-encrypted string. Useful if the data does not reside on disk locally (otherwise use `sops_file`).
## Example Usage
```terraform
data "http" "remote_sops_data" {
url = "https://sops.example/my-data"
}
data "sops_external" "demo_secret" {
source = data.http.remote_sops_data.body
input_type = "yaml"
}
output "root-value-hello" {
value = data.sops_external.demo_secret.data.hello
}
```
<!-- schema generated by tfplugindocs -->
## Schema
### Required
- `source` (String) A string with sops-encrypted data
### Optional
- `input_type` (String) `yaml`, `json` `dotenv` (`.env`), `ini` or `raw`, depending on the structure of the un-encrypted data.
### Read-Only
- `data` (Map of String, Sensitive) Decrypted data
- `id` (String) Unique identifier for this data source
- `raw` (String, Sensitive) Raw decrypted content
================================================
FILE: docs/data-sources/file.md
================================================
---
# generated by https://github.com/hashicorp/terraform-plugin-docs
page_title: "sops_file Data Source - sops"
subcategory: ""
description: |-
Read data from a sops-encrypted file on disk.
---
# sops_file (Data Source)
Read data from a sops-encrypted file on disk.
## Example Usage
```terraform
provider "sops" {}
data "sops_file" "demo-secret" {
source_file = "demo-secret.enc.json"
}
output "root-value-password" {
# Access the password variable from the map
value = data.sops_file.demo-secret.data["password"]
}
output "mapped-nested-value" {
# Access the password variable that is under db via the terraform map of data
value = data.sops_file.demo-secret.data["db.password"]
}
output "nested-json-value" {
# Access the password variable that is under db via the terraform object
value = jsondecode(data.sops_file.demo-secret.raw).db.password
}
```
<!-- schema generated by tfplugindocs -->
## Schema
### Required
- `source_file` (String) Path to the encrypted file.
### Optional
- `input_type` (String) The provider will use the file extension to determine how to unmarshal the data. If your file does not have the usual extension, set this argument to `yaml`, `json`, `dotenv` (`.env`), `ini` accordingly, or `raw` if the encrypted data is encoded differently.
### Read-Only
- `data` (Map of String, Sensitive) The unmarshalled data as a dictionary. Use dot-separated keys to access nested data.
- `id` (String) Unique identifier for this data source.
- `raw` (String, Sensitive) The entire unencrypted file as a string.
================================================
FILE: docs/ephemeral-resources/external.md
================================================
---
# generated by https://github.com/hashicorp/terraform-plugin-docs
page_title: "sops_external Ephemeral Resource - sops"
subcategory: ""
description: |-
Read data from a sops-encrypted string. Useful if the data does not reside on disk locally (otherwise use sops_file).
---
# sops_external (Ephemeral Resource)
Read data from a sops-encrypted string. Useful if the data does not reside on disk locally (otherwise use `sops_file`).
## Example Usage
```terraform
data "http" "remote_sops_data" {
url = "https://sops.example/my-data"
}
ephemeral "sops_external" "demo_secret" {
source = data.http.remote_sops_data.body
input_type = "yaml"
}
output "root_value_hello" {
value = ephemeral.sops_external.demo_secret.data.hello
}
```
<!-- schema generated by tfplugindocs -->
## Schema
### Required
- `source` (String) A string with sops-encrypted data
### Optional
- `input_type` (String) `yaml`, `json` `dotenv` (`.env`), `ini` or `raw`, depending on the structure of the un-encrypted data.
### Read-Only
- `data` (Map of String, Sensitive) Decrypted data
- `raw` (String, Sensitive) Raw decrypted content
================================================
FILE: docs/ephemeral-resources/file.md
================================================
---
# generated by https://github.com/hashicorp/terraform-plugin-docs
page_title: "sops_file Ephemeral Resource - sops"
subcategory: ""
description: |-
Decrypt sops-encrypted files
---
# sops_file (Ephemeral Resource)
Decrypt sops-encrypted files
## Example Usage
```terraform
provider "sops" {}
ephemeral "sops_file" "demo_secret" {
source_file = "demo_secret.enc.json"
}
output "root_value_password" {
# Access the password variable from the map
value = data.sops_file.demo_secret.data["password"]
}
output "mapped_nested_value" {
# Access the password variable that is under db via the terraform map of data
value = data.sops_file.demo_secret.data["db.password"]
}
output "nested_json_value" {
# Access the password variable that is under db via the terraform object
value = jsondecode(data.sops_file.demo_secret.raw).db.password
}
```
<!-- schema generated by tfplugindocs -->
## Schema
### Required
- `source_file` (String) Path to the encrypted file
### Optional
- `input_type` (String) The provider will use the file extension to determine how to unmarshal the data. If your file does not have the usual extension, set this argument to `yaml`, `json`, `dotenv` (`.env`), `ini` accordingly, or `raw` if the encrypted data is encoded differently.
### Read-Only
- `data` (Map of String, Sensitive) The unmarshalled data as a dictionary. Use dot-separated keys to access nested data.
- `raw` (String, Sensitive) Raw decrypted content
================================================
FILE: docs/guides/legacy_usage.md
================================================
---
page_title: "terraform-sops on older Terraform versions"
description: |-
Migration guide for moving from a old Terraform version
---
# terraform-sops on older Terraform versions
## Migrating existing states
To migrate a state from Terraform 0.12 or older, there is a need to change how the provider is referenced. Terraform provides a command to do this migration:
```shell
terraform state replace-provider registry.terraform.io/-/sops registry.terraform.io/carlpett/sops
```
## Installation
Download the latest [release](https://github.com/carlpett/terraform-provider-sops/releases) for your environment and unpack it to the user plugin directory. The user plugins directory is in one of the following locations, depending on the host operating system:
* Windows `%APPDATA%\terraform.d\plugins`
* All other systems `~/.terraform.d/plugins`
### Allowing code to run on macOS
Apple macOS Catalina (10.15.0) and later prevents unsigned code from running. When you first run `terraform plan` it will pop up a message saying
> **“terraform-provider-sops_v0.5.0” cannot be opened because the developer cannot be verified.**
> macOS cannot verify that this app is free from malware.
To allow the plugin to run, go to the **Security & Privacy** tab of System Preferences and you should see a message saying
> “terraform-provider-sops_v0.5.0” was blocked from use because it is not from an identified developer.
Click the `Allow Anyway` button.
## Usage
Usage is mostly identical across versions, but there are some differences in how to reference nested fields.
### Terraform 0.12
```hcl
provider "sops" {}
data "sops_file" "demo-secret" {
source_file = "demo-secret.enc.json"
}
output "root-value-password" {
# Access the password variable from the map
value = data.sops_file.demo-secret.data["password"]
}
output "mapped-nested-value" {
# Access the password variable that is under db via the terraform map of data
value = data.sops_file.demo-secret.data["db.password"]
}
output "nested-json-value" {
# Access the password variable that is under db via the terraform object
value = jsondecode(data.sops_file.demo-secret.raw).db.password
}
```
### Terraform 0.11 and older
```hcl
provider "sops" {}
data "sops_file" "demo-secret" {
source_file = "demo-secret.enc.json"
}
output "do-something" {
value = "${data.sops_file.demo-secret.data.password}"
}
output "do-something2" {
value = "${data.sops_file.demo-secret.data.db.password}"
}
```
================================================
FILE: docs/index.md
================================================
---
# generated by https://github.com/hashicorp/terraform-plugin-docs
page_title: "sops Provider"
description: |-
A Terraform plugin for using files encrypted with SOPS https://github.com/getsops/sops.
---
# SOPS Provider
A Terraform plugin for using files encrypted with [SOPS](https://github.com/getsops/sops).
!> To prevent plaintext secrets from being written to disk, you *must* use a secure remote state backend. See the [official docs](https://developer.hashicorp.com/terraform/language/state/sensitive-data) on _Sensitive Data in State_ for more information.
## Example Usage
```terraform
provider "sops" {}
data "sops_file" "demo_secret" {
source_file = "demo-secret.enc.json"
}
output "db_password" {
# Access the password variable that is under db via the terraform map of data
value = data.sops_file.demo_secret.data["db.password"]
}
```
<!-- schema generated by tfplugindocs -->
================================================
FILE: examples/README.md
================================================
# Examples
This directory contains examples that are mostly used for documentation, but can also be run/tested manually via the Terraform CLI.
The document generation tool looks for files in the following locations by default. All other *.tf files besides the ones mentioned below are ignored by the documentation tool. This is useful for creating examples that can run and/or are testable even if some parts are not relevant for the documentation.
* **provider/provider.tf** example file for the provider index page
* **data-sources/`full data source name`/data-source.tf** example file for the named data source page
* **resources/`full resource name`/resource.tf** example file for the named data source page
================================================
FILE: examples/data-sources/sops_external/data-source.tf
================================================
data "http" "remote_sops_data" {
url = "https://sops.example/my-data"
}
data "sops_external" "demo_secret" {
source = data.http.remote_sops_data.body
input_type = "yaml"
}
output "root-value-hello" {
value = data.sops_external.demo_secret.data.hello
}
================================================
FILE: examples/data-sources/sops_file/data-source.tf
================================================
provider "sops" {}
data "sops_file" "demo-secret" {
source_file = "demo-secret.enc.json"
}
output "root-value-password" {
# Access the password variable from the map
value = data.sops_file.demo-secret.data["password"]
}
output "mapped-nested-value" {
# Access the password variable that is under db via the terraform map of data
value = data.sops_file.demo-secret.data["db.password"]
}
output "nested-json-value" {
# Access the password variable that is under db via the terraform object
value = jsondecode(data.sops_file.demo-secret.raw).db.password
}
================================================
FILE: examples/ephemeral-resources/sops_external/ephemeral-resources.tf
================================================
data "http" "remote_sops_data" {
url = "https://sops.example/my-data"
}
ephemeral "sops_external" "demo_secret" {
source = data.http.remote_sops_data.body
input_type = "yaml"
}
output "root_value_hello" {
value = ephemeral.sops_external.demo_secret.data.hello
}
================================================
FILE: examples/ephemeral-resources/sops_file/ephemeral-resources.tf
================================================
provider "sops" {}
ephemeral "sops_file" "demo_secret" {
source_file = "demo_secret.enc.json"
}
output "root_value_password" {
# Access the password variable from the map
value = data.sops_file.demo_secret.data["password"]
}
output "mapped_nested_value" {
# Access the password variable that is under db via the terraform map of data
value = data.sops_file.demo_secret.data["db.password"]
}
output "nested_json_value" {
# Access the password variable that is under db via the terraform object
value = jsondecode(data.sops_file.demo_secret.raw).db.password
}
================================================
FILE: examples/provider/provider.tf
================================================
provider "sops" {}
data "sops_file" "demo_secret" {
source_file = "demo-secret.enc.json"
}
output "db_password" {
# Access the password variable that is under db via the terraform map of data
value = data.sops_file.demo_secret.data["db.password"]
}
================================================
FILE: go.mod
================================================
module github.com/carlpett/terraform-provider-sops
go 1.25.8
require (
github.com/getsops/sops/v3 v3.12.2
github.com/hashicorp/terraform-plugin-framework v1.18.0
github.com/hashicorp/terraform-plugin-go v0.30.0
github.com/hashicorp/terraform-plugin-testing v1.13.2
gopkg.in/ini.v1 v1.67.1
gopkg.in/yaml.v3 v3.0.1
)
require (
cel.dev/expr v0.25.1 // indirect
cloud.google.com/go v0.123.0 // indirect
cloud.google.com/go/auth v0.18.2 // indirect
cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
cloud.google.com/go/compute/metadata v0.9.0 // indirect
cloud.google.com/go/iam v1.5.3 // indirect
cloud.google.com/go/kms v1.26.0 // indirect
cloud.google.com/go/longrunning v0.8.0 // indirect
cloud.google.com/go/monitoring v1.24.3 // indirect
cloud.google.com/go/storage v1.60.0 // indirect
filippo.io/age v1.3.1 // indirect
filippo.io/edwards25519 v1.2.0 // indirect
filippo.io/hpke v0.4.0 // indirect
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.0 // indirect
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1 // indirect
github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2 // indirect
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.4.0 // indirect
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.2.0 // indirect
github.com/AzureAD/microsoft-authentication-library-for-go v1.6.0 // indirect
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.31.0 // indirect
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.55.0 // indirect
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.55.0 // indirect
github.com/ProtonMail/go-crypto v1.4.0 // indirect
github.com/agext/levenshtein v1.2.3 // indirect
github.com/apparentlymart/go-textseg/v15 v15.0.0 // indirect
github.com/aws/aws-sdk-go-v2 v1.41.2 // indirect
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.5 // indirect
github.com/aws/aws-sdk-go-v2/config v1.32.10 // indirect
github.com/aws/aws-sdk-go-v2/credentials v1.19.10 // indirect
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.18 // indirect
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.22.4 // indirect
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.18 // indirect
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.18 // indirect
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4 // indirect
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.18 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.5 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.10 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.18 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.18 // indirect
github.com/aws/aws-sdk-go-v2/service/kms v1.50.1 // indirect
github.com/aws/aws-sdk-go-v2/service/s3 v1.96.2 // indirect
github.com/aws/aws-sdk-go-v2/service/signin v1.0.6 // indirect
github.com/aws/aws-sdk-go-v2/service/sso v1.30.11 // indirect
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.15 // indirect
github.com/aws/aws-sdk-go-v2/service/sts v1.41.7 // indirect
github.com/aws/smithy-go v1.24.2 // indirect
github.com/blang/semver v3.5.1+incompatible // indirect
github.com/cenkalti/backoff/v4 v4.3.0 // indirect
github.com/cespare/xxhash/v2 v2.3.0 // indirect
github.com/cloudflare/circl v1.6.3 // indirect
github.com/cncf/xds/go v0.0.0-20260202195803-dba9d589def2 // indirect
github.com/cpuguy83/go-md2man/v2 v2.0.7 // indirect
github.com/envoyproxy/go-control-plane/envoy v1.37.0 // indirect
github.com/envoyproxy/protoc-gen-validate v1.3.3 // indirect
github.com/fatih/color v1.18.0 // indirect
github.com/felixge/httpsnoop v1.0.4 // indirect
github.com/getsops/gopgagent v0.0.0-20241224165529-7044f28e491e // indirect
github.com/go-jose/go-jose/v4 v4.1.3 // indirect
github.com/go-logr/logr v1.4.3 // indirect
github.com/go-logr/stdr v1.2.2 // indirect
github.com/goccy/go-yaml v1.19.2 // indirect
github.com/golang-jwt/jwt/v5 v5.3.1 // indirect
github.com/golang/protobuf v1.5.4 // indirect
github.com/google/go-cmp v0.7.0 // indirect
github.com/google/s2a-go v0.1.9 // indirect
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
github.com/google/uuid v1.6.0 // indirect
github.com/googleapis/enterprise-certificate-proxy v0.3.12 // indirect
github.com/googleapis/gax-go/v2 v2.17.0 // indirect
github.com/goware/prefixer v0.0.0-20160118172347-395022866408 // indirect
github.com/hashicorp/errwrap v1.1.0 // indirect
github.com/hashicorp/go-checkpoint v0.5.0 // indirect
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
github.com/hashicorp/go-cty v1.5.0 // indirect
github.com/hashicorp/go-hclog v1.6.3 // indirect
github.com/hashicorp/go-multierror v1.1.1 // indirect
github.com/hashicorp/go-plugin v1.7.0 // indirect
github.com/hashicorp/go-retryablehttp v0.7.8 // indirect
github.com/hashicorp/go-rootcerts v1.0.2 // indirect
github.com/hashicorp/go-secure-stdlib/parseutil v0.2.0 // indirect
github.com/hashicorp/go-secure-stdlib/strutil v0.1.2 // indirect
github.com/hashicorp/go-sockaddr v1.0.7 // indirect
github.com/hashicorp/go-uuid v1.0.3 // indirect
github.com/hashicorp/go-version v1.7.0 // indirect
github.com/hashicorp/hc-install v0.9.2 // indirect
github.com/hashicorp/hcl v1.0.1-vault-7 // indirect
github.com/hashicorp/hcl/v2 v2.23.0 // indirect
github.com/hashicorp/logutils v1.0.0 // indirect
github.com/hashicorp/terraform-exec v0.23.0 // indirect
github.com/hashicorp/terraform-json v0.25.0 // indirect
github.com/hashicorp/terraform-plugin-log v0.10.0 // indirect
github.com/hashicorp/terraform-plugin-sdk/v2 v2.37.0 // indirect
github.com/hashicorp/terraform-registry-address v0.4.0 // indirect
github.com/hashicorp/terraform-svchost v0.2.0 // indirect
github.com/hashicorp/vault/api v1.22.0 // indirect
github.com/hashicorp/yamux v0.1.2 // indirect
github.com/huaweicloud/huaweicloud-sdk-go-v3 v0.1.187 // indirect
github.com/json-iterator/go v1.1.13-0.20220915233716-71ac16282d12 // indirect
github.com/kylelemons/godebug v1.1.0 // indirect
github.com/lib/pq v1.11.2 // indirect
github.com/mattn/go-colorable v0.1.14 // indirect
github.com/mattn/go-isatty v0.0.20 // indirect
github.com/mitchellh/copystructure v1.2.0 // indirect
github.com/mitchellh/go-homedir v1.1.0 // indirect
github.com/mitchellh/go-testing-interface v1.14.1 // indirect
github.com/mitchellh/go-wordwrap v1.0.1 // indirect
github.com/mitchellh/mapstructure v1.5.0 // indirect
github.com/mitchellh/reflectwalk v1.0.2 // indirect
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
github.com/modern-go/reflect2 v1.0.2 // indirect
github.com/oklog/run v1.2.0 // indirect
github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect
github.com/pkg/errors v0.9.1 // indirect
github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 // indirect
github.com/russross/blackfriday/v2 v2.1.0 // indirect
github.com/ryanuber/go-glob v1.0.0 // indirect
github.com/sirupsen/logrus v1.9.4 // indirect
github.com/spiffe/go-spiffe/v2 v2.6.0 // indirect
github.com/tjfoc/gmsm v1.4.1 // indirect
github.com/urfave/cli v1.22.17 // indirect
github.com/vmihailenco/msgpack v4.0.4+incompatible // indirect
github.com/vmihailenco/msgpack/v5 v5.4.1 // indirect
github.com/vmihailenco/tagparser/v2 v2.0.0 // indirect
github.com/zclconf/go-cty v1.16.4 // indirect
go.mongodb.org/mongo-driver v1.17.9 // indirect
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
go.opentelemetry.io/contrib/detectors/gcp v1.40.0 // indirect
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.65.0 // indirect
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.65.0 // indirect
go.opentelemetry.io/otel v1.40.0 // indirect
go.opentelemetry.io/otel/metric v1.40.0 // indirect
go.opentelemetry.io/otel/sdk v1.40.0 // indirect
go.opentelemetry.io/otel/sdk/metric v1.40.0 // indirect
go.opentelemetry.io/otel/trace v1.40.0 // indirect
go.yaml.in/yaml/v3 v3.0.4 // indirect
golang.org/x/crypto v0.48.0 // indirect
golang.org/x/mod v0.32.0 // indirect
golang.org/x/net v0.51.0 // indirect
golang.org/x/oauth2 v0.35.0 // indirect
golang.org/x/sync v0.19.0 // indirect
golang.org/x/sys v0.41.0 // indirect
golang.org/x/term v0.40.0 // indirect
golang.org/x/text v0.34.0 // indirect
golang.org/x/time v0.14.0 // indirect
golang.org/x/tools v0.41.0 // indirect
google.golang.org/api v0.269.0 // indirect
google.golang.org/appengine v1.6.8 // indirect
google.golang.org/genproto v0.0.0-20260226221140-a57be14db171 // indirect
google.golang.org/genproto/googleapis/api v0.0.0-20260226221140-a57be14db171 // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20260226221140-a57be14db171 // indirect
google.golang.org/grpc v1.79.1 // indirect
google.golang.org/protobuf v1.36.11 // indirect
)
================================================
FILE: go.sum
================================================
c2sp.org/CCTV/age v0.0.0-20251208015420-e9274a7bdbfd h1:ZLsPO6WdZ5zatV4UfVpr7oAwLGRZ+sebTUruuM4Ra3M=
c2sp.org/CCTV/age v0.0.0-20251208015420-e9274a7bdbfd/go.mod h1:SrHC2C7r5GkDk8R+NFVzYy/sdj0Ypg9htaPXQq5Cqeo=
cel.dev/expr v0.25.1 h1:1KrZg61W6TWSxuNZ37Xy49ps13NUovb66QLprthtwi4=
cel.dev/expr v0.25.1/go.mod h1:hrXvqGP6G6gyx8UAHSHJ5RGk//1Oj5nXQ2NI02Nrsg4=
cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
cloud.google.com/go v0.123.0 h1:2NAUJwPR47q+E35uaJeYoNhuNEM9kM8SjgRgdeOJUSE=
cloud.google.com/go v0.123.0/go.mod h1:xBoMV08QcqUGuPW65Qfm1o9Y4zKZBpGS+7bImXLTAZU=
cloud.google.com/go/auth v0.18.2 h1:+Nbt5Ev0xEqxlNjd6c+yYUeosQ5TtEUaNcN/3FozlaM=
cloud.google.com/go/auth v0.18.2/go.mod h1:xD+oY7gcahcu7G2SG2DsBerfFxgPAJz17zz2joOFF3M=
cloud.google.com/go/auth/oauth2adapt v0.2.8 h1:keo8NaayQZ6wimpNSmW5OPc283g65QNIiLpZnkHRbnc=
cloud.google.com/go/auth/oauth2adapt v0.2.8/go.mod h1:XQ9y31RkqZCcwJWNSx2Xvric3RrU88hAYYbjDWYDL+c=
cloud.google.com/go/compute/metadata v0.9.0 h1:pDUj4QMoPejqq20dK0Pg2N4yG9zIkYGdBtwLoEkH9Zs=
cloud.google.com/go/compute/metadata v0.9.0/go.mod h1:E0bWwX5wTnLPedCKqk3pJmVgCBSM6qQI1yTBdEb3C10=
cloud.google.com/go/iam v1.5.3 h1:+vMINPiDF2ognBJ97ABAYYwRgsaqxPbQDlMnbHMjolc=
cloud.google.com/go/iam v1.5.3/go.mod h1:MR3v9oLkZCTlaqljW6Eb2d3HGDGK5/bDv93jhfISFvU=
cloud.google.com/go/kms v1.26.0 h1:cK9mN2cf+9V63D3H1f6koxTatWy39aTI/hCjz1I+adU=
cloud.google.com/go/kms v1.26.0/go.mod h1:pHKOdFJm63hxBsiPkYtowZPltu9dW0MWvBa6IA4HM58=
cloud.google.com/go/logging v1.13.2 h1:qqlHCBvieJT9Cdq4QqYx1KPadCQ2noD4FK02eNqHAjA=
cloud.google.com/go/logging v1.13.2/go.mod h1:zaybliM3yun1J8mU2dVQ1/qDzjbOqEijZCn6hSBtKak=
cloud.google.com/go/longrunning v0.8.0 h1:LiKK77J3bx5gDLi4SMViHixjD2ohlkwBi+mKA7EhfW8=
cloud.google.com/go/longrunning v0.8.0/go.mod h1:UmErU2Onzi+fKDg2gR7dusz11Pe26aknR4kHmJJqIfk=
cloud.google.com/go/monitoring v1.24.3 h1:dde+gMNc0UhPZD1Azu6at2e79bfdztVDS5lvhOdsgaE=
cloud.google.com/go/monitoring v1.24.3/go.mod h1:nYP6W0tm3N9H/bOw8am7t62YTzZY+zUeQ+Bi6+2eonI=
cloud.google.com/go/storage v1.60.0 h1:oBfZrSOCimggVNz9Y/bXY35uUcts7OViubeddTTVzQ8=
cloud.google.com/go/storage v1.60.0/go.mod h1:q+5196hXfejkctrnx+VYU8RKQr/L3c0cBIlrjmiAKE0=
cloud.google.com/go/trace v1.11.7 h1:kDNDX8JkaAG3R2nq1lIdkb7FCSi1rCmsEtKVsty7p+U=
cloud.google.com/go/trace v1.11.7/go.mod h1:TNn9d5V3fQVf6s4SCveVMIBS2LJUqo73GACmq/Tky0s=
dario.cat/mergo v1.0.1 h1:Ra4+bf83h2ztPIQYNP99R6m+Y7KfnARDfID+a+vLl4s=
dario.cat/mergo v1.0.1/go.mod h1:uNxQE+84aUszobStD9th8a29P2fMDhsBdgRYvZOxGmk=
filippo.io/age v1.3.1 h1:hbzdQOJkuaMEpRCLSN1/C5DX74RPcNCk6oqhKMXmZi0=
filippo.io/age v1.3.1/go.mod h1:EZorDTYUxt836i3zdori5IJX/v2Lj6kWFU0cfh6C0D4=
filippo.io/edwards25519 v1.2.0 h1:crnVqOiS4jqYleHd9vaKZ+HKtHfllngJIiOpNpoJsjo=
filippo.io/edwards25519 v1.2.0/go.mod h1:xzAOLCNug/yB62zG1bQ8uziwrIqIuxhctzJT18Q77mc=
filippo.io/hpke v0.4.0 h1:p575VVQ6ted4pL+it6M00V/f2qTZITO0zgmdKCkd5+A=
filippo.io/hpke v0.4.0/go.mod h1:EmAN849/P3qdeK+PCMkDpDm83vRHM5cDipBJ8xbQLVY=
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.0 h1:fou+2+WFTib47nS+nz/ozhEBnvU96bKHy6LjRsY4E28=
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.0/go.mod h1:t76Ruy8AHvUAC8GfMWJMa0ElSbuIcO03NLpynfbgsPA=
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1 h1:Hk5QBxZQC1jb2Fwj6mpzme37xbCDdNTxU7O9eb5+LB4=
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1/go.mod h1:IYus9qsFobWIc2YVwe/WPjcnyCkPKtnHAqUYeebc8z0=
github.com/Azure/azure-sdk-for-go/sdk/azidentity/cache v0.3.2 h1:yz1bePFlP5Vws5+8ez6T3HWXPmwOK7Yvq8QxDBD3SKY=
github.com/Azure/azure-sdk-for-go/sdk/azidentity/cache v0.3.2/go.mod h1:Pa9ZNPuoNu/GztvBSKk9J1cDJW6vk/n0zLtV4mgd8N8=
github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2 h1:9iefClla7iYpfYWdzPCRDozdmndjTm8DXdpCzPajMgA=
github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2/go.mod h1:XtLgD3ZD34DAaVIIAyG3objl5DynM3CQ/vMcbBNJZGI=
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.4.0 h1:E4MgwLBGeVB5f2MdcIVD3ELVAWpr+WD6MUe1i+tM/PA=
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.4.0/go.mod h1:Y2b/1clN4zsAoUd/pgNAQHjLDnTis/6ROkUfyob6psM=
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.2.0 h1:nCYfgcSyHZXJI8J0IWE5MsCGlb2xp9fJiXyxWgmOFg4=
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.2.0/go.mod h1:ucUjca2JtSZboY8IoUqyQyuuXvwbMBVwFOm0vdQPNhA=
github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c h1:udKWzYgxTojEKWjV8V+WSxDXJ4NFATAsZjh8iIbsQIg=
github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c/go.mod h1:xomTg63KZ2rFqZQzSB4Vz2SUXa1BpHTVz9L5PTmPC4E=
github.com/AzureAD/microsoft-authentication-extensions-for-go/cache v0.1.1 h1:WJTmL004Abzc5wDB5VtZG2PJk5ndYDgVacGqfirKxjM=
github.com/AzureAD/microsoft-authentication-extensions-for-go/cache v0.1.1/go.mod h1:tCcJZ0uHAmvjsVYzEFivsRTN00oz5BEsRgQHu5JZ9WE=
github.com/AzureAD/microsoft-authentication-library-for-go v1.6.0 h1:XRzhVemXdgvJqCH0sFfrBUTnUJSBrBf7++ypk+twtRs=
github.com/AzureAD/microsoft-authentication-library-for-go v1.6.0/go.mod h1:HKpQxkWaGLJ+D/5H8QRpyQXA1eKjxkFlOMwck5+33Jk=
github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
github.com/BurntSushi/toml v1.5.0/go.mod h1:ukJfTF/6rtPPRCnwkur4qwRxa8vTRFBF0uk2lLoLwho=
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.31.0 h1:DHa2U07rk8syqvCge0QIGMCE1WxGj9njT44GH7zNJLQ=
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.31.0/go.mod h1:P4WPRUkOhJC13W//jWpyfJNDAIpvRbAUIYLX/4jtlE0=
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.55.0 h1:UnDZ/zFfG1JhH/DqxIZYU/1CUAlTUScoXD/LcM2Ykk8=
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.55.0/go.mod h1:IA1C1U7jO/ENqm/vhi7V9YYpBsp+IMyqNrEN94N7tVc=
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/cloudmock v0.55.0 h1:7t/qx5Ost0s0wbA/VDrByOooURhp+ikYwv20i9Y07TQ=
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/cloudmock v0.55.0/go.mod h1:vB2GH9GAYYJTO3mEn8oYwzEdhlayZIdQz6zdzgUIRvA=
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.55.0 h1:0s6TxfCu2KHkkZPnBfsQ2y5qia0jl3MMrmBhu3nCOYk=
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.55.0/go.mod h1:Mf6O40IAyB9zR/1J8nGDDPirZQQPbYJni8Yisy7NTMc=
github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY=
github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU=
github.com/Nvveen/Gotty v0.0.0-20120604004816-cd527374f1e5 h1:TngWCqHvy9oXAN6lEVMRuU21PR1EtLVZJmdB18Gu3Rw=
github.com/Nvveen/Gotty v0.0.0-20120604004816-cd527374f1e5/go.mod h1:lmUJ/7eu/Q8D7ML55dXQrVaamCz2vxCfdQBasLZfHKk=
github.com/ProtonMail/go-crypto v1.4.0 h1:Zq/pbM3F5DFgJiMouxEdSVY44MVoQNEKp5d5QxIQceQ=
github.com/ProtonMail/go-crypto v1.4.0/go.mod h1:e1OaTyu5SYVrO9gKOEhTc+5UcXtTUa+P3uLudwcgPqo=
github.com/agext/levenshtein v1.2.3 h1:YB2fHEn0UJagG8T1rrWknE3ZQzWM06O8AMAatNn7lmo=
github.com/agext/levenshtein v1.2.3/go.mod h1:JEDfjyjHDjOF/1e4FlBE/PkbqA9OfWu2ki2W0IB5558=
github.com/apparentlymart/go-textseg/v12 v12.0.0/go.mod h1:S/4uRK2UtaQttw1GenVJEynmyUenKwP++x/+DdGV/Ec=
github.com/apparentlymart/go-textseg/v15 v15.0.0 h1:uYvfpb3DyLSCGWnctWKGj857c6ew1u1fNQOlOtuGxQY=
github.com/apparentlymart/go-textseg/v15 v15.0.0/go.mod h1:K8XmNZdhEBkdlyDdvbmmsvpAG721bKi0joRfFdHIWJ4=
github.com/aws/aws-sdk-go-v2 v1.41.2 h1:LuT2rzqNQsauaGkPK/7813XxcZ3o3yePY0Iy891T2ls=
github.com/aws/aws-sdk-go-v2 v1.41.2/go.mod h1:IvvlAZQXvTXznUPfRVfryiG1fbzE2NGK6m9u39YQ+S4=
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.5 h1:zWFmPmgw4sveAYi1mRqG+E/g0461cJ5M4bJ8/nc6d3Q=
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.5/go.mod h1:nVUlMLVV8ycXSb7mSkcNu9e3v/1TJq2RTlrPwhYWr5c=
github.com/aws/aws-sdk-go-v2/config v1.32.10 h1:9DMthfO6XWZYLfzZglAgW5Fyou2nRI5CuV44sTedKBI=
github.com/aws/aws-sdk-go-v2/config v1.32.10/go.mod h1:2rUIOnA2JaiqYmSKYmRJlcMWy6qTj1vuRFscppSBMcw=
github.com/aws/aws-sdk-go-v2/credentials v1.19.10 h1:EEhmEUFCE1Yhl7vDhNOI5OCL/iKMdkkYFTRpZXNw7m8=
github.com/aws/aws-sdk-go-v2/credentials v1.19.10/go.mod h1:RnnlFCAlxQCkN2Q379B67USkBMu1PipEEiibzYN5UTE=
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.18 h1:Ii4s+Sq3yDfaMLpjrJsqD6SmG/Wq/P5L/hw2qa78UAY=
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.18/go.mod h1:6x81qnY++ovptLE6nWQeWrpXxbnlIex+4H4eYYGcqfc=
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.22.4 h1:s8fbFscel8NLpnz+ggR7ncW+lqhXIkmyHbgbPeT8yyM=
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.22.4/go.mod h1:BazuWe/q/mMJ/NrSJBTbNBJiLq6u8reodbEZ4giRms4=
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.18 h1:F43zk1vemYIqPAwhjTjYIz0irU2EY7sOb/F5eJ3HuyM=
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.18/go.mod h1:w1jdlZXrGKaJcNoL+Nnrj+k5wlpGXqnNrKoP22HvAug=
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.18 h1:xCeWVjj0ki0l3nruoyP2slHsGArMxeiiaoPN5QZH6YQ=
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.18/go.mod h1:r/eLGuGCBw6l36ZRWiw6PaZwPXb6YOj+i/7MizNl5/k=
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4 h1:WKuaxf++XKWlHWu9ECbMlha8WOEGm0OUEZqm4K/Gcfk=
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4/go.mod h1:ZWy7j6v1vWGmPReu0iSGvRiise4YI5SkR3OHKTZ6Wuc=
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.18 h1:eZioDaZGJ0tMM4gzmkNIO2aAoQd+je7Ug7TkvAzlmkU=
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.18/go.mod h1:CCXwUKAJdoWr6/NcxZ+zsiPr6oH/Q5aTooRGYieAyj4=
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.5 h1:CeY9LUdur+Dxoeldqoun6y4WtJ3RQtzk0JMP2gfUay0=
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.5/go.mod h1:AZLZf2fMaahW5s/wMRciu1sYbdsikT/UHwbUjOdEVTc=
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.10 h1:fJvQ5mIBVfKtiyx0AHY6HeWcRX5LGANLpq8SVR+Uazs=
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.10/go.mod h1:Kzm5e6OmNH8VMkgK9t+ry5jEih4Y8whqs+1hrkxim1I=
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.18 h1:LTRCYFlnnKFlKsyIQxKhJuDuA3ZkrDQMRYm6rXiHlLY=
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.18/go.mod h1:XhwkgGG6bHSd00nO/mexWTcTjgd6PjuvWQMqSn2UaEk=
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.18 h1:/A/xDuZAVD2BpsS2fftFRo/NoEKQJ8YTnJDEHBy2Gtg=
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.18/go.mod h1:hWe9b4f+djUQGmyiGEeOnZv69dtMSgpDRIvNMvuvzvY=
github.com/aws/aws-sdk-go-v2/service/kms v1.50.1 h1:wb/PYYm3wlcqGzw7Ls4GD3X5+seDDoNdVYIB6I/V87E=
github.com/aws/aws-sdk-go-v2/service/kms v1.50.1/go.mod h1:xvHowJ6J9CuaFE04S8fitWQXytf4sHz3DTPGhw9FtmU=
github.com/aws/aws-sdk-go-v2/service/s3 v1.96.2 h1:M1A9AjcFwlxTLuf0Faj88L8Iqw0n/AJHjpZTQzMMsSc=
github.com/aws/aws-sdk-go-v2/service/s3 v1.96.2/go.mod h1:KsdTV6Q9WKUZm2mNJnUFmIoXfZux91M3sr/a4REX8e0=
github.com/aws/aws-sdk-go-v2/service/signin v1.0.6 h1:MzORe+J94I+hYu2a6XmV5yC9huoTv8NRcCrUNedDypQ=
github.com/aws/aws-sdk-go-v2/service/signin v1.0.6/go.mod h1:hXzcHLARD7GeWnifd8j9RWqtfIgxj4/cAtIVIK7hg8g=
github.com/aws/aws-sdk-go-v2/service/sso v1.30.11 h1:7oGD8KPfBOJGXiCoRKrrrQkbvCp8N++u36hrLMPey6o=
github.com/aws/aws-sdk-go-v2/service/sso v1.30.11/go.mod h1:0DO9B5EUJQlIDif+XJRWCljZRKsAFKh3gpFz7UnDtOo=
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.15 h1:edCcNp9eGIUDUCrzoCu1jWAXLGFIizeqkdkKgRlJwWc=
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.15/go.mod h1:lyRQKED9xWfgkYC/wmmYfv7iVIM68Z5OQ88ZdcV1QbU=
github.com/aws/aws-sdk-go-v2/service/sts v1.41.7 h1:NITQpgo9A5NrDZ57uOWj+abvXSb83BbyggcUBVksN7c=
github.com/aws/aws-sdk-go-v2/service/sts v1.41.7/go.mod h1:sks5UWBhEuWYDPdwlnRFn1w7xWdH29Jcpe+/PJQefEs=
github.com/aws/smithy-go v1.24.2 h1:FzA3bu/nt/vDvmnkg+R8Xl46gmzEDam6mZ1hzmwXFng=
github.com/aws/smithy-go v1.24.2/go.mod h1:YE2RhdIuDbA5E5bTdciG9KrW3+TiEONeUWCqxX9i1Fc=
github.com/blang/semver v3.5.1+incompatible h1:cQNTCjp13qL8KC3Nbxr/y2Bqb63oX6wdnnjpJbkM4JQ=
github.com/blang/semver v3.5.1+incompatible/go.mod h1:kRBLl5iJ+tD4TcOOxsy/0fnwebNt5EWlYSAyrTnjyyk=
github.com/bufbuild/protocompile v0.14.1 h1:iA73zAf/fyljNjQKwYzUHD6AD4R8KMasmwa/FBatYVw=
github.com/bufbuild/protocompile v0.14.1/go.mod h1:ppVdAIhbr2H8asPk6k4pY7t9zB1OU5DoEw9xY/FUi1c=
github.com/cenkalti/backoff/v4 v4.3.0 h1:MyRJ/UdXutAwSAT+s3wNd7MfTIcy71VQueUuFK343L8=
github.com/cenkalti/backoff/v4 v4.3.0/go.mod h1:Y3VNntkOUPxTVeUxJ/G5vcM//AlwfmyYozVcomhLiZE=
github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=
github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
github.com/cloudflare/circl v1.6.3 h1:9GPOhQGF9MCYUeXyMYlqTR6a5gTrgR/fBLXvUgtVcg8=
github.com/cloudflare/circl v1.6.3/go.mod h1:2eXP6Qfat4O/Yhh8BznvKnJ+uzEoTQ6jVKJRn81BiS4=
github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
github.com/cncf/xds/go v0.0.0-20260202195803-dba9d589def2 h1:aBangftG7EVZoUb69Os8IaYg++6uMOdKK83QtkkvJik=
github.com/cncf/xds/go v0.0.0-20260202195803-dba9d589def2/go.mod h1:qwXFYgsP6T7XnJtbKlf1HP8AjxZZyzxMmc+Lq5GjlU4=
github.com/containerd/continuity v0.4.5 h1:ZRoN1sXq9u7V6QoHMcVWGhOwDFqZ4B9i5H6un1Wh0x4=
github.com/containerd/continuity v0.4.5/go.mod h1:/lNJvtJKUQStBzpVQ1+rasXO1LAWtUQssk28EZvJ3nE=
github.com/cpuguy83/go-md2man/v2 v2.0.7 h1:zbFlGlXEAKlwXpmvle3d8Oe3YnkKIK4xSRTd3sHPnBo=
github.com/cpuguy83/go-md2man/v2 v2.0.7/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=
github.com/cyphar/filepath-securejoin v0.4.1 h1:JyxxyPEaktOD+GAnqIqTf9A8tHyAG22rowi7HkoSU1s=
github.com/cyphar/filepath-securejoin v0.4.1/go.mod h1:Sdj7gXlvMcPZsbhwhQ33GguGLDGQL7h7bg04C/+u9jI=
github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
github.com/docker/cli v28.0.4+incompatible h1:pBJSJeNd9QeIWPjRcV91RVJihd/TXB77q1ef64XEu4A=
github.com/docker/cli v28.0.4+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
github.com/docker/cli v29.2.0+incompatible h1:9oBd9+YM7rxjZLfyMGxjraKBKE4/nVyvVfN4qNl9XRM=
github.com/docker/docker v28.0.4+incompatible h1:JNNkBctYKurkw6FrHfKqY0nKIDf5nrbxjVBtS+cdcok=
github.com/docker/docker v28.0.4+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
github.com/docker/go-connections v0.5.0 h1:USnMq7hx7gwdVZq1L49hLXaFtUdTADjXGp+uj1Br63c=
github.com/docker/go-connections v0.5.0/go.mod h1:ov60Kzw0kKElRwhNs9UlUHAE/F9Fe6GLaXnqyDdmEXc=
github.com/docker/go-connections v0.6.0 h1:LlMG9azAe1TqfR7sO+NJttz1gy6KO7VJBh+pMmjSD94=
github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4=
github.com/docker/go-units v0.5.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk=
github.com/emirpasic/gods v1.18.1 h1:FXtiHYKDGKCW2KzwZKx0iC0PQmdlorYgdFG9jPXJ1Bc=
github.com/emirpasic/gods v1.18.1/go.mod h1:8tpGGwCnJ5H4r6BWwaV6OrWmMoPhUl5jm/FMNAnJvWQ=
github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
github.com/envoyproxy/go-control-plane v0.9.4/go.mod h1:6rpuAdCZL397s3pYoYcLgu1mIlRU8Am5FuJP05cCM98=
github.com/envoyproxy/go-control-plane v0.14.0 h1:hbG2kr4RuFj222B6+7T83thSPqLjwBIfQawTkC++2HA=
github.com/envoyproxy/go-control-plane v0.14.0/go.mod h1:NcS5X47pLl/hfqxU70yPwL9ZMkUlwlKxtAohpi2wBEU=
github.com/envoyproxy/go-control-plane/envoy v1.37.0 h1:u3riX6BoYRfF4Dr7dwSOroNfdSbEPe9Yyl09/B6wBrQ=
github.com/envoyproxy/go-control-plane/envoy v1.37.0/go.mod h1:DReE9MMrmecPy+YvQOAOHNYMALuowAnbjjEMkkWOi6A=
github.com/envoyproxy/go-control-plane/ratelimit v0.1.0 h1:/G9QYbddjL25KvtKTv3an9lx6VBE2cnb8wp1vEGNYGI=
github.com/envoyproxy/go-control-plane/ratelimit v0.1.0/go.mod h1:Wk+tMFAFbCXaJPzVVHnPgRKdUdwW/KdbRt94AzgRee4=
github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c=
github.com/envoyproxy/protoc-gen-validate v1.3.3 h1:MVQghNeW+LZcmXe7SY1V36Z+WFMDjpqGAGacLe2T0ds=
github.com/envoyproxy/protoc-gen-validate v1.3.3/go.mod h1:TsndJ/ngyIdQRhMcVVGDDHINPLWB7C82oDArY51KfB0=
github.com/fatih/color v1.10.0/go.mod h1:ELkj/draVOlAH/xkhN6mQ50Qd0MPOk5AAr3maGEBuJM=
github.com/fatih/color v1.13.0/go.mod h1:kLAiJbzzSOZDVNGyDpeOxJ47H46qBXwg5ILebYFFOfk=
github.com/fatih/color v1.18.0 h1:S8gINlzdQ840/4pfAwic/ZE0djQEH3wM94VfqLTZcOM=
github.com/fatih/color v1.18.0/go.mod h1:4FelSpRwEGDpQ12mAdzqdOukCy4u8WUtOY6lkT/6HfU=
github.com/felixge/httpsnoop v1.0.4 h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg=
github.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U=
github.com/getsops/gopgagent v0.0.0-20241224165529-7044f28e491e h1:y/1nzrdF+RPds4lfoEpNhjfmzlgZtPqyO3jMzrqDQws=
github.com/getsops/gopgagent v0.0.0-20241224165529-7044f28e491e/go.mod h1:awFzISqLJoZLm+i9QQ4SgMNHDqljH6jWV0B36V5MrUM=
github.com/getsops/sops/v3 v3.12.1 h1:DZzLNJx6EH4SZvMjI1Y814WIcOQNUtOP3WgDsHNqQTU=
github.com/getsops/sops/v3 v3.12.1/go.mod h1:Bs/geuL5shRiXi194TQaGFiLvzVpA6U8tTYRd84qdvM=
github.com/getsops/sops/v3 v3.12.2 h1:4ctEFDNpAAubW8EMICytX8+BFDBSFJkrKvQ9ahSs0a4=
github.com/getsops/sops/v3 v3.12.2/go.mod h1:BACmHQl0J8nPNXBDSJKRT5oUdZx36CkbohGDj9+bD9M=
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 h1:+zs/tPmkDkHx3U66DAb0lQFJrpS6731Oaa12ikc+DiI=
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376/go.mod h1:an3vInlBmSxCcxctByoQdvwPiA7DTK7jaaFDBTtu0ic=
github.com/go-git/go-billy/v5 v5.6.2 h1:6Q86EsPXMa7c3YZ3aLAQsMA0VlWmy43r6FHqa/UNbRM=
github.com/go-git/go-billy/v5 v5.6.2/go.mod h1:rcFC2rAsp/erv7CMz9GczHcuD0D32fWzH+MJAU+jaUU=
github.com/go-git/go-git/v5 v5.14.0 h1:/MD3lCrGjCen5WfEAzKg00MJJffKhC8gzS80ycmCi60=
github.com/go-git/go-git/v5 v5.14.0/go.mod h1:Z5Xhoia5PcWA3NF8vRLURn9E5FRhSl7dGj9ItW3Wk5k=
github.com/go-jose/go-jose/v4 v4.1.3 h1:CVLmWDhDVRa6Mi/IgCgaopNosCaHz7zrMeF9MlZRkrs=
github.com/go-jose/go-jose/v4 v4.1.3/go.mod h1:x4oUasVrzR7071A4TnHLGSPpNOm2a21K9Kf04k1rs08=
github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
github.com/go-logr/logr v1.4.3 h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI=
github.com/go-logr/logr v1.4.3/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=
github.com/go-playground/assert/v2 v2.0.1/go.mod h1:VDjEfimB/XKnb+ZQfWdccd7VUvScMdVu0Titje2rxJ4=
github.com/go-playground/locales v0.13.0/go.mod h1:taPMhCMXrRLJO55olJkUXHZBHCxTMfnGwq/HNwmWNS8=
github.com/go-playground/universal-translator v0.17.0/go.mod h1:UkSxE5sNxxRwHyU+Scu5vgOQjsIJAF8j9muTVoKLVtA=
github.com/go-playground/validator/v10 v10.4.1/go.mod h1:nlOn6nFhuKACm19sB/8EGNn9GlaMV7XkbRSipzJ0Ii4=
github.com/go-test/deep v1.1.1 h1:0r/53hagsehfO4bzD2Pgr/+RgHqhmf+k1Bpse2cTu1U=
github.com/go-test/deep v1.1.1/go.mod h1:5C2ZWiW0ErCdrYzpqxLbTX7MG14M9iiw8DgHncVwcsE=
github.com/go-viper/mapstructure/v2 v2.4.0 h1:EBsztssimR/CONLSZZ04E8qAkxNYq4Qp9LvH92wZUgs=
github.com/go-viper/mapstructure/v2 v2.4.0/go.mod h1:oJDH3BJKyqBA2TXFhDsKDGDTlndYOZ6rGS0BRZIxGhM=
github.com/goccy/go-yaml v1.9.8/go.mod h1:JubOolP3gh0HpiBc4BLRD4YmjEjHAmIIB2aaXKkTfoE=
github.com/goccy/go-yaml v1.19.2 h1:PmFC1S6h8ljIz6gMRBopkjP1TVT7xuwrButHID66PoM=
github.com/goccy/go-yaml v1.19.2/go.mod h1:XBurs7gK8ATbW4ZPGKgcbrY1Br56PdM69F7LkFRi1kA=
github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
github.com/golang-jwt/jwt/v5 v5.3.1 h1:kYf81DTWFe7t+1VvL7eS+jKFVWaUnK9cB1qbwn63YCY=
github.com/golang-jwt/jwt/v5 v5.3.1/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE=
github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 h1:f+oWsMOmNPc8JmEHVZIycC7hBoQxHH9pNKQORJNozsQ=
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8/go.mod h1:wcDNUvekVysuuOpQKo3191zZyTpiI6se1N1ULghS0sw=
github.com/golang/mock v1.1.1/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
github.com/golang/protobuf v1.1.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
github.com/golang/protobuf v1.3.3/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw=
github.com/golang/protobuf v1.4.0-rc.1/go.mod h1:ceaxUfeHdC40wWswd/P6IGgMaK3YpKi5j83Wpe3EHw8=
github.com/golang/protobuf v1.4.0-rc.1.0.20200221234624-67d41d38c208/go.mod h1:xKAWHe0F5eneWXFV3EuXVDTCmh+JuBKY0li0aMyXATA=
github.com/golang/protobuf v1.4.0-rc.2/go.mod h1:LlEzMj4AhA7rCAGe4KMBDvJI+AwstrUpVNzEA03Pprs=
github.com/golang/protobuf v1.4.0-rc.4.0.20200313231945-b860323f09d0/go.mod h1:WU3c8KckQ9AFe+yFwt9sWVRKCVIyN9cPHBJSNnbL67w=
github.com/golang/protobuf v1.4.0/go.mod h1:jodUvKwWbYaEsadDk5Fwe5c77LiNKVO9IDvqG2KuDX0=
github.com/golang/protobuf v1.4.2/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI=
github.com/golang/protobuf v1.5.0/go.mod h1:FsONVRAS9T7sI+LIUmWTfcYkHO4aIWwzhcaSAoJOfIk=
github.com/golang/protobuf v1.5.2/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY=
github.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek=
github.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6rSs7xps=
github.com/golang/snappy v0.0.1/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q=
github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M=
github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
github.com/google/go-cmp v0.5.2/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
github.com/google/martian/v3 v3.3.3 h1:DIhPTQrbPkgs2yJYdXU/eNACCG5DVQjySNRNlflZ9Fc=
github.com/google/martian/v3 v3.3.3/go.mod h1:iEPrYcgCF7jA9OtScMFQyAlZZ4YXTKEtJ1E6RWzmBA0=
github.com/google/s2a-go v0.1.9 h1:LGD7gtMgezd8a/Xak7mEWL0PjoTQFvpRudN895yqKW0=
github.com/google/s2a-go v0.1.9/go.mod h1:YA0Ei2ZQL3acow2O62kdp9UlnvMmU7kA6Eutn0dXayM=
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 h1:El6M4kTTCOh6aBiKaUGG7oYTSPP8MxqL4YI3kZKwcP4=
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510/go.mod h1:pupxD2MaaD3pAXIBCelhxNneeOaAeabZDe5s4K6zSpQ=
github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
github.com/googleapis/enterprise-certificate-proxy v0.3.12 h1:Fg+zsqzYEs1ZnvmcztTYxhgCBsx3eEhEwQ1W/lHq/sQ=
github.com/googleapis/enterprise-certificate-proxy v0.3.12/go.mod h1:vqVt9yG9480NtzREnTlmGSBmFrA+bzb0yl0TxoBQXOg=
github.com/googleapis/gax-go/v2 v2.17.0 h1:RksgfBpxqff0EZkDWYuz9q/uWsTVz+kf43LsZ1J6SMc=
github.com/googleapis/gax-go/v2 v2.17.0/go.mod h1:mzaqghpQp4JDh3HvADwrat+6M3MOIDp5YKHhb9PAgDY=
github.com/goware/prefixer v0.0.0-20160118172347-395022866408 h1:Y9iQJfEqnN3/Nce9cOegemcy/9Ai5k3huT6E80F3zaw=
github.com/goware/prefixer v0.0.0-20160118172347-395022866408/go.mod h1:PE1ycukgRPJ7bJ9a1fdfQ9j8i/cEcRAoLZzbxYpNB/s=
github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I=
github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
github.com/hashicorp/go-checkpoint v0.5.0 h1:MFYpPZCnQqQTE18jFwSII6eUQrD/oxMFp3mlgcqk5mU=
github.com/hashicorp/go-checkpoint v0.5.0/go.mod h1:7nfLNL10NsxqO4iWuW6tWW0HjZuDrwkBuEQsVcpCOgg=
github.com/hashicorp/go-cleanhttp v0.5.0/go.mod h1:JpRdi6/HCYpAwUzNwuwqhbovhLtngrth3wmdIIUrZ80=
github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ=
github.com/hashicorp/go-cleanhttp v0.5.2/go.mod h1:kO/YDlP8L1346E6Sodw+PrpBSV4/SoxCXGY6BqNFT48=
github.com/hashicorp/go-cty v1.5.0 h1:EkQ/v+dDNUqnuVpmS5fPqyY71NXVgT5gf32+57xY8g0=
github.com/hashicorp/go-cty v1.5.0/go.mod h1:lFUCG5kd8exDobgSfyj4ONE/dc822kiYMguVKdHGMLM=
github.com/hashicorp/go-hclog v1.6.3 h1:Qr2kF+eVWjTiYmU7Y31tYlP1h0q/X3Nl3tPGdaB11/k=
github.com/hashicorp/go-hclog v1.6.3/go.mod h1:W4Qnvbt70Wk/zYJryRzDRU/4r0kIg0PVHBcfoyhpF5M=
github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=
github.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9/fmwbPZ6JB6eMoM=
github.com/hashicorp/go-plugin v1.7.0 h1:YghfQH/0QmPNc/AZMTFE3ac8fipZyZECHdDPshfk+mA=
github.com/hashicorp/go-plugin v1.7.0/go.mod h1:BExt6KEaIYx804z8k4gRzRLEvxKVb+kn0NMcihqOqb8=
github.com/hashicorp/go-retryablehttp v0.7.8 h1:ylXZWnqa7Lhqpk0L1P1LzDtGcCR0rPVUrx/c8Unxc48=
github.com/hashicorp/go-retryablehttp v0.7.8/go.mod h1:rjiScheydd+CxvumBsIrFKlx3iS0jrZ7LvzFGFmuKbw=
github.com/hashicorp/go-rootcerts v1.0.2 h1:jzhAVGtqPKbwpyCPELlgNWhE1znq+qwJtW5Oi2viEzc=
github.com/hashicorp/go-rootcerts v1.0.2/go.mod h1:pqUvnprVnM5bf7AOirdbb01K4ccR319Vf4pU3K5EGc8=
github.com/hashicorp/go-secure-stdlib/parseutil v0.2.0 h1:U+kC2dOhMFQctRfhK0gRctKAPTloZdMU5ZJxaesJ/VM=
github.com/hashicorp/go-secure-stdlib/parseutil v0.2.0/go.mod h1:Ll013mhdmsVDuoIXVfBtvgGJsXDYkTw1kooNcoCXuE0=
github.com/hashicorp/go-secure-stdlib/strutil v0.1.2 h1:kes8mmyCpxJsI7FTwtzRqEy9CdjCtrXrXGuOpxEA7Ts=
github.com/hashicorp/go-secure-stdlib/strutil v0.1.2/go.mod h1:Gou2R9+il93BqX25LAKCLuM+y9U2T4hlwvT1yprcna4=
github.com/hashicorp/go-sockaddr v1.0.7 h1:G+pTkSO01HpR5qCxg7lxfsFEZaG+C0VssTy/9dbT+Fw=
github.com/hashicorp/go-sockaddr v1.0.7/go.mod h1:FZQbEYa1pxkQ7WLpyXJ6cbjpT8q0YgQaK/JakXqGyWw=
github.com/hashicorp/go-uuid v1.0.0/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
github.com/hashicorp/go-uuid v1.0.3 h1:2gKiV6YVmrJ1i2CKKa9obLvRieoRGviZFL26PcT/Co8=
github.com/hashicorp/go-uuid v1.0.3/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
github.com/hashicorp/go-version v1.7.0 h1:5tqGy27NaOTB8yJKUZELlFAS/LTKJkrmONwQKeRZfjY=
github.com/hashicorp/go-version v1.7.0/go.mod h1:fltr4n8CU8Ke44wwGCBoEymUuxUHl09ZGVZPK5anwXA=
github.com/hashicorp/hc-install v0.9.2 h1:v80EtNX4fCVHqzL9Lg/2xkp62bbvQMnvPQ0G+OmtO24=
github.com/hashicorp/hc-install v0.9.2/go.mod h1:XUqBQNnuT4RsxoxiM9ZaUk0NX8hi2h+Lb6/c0OZnC/I=
github.com/hashicorp/hcl v1.0.1-vault-7 h1:ag5OxFVy3QYTFTJODRzTKVZ6xvdfLLCA1cy/Y6xGI0I=
github.com/hashicorp/hcl v1.0.1-vault-7/go.mod h1:XYhtn6ijBSAj6n4YqAaf7RBPS4I06AItNorpy+MoQNM=
github.com/hashicorp/hcl/v2 v2.23.0 h1:Fphj1/gCylPxHutVSEOf2fBOh1VE4AuLV7+kbJf3qos=
github.com/hashicorp/hcl/v2 v2.23.0/go.mod h1:62ZYHrXgPoX8xBnzl8QzbWq4dyDsDtfCRgIq1rbJEvA=
github.com/hashicorp/logutils v1.0.0 h1:dLEQVugN8vlakKOUE3ihGLTZJRB4j+M2cdTm/ORI65Y=
github.com/hashicorp/logutils v1.0.0/go.mod h1:QIAnNjmIWmVIIkWDTG1z5v++HQmx9WQRO+LraFDTW64=
github.com/hashicorp/terraform-exec v0.23.0 h1:MUiBM1s0CNlRFsCLJuM5wXZrzA3MnPYEsiXmzATMW/I=
github.com/hashicorp/terraform-exec v0.23.0/go.mod h1:mA+qnx1R8eePycfwKkCRk3Wy65mwInvlpAeOwmA7vlY=
github.com/hashicorp/terraform-json v0.25.0 h1:rmNqc/CIfcWawGiwXmRuiXJKEiJu1ntGoxseG1hLhoQ=
github.com/hashicorp/terraform-json v0.25.0/go.mod h1:sMKS8fiRDX4rVlR6EJUMudg1WcanxCMoWwTLkgZP/vc=
github.com/hashicorp/terraform-plugin-framework v1.18.0 h1:Xy6OfqSTZfAAKXSlJ810lYvuQvYkOpSUoNMQ9l2L1RA=
github.com/hashicorp/terraform-plugin-framework v1.18.0/go.mod h1:eeFIf68PME+kenJeqSrIcpHhYQK0TOyv7ocKdN4Z35E=
github.com/hashicorp/terraform-plugin-go v0.30.0 h1:VmEiD0n/ewxbvV5VI/bYwNtlSEAXtHaZlSnyUUuQK6k=
github.com/hashicorp/terraform-plugin-go v0.30.0/go.mod h1:8d523ORAW8OHgA9e8JKg0ezL3XUO84H0A25o4NY/jRo=
github.com/hashicorp/terraform-plugin-log v0.10.0 h1:eu2kW6/QBVdN4P3Ju2WiB2W3ObjkAsyfBsL3Wh1fj3g=
github.com/hashicorp/terraform-plugin-log v0.10.0/go.mod h1:/9RR5Cv2aAbrqcTSdNmY1NRHP4E3ekrXRGjqORpXyB0=
github.com/hashicorp/terraform-plugin-sdk/v2 v2.37.0 h1:NFPMacTrY/IdcIcnUB+7hsore1ZaRWU9cnB6jFoBnIM=
github.com/hashicorp/terraform-plugin-sdk/v2 v2.37.0/go.mod h1:QYmYnLfsosrxjCnGY1p9c7Zj6n9thnEE+7RObeYs3fA=
github.com/hashicorp/terraform-plugin-testing v1.13.2 h1:mSotG4Odl020vRjIenA3rggwo6Kg6XCKIwtRhYgp+/M=
github.com/hashicorp/terraform-plugin-testing v1.13.2/go.mod h1:WHQ9FDdiLoneey2/QHpGM/6SAYf4A7AZazVg7230pLE=
github.com/hashicorp/terraform-registry-address v0.4.0 h1:S1yCGomj30Sao4l5BMPjTGZmCNzuv7/GDTDX99E9gTk=
github.com/hashicorp/terraform-registry-address v0.4.0/go.mod h1:LRS1Ay0+mAiRkUyltGT+UHWkIqTFvigGn/LbMshfflE=
github.com/hashicorp/terraform-svchost v0.2.0 h1:wVc2vMiodOHvNZcQw/3y9af1XSomgjGSv+rv3BMCk7I=
github.com/hashicorp/terraform-svchost v0.2.0/go.mod h1:/98rrS2yZsbppi4VGVCjwYmh8dqsKzISqK7Hli+0rcQ=
github.com/hashicorp/vault/api v1.22.0 h1:+HYFquE35/B74fHoIeXlZIP2YADVboaPjaSicHEZiH0=
github.com/hashicorp/vault/api v1.22.0/go.mod h1:IUZA2cDvr4Ok3+NtK2Oq/r+lJeXkeCrHRmqdyWfpmGM=
github.com/hashicorp/yamux v0.1.2 h1:XtB8kyFOyHXYVFnwT5C3+Bdo8gArse7j2AQ0DA0Uey8=
github.com/hashicorp/yamux v0.1.2/go.mod h1:C+zze2n6e/7wshOZep2A70/aQU6QBRWJO/G6FT1wIns=
github.com/huaweicloud/huaweicloud-sdk-go-v3 v0.1.187 h1:J+U6+eUjIsBhefolFdZW5hQNJbkMj+7msxZrv56Cg2g=
github.com/huaweicloud/huaweicloud-sdk-go-v3 v0.1.187/go.mod h1:M+yna96Fx9o5GbIUnF3OvVvQGjgfVSyeJbV9Yb1z/wI=
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 h1:BQSFePA1RWJOlocH6Fxy8MmwDt+yVQYULKfN0RoTN8A=
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99/go.mod h1:1lJo3i6rXxKeerYnT8Nvf0QmHCRC1n8sfWVwXF2Frvo=
github.com/jhump/protoreflect v1.17.0 h1:qOEr613fac2lOuTgWN4tPAtLL7fUSbuJL5X5XumQh94=
github.com/jhump/protoreflect v1.17.0/go.mod h1:h9+vUUL38jiBzck8ck+6G/aeMX8Z4QUY/NiJPwPNi+8=
github.com/json-iterator/go v1.1.13-0.20220915233716-71ac16282d12 h1:9Nu54bhS/H/Kgo2/7xNSUuC5G28VR8ljfrLKU2G4IjU=
github.com/json-iterator/go v1.1.13-0.20220915233716-71ac16282d12/go.mod h1:TBzl5BIHNXfS9+C35ZyJaklL7mLDbgUkcgXzSLa8Tk0=
github.com/kevinburke/ssh_config v1.2.0 h1:x584FjTGwHzMwvHx18PXxbBVzfnxogHaAReU4gf13a4=
github.com/kevinburke/ssh_config v1.2.0/go.mod h1:CT57kijsi8u/K/BOFA39wgDQJ9CxiF4nAY/ojJ6r6mM=
github.com/keybase/go-keychain v0.0.1 h1:way+bWYa6lDppZoZcgMbYsvC7GxljxrskdNInRtuthU=
github.com/keybase/go-keychain v0.0.1/go.mod h1:PdEILRW3i9D8JcdM+FmY6RwkHGnhHxXwkPPMeUgOK1k=
github.com/klauspost/compress v1.13.6/go.mod h1:/3/Vjq9QcHkK5uEr5lBEmyoZ1iFhe47etQ6QUkpK6sk=
github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc=
github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw=
github.com/leodido/go-urn v1.2.0/go.mod h1:+8+nEpDfqqsY+g338gtMEUOtuK+4dEMhiQEgxpxOKII=
github.com/lib/pq v1.11.2 h1:x6gxUeu39V0BHZiugWe8LXZYZ+Utk7hSJGThs8sdzfs=
github.com/lib/pq v1.11.2/go.mod h1:/p+8NSbOcwzAEI7wiMXFlgydTwcgTr3OSKMsD2BitpA=
github.com/mattn/go-colorable v0.1.8/go.mod h1:u6P/XSegPjTcexA+o6vUJrdnUu04hMope9wVRipJSqc=
github.com/mattn/go-colorable v0.1.9/go.mod h1:u6P/XSegPjTcexA+o6vUJrdnUu04hMope9wVRipJSqc=
github.com/mattn/go-colorable v0.1.12/go.mod h1:u5H1YNBxpqRaxsYJYSkiCWKzEfiAb1Gb520KVy5xxl4=
github.com/mattn/go-colorable v0.1.14 h1:9A9LHSqF/7dyVVX6g0U9cwm9pG3kP9gSzcuIPHPsaIE=
github.com/mattn/go-colorable v0.1.14/go.mod h1:6LmQG8QLFO4G5z1gPvYEzlUgJ2wF+stgPZH1UqBm1s8=
github.com/mattn/go-isatty v0.0.12/go.mod h1:cbi8OIDigv2wuxKPP5vlRcQ1OAZbq2CE4Kysco4FUpU=
github.com/mattn/go-isatty v0.0.14/go.mod h1:7GGIvUiUoEMVVmxf/4nioHXj79iQHKdU27kJ6hsGG94=
github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
github.com/mitchellh/copystructure v1.2.0 h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw=
github.com/mitchellh/copystructure v1.2.0/go.mod h1:qLl+cE2AmVv+CoeAwDPye/v+N2HKCj9FbZEVFJRxO9s=
github.com/mitchellh/go-homedir v1.1.0 h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y=
github.com/mitchellh/go-homedir v1.1.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
github.com/mitchellh/go-testing-interface v1.14.1 h1:jrgshOhYAUVNMAJiKbEu7EqAwgJJ2JqpQmpLJOu07cU=
github.com/mitchellh/go-testing-interface v1.14.1/go.mod h1:gfgS7OtZj6MA4U1UrDRp04twqAjfvlZyCfX3sDjEym8=
github.com/mitchellh/go-wordwrap v1.0.1 h1:TLuKupo69TCn6TQSyGxwI1EblZZEsQ0vMlAFQflz0v0=
github.com/mitchellh/go-wordwrap v1.0.1/go.mod h1:R62XHJLzvMFRBbcrT7m7WgmE1eOyTSsCt+hzestvNj0=
github.com/mitchellh/mapstructure v1.5.0 h1:jeMsZIYE/09sWLaz43PL7Gy6RuMjD2eJVyuac5Z2hdY=
github.com/mitchellh/mapstructure v1.5.0/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo=
github.com/mitchellh/reflectwalk v1.0.2 h1:G2LzWKi524PWgd3mLHV8Y5k7s6XUvT0Gef6zxSIeXaQ=
github.com/mitchellh/reflectwalk v1.0.2/go.mod h1:mSTlrgnPZtwu0c4WaC2kGObEpuNDbx0jmZXqmk4esnw=
github.com/moby/docker-image-spec v1.3.1 h1:jMKff3w6PgbfSa69GfNg+zN/XLhfXJGnEx3Nl2EsFP0=
github.com/moby/docker-image-spec v1.3.1/go.mod h1:eKmb5VW8vQEh/BAr2yvVNvuiJuY6UIocYsFu/DxxRpo=
github.com/moby/sys/user v0.3.0 h1:9ni5DlcW5an3SvRSx4MouotOygvzaXbaSrc/wGDFWPo=
github.com/moby/sys/user v0.3.0/go.mod h1:bG+tYYYJgaMtRKgEmuueC0hJEAZWwtIbZTB+85uoHjs=
github.com/moby/term v0.5.2 h1:6qk3FJAFDs6i/q3W/pQ97SX192qKfZgGjCQqfCJkgzQ=
github.com/moby/term v0.5.2/go.mod h1:d3djjFCrjnB+fl8NJux+EJzu0msscUP+f8it8hPkFLc=
github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
github.com/montanaflynn/stats v0.0.0-20171201202039-1bf9dbcd8cbe/go.mod h1:wL8QJuTMNUDYhXwkmfOly8iTdp5TEcJFWZD2D7SIkUc=
github.com/oklog/run v1.2.0 h1:O8x3yXwah4A73hJdlrwo/2X6J62gE5qTMusH0dvz60E=
github.com/oklog/run v1.2.0/go.mod h1:mgDbKRSwPhJfesJ4PntqFUbKQRZ50NgmZTSPlFA0YFk=
github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
github.com/opencontainers/image-spec v1.1.1 h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040=
github.com/opencontainers/image-spec v1.1.1/go.mod h1:qpqAh3Dmcf36wStyyWU+kCeDgrGnAve2nCC8+7h8Q0M=
github.com/opencontainers/runc v1.2.8 h1:RnEICeDReapbZ5lZEgHvj7E9Q3Eex9toYmaGBsbvU5Q=
github.com/opencontainers/runc v1.2.8/go.mod h1:cC0YkmZcuvr+rtBZ6T7NBoVbMGNAdLa/21vIElJDOzI=
github.com/ory/dockertest/v3 v3.12.0 h1:3oV9d0sDzlSQfHtIaB5k6ghUCVMVLpAY8hwrqoCyRCw=
github.com/ory/dockertest/v3 v3.12.0/go.mod h1:aKNDTva3cp8dwOWwb9cWuX84aH5akkxXRvO7KCwWVjE=
github.com/pjbgf/sha1cd v0.3.2 h1:a9wb0bp1oC2TGwStyn0Umc/IGKQnEgF0vVaZ8QF8eo4=
github.com/pjbgf/sha1cd v0.3.2/go.mod h1:zQWigSxVmsHEZow5qaLtPYxpcKMMQpa09ixqBxuCS6A=
github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c h1:+mdjkGKdHQG3305AYmdv1U2eRNDiU2ErMBj1gwrq8eQ=
github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c/go.mod h1:7rwL4CYBLnjLxUqIJNnCWiEdr3bn6IUYi15bNlnbCCU=
github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 h1:GFCKgmp0tecUJ0sJuv4pzYCqS9+RGSn52M3FUwPs+uo=
github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10/go.mod h1:t/avpk3KcrXxUnYOhZhMXJlSEyie6gQbtLq5NM3loB8=
github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U=
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=
github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc=
github.com/russross/blackfriday/v2 v2.1.0 h1:JIOH55/0cWyOuilr9/qlrm0BSXldqnqwMsf35Ld67mk=
github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
github.com/ryanuber/go-glob v1.0.0 h1:iQh3xXAumdQ+4Ufa5b25cRpC5TYKlno6hsv6Cb3pkBk=
github.com/ryanuber/go-glob v1.0.0/go.mod h1:807d1WSdnB0XRJzKNil9Om6lcp/3a0v4qIHxIXzX/Yc=
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 h1:n661drycOFuPLCN3Uc8sB6B/s6Z4t2xvBgU1htSHuq8=
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3/go.mod h1:A0bzQcvG0E7Rwjx0REVgAGH58e96+X0MeOfepqsbeW4=
github.com/shopspring/decimal v1.4.0/go.mod h1:gawqmDU56v4yIKSwfBSFip1HdCCXN8/+DMd9qYNcwME=
github.com/sirupsen/logrus v1.9.4 h1:TsZE7l11zFCLZnZ+teH4Umoq5BhEIfIzfRDZ1Uzql2w=
github.com/sirupsen/logrus v1.9.4/go.mod h1:ftWc9WdOfJ0a92nsE2jF5u5ZwH8Bv2zdeOC42RjbV2g=
github.com/skeema/knownhosts v1.3.1 h1:X2osQ+RAjK76shCbvhHHHVl3ZlgDm8apHEHFqRjnBY8=
github.com/skeema/knownhosts v1.3.1/go.mod h1:r7KTdC8l4uxWRyK2TpQZ/1o5HaSzh06ePQNxPwTcfiY=
github.com/spiffe/go-spiffe/v2 v2.6.0 h1:l+DolpxNWYgruGQVV0xsfeya3CsC7m8iBzDnMpsbLuo=
github.com/spiffe/go-spiffe/v2 v2.6.0/go.mod h1:gm2SeUoMZEtpnzPNs2Csc0D/gX33k1xIx7lEzqblHEs=
github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=
github.com/stretchr/objx v0.5.2/go.mod h1:FRsXN1f5AsAjCGJKqEizvkpNtU+EGNCLh3NxZ/8L+MA=
github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
github.com/stretchr/testify v1.7.2/go.mod h1:R6va5+xMeoiuVRoj+gSkQ7d3FALtqAAGI1FQKckRals=
github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
github.com/stretchr/testify v1.8.2/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
github.com/tjfoc/gmsm v1.4.1 h1:aMe1GlZb+0bLjn+cKTPEvvn9oUEBlJitaZiiBwsbgho=
github.com/tjfoc/gmsm v1.4.1/go.mod h1:j4INPkHWMrhJb38G+J6W4Tw0AbuN8Thu3PbdVYhVcTE=
github.com/urfave/cli v1.22.17 h1:SYzXoiPfQjHBbkYxbew5prZHS1TOLT3ierW8SYLqtVQ=
github.com/urfave/cli v1.22.17/go.mod h1:b0ht0aqgH/6pBYzzxURyrM4xXNgsoT/n2ZzwQiEhNVo=
github.com/vmihailenco/msgpack v3.3.3+incompatible/go.mod h1:fy3FlTQTDXWkZ7Bh6AcGMlsjHatGryHQYUTf1ShIgkk=
github.com/vmihailenco/msgpack v4.0.4+incompatible h1:dSLoQfGFAo3F6OoNhwUmLwVgaUXK79GlxNBwueZn0xI=
github.com/vmihailenco/msgpack v4.0.4+incompatible/go.mod h1:fy3FlTQTDXWkZ7Bh6AcGMlsjHatGryHQYUTf1ShIgkk=
github.com/vmihailenco/msgpack/v5 v5.4.1 h1:cQriyiUvjTwOHg8QZaPihLWeRAAVoCpE00IUPn0Bjt8=
github.com/vmihailenco/msgpack/v5 v5.4.1/go.mod h1:GaZTsDaehaPpQVyxrf5mtQlH+pc21PIudVV/E3rRQok=
github.com/vmihailenco/tagparser/v2 v2.0.0 h1:y09buUbR+b5aycVFQs/g70pqKVZNBmxwAhO7/IwNM9g=
github.com/vmihailenco/tagparser/v2 v2.0.0/go.mod h1:Wri+At7QHww0WTrCBeu4J6bNtoV6mEfg5OIWRZA9qds=
github.com/xanzy/ssh-agent v0.3.3 h1:+/15pJfg/RsTxqYcX6fHqOXZwwMP+2VyYWJeWM2qQFM=
github.com/xanzy/ssh-agent v0.3.3/go.mod h1:6dzNDKs0J9rVPHPhaGCukekBHKqfl+L3KghI1Bc68Uw=
github.com/xdg-go/pbkdf2 v1.0.0/go.mod h1:jrpuAogTd400dnrH08LKmI/xc1MbPOebTwRqcT5RDeI=
github.com/xdg-go/scram v1.1.2/go.mod h1:RT/sEzTbU5y00aCK8UOx6R7YryM0iF1N2MOmC3kKLN4=
github.com/xdg-go/stringprep v1.0.4/go.mod h1:mPGuuIYwz7CmR2bT9j4GbQqutWS1zV24gijq1dTyGkM=
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb h1:zGWFAtiMcyryUHoUjUJX0/lt1H2+i2Ka2n+D3DImSNo=
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb/go.mod h1:N2zxlSyiKSe5eX1tZViRH5QA0qijqEDrYZiPEAiq3wU=
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 h1:EzJWgHovont7NscjpAxXsDA8S8BMYve8Y5+7cuRE7R0=
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415/go.mod h1:GwrjFmJcFw6At/Gs6z4yjiIwzuJ1/+UwLxMQDVQXShQ=
github.com/xeipuuv/gojsonschema v1.2.0 h1:LhYJRs+L4fBtjZUfuSZIKGeVu0QRy8e5Xi7D17UxZ74=
github.com/xeipuuv/gojsonschema v1.2.0/go.mod h1:anYRn/JVcOK2ZgGU+IjEV4nwlhoK5sQluxsYJ78Id3Y=
github.com/youmark/pkcs8 v0.0.0-20181117223130-1be2e3e5546d/go.mod h1:rHwXgn7JulP+udvsHwJoVG1YGAP6VLg4y9I5dyZdqmA=
github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
github.com/zclconf/go-cty v1.16.4 h1:QGXaag7/7dCzb+odlGrgr+YmYZFaOCMW6DEpS+UD1eE=
github.com/zclconf/go-cty v1.16.4/go.mod h1:VvMs5i0vgZdhYawQNq5kePSpLAoz8u1xvZgrPIxfnZE=
github.com/zclconf/go-cty-debug v0.0.0-20240509010212-0d6042c53940 h1:4r45xpDWB6ZMSMNJFMOjqrGHynW3DIBuR2H9j0ug+Mo=
github.com/zclconf/go-cty-debug v0.0.0-20240509010212-0d6042c53940/go.mod h1:CmBdvvj3nqzfzJ6nTCIwDTPZ56aVGvDrmztiO5g3qrM=
go.mongodb.org/mongo-driver v1.13.1/go.mod h1:wcDf1JBCXy2mOW0bWHwO/IOYqdca1MPCwDtFu/Z9+eo=
go.mongodb.org/mongo-driver v1.17.9 h1:IexDdCuuNJ3BHrELgBlyaH9p60JXAvdzWR128q+U5tU=
go.mongodb.org/mongo-driver v1.17.9/go.mod h1:LlOhpH5NUEfhxcAwG0UEkMqwYcc4JU18gtCdGudk/tQ=
go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64=
go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y=
go.opentelemetry.io/contrib/detectors/gcp v1.40.0 h1:Awaf8gmW99tZTOWqkLCOl6aw1/rxAWVlHsHIZ3fT2sA=
go.opentelemetry.io/contrib/detectors/gcp v1.40.0/go.mod h1:99OY9ZCqyLkzJLTh5XhECpLRSxcZl+ZDKBEO+jMBFR4=
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.65.0 h1:XmiuHzgJt067+a6kwyAzkhXooYVv3/TOw9cM2VfJgUM=
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.65.0/go.mod h1:KDgtbWKTQs4bM+VPUr6WlL9m/WXcmkCcBlIzqxPGzmI=
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.65.0 h1:7iP2uCb7sGddAr30RRS6xjKy7AZ2JtTOPA3oolgVSw8=
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.65.0/go.mod h1:c7hN3ddxs/z6q9xwvfLPk+UHlWRQyaeR1LdgfL/66l0=
go.opentelemetry.io/otel v1.40.0 h1:oA5YeOcpRTXq6NN7frwmwFR0Cn3RhTVZvXsP4duvCms=
go.opentelemetry.io/otel v1.40.0/go.mod h1:IMb+uXZUKkMXdPddhwAHm6UfOwJyh4ct1ybIlV14J0g=
go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.39.0 h1:5gn2urDL/FBnK8OkCfD1j3/ER79rUuTYmCvlXBKeYL8=
go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.39.0/go.mod h1:0fBG6ZJxhqByfFZDwSwpZGzJU671HkwpWaNe2t4VUPI=
go.opentelemetry.io/otel/metric v1.40.0 h1:rcZe317KPftE2rstWIBitCdVp89A2HqjkxR3c11+p9g=
go.opentelemetry.io/otel/metric v1.40.0/go.mod h1:ib/crwQH7N3r5kfiBZQbwrTge743UDc7DTFVZrrXnqc=
go.opentelemetry.io/otel/sdk v1.40.0 h1:KHW/jUzgo6wsPh9At46+h4upjtccTmuZCFAc9OJ71f8=
go.opentelemetry.io/otel/sdk v1.40.0/go.mod h1:Ph7EFdYvxq72Y8Li9q8KebuYUr2KoeyHx0DRMKrYBUE=
go.opentelemetry.io/otel/sdk/metric v1.40.0 h1:mtmdVqgQkeRxHgRv4qhyJduP3fYJRMX4AtAlbuWdCYw=
go.opentelemetry.io/otel/sdk/metric v1.40.0/go.mod h1:4Z2bGMf0KSK3uRjlczMOeMhKU2rhUqdWNoKcYrtcBPg=
go.opentelemetry.io/otel/trace v1.40.0 h1:WA4etStDttCSYuhwvEa8OP8I5EWu24lkOzp+ZYblVjw=
go.opentelemetry.io/otel/trace v1.40.0/go.mod h1:zeAhriXecNGP/s2SEG3+Y8X9ujcJOTqQ5RgdEJcawiA=
go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
golang.org/x/crypto v0.0.0-20201012173705-84dcc777aaee/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
golang.org/x/crypto v0.48.0 h1:/VRzVqiRSggnhY7gNRxPauEQ5Drw9haKdM0jqfcCFts=
golang.org/x/crypto v0.48.0/go.mod h1:r0kV5h3qnFPlQnBSrULhlsRfryS2pmewsg+XfMgkVos=
golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU=
golang.org/x/lint v0.0.0-20190313153728-d0100b6bd8b3/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
golang.org/x/mod v0.32.0 h1:9F4d3PHLljb6x//jOyokMv3eX+YDeepZSEo3mFJy93c=
golang.org/x/mod v0.32.0/go.mod h1:SgipZ/3h2Ci89DlEtEXWUk/HteuRin+HHhN+WbNhguU=
golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
golang.org/x/net v0.0.0-20190213061140-3a22650c66bd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
golang.org/x/net v0.0.0-20201010224723-4f7140c49acb/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
golang.org/x/net v0.51.0 h1:94R/GTO7mt3/4wIKpcR5gkGmRLOuE/2hNGeWq/GBIFo=
golang.org/x/net v0.51.0/go.mod h1:aamm+2QF5ogm02fjy5Bb7CQ0WMt1/WVM7FtyaTLlA9Y=
golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
golang.org/x/oauth2 v0.35.0 h1:Mv2mzuHuZuY2+bkyWXIHMfhNdJAdwW3FuWeCPYN5GVQ=
golang.org/x/oauth2 v0.35.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20200116001909-b77594299b42/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20200223170610-d5e6a3e2c0ae/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.0.0-20210630005230-0f9fa26af87c/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.0.0-20210927094055-39ccf1dd6fa6/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.0.0-20220406163625-3f8b81556e12/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.0.0-20220503163025-988cb79eb6c6/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.41.0 h1:Ivj+2Cp/ylzLiEU89QhWblYnOE9zerudt9Ftecq2C6k=
golang.org/x/sys v0.41.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
golang.org/x/term v0.40.0 h1:36e4zGLqU4yhjlmxEaagx2KuYbJq3EwY8K943ZsHcvg=
golang.org/x/term v0.40.0/go.mod h1:w2P8uVp06p2iyKKuvXIm7N/y0UCRt3UfJTfZ7oOpglM=
golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
golang.org/x/text v0.3.8/go.mod h1:E6s5w1FMmriuDzIBO73fBruAKo1PCIq6d2Q6DHfQ8WQ=
golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
golang.org/x/text v0.34.0 h1:oL/Qq0Kdaqxa1KbNeMKwQq0reLCCaFtqu2eNuSeNHbk=
golang.org/x/text v0.34.0/go.mod h1:homfLqTYRFyVYemLBFl5GgL/DWEiH5wcsQ5gSh1yziA=
golang.org/x/time v0.14.0 h1:MRx4UaLrDotUKUdCIqzPC48t1Y9hANFKIRpNx+Te8PI=
golang.org/x/time v0.14.0/go.mod h1:eL/Oa2bBBK0TkX57Fyni+NgnyQQN4LitPmob2Hjnqw4=
golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
golang.org/x/tools v0.0.0-20190114222345-bf090417da8b/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
golang.org/x/tools v0.0.0-20190226205152-f727befe758c/go.mod h1:9Yl7xja0Znq3iFh3HoIrodX9oNMXvdceNzlUR8zjMvY=
golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
golang.org/x/tools v0.0.0-20190524140312-2c0ae7006135/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q=
golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
golang.org/x/tools v0.41.0 h1:a9b8iMweWG+S0OBnlU36rzLp20z1Rp10w+IY2czHTQc=
golang.org/x/tools v0.41.0/go.mod h1:XSY6eDqxVNiYgezAVqqCeihT4j1U2CCsqvH3WhQpnlg=
golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
gonum.org/v1/gonum v0.16.0 h1:5+ul4Swaf3ESvrOnidPp4GZbzf0mxVQpDCYUQE7OJfk=
gonum.org/v1/gonum v0.16.0/go.mod h1:fef3am4MQ93R2HHpKnLk4/Tbh/s0+wqD5nfa6Pnwy4E=
google.golang.org/api v0.269.0 h1:qDrTOxKUQ/P0MveH6a7vZ+DNHxJQjtGm/uvdbdGXCQg=
google.golang.org/api v0.269.0/go.mod h1:N8Wpcu23Tlccl0zSHEkcAZQKDLdquxK+l9r2LkwAauE=
google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
google.golang.org/appengine v1.6.8 h1:IhEN5q69dyKagZPYMSdIjS2HqprW324FRQZJcGqPAsM=
google.golang.org/appengine v1.6.8/go.mod h1:1jJ3jBArFh5pcgW8gCtRJnepW8FzD1V44FJffLiz/Ds=
google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc=
google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc=
google.golang.org/genproto v0.0.0-20260226221140-a57be14db171 h1:RxhCsti413yL0IjU9dVvuTbCISo8gs3RW1jPMStck+4=
google.golang.org/genproto v0.0.0-20260226221140-a57be14db171/go.mod h1:uhvzakVEqAuXU3TC2JCsxIRe5f77l+JySE3EqPoMyqM=
google.golang.org/genproto/googleapis/api v0.0.0-20260226221140-a57be14db171 h1:tu/dtnW1o3wfaxCOjSLn5IRX4YDcJrtlpzYkhHhGaC4=
google.golang.org/genproto/googleapis/api v0.0.0-20260226221140-a57be14db171/go.mod h1:M5krXqk4GhBKvB596udGL3UyjL4I1+cTbK0orROM9ng=
google.golang.org/genproto/googleapis/rpc v0.0.0-20260226221140-a57be14db171 h1:ggcbiqK8WWh6l1dnltU4BgWGIGo+EVYxCaAPih/zQXQ=
google.golang.org/genproto/googleapis/rpc v0.0.0-20260226221140-a57be14db171/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=
google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg=
google.golang.org/grpc v1.25.1/go.mod h1:c3i+UQWmh7LiEpx4sFZnkU36qjEYZ0imhYfXVyQciAY=
google.golang.org/grpc v1.31.0/go.mod h1:N36X2cJ7JwdamYAgDz+s+rVMFjt3numwzf/HckM8pak=
google.golang.org/grpc v1.79.1 h1:zGhSi45ODB9/p3VAawt9a+O/MULLl9dpizzNNpq7flY=
google.golang.org/grpc v1.79.1/go.mod h1:KmT0Kjez+0dde/v2j9vzwoAScgEPx/Bw1CYChhHLrHQ=
google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=
google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM=
google.golang.org/protobuf v1.20.1-0.20200309200217-e05f789c0967/go.mod h1:A+miEFZTKqfCUM6K7xSMQL9OKL/b6hQv+e19PK+JZNE=
google.golang.org/protobuf v1.21.0/go.mod h1:47Nbq4nVaFHyn7ilMalzfO3qCViNmqZ2kzikPIcrTAo=
google.golang.org/protobuf v1.23.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw=
google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=
google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
gopkg.in/ini.v1 v1.67.0/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k=
gopkg.in/ini.v1 v1.67.1 h1:tVBILHy0R6e4wkYOn3XmiITt/hEVH4TFMYvAX2Ytz6k=
gopkg.in/ini.v1 v1.67.1/go.mod h1:x/cyOwCgZqOkJoDIJ3c1KNHMo10+nLGAhh+kn3Zizss=
gopkg.in/warnings.v0 v0.1.2 h1:wFXVbFY8DY5/xOe1ECiWdKCzZlxgshcYVNkBHstARME=
gopkg.in/warnings.v0 v0.1.2/go.mod h1:jksf8JmL6Qr/oQM2OXTHunEvvTAsrWBLb6OOjuVWRNI=
gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
================================================
FILE: main.go
================================================
package main
import (
"context"
"flag"
"log"
"github.com/hashicorp/terraform-plugin-framework/providerserver"
"github.com/carlpett/terraform-provider-sops/sops"
)
func main() {
var debug bool
flag.BoolVar(&debug, "debug", false, "set to true to run the provider with support for debuggers like delve")
flag.Parse()
opts := providerserver.ServeOpts{
Address: "registry.terraform.io/carlpett/sops",
Debug: debug,
}
err := providerserver.Serve(context.Background(), sops.New, opts)
if err != nil {
log.Fatal(err.Error())
}
}
================================================
FILE: sops/data.go
================================================
package sops
import (
"fmt"
"io"
"os"
"path"
"strings"
"github.com/hashicorp/terraform-plugin-framework/types"
)
type summaryError struct {
Summary string
Err error
}
func (e summaryError) Error() string {
return fmt.Sprintf("%s: %s", e.Summary, e.Err.Error())
}
func newSummaryError(summary string, err error) summaryError {
return summaryError{
Summary: summary,
Err: err,
}
}
func getFileData(sourceFile types.String, inputType types.String) (data map[string]string, raw string, err error) {
sourceFileValue := sourceFile.ValueString()
content, err := os.ReadFile(sourceFileValue)
if err != nil {
return nil, "", newSummaryError("Error reading file", err)
}
var format string
if !inputType.IsNull() {
format = inputType.ValueString()
} else {
switch ext := path.Ext(sourceFileValue); ext {
case ".json":
format = "json"
case ".yaml", ".yml":
format = "yaml"
case ".env":
format = "dotenv"
case ".ini":
format = "ini"
default:
return nil, "", newSummaryError("Unknown file type", fmt.Errorf("Don't know how to decode file with extension %s, set input_type as appropriate", ext))
}
}
if err := validateInputType(format); err != nil {
return nil, "", newSummaryError("Invalid input type", err)
}
data, raw, err = readData(content, format)
if err != nil {
return nil, "", newSummaryError("Error reading data", err)
}
return data, raw, nil
}
func getExternalData(source types.String, inputType types.String) (data map[string]string, raw string, err error) {
content, err := io.ReadAll(strings.NewReader(source.ValueString()))
if err != nil {
return nil, "", newSummaryError("Error reading source", err)
}
format := inputType.ValueString()
if err := validateInputType(format); err != nil {
return nil, "", newSummaryError("Invalid input type", err)
}
data, raw, err = readData(content, format)
if err != nil {
return nil, "", newSummaryError("Error reading data", err)
}
return data, raw, nil
}
================================================
FILE: sops/data_sops_external.go
================================================
package sops
import (
"context"
"github.com/hashicorp/terraform-plugin-framework/datasource"
"github.com/hashicorp/terraform-plugin-framework/datasource/schema"
"github.com/hashicorp/terraform-plugin-framework/types"
)
var _ datasource.DataSource = &externalDataSource{}
func newExternalDataSource() datasource.DataSource {
return &externalDataSource{}
}
type externalDataSource struct{}
type externalDataSourceModel struct {
InputType types.String `tfsdk:"input_type"`
Source types.String `tfsdk:"source"`
Data types.Map `tfsdk:"data"`
Raw types.String `tfsdk:"raw"`
Id types.String `tfsdk:"id"`
}
func (d *externalDataSource) Metadata(_ context.Context, _ datasource.MetadataRequest, resp *datasource.MetadataResponse) {
resp.TypeName = "sops_external"
}
func (d *externalDataSource) Schema(_ context.Context, _ datasource.SchemaRequest, resp *datasource.SchemaResponse) {
resp.Schema = schema.Schema{
Description: "Read data from a sops-encrypted string. Useful if the data does not reside on disk locally (otherwise use `sops_file`).",
Attributes: map[string]schema.Attribute{
"input_type": schema.StringAttribute{
Description: "`yaml`, `json` `dotenv` (`.env`), `ini` or `raw`, depending on the structure of the un-encrypted data.",
Optional: true,
},
"source": schema.StringAttribute{
Description: "A string with sops-encrypted data",
Required: true,
},
"data": schema.MapAttribute{
Description: "Decrypted data",
Computed: true,
Sensitive: true,
ElementType: types.StringType,
},
"raw": schema.StringAttribute{
Description: "Raw decrypted content",
Computed: true,
Sensitive: true,
},
"id": schema.StringAttribute{
Description: "Unique identifier for this data source",
Computed: true,
},
},
}
}
func (d *externalDataSource) Read(ctx context.Context, req datasource.ReadRequest, resp *datasource.ReadResponse) {
var config externalDataSourceModel
diags := req.Config.Get(ctx, &config)
resp.Diagnostics.Append(diags...)
if resp.Diagnostics.HasError() {
return
}
data, raw, err := getExternalData(config.Source, config.InputType)
if err != nil {
if detailedErr, ok := err.(summaryError); ok {
resp.Diagnostics.AddError(detailedErr.Summary, detailedErr.Err.Error())
} else {
resp.Diagnostics.AddError("Failed to decrypt file", err.Error())
}
return
}
m, mapDiags := types.MapValueFrom(ctx, types.StringType, data)
resp.Diagnostics.Append(mapDiags...)
if resp.Diagnostics.HasError() {
return
}
config.Data = m
config.Raw = types.StringValue(raw)
config.Id = types.StringValue("-")
diags = resp.State.Set(ctx, config)
resp.Diagnostics.Append(diags...)
}
================================================
FILE: sops/data_sops_external_test.go
================================================
package sops
import (
"fmt"
"os"
"testing"
"github.com/hashicorp/terraform-plugin-testing/helper/resource"
)
const configTestDataSourceSopsExternal_basic = `
data "sops_external" "test_basic" {
source = file("%s/test-fixtures/basic.yaml")
input_type = "yaml"
}`
func TestDataSourceSopsExternal(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestDataSourceSopsExternal_basic, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("data.sops_external.test_basic", "data.hello", "world"),
resource.TestCheckResourceAttr("data.sops_external.test_basic", "data.integer", "0"),
resource.TestCheckResourceAttr("data.sops_external.test_basic", "data.float", "0.2"),
resource.TestCheckResourceAttr("data.sops_external.test_basic", "data.bool", "true"),
resource.TestCheckResourceAttr("data.sops_external.test_basic", "data.null_value", "null"),
),
},
},
})
}
const configTestDataSourceSopsExternal_nested = `
data "sops_external" "test_nested" {
source = file("%s/test-fixtures/nested.yaml")
input_type = "yaml"
}`
func TestDataSourceSopsExternal_nested(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestDataSourceSopsExternal_nested, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("data.sops_external.test_nested", "data.db.user", "foo"),
resource.TestCheckResourceAttr("data.sops_external.test_nested", "data.db.password", "bar"),
),
},
},
})
}
const configTestDataSourceSopsExternal_raw = `
data "sops_external" "test_raw" {
source = file("%s/test-fixtures/raw.txt")
input_type = "raw"
}`
func TestDataSourceSopsExternal_raw(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestDataSourceSopsExternal_raw, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("data.sops_external.test_raw", "raw", "Hello raw world!"),
),
},
},
})
}
const configTestDataSourceSopsExternal_simplelist = `
data "sops_external" "test_list" {
source = file("%s/test-fixtures/simple-list.yaml")
input_type = "yaml"
}`
func TestDataSourceSopsExternal_simplelist(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestDataSourceSopsExternal_simplelist, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("data.sops_external.test_list", "data.a_list.0", "val1"),
resource.TestCheckResourceAttr("data.sops_external.test_list", "data.a_list.1", "val2"),
resource.TestCheckResourceAttr("data.sops_external.test_list", "data.a_list.2", "null"),
),
},
},
})
}
const configTestDataSourceSopsExternal_complexlist = `
data "sops_external" "test_list" {
source = file("%s/test-fixtures/complex-list.yaml")
input_type = "yaml"
}`
func TestDataSourceSopsExternal_complexlist(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestDataSourceSopsExternal_complexlist, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("data.sops_external.test_list", "data.a_list.0.name", "foo"),
resource.TestCheckResourceAttr("data.sops_external.test_list", "data.a_list.0.index", "0"),
resource.TestCheckResourceAttr("data.sops_external.test_list", "data.a_list.0.value", "null"),
resource.TestCheckResourceAttr("data.sops_external.test_list", "data.a_list.1.name", "bar"),
resource.TestCheckResourceAttr("data.sops_external.test_list", "data.a_list.1.index", "1"),
),
},
},
})
}
const configTestDataSourceSopsExternal_json = `
data "sops_external" "test_json" {
source = file("%s/test-fixtures/basic.json")
input_type = "json"
}`
func TestDataSourceSopsExternal_json(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestDataSourceSopsExternal_json, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("data.sops_external.test_json", "data.hello", "world"),
resource.TestCheckResourceAttr("data.sops_external.test_json", "data.integer", "0"),
resource.TestCheckResourceAttr("data.sops_external.test_json", "data.float", "0.2"),
resource.TestCheckResourceAttr("data.sops_external.test_json", "data.bool", "true"),
resource.TestCheckResourceAttr("data.sops_external.test_json", "data.null", "null"),
),
},
},
})
}
================================================
FILE: sops/data_sops_file.go
================================================
package sops
import (
"context"
"github.com/hashicorp/terraform-plugin-framework/datasource"
"github.com/hashicorp/terraform-plugin-framework/datasource/schema"
"github.com/hashicorp/terraform-plugin-framework/types"
)
var _ datasource.DataSource = &fileDataSource{}
func newFileDataSource() datasource.DataSource {
return &fileDataSource{}
}
type fileDataSource struct{}
type fileDataSourceModel struct {
InputType types.String `tfsdk:"input_type"`
SourceFile types.String `tfsdk:"source_file"`
Data types.Map `tfsdk:"data"`
Raw types.String `tfsdk:"raw"`
Id types.String `tfsdk:"id"`
}
func (d *fileDataSource) Metadata(_ context.Context, _ datasource.MetadataRequest, resp *datasource.MetadataResponse) {
resp.TypeName = "sops_file"
}
func (d *fileDataSource) Schema(_ context.Context, _ datasource.SchemaRequest, resp *datasource.SchemaResponse) {
resp.Schema = schema.Schema{
Description: "Read data from a sops-encrypted file on disk.",
Attributes: map[string]schema.Attribute{
"input_type": schema.StringAttribute{
Description: "The provider will use the file extension to determine how to unmarshal the data. If your file " +
"does not have the usual extension, set this argument to `yaml`, `json`, `dotenv` (`.env`), `ini` accordingly, " +
"or `raw` if the encrypted data is encoded differently.",
Optional: true,
},
"source_file": schema.StringAttribute{
Description: "Path to the encrypted file.",
Required: true,
},
"data": schema.MapAttribute{
Description: "The unmarshalled data as a dictionary. Use dot-separated keys to access nested data.",
Computed: true,
Sensitive: true,
ElementType: types.StringType,
},
"raw": schema.StringAttribute{
Description: "The entire unencrypted file as a string.",
Computed: true,
Sensitive: true,
},
"id": schema.StringAttribute{
Description: "Unique identifier for this data source.",
Computed: true,
},
},
}
}
func (d *fileDataSource) Read(ctx context.Context, req datasource.ReadRequest, resp *datasource.ReadResponse) {
var config fileDataSourceModel
diags := req.Config.Get(ctx, &config)
resp.Diagnostics.Append(diags...)
if resp.Diagnostics.HasError() {
return
}
data, raw, err := getFileData(config.SourceFile, config.InputType)
if err != nil {
if detailedErr, ok := err.(summaryError); ok {
resp.Diagnostics.AddError(detailedErr.Summary, detailedErr.Err.Error())
} else {
resp.Diagnostics.AddError("Failed to decrypt file", err.Error())
}
return
}
m, mapDiags := types.MapValueFrom(ctx, types.StringType, data)
resp.Diagnostics.Append(mapDiags...)
if resp.Diagnostics.HasError() {
return
}
config.Data = m
config.Raw = types.StringValue(raw)
config.Id = types.StringValue("-")
diags = resp.State.Set(ctx, config)
resp.Diagnostics.Append(diags...)
}
================================================
FILE: sops/data_sops_file_test.go
================================================
package sops
import (
"fmt"
"os"
"testing"
"github.com/hashicorp/terraform-plugin-testing/helper/resource"
)
const configTestDataSourceSopsFile_basic = `
data "sops_file" "test_basic" {
source_file = "%s/test-fixtures/basic.yaml"
}`
func TestDataSourceSopsFile_basic(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestDataSourceSopsFile_basic, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("data.sops_file.test_basic", "data.hello", "world"),
resource.TestCheckResourceAttr("data.sops_file.test_basic", "data.integer", "0"),
resource.TestCheckResourceAttr("data.sops_file.test_basic", "data.float", "0.2"),
resource.TestCheckResourceAttr("data.sops_file.test_basic", "data.bool", "true"),
resource.TestCheckResourceAttr("data.sops_file.test_basic", "data.null_value", "null"),
),
},
},
})
}
const configTestDataSourceSopsFile_nested = `
data "sops_file" "test_nested" {
source_file = "%s/test-fixtures/nested.yaml"
}`
func TestDataSourceSopsFile_nested(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestDataSourceSopsFile_nested, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("data.sops_file.test_nested", "data.db.user", "foo"),
resource.TestCheckResourceAttr("data.sops_file.test_nested", "data.db.password", "bar"),
),
},
},
})
}
const configTestDataSourceSopsFile_raw = `
data "sops_file" "test_raw" {
source_file = "%s/test-fixtures/raw.txt"
input_type = "raw"
}`
func TestDataSourceSopsFile_raw(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestDataSourceSopsFile_raw, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("data.sops_file.test_raw", "raw", "Hello raw world!"),
),
},
},
})
}
const configTestDataSourceSopsFile_simplelist = `
data "sops_file" "test_list" {
source_file = "%s/test-fixtures/simple-list.yaml"
}`
func TestDataSourceSopsFile_simplelist(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestDataSourceSopsFile_simplelist, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("data.sops_file.test_list", "data.a_list.0", "val1"),
resource.TestCheckResourceAttr("data.sops_file.test_list", "data.a_list.1", "val2"),
resource.TestCheckResourceAttr("data.sops_file.test_list", "data.a_list.2", "null"),
),
},
},
})
}
const configTestDataSourceSopsFile_complexlist = `
data "sops_file" "test_list" {
source_file = "%s/test-fixtures/complex-list.yaml"
}`
func TestDataSourceSopsFile_complexlist(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestDataSourceSopsFile_complexlist, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("data.sops_file.test_list", "data.a_list.0.name", "foo"),
resource.TestCheckResourceAttr("data.sops_file.test_list", "data.a_list.0.index", "0"),
resource.TestCheckResourceAttr("data.sops_file.test_list", "data.a_list.0.value", "null"),
resource.TestCheckResourceAttr("data.sops_file.test_list", "data.a_list.1.name", "bar"),
resource.TestCheckResourceAttr("data.sops_file.test_list", "data.a_list.1.index", "1"),
),
},
},
})
}
const configTestDataSourceSopsFile_json = `
data "sops_file" "test_json" {
source_file = "%s/test-fixtures/basic.json"
}`
func TestDataSourceSopsFile_json(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestDataSourceSopsFile_json, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("data.sops_file.test_json", "data.hello", "world"),
resource.TestCheckResourceAttr("data.sops_file.test_json", "data.integer", "0"),
resource.TestCheckResourceAttr("data.sops_file.test_json", "data.float", "0.2"),
resource.TestCheckResourceAttr("data.sops_file.test_json", "data.bool", "true"),
resource.TestCheckResourceAttr("data.sops_file.test_json", "data.null", "null"),
),
},
},
})
}
================================================
FILE: sops/ephemeral_sops_external.go
================================================
package sops
import (
"context"
"github.com/hashicorp/terraform-plugin-framework/ephemeral"
"github.com/hashicorp/terraform-plugin-framework/ephemeral/schema"
"github.com/hashicorp/terraform-plugin-framework/types"
)
var _ ephemeral.EphemeralResource = &externalEphemeralResource{}
func newExternalEphemeral() ephemeral.EphemeralResource {
return &externalEphemeralResource{}
}
type externalEphemeralResource struct{}
type externalEphemeralModel struct {
InputType types.String `tfsdk:"input_type"`
Source types.String `tfsdk:"source"`
Data types.Map `tfsdk:"data"`
Raw types.String `tfsdk:"raw"`
}
func (d *externalEphemeralResource) Metadata(_ context.Context, _ ephemeral.MetadataRequest, resp *ephemeral.MetadataResponse) {
resp.TypeName = "sops_external"
}
func (d *externalEphemeralResource) Schema(_ context.Context, _ ephemeral.SchemaRequest, resp *ephemeral.SchemaResponse) {
resp.Schema = schema.Schema{
Description: "Read data from a sops-encrypted string. Useful if the data does not reside on disk locally (otherwise use `sops_file`).",
Attributes: map[string]schema.Attribute{
"input_type": schema.StringAttribute{
Description: "`yaml`, `json` `dotenv` (`.env`), `ini` or `raw`, depending on the structure of the un-encrypted data.",
Optional: true,
},
"source": schema.StringAttribute{
Description: "A string with sops-encrypted data",
Required: true,
},
"data": schema.MapAttribute{
Description: "Decrypted data",
Computed: true,
Sensitive: true,
ElementType: types.StringType,
},
"raw": schema.StringAttribute{
Description: "Raw decrypted content",
Computed: true,
Sensitive: true,
},
},
}
}
func (d *externalEphemeralResource) Open(ctx context.Context, req ephemeral.OpenRequest, resp *ephemeral.OpenResponse) {
var config externalEphemeralModel
diags := req.Config.Get(ctx, &config)
resp.Diagnostics.Append(diags...)
if resp.Diagnostics.HasError() {
return
}
data, raw, err := getExternalData(config.Source, config.InputType)
if err != nil {
if detailedErr, ok := err.(summaryError); ok {
resp.Diagnostics.AddError(detailedErr.Summary, detailedErr.Err.Error())
} else {
resp.Diagnostics.AddError("Failed to decrypt file", err.Error())
}
return
}
m, mapDiags := types.MapValueFrom(ctx, types.StringType, data)
resp.Diagnostics.Append(mapDiags...)
if resp.Diagnostics.HasError() {
return
}
config.Data = m
config.Raw = types.StringValue(raw)
diags = resp.Result.Set(ctx, config)
resp.Diagnostics.Append(diags...)
}
================================================
FILE: sops/ephemeral_sops_external_test.go
================================================
package sops
import (
"fmt"
"os"
"testing"
"github.com/hashicorp/terraform-plugin-testing/helper/resource"
)
const configTestEphemeralSopsExternal_basic = `
ephemeral "sops_external" "test_basic" {
source = file("%s/test-fixtures/basic.yaml")
input_type = "yaml"
}
provider "echo" {
data = ephemeral.sops_external.test_basic.data
}
resource "echo" "test_basic" {}
`
func TestEphemeralSopsExternal(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestEphemeralSopsExternal_basic, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("echo.test_basic", "data.hello", "world"),
resource.TestCheckResourceAttr("echo.test_basic", "data.integer", "0"),
resource.TestCheckResourceAttr("echo.test_basic", "data.float", "0.2"),
resource.TestCheckResourceAttr("echo.test_basic", "data.bool", "true"),
resource.TestCheckResourceAttr("echo.test_basic", "data.null_value", "null"),
),
},
},
})
}
const configTestEphemeralSopsExternal_nested = `
ephemeral "sops_external" "test_nested" {
source = file("%s/test-fixtures/nested.yaml")
input_type = "yaml"
}
provider "echo" {
data = ephemeral.sops_external.test_nested.data
}
resource "echo" "test_nested" {}
`
func TestEphemeralSopsExternal_nested(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestEphemeralSopsExternal_nested, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("echo.test_nested", "data.db.user", "foo"),
resource.TestCheckResourceAttr("echo.test_nested", "data.db.password", "bar"),
),
},
},
})
}
const configTestEphemeralSopsExternal_raw = `
ephemeral "sops_external" "test_raw" {
source = file("%s/test-fixtures/raw.txt")
input_type = "raw"
}
provider "echo" {
data = ephemeral.sops_external.test_raw.raw
}
resource "echo" "test_raw" {}
`
func TestEphemeralSopsExternal_raw(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestEphemeralSopsExternal_raw, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("echo.test_raw", "data", "Hello raw world!"),
),
},
},
})
}
const configTestEphemeralSopsExternal_simplelist = `
ephemeral "sops_external" "test_list" {
source = file("%s/test-fixtures/simple-list.yaml")
input_type = "yaml"
}
provider "echo" {
data = ephemeral.sops_external.test_list.data
}
resource "echo" "test_list" {}
`
func TestEphemeralSopsExternal_simplelist(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestEphemeralSopsExternal_simplelist, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("echo.test_list", "data.a_list.0", "val1"),
resource.TestCheckResourceAttr("echo.test_list", "data.a_list.1", "val2"),
resource.TestCheckResourceAttr("echo.test_list", "data.a_list.2", "null"),
),
},
},
})
}
const configTestEphemeralSopsExternal_complexlist = `
ephemeral "sops_external" "test_list" {
source = file("%s/test-fixtures/complex-list.yaml")
input_type = "yaml"
}
provider "echo" {
data = ephemeral.sops_external.test_list.data
}
resource "echo" "test_list" {}
`
func TestEphemeralSopsExternal_complexlist(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestEphemeralSopsExternal_complexlist, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("echo.test_list", "data.a_list.0.name", "foo"),
resource.TestCheckResourceAttr("echo.test_list", "data.a_list.0.index", "0"),
resource.TestCheckResourceAttr("echo.test_list", "data.a_list.0.value", "null"),
resource.TestCheckResourceAttr("echo.test_list", "data.a_list.1.name", "bar"),
resource.TestCheckResourceAttr("echo.test_list", "data.a_list.1.index", "1"),
),
},
},
})
}
const configTestEphemeralSopsExternal_json = `
ephemeral "sops_external" "test_json" {
source = file("%s/test-fixtures/basic.json")
input_type = "json"
}
provider "echo" {
data = ephemeral.sops_external.test_json.data
}
resource "echo" "test_json" {}
`
func TestEphemeralSopsExternal_json(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestEphemeralSopsExternal_json, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("echo.test_json", "data.hello", "world"),
resource.TestCheckResourceAttr("echo.test_json", "data.integer", "0"),
resource.TestCheckResourceAttr("echo.test_json", "data.float", "0.2"),
resource.TestCheckResourceAttr("echo.test_json", "data.bool", "true"),
resource.TestCheckResourceAttr("echo.test_json", "data.null", "null"),
),
},
},
})
}
================================================
FILE: sops/ephemeral_sops_file.go
================================================
package sops
import (
"context"
"github.com/hashicorp/terraform-plugin-framework/ephemeral"
"github.com/hashicorp/terraform-plugin-framework/ephemeral/schema"
"github.com/hashicorp/terraform-plugin-framework/types"
)
var _ ephemeral.EphemeralResource = &fileEphemeralResource{}
func newFileEphemeralResource() ephemeral.EphemeralResource {
return &fileEphemeralResource{}
}
type fileEphemeralResource struct{}
type fileEphemeralResourceModel struct {
InputType types.String `tfsdk:"input_type"`
SourceFile types.String `tfsdk:"source_file"`
Data types.Map `tfsdk:"data"`
Raw types.String `tfsdk:"raw"`
}
func (d *fileEphemeralResource) Metadata(_ context.Context, _ ephemeral.MetadataRequest, resp *ephemeral.MetadataResponse) {
resp.TypeName = "sops_file"
}
func (d *fileEphemeralResource) Schema(_ context.Context, _ ephemeral.SchemaRequest, resp *ephemeral.SchemaResponse) {
resp.Schema = schema.Schema{
Description: "Decrypt sops-encrypted files",
Attributes: map[string]schema.Attribute{
"input_type": schema.StringAttribute{
Description: "The provider will use the file extension to determine how to unmarshal the data. If your file " +
"does not have the usual extension, set this argument to `yaml`, `json`, `dotenv` (`.env`), `ini` accordingly, " +
"or `raw` if the encrypted data is encoded differently.",
Optional: true,
},
"source_file": schema.StringAttribute{
Description: "Path to the encrypted file",
Required: true,
},
"data": schema.MapAttribute{
Description: "The unmarshalled data as a dictionary. Use dot-separated keys to access nested data.",
Computed: true,
Sensitive: true,
ElementType: types.StringType,
},
"raw": schema.StringAttribute{
Description: "Raw decrypted content",
Computed: true,
Sensitive: true,
},
},
}
}
func (d *fileEphemeralResource) Open(ctx context.Context, req ephemeral.OpenRequest, resp *ephemeral.OpenResponse) {
var config fileEphemeralResourceModel
diags := req.Config.Get(ctx, &config)
resp.Diagnostics.Append(diags...)
if resp.Diagnostics.HasError() {
return
}
data, raw, err := getFileData(config.SourceFile, config.InputType)
if err != nil {
if detailedErr, ok := err.(summaryError); ok {
resp.Diagnostics.AddError(detailedErr.Summary, detailedErr.Err.Error())
} else {
resp.Diagnostics.AddError("Failed to decrypt file", err.Error())
}
return
}
m, mapDiags := types.MapValueFrom(ctx, types.StringType, data)
resp.Diagnostics.Append(mapDiags...)
if resp.Diagnostics.HasError() {
return
}
config.Data = m
config.Raw = types.StringValue(raw)
diags = resp.Result.Set(ctx, config)
resp.Diagnostics.Append(diags...)
}
================================================
FILE: sops/ephemeral_sops_file_test.go
================================================
package sops
import (
"fmt"
"os"
"testing"
"github.com/hashicorp/terraform-plugin-testing/helper/resource"
)
const configTestEphemeralSopsFile_basic = `
ephemeral "sops_file" "test_basic" {
source_file = "%s/test-fixtures/basic.yaml"
}
provider "echo" {
data = ephemeral.sops_file.test_basic.data
}
resource "echo" "test_basic" {}
`
func TestEphemeralSopsFile_basic(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestEphemeralSopsFile_basic, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("echo.test_basic", "data.hello", "world"),
resource.TestCheckResourceAttr("echo.test_basic", "data.integer", "0"),
resource.TestCheckResourceAttr("echo.test_basic", "data.float", "0.2"),
resource.TestCheckResourceAttr("echo.test_basic", "data.bool", "true"),
resource.TestCheckResourceAttr("echo.test_basic", "data.null_value", "null"),
),
},
},
})
}
const configTestEphemeralSopsFile_nested = `
ephemeral "sops_file" "test_nested" {
source_file = "%s/test-fixtures/nested.yaml"
}
provider "echo" {
data = ephemeral.sops_file.test_nested.data
}
resource "echo" "test_nested" {}
`
func TestEphemeralSopsFile_nested(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestEphemeralSopsFile_nested, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("echo.test_nested", "data.db.user", "foo"),
resource.TestCheckResourceAttr("echo.test_nested", "data.db.password", "bar"),
),
},
},
})
}
const configTestEphemeralSopsFile_raw = `
ephemeral "sops_file" "test_raw" {
source_file = "%s/test-fixtures/raw.txt"
input_type = "raw"
}
provider "echo" {
data = ephemeral.sops_file.test_raw.raw
}
resource "echo" "test_raw" {}
`
func TestEphemeralSopsFile_raw(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestEphemeralSopsFile_raw, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("echo.test_raw", "data", "Hello raw world!"),
),
},
},
})
}
const configTestEphemeralSopsFile_simplelist = `
ephemeral "sops_file" "test_list" {
source_file = "%s/test-fixtures/simple-list.yaml"
}
provider "echo" {
data = ephemeral.sops_file.test_list.data
}
resource "echo" "test_list" {}
`
func TestEphemeralSopsFile_simplelist(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestEphemeralSopsFile_simplelist, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("echo.test_list", "data.a_list.0", "val1"),
resource.TestCheckResourceAttr("echo.test_list", "data.a_list.1", "val2"),
resource.TestCheckResourceAttr("echo.test_list", "data.a_list.2", "null"),
),
},
},
})
}
const configTestEphemeralSopsFile_complexlist = `
ephemeral "sops_file" "test_list" {
source_file = "%s/test-fixtures/complex-list.yaml"
}
provider "echo" {
data = ephemeral.sops_file.test_list.data
}
resource "echo" "test_list" {}
`
func TestEphemeralSopsFile_complexlist(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestEphemeralSopsFile_complexlist, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("echo.test_list", "data.a_list.0.name", "foo"),
resource.TestCheckResourceAttr("echo.test_list", "data.a_list.0.index", "0"),
resource.TestCheckResourceAttr("echo.test_list", "data.a_list.0.value", "null"),
resource.TestCheckResourceAttr("echo.test_list", "data.a_list.1.name", "bar"),
resource.TestCheckResourceAttr("echo.test_list", "data.a_list.1.index", "1"),
),
},
},
})
}
const configTestEphemeralSopsFile_json = `
ephemeral "sops_file" "test_json" {
source_file = "%s/test-fixtures/basic.json"
}
provider "echo" {
data = ephemeral.sops_file.test_json.data
}
resource "echo" "test_json" {}
`
func TestEphemeralSopsFile_json(t *testing.T) {
wd, err := os.Getwd()
if err != nil {
t.Fatal(err)
}
config := fmt.Sprintf(configTestEphemeralSopsFile_json, wd)
resource.UnitTest(t, resource.TestCase{
ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
Steps: []resource.TestStep{
{
Config: config,
Check: resource.ComposeTestCheckFunc(
resource.TestCheckResourceAttr("echo.test_json", "data.hello", "world"),
resource.TestCheckResourceAttr("echo.test_json", "data.integer", "0"),
resource.TestCheckResourceAttr("echo.test_json", "data.float", "0.2"),
resource.TestCheckResourceAttr("echo.test_json", "data.bool", "true"),
resource.TestCheckResourceAttr("echo.test_json", "data.null", "null"),
),
},
},
})
}
================================================
FILE: sops/flatten.go
================================================
package sops
import "fmt"
// flatten flattens the nested struct.
//
// All keys will be joined by dot
// e.g. {"a": {"b":"c"}} => {"a.b":"c"}
// or {"a": {"b":[1,2]}} => {"a.b.0":1, "a.b.1": 2}
func flatten(data map[string]interface{}) map[string]string {
ret := make(map[string]string)
for k, v := range data {
switch typed := v.(type) {
case map[interface{}]interface{}:
for fk, fv := range flatten(convertMap(typed)) {
ret[fmt.Sprintf("%s.%s", k, fk)] = fv
}
case map[string]interface{}:
for fk, fv := range flatten(typed) {
ret[fmt.Sprintf("%s.%s", k, fk)] = fv
}
case []interface{}:
for fk, fv := range flattenSlice(typed) {
ret[fmt.Sprintf("%s.%s", k, fk)] = fv
}
case nil:
ret[k] = "null"
default:
ret[k] = fmt.Sprint(typed)
}
}
return ret
}
func flattenSlice(data []interface{}) map[string]string {
ret := make(map[string]string)
for idx, v := range data {
switch typed := v.(type) {
case map[interface{}]interface{}:
for fk, fv := range flatten(convertMap(typed)) {
ret[fmt.Sprintf("%d.%s", idx, fk)] = fv
}
case map[string]interface{}:
for fk, fv := range flatten(typed) {
ret[fmt.Sprintf("%d.%s", idx, fk)] = fv
}
case []interface{}:
for fk, fv := range flattenSlice(typed) {
ret[fmt.Sprintf("%d.%s", idx, fk)] = fv
}
case nil:
ret[fmt.Sprint(idx)] = "null"
default:
ret[fmt.Sprint(idx)] = fmt.Sprint(typed)
}
}
return ret
}
func convertMap(originalMap map[interface{}]interface{}) map[string]interface{} {
convertedMap := map[string]interface{}{}
for key, value := range originalMap {
convertedMap[key.(string)] = value
}
return convertedMap
}
================================================
FILE: sops/flatten_test.go
================================================
package sops
import (
"reflect"
"testing"
)
func TestFlattening(t *testing.T) {
tc := []struct {
name string
input map[string]interface{}
expected map[string]string
}{
{
name: "all data types become strings",
input: map[string]interface{}{
"a_string": "foo",
"an_integer": 12,
"a_bool": true,
"a_float": 1.1,
"a_null": nil,
},
expected: map[string]string{
"a_string": "foo",
"an_integer": "12",
"a_bool": "true",
"a_float": "1.1",
"a_null": "null",
},
},
{
name: "dicts are unnested",
input: map[string]interface{}{
"a_dict": map[string]interface{}{"foo": "bar"},
},
expected: map[string]string{
"a_dict.foo": "bar",
},
},
{
name: "lists are unpacked with index keys",
input: map[string]interface{}{
"a_list": []interface{}{1, 2, nil},
},
expected: map[string]string{
"a_list.0": "1",
"a_list.1": "2",
"a_list.2": "null",
},
},
{
name: "deep nesting",
/*
This test corresponds to this yaml structure:
foo:
- a: 1
b:
c:
- d: 2
- e: null
*/
input: map[string]interface{}{
"foo": []interface{}{
map[string]interface{}{
"a": 1,
"b": map[string]interface{}{
"c": []interface{}{
map[string]interface{}{"d": 2, "e": nil},
},
},
},
},
},
expected: map[string]string{
"foo.0.a": "1",
"foo.0.b.c.0.d": "2",
"foo.0.b.c.0.e": "null",
},
},
}
for _, c := range tc {
t.Run(c.name, func(t *testing.T) {
output := flatten(c.input)
if !reflect.DeepEqual(c.expected, output) {
t.Errorf("Unexpected flattening output, expected %v, got %v", c.expected, output)
}
})
}
}
================================================
FILE: sops/internal/dotenv/dotenv.go
================================================
package dotenv
import (
"bytes"
"fmt"
"strings"
)
func Unmarshal(in []byte, out *map[string]interface{}) error {
if *out == nil {
*out = make(map[string]interface{})
}
for _, line := range bytes.Split(in, []byte("\n")) {
if len(line) == 0 {
continue
}
if line[0] == '#' {
continue
} else {
pos := bytes.Index(line, []byte("="))
if pos == -1 {
return fmt.Errorf("invalid dotenv input line: %s", line)
}
(*out)[string(line[:pos])] = strings.Replace(string(line[pos+1:]), "\\n", "\n", -1)
}
}
return nil
}
================================================
FILE: sops/internal/dotenv/dotenv_test.go
================================================
package dotenv
import (
"reflect"
"testing"
)
func TestUnmarshal(t *testing.T) {
input := []byte(`# Comment!
password=P@ssw0rd`)
expectedOutput := map[string]interface{}{
"password": "P@ssw0rd",
}
var data map[string]interface{}
err := Unmarshal(input, &data)
if err != nil {
t.Fatal(err)
}
if !reflect.DeepEqual(expectedOutput, data) {
t.Errorf("Unexpected output, expected %v, got %v", expectedOutput, data)
}
}
================================================
FILE: sops/internal/ini/ini.go
================================================
package ini
import (
"gopkg.in/ini.v1"
)
func Unmarshal(in []byte, out *map[string]interface{}) error {
f, err := ini.Load(in)
if err != nil {
return err
}
if *out == nil {
*out = make(map[string]interface{})
}
for _, s := range f.Sections() {
var m map[string]interface{}
// The root section key-value pairs should go directly on the root of the
// map, not under a default subkey
if s.Name() == ini.DefaultSection {
m = *out
} else {
m = make(map[string]interface{})
(*out)[s.Name()] = m
}
for _, k := range s.Keys() {
m[k.Name()] = k.Value()
}
}
return nil
}
================================================
FILE: sops/internal/ini/ini_test.go
================================================
package ini
import (
"reflect"
"testing"
)
func TestUnmarshal(t *testing.T) {
input := []byte(`; Comment!
rootKey = foo
[Some section]
example_key = example_value`)
expectedOutput := map[string]interface{}{
"rootKey": "foo",
"Some section": map[string]interface{}{
"example_key": "example_value",
},
}
var data map[string]interface{}
err := Unmarshal(input, &data)
if err != nil {
t.Fatal(err)
}
if !reflect.DeepEqual(expectedOutput, data) {
t.Errorf("Unexpected output, expected %v, got %v", expectedOutput, data)
}
}
================================================
FILE: sops/provider.go
================================================
package sops
import (
"context"
"github.com/hashicorp/terraform-plugin-framework/datasource"
"github.com/hashicorp/terraform-plugin-framework/ephemeral"
"github.com/hashicorp/terraform-plugin-framework/provider"
"github.com/hashicorp/terraform-plugin-framework/provider/schema"
"github.com/hashicorp/terraform-plugin-framework/resource"
)
var _ provider.Provider = &SopsProvider{}
type SopsProvider struct{}
func New() provider.Provider {
return &SopsProvider{}
}
func (p *SopsProvider) Metadata(_ context.Context, _ provider.MetadataRequest, resp *provider.MetadataResponse) {
resp.TypeName = "sops"
}
func (p *SopsProvider) Schema(_ context.Context, _ provider.SchemaRequest, resp *provider.SchemaResponse) {
resp.Schema = schema.Schema{
Description: "A Terraform plugin for using files encrypted with [SOPS](https://github.com/getsops/sops).",
}
}
func (p *SopsProvider) Configure(_ context.Context, _ provider.ConfigureRequest, _ *provider.ConfigureResponse) {
}
func (p *SopsProvider) DataSources(_ context.Context) []func() datasource.DataSource {
return []func() datasource.DataSource{
newFileDataSource,
newExternalDataSource,
}
}
func (p *SopsProvider) Resources(_ context.Context) []func() resource.Resource {
return nil
}
func (p *SopsProvider) EphemeralResources(_ context.Context) []func() ephemeral.EphemeralResource {
return []func() ephemeral.EphemeralResource{
newFileEphemeralResource,
newExternalEphemeral,
}
}
================================================
FILE: sops/provider_test.go
================================================
package sops
import (
"testing"
"github.com/hashicorp/terraform-plugin-framework/provider"
"github.com/hashicorp/terraform-plugin-framework/providerserver"
"github.com/hashicorp/terraform-plugin-go/tfprotov6"
"github.com/hashicorp/terraform-plugin-testing/echoprovider"
)
var testAccProtoV6ProviderFactories = map[string]func() (tfprotov6.ProviderServer, error){
"sops": providerserver.NewProtocol6WithError(New()),
"echo": echoprovider.NewProviderServer(),
}
func TestProvider_impl(t *testing.T) {
var _ provider.Provider = New()
}
================================================
FILE: sops/read_data.go
================================================
package sops
import (
"encoding/json"
"fmt"
"github.com/getsops/sops/v3"
"github.com/getsops/sops/v3/decrypt"
"gopkg.in/yaml.v3"
"github.com/carlpett/terraform-provider-sops/sops/internal/dotenv"
"github.com/carlpett/terraform-provider-sops/sops/internal/ini"
)
func readData(content []byte, format string) (map[string]string, string, error) {
cleartext, err := decrypt.Data(content, format)
if userErr, ok := err.(sops.UserError); ok {
err = userErr
}
if err != nil {
return nil, "", fmt.Errorf("Error decrypting sops file: %w", err)
}
var data map[string]interface{}
switch format {
case "json":
err = json.Unmarshal(cleartext, &data)
case "yaml":
err = yaml.Unmarshal(cleartext, &data)
case "dotenv":
err = dotenv.Unmarshal(cleartext, &data)
case "ini":
err = ini.Unmarshal(cleartext, &data)
}
if err != nil {
return nil, "", fmt.Errorf("Error parsing decrypted data: %w", err)
}
return flatten(data), string(cleartext), nil
}
================================================
FILE: sops/test-fixtures/basic.json
================================================
{
"hello": "ENC[AES256_GCM,data:vye/uc0=,iv:CasWaUwDHpLDkGTPrIE5Z4bI2KEBCtdw94ROfL4qlbE=,tag:I7OBTDV8JsrjLg4SfRNf8w==,type:str]",
"integer": "ENC[AES256_GCM,data:1Q==,iv:xF2EsP5hxUpkUcS8OjsFWgSQ2D1dXxf63pnajpkFIuE=,tag:LJRnzsVNl7Ymh8yrdwdpnA==,type:float]",
"float": "ENC[AES256_GCM,data:TK3k,iv:O64HQZG4XDATN4c3k8VTaATuSR59ynhWEQsQRUSwSog=,tag:X1j4tMpV/vlQ5xCjzuXymw==,type:float]",
"bool": "ENC[AES256_GCM,data:QXxEsw==,iv:GVg4UD+/1VhA4QqSF6RP3YPJsdxT/1xJcg5NLzJkTzA=,tag:CLMVT+T3x8gkDsaOyUmbVw==,type:bool]",
"null": null,
"sops": {
"kms": null,
"gcp_kms": null,
"azure_kv": null,
"lastmodified": "2019-08-07T23:18:36Z",
"mac": "ENC[AES256_GCM,data:rFj23lyLaFONFQod8wlxTCCGysuCzNTQglRxqKXa5CZ9Q89jC8fnIdDUttf2oFHrfJHdvveeDbJYOoO2yEYfWr6Ty1MWzrJPyacUAGRF05PFpr0u+4xkjZNGLi5Cdg6VHb7uUu4+9EKd9d2A1bB6dWt1bEE0w3J4Il0uxn0JOMw=,iv:ERK3tzfvJzIWMcn97zg/vZ7EkWlByUUA8KczMJFPgZ0=,tag:mS+ICHZmoStgCnyIFgvbWQ==,type:str]",
"pgp": [
{
"created_at": "2019-08-07T23:18:36Z",
"enc": "-----BEGIN PGP MESSAGE-----\n\nhQEMA/FdPFBXWyBuAQf/eGZpJCY8TJ720XSH5rscUv19MC+C7v+xugWXdaBpNkt1\nsdZ4iJUpWFRv+ofYMm607AbhCfHRYTZtP7EiVGVl4yKwd+ztWgHSwXwQ/4WKx6QT\nWckxQlzRjxMhiJJuWsRmnz92PcZsb8yY7AsupPi9RaCykTVe4Fnx6xAdtA4l92n+\n6DQbVzFmfH/LOXJZK1YeFTeZoKiK+SJ+gMqcwoefy17F+fyfu6PWxWuUknDamReh\nNkPV6cbOtNl/J9+khWVlZObZ/DUCilOGkcF5H3qjOOdPgHyjRVRe3JUwb1uL6gBW\nsJRS54kQoHk3C68ZgxMc9GrXCsFv1jdZKlMkvb+Xo9JeAZVGiHNs4TnkGAuMAt49\nYnLx9tvpwTrMmZCbZRYV3jwl4TZDqklQ1kY5Qd96fun0KYiz1l2MeRxs3EhS2gLF\nABv8YNlQ7a7uwpWcqZtx1/Cwmdrc/EjK5fmydww9aA==\n=ShdQ\n-----END PGP MESSAGE-----\n",
"fp": "3CE5CC7219D6597CE6488BF1BF36CD3D0749A11A"
}
],
"unencrypted_suffix": "_unencrypted",
"version": "3.3.1"
}
}
================================================
FILE: sops/test-fixtures/basic.yaml
================================================
hello: ENC[AES256_GCM,data:gzR9Gz4=,iv:cbMZU1nUyo5mFCW+Vel2UYbnbMA/0wKxsQzy/WVAYw8=,tag:tETDJMCJYo+4K4LwsSw4Dw==,type:str]
integer: ENC[AES256_GCM,data:9w==,iv:8gMmdZTOgdGdHlXvipvz4qchxFWMwKg95Zzvh/I84G4=,tag:jxzxI0m7stEK+zr+yc0Wsg==,type:int]
float: ENC[AES256_GCM,data:UtBf,iv:Z7hdgplz8QP9JyC/DX5WWiazdYjBvZTVolvyf9VNvyw=,tag:v8VujtMTcuM4GuZKGreVbA==,type:float]
bool: ENC[AES256_GCM,data:xW/sRw==,iv:0vXeg5/SBUDo8dmHHpDTdxMwpoCdx+ERE7dq4UgqVsc=,tag:RweVRArPBVskGtnPBiQ0Yg==,type:bool]
null_value: null
sops:
kms: []
gcp_kms: []
azure_kv: []
lastmodified: '2019-04-26T18:43:59Z'
mac: ENC[AES256_GCM,data:UdHBCIrxfP+FjXwi0++Y1MUdAZ3hAa34OfG/w911zimF2YR+Mqv7PD15Osqa9GotQ5idzJEAzvz6pRVm7J388s0g2E53zBjCfLO/dcrkmVRdjTw2WYM17ewGM61HlNB9EKPe38B/eTH6PP1pTs5vjplEM/3FDblglKw8koUDdp0=,iv:LmRycuJjAoyGaY8qazR6G5CEuyD8JYCe3OO9UTek6kE=,tag:pfpB4HNE1qVmhO1QdZvVkQ==,type:str]
pgp:
- created_at: '2019-01-23T10:01:20Z'
enc: |-
-----BEGIN PGP MESSAGE-----
wcBMA/FdPFBXWyBuAQgAhJwnHuIY66QdnnWx2Nh6nzhBMogJtKLT4qA7ostnfMXX
Qo1oTd5OAKT16dDZCUl8TMZqnQUzdDaVQ7H/rUOJ38EfkZBTr120JOoJuCbrUBTt
uLEPrpgrUF8KSnRBuwnRECfU7jEi8QEwbKL4zQJREHf5I5O1iS4ZNg4h/5O7JHC/
Hfg/pqmwN1LtEZvJZDen9CMipsO0fHqR2N4UDYuDimwIlMi0ziaq6pO0T+PlNQdn
a9nzZwKk0pQOl80YRZQHZbSPpegOXwyFSMXKn/xfGo4YVjmpGJ5aO9ZJMLWylMgb
VI8EzHu2ftskyGuykoOboSYAoIRb/LgGCMS4amfvmdLgAeSj/tqpz3VZdubUot9i
fysa4epZ4FzgN+H+6OAp4lMnxKXgKOWPh3uUgyOo6wdgrJEYsZ2AQHNDjojedNzZ
HGwPrD0VM+BW5B8PY9y7GVaNNhM+V+ZouzTio5TZpOHfLQA=
=qDZi
-----END PGP MESSAGE-----
fp: 3CE5CC7219D6597CE6488BF1BF36CD3D0749A11A
unencrypted_suffix: _unencrypted
version: 3.2.0
================================================
FILE: sops/test-fixtures/complex-list.yaml
================================================
a_list:
- name: ENC[AES256_GCM,data:nX7D,iv:HdTElsGgx0Z2LcNmUGSbMCTyVhRD0UQMi8ztAEYQqJQ=,tag:D/sIqf+TXpUhyTbugEPpww==,type:str]
index: ENC[AES256_GCM,data:uw==,iv:1Tz2jR86XjGVRKwaY3XO8gAH102xEKDFr/MNQbxO8GU=,tag:avkgp+Q9CraUC+hjuhYyXQ==,type:int]
value: null
- name: ENC[AES256_GCM,data:uNO3,iv:y9ip72kPma2nTrJsqCn/+DDKLc6GeOeuEHEO2Tf2h9A=,tag:eTux2TxifhzMtWFYmlMnKA==,type:str]
index: ENC[AES256_GCM,data:fA==,iv:6Vmcm5FRa3vLwtt5P4IjiOtJi76TfKIg+D8Bx10jaTA=,tag:EN7hJoYOXmyEynvCy7GZ6w==,type:int]
sops:
kms: []
gcp_kms: []
azure_kv: []
lastmodified: '2019-04-26T18:39:26Z'
mac: ENC[AES256_GCM,data:Fw/zyoOVaQtGxVSdg2Wz5IHeRSuubjVb4ll8VPd6Prt4382gevlkzuv0TSAj9wAgGSiuXjeGU397kUkmDksdtsMgieh7XQxPuIoBHMaXuyvOtwBWtli8yAIkgU/lRr4Ablp3F8ZycHXPrNEm2oLonJLeSJDQKjJm4NsSP6brBs4=,iv:0JOTx4zHLoLmQFgMnh20RU1Sk0ONGR/gSoVMMHVGvFU=,tag:/BX9c/6HMM+0l38zWEwP4w==,type:str]
pgp:
- created_at: '2019-04-26T18:38:53Z'
enc: |-
-----BEGIN PGP MESSAGE-----
wcBMA/FdPFBXWyBuAQgAhUoPCTPjOpBexkgh5dMr2LTCb4ZsajkTXTa9a/wIJiBn
TT1FRsQE2W+S9Yb/ClCz+ULearuUVYH0pUp7k+MDbpMt/SOMlIEA9JO0H631LqOS
YLssnVOP/dsMH8uyhNCVuyLOHvVB3WMMxED+ic1m8oSbokqtIyCz5hmwR5MChebC
nB42lqM8ZzRDS8DEBCykv78ityQFuLatog787sNxL9ExSeQ9iuLuu84UT4dWI4XF
WUwwzyT3AUMbBkqftkucIi0iut+AORlgzyNAFlxxn4jXU10yl6iZvHj/Y76rJppm
i2C4E15bS8fLrFtX7PsfnMLJOOSS+sulwr4THCFt39LgAeQtfxdz1iufUxQ+ePj4
0w8x4ct/4EvgUuGE0OAD4oFkaCDgy+VbRWJQZn25OFLGUDMF+AUwnLnUu89hd/Ls
ymrlCHWwIODS5M6xr6Rwx4agrWiURZUc95HiCknA7+FI3QA=
=OUk7
-----END PGP MESSAGE-----
fp: 3CE5CC7219D6597CE6488BF1BF36CD3D0749A11A
unencrypted_suffix: _unencrypted
version: 3.2.0
================================================
FILE: sops/test-fixtures/nested.yaml
================================================
db:
user: ENC[AES256_GCM,data:FPeD,iv:J72gLGxfRX+8PZZrD7f5/7zPQPbMgBxL7OUxyvvFH1A=,tag:qJvyhtA4MXRjUkuYMctPlg==,type:str]
password: ENC[AES256_GCM,data:XrL/,iv:Z/PsuhQGQVEg2ri6odjnf3aWr3U01JAz8R7MJX67Gz8=,tag:iX48abNIzKJMsxIZ3N7DKw==,type:str]
sops:
kms: []
gcp_kms: []
azure_kv: []
lastmodified: '2019-01-23T12:37:02Z'
mac: ENC[AES256_GCM,data:SHWOM+zYaRt9e3jEiQK6bUgjEejoRm25CvWH1z1iYhvLzavmBbaCT+L0W7kw9pLZlTSXlGJfJW94sd5LFUgZ/cDvzy/IwNeU292wN9zeq0It2aTQtBWoKY+djjB3A1OoEiNoi/EBld4JfX81Jf5CCUT/LZevTawkig3URhmaIH8=,iv:WOG0Ssd0RoVpPwY8PFN7iKvSRNkmqsBIgA5xqtGs+xE=,tag:ZfV7UjxjmgXAWeWqn2u/FA==,type:str]
pgp:
- created_at: '2019-01-23T10:01:20Z'
enc: |-
-----BEGIN PGP MESSAGE-----
wcBMA/FdPFBXWyBuAQgAhJwnHuIY66QdnnWx2Nh6nzhBMogJtKLT4qA7ostnfMXX
Qo1oTd5OAKT16dDZCUl8TMZqnQUzdDaVQ7H/rUOJ38EfkZBTr120JOoJuCbrUBTt
uLEPrpgrUF8KSnRBuwnRECfU7jEi8QEwbKL4zQJREHf5I5O1iS4ZNg4h/5O7JHC/
Hfg/pqmwN1LtEZvJZDen9CMipsO0fHqR2N4UDYuDimwIlMi0ziaq6pO0T+PlNQdn
a9nzZwKk0pQOl80YRZQHZbSPpegOXwyFSMXKn/xfGo4YVjmpGJ5aO9ZJMLWylMgb
VI8EzHu2ftskyGuykoOboSYAoIRb/LgGCMS4amfvmdLgAeSj/tqpz3VZdubUot9i
fysa4epZ4FzgN+H+6OAp4lMnxKXgKOWPh3uUgyOo6wdgrJEYsZ2AQHNDjojedNzZ
HGwPrD0VM+BW5B8PY9y7GVaNNhM+V+ZouzTio5TZpOHfLQA=
=qDZi
-----END PGP MESSAGE-----
fp: 3CE5CC7219D6597CE6488BF1BF36CD3D0749A11A
unencrypted_suffix: _unencrypted
version: 3.2.0
================================================
FILE: sops/test-fixtures/raw.txt
================================================
{
"data": "ENC[AES256_GCM,data:LOXVpbH9B6ZV+V16esP9HQ==,iv:BTeG8dZCpG1sNpnajwPdP1v/fBk/647CQ+y9ns3nn78=,tag:bPir7Bd96JgEIZ9sLnUAMQ==,type:str]",
"sops": {
"kms": null,
"gcp_kms": null,
"azure_kv": null,
"lastmodified": "2019-01-23T13:39:15Z",
"mac": "ENC[AES256_GCM,data:BigJKrFMd1rpPF7MmFhjmzLlTqalyMIzGtR1xvfD5ypWVWCTd/ssTQPavoZlqhZm69REQ+wf7q3ARcAgrsrIqyk49Xwnxu6VsZh32WQC8jfF5ILOFqukEb9JHXtxKvMcXpupmjnVQFSKMt2FxhtZsHmPNjzCtfqaV0sW2IGSGX8=,iv:/ubUR4GtloSsmClvbua4CIAqw6H66BGJb419A4Rbago=,tag:QnEhiKfdQNZwQpggLYUMOg==,type:str]",
"pgp": [
{
"created_at": "2019-01-23T13:39:01Z",
"enc": "-----BEGIN PGP MESSAGE-----\n\nwcBMA/FdPFBXWyBuAQgAhuNDTdTrGpzDEWxXniji6ocSLThtOI6k8ZthiuHvy9NO\ntkLE+IoxdW59XYqCoy8ejERx0jUTNwmvwO3+41c5ZXz9HOO/UCl6RuTTXSVfdcY5\nccbAWjaX0L1wyiqtRLSCzwdi8j9GDhWkiQSZ5eyjNfEHcV0IBQ/+D/YfxcWD58zw\nIjET/F+B/PsD4OjuX7m/V6jVT1/97nxfCZD8q28jzI9igloFaeBWHwslNHPIkCza\nchuot+dRfuixp/u0ndRDSZ1d731wKbi3EcnUVzsw5nQ6PJQaFgWTu0dHyrmH83TS\naVnm/nMBDPRyaRWIsCDUAsQXUf6QIok4+tTrbaZDedLgAeTzwxhtp6c8Y5A1yzNp\nG2Pd4aRN4Mng3+HPeeBU4igReMHgKuXt+awJiuxFvshpb/UoC3EL/qKMc1LfdOyc\nppFU8qp2tuBk5F39M5VKkiQXZdzak46X5LvioohDEOFTwQA=\n=IXZX\n-----END PGP MESSAGE-----",
"fp": "3CE5CC7219D6597CE6488BF1BF36CD3D0749A11A"
}
],
"unencrypted_suffix": "_unencrypted",
"version": "3.2.0"
}
}
================================================
FILE: sops/test-fixtures/simple-list.yaml
================================================
a_list:
- ENC[AES256_GCM,data:sxhIdQ==,iv:y2HITUKrZ/JgJT+9+UI5BDj1SMaGO0pTSvjJhsSW6r4=,tag:ZuCjI7N9WKjAshTaPYpspQ==,type:str]
- ENC[AES256_GCM,data:6yi4mg==,iv:KS4tBgQAXDfpPeWD6Ew6w1jolp4L9VY7NswmqVjivPE=,tag:9P8obopM4+BN4F9Jk2vGig==,type:str]
- null
sops:
kms: []
gcp_kms: []
azure_kv: []
lastmodified: '2019-04-26T17:16:27Z'
mac: ENC[AES256_GCM,data:6JzbXJfM7e4xP6qhGCSWQLal9YlXg2LmI9LSoX753Lu0uh6HuG7m02yA06Ls66jnNDzvHnxvCUobeuakuZeUNCp0+omu1pVgbs28Cx9cEya8SVwgrfBW9pQQMC8LEXSvesymDH4d78cWSUZrhLG6glOxTSZjV8Odl2/DSufuR2o=,iv:nh13+n7+ESX0eI0XmPOG9VgE9TZGz5YHjWKsNAdw3DI=,tag:Ucj6NSfEuRJIFGfaxc23Ww==,type:str]
pgp:
- created_at: '2019-04-26T17:16:11Z'
enc: |-
-----BEGIN PGP MESSAGE-----
wcBMA/FdPFBXWyBuAQgAmkN+YgyBOF+823IZdmGecxMWkuIB06wdRr339y1tGehi
h1FxLlrwJU59ITCgjdzBJ0z0UCOqBP5qnwpzINu51LjtLEDMk9UOOmMfJdKLZ+5W
3O2YuTXgKl2MfPqt6Oy17pGZaiSTNyrvI29TkkPyhi3fuTr0stg9LxL4s9qQvWjM
kadq4ww3wwDL7VgxFxUfgF/CJALtRrdAbO3Fa63JXvOpeoa7huU75dnFleGDhFos
WYNY2oK3U9q/wk9XtlTuArotALrveQI+UQgwQG9+19UMTTJyTcc26zXHIS7ROHND
5qws6zlMhzKRXbvrH9CYbp1CSSvgOyG+UY2nphKURdLgAeQBS9lUL7wFklvXmgvB
Dig84cjD4AngTuE7QeAk4h4xTlLgD+WTZFtU4gpa9061GRRGM8FGVw3DaRpXWHy0
SUH3c/XifuCs5MExqB7LXKtX1SP81ynrTcLi0MH1r+Gt3gA=
=O+MY
-----END PGP MESSAGE-----
fp: 3CE5CC7219D6597CE6488BF1BF36CD3D0749A11A
unencrypted_suffix: _unencrypted
version: 3.2.0
================================================
FILE: sops/validate.go
================================================
package sops
import "fmt"
var validTypes = map[string]bool{
"json": true,
"yaml": true,
"dotenv": true,
"ini": true,
"raw": true,
}
// validateInputType ensures that we can decode the input
func validateInputType(inputType string) error {
if _, ok := validTypes[inputType]; ok {
return nil
}
return fmt.Errorf("Don't know how to decode file with input type %s, set input_type as appropriate", inputType)
}
================================================
FILE: sops/validate_test.go
================================================
package sops
import "testing"
func testValidateInputType(inputType string, t *testing.T) {
err := validateInputType(inputType)
if err != nil {
t.Errorf("Failed to validate input type %s", inputType)
}
}
func TestValidateInputType_yaml(t *testing.T) {
inputType := "yaml"
testValidateInputType(inputType, t)
}
func TestValidateInputType_json(t *testing.T) {
inputType := "json"
testValidateInputType(inputType, t)
}
func TestValidateInputType_raw(t *testing.T) {
inputType := "raw"
testValidateInputType(inputType, t)
}
func TestValidateInputType_bad(t *testing.T) {
inputType := "tf"
err := validateInputType(inputType)
if err == nil {
t.Errorf("Failed to validate input type %s, expected to be invalid but was valid", inputType)
}
}
================================================
FILE: templates/guides/legacy_usage.md.tmpl
================================================
---
page_title: "terraform-sops on older Terraform versions"
description: |-
Migration guide for moving from a old Terraform version
---
# terraform-sops on older Terraform versions
## Migrating existing states
To migrate a state from Terraform 0.12 or older, there is a need to change how the provider is referenced. Terraform provides a command to do this migration:
```shell
terraform state replace-provider registry.terraform.io/-/sops registry.terraform.io/carlpett/sops
```
## Installation
Download the latest [release](https://github.com/carlpett/terraform-provider-sops/releases) for your environment and unpack it to the user plugin directory. The user plugins directory is in one of the following locations, depending on the host operating system:
* Windows `%APPDATA%\terraform.d\plugins`
* All other systems `~/.terraform.d/plugins`
### Allowing code to run on macOS
Apple macOS Catalina (10.15.0) and later prevents unsigned code from running. When you first run `terraform plan` it will pop up a message saying
> **“terraform-provider-sops_v0.5.0” cannot be opened because the developer cannot be verified.**
> macOS cannot verify that this app is free from malware.
To allow the plugin to run, go to the **Security & Privacy** tab of System Preferences and you should see a message saying
> “terraform-provider-sops_v0.5.0” was blocked from use because it is not from an identified developer.
Click the `Allow Anyway` button.
## Usage
Usage is mostly identical across versions, but there are some differences in how to reference nested fields.
### Terraform 0.12
```hcl
provider "sops" {}
data "sops_file" "demo-secret" {
source_file = "demo-secret.enc.json"
}
output "root-value-password" {
# Access the password variable from the map
value = data.sops_file.demo-secret.data["password"]
}
output "mapped-nested-value" {
# Access the password variable that is under db via the terraform map of data
value = data.sops_file.demo-secret.data["db.password"]
}
output "nested-json-value" {
# Access the password variable that is under db via the terraform object
value = jsondecode(data.sops_file.demo-secret.raw).db.password
}
```
### Terraform 0.11 and older
```hcl
provider "sops" {}
data "sops_file" "demo-secret" {
source_file = "demo-secret.enc.json"
}
output "do-something" {
value = "${data.sops_file.demo-secret.data.password}"
}
output "do-something2" {
value = "${data.sops_file.demo-secret.data.db.password}"
}
```
================================================
FILE: templates/index.md.tmpl
================================================
---
# generated by https://github.com/hashicorp/terraform-plugin-docs
page_title: "sops Provider"
description: |-
A Terraform plugin for using files encrypted with SOPS https://github.com/getsops/sops.
---
# {{ .ProviderShortName | upper }} Provider
{{ .Description | trimspace }}
!> To prevent plaintext secrets from being written to disk, you *must* use a secure remote state backend. See the [official docs](https://developer.hashicorp.com/terraform/language/state/sensitive-data) on _Sensitive Data in State_ for more information.
## Example Usage
{{ tffile "examples/provider/provider.tf" }}
<!-- schema generated by tfplugindocs -->
================================================
FILE: test/testing-key.pgp
================================================
-----BEGIN PGP PRIVATE KEY BLOCK-----
lQOXBFxIOOYBCADXBowkLNMC+iBS0LIl03VDLqF2KRVcbs7gbWNCZEYTWag7vR5m
ugxjpMUXjqWeR8tG1SCi3D5Xh/f4EVQT2GWC0KI0ohgN0TUbBYtdMsvQ04ktiLQT
DAJA1WQIByI7svEY85WySsoDVsOU+H8Enp2mTeJir//WgSzKZeT84YzoLvEQu2MC
llNp/LZdmwypSW3CCpfEoNLqX9untKN6xs2+y3/q711WC1KuJEViYkdZmsZQvk0Z
cTfpNR3T+nFmk2aHYTa1kmywq8NgVhy3XTv7BsQpXnnMPRRnZ+pM/oICU0gM4NYj
VoMggb1B1oljJGHFAqqJ/BvcDYkKjXit9QaNABEBAAEAB/ji2fAqj3UPRFOrC1eS
EJqQsOF8h7DBk9CDdY8CvEeHTU+aYYDGtVcyHjjRDELZJLqQ6slDs0MSQEtGq6wd
mRop/h0i6jVLs9Zoa7EG4lBPlYdj7UAN2DLds5jqifF+ijVSMv9Q2mvF71joEZfv
3RJKzGB1PWPsKjEsVyj+ofbGptBG+YyxqIE0Cb+Uf70kgbHDNjxb+UGNQTXPrgsC
RlZNwSLDY15OJyIJ+QONxy33u4+wAWnQi4bR0pg4l3kwvN0wARXvw84uYnmrlquH
vPNApd3xVRoiH+2/uE5QMarj5dgQOAW2HsjvwaEbj3WGaRrluxlG1TyH83i4rPow
bDEEAORs20YXupHJ+OuKwcca32/kJIL8emmnC1+f9zfvLX94Yf03bBz3T6b5YoUq
UyumcYObyyxP7uVkuaFYYQXHKmFuo60pcMPwVrte1xQh9ymvxmiR6H3llUT3KbN1
oZphKZiQ1cx0vEFz5DBGzcu4XDB/8Me3bLmU8vaDHWQjlNJxBADw+5g9dV1EKlx2
bnUg7f5oFmKRW4BE54koejf9Vg9NQLebpQkC5FxP0bloM4RXk6YxKw1qGbiola/H
Um2ORJxjt1CrfUPyk8LBVqnq2bs9MXy/0gn3CUYzjpdrLcab4RTExOOzGS4gISmc
6DaR06nRFiYIGQDMVFqhDq8A17iL3QP/V5iEXWifkxqorMkbItEHw1tp0Wan0tMV
LavZ6gpIMBIvxCvTjcLmEWIicBb34S5UPRuMa4IpUfWjayAohP7BnGxS+FZ2qGXf
Pojczt+YBTOKGLMu2XIZqefJu4dn0MCp+qztj6B1P9qyUvMhoZwEBk4QaPsaHCSi
B9FNypHOo09C4LQ4VGVycmFmb3JtIFNvcHMgUHJvdmlkZXIgKFRlc3RpbmcpIDx0
ZXJyYWZvcm0tc29wc0Bsb2NhbD6JATgEEwECACIFAlxIOOYCGwMGCwkIBwMCBhUI
AgkKCwQWAgMBAh4BAheAAAoJEL82zT0HSaEavnUH+QEiOxqcPUbPBbjuRr6fAxIN
+wpkME+ZpAfr9QwU70GyXxILh3RSqgjZNcdegHl0AgLNGtYo3VOZFHttqW44M7ei
x1XePxTjbcQLXsqgOwCcG+jNfHTu74k544nmITh93Jye+Ic4CYP4Q9GPm3JRAdDJ
dPSKkCAne6Y3pvWMXq8CxrjMxpVZjQCzFXOtxQokiQetMOHOCxIng25s06DFzv+L
UibDuf34SyrV5IFpEjXxZfRoNHzwOA0RlT00F7X2R2T7As9mFp2PyYDhabGs18rt
St8NCA+CbstzQQdzbSI9ld5ScRjPwDDvzwIxGP8Xp12HwgZbOt4BRfJweyauHCed
A5gEXEg45gEIAMXtRQSr+RdkxPjuhxPz64ThLgMT1UobnsuRfDUayV9iKTgEeuOe
4igAOhwn9YB/AmsBLijUdV8Tu8ljOKy2ObTZo7T2TZM35KdwqTR2t+GN/DCQQOIe
BoF/XjNyj+eadQusj/KQ8RnYsdhGHX6BClg6H1A+W1Nc3/wcU7KPAFzcSfDy7aBQ
1oZGF4y8xFRW7nFJPLuo/DFeuYJCYzt7ws7ENNXhlnLLEb2OeCwXpX4hLFgcQMkC
n8eCTAihSbaCKw8XTiOrR8VYHTQ59JDvQevZ0n5JSzUNK0Ws0EdHd8+pbBW4f6bL
R82mby3BwWVOWtWD0WgbwTBx1LIe1sPAs3UAEQEAAQAH/jDcoWRE3EqFKwdVQ22O
kv8L5CMIW2hfJzWUJfiqMzpj7k8Q9BGLYMOFQtM+niHpuPwXn4Ce6pbdNUfDQfOJ
TPeznvGGuKH2c3FOo8b64+w/9Bk9E3d++BYyDlxfFN2VSP3nzOWSGKNL1qPQs2lO
i/I57w8NRdhvnjAMAjGbkfhaTcMtboqzII+CBRY/y5WPaXQGx1hNGI2FogAwuV1h
bZg8kiAVHa5QuKB36yZ6VM1zaK7KuEBys3Y5oYxV6FdMHrhBmKlRpHYny86WpH6Q
HVmhGjvMIGK1tiuhg2h1TQUQ1HqPb/RdCRJnRC1KiX2uiDtrcoN/KetIIsQ8fzvs
qoEEAMdGupYWXUBpQlRspxFnCRLmzwLbLL2Eqk3q/BvFh/OXnwmUgGaZkwWuldKS
CH18Ih61T7LGa/Ta2DAFWraNkmdx8I6YgbeX1y6s8x3N6rZR+ccopn7Ii53Hjdji
iCdXBp6KhkLHsASc/m2g7/ERuTolecQR1HUV90TnRnoxeclhBAD+RDTNUrPxNkZa
Cmi9lgZOTE4nOGgavybDwmWBQqxiiFyniNklCNsGU9schWMDfecYXFlIm50DnQqy
TMxAo8tzOihlJfQqAw/0zdcQZtLMmx43Bfozp9MrZoy60tklTONF3w8ykutDtI0h
I8Z864vLIjD6SXuZ+iK+TliFMrk+lQP+KI7lwVHuDZQR+avsU6c+9RL1EwtYxA83
I++hF+1lMg8wvG77aXbLihEEH2Rh2dNHiyfZTGNhHQYVLx4OEKS5kGKeLXWBOllc
OclR02C1w19B52WgzEpM+xLvd/xbOj/RElUzWfp9jSmFAbIZwHG5ANKz0TeDV1gD
pH7/C+JJWFgyHYkBHwQYAQIACQUCXEg45gIbDAAKCRC/Ns09B0mhGkxhB/9+qssb
x9LRW2yWFeGryDtVBIcoLa+hoqh3zef6PXLBb1COcqZ5ZILvtjrpa/+KA+36auIN
jdv4wjZcRnzVcg5o44VPEMly2EvwoPrTbIrsWsKWUGlMwKiLZChXgmEx8vlY9uaT
Tm8gnbtq61B6td1z4IerRe+2urGu7dC3kGrvMHRMKA52aAwcaEuXwFlz7P6yxdaT
7BbiQyUMph9Vq7HJZSkTezUhYXDVDq6lkglFKO86w4oY1woD6Ij1/WK8MUiqoxCx
70iusXjGwAXO8T0IuLDX5qs15YHAiiKFk3L8moejjN2fmAk3loDjlVDEe77YAcSi
9qbCiS2c7eG1IjPW
=S27/
-----END PGP PRIVATE KEY BLOCK-----
-----BEGIN PGP PUBLIC KEY BLOCK-----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=3KWT
-----END PGP PUBLIC KEY BLOCK-----
================================================
FILE: tools/go.mod
================================================
module tools
go 1.25.3
require github.com/hashicorp/terraform-plugin-docs v0.24.0
require (
github.com/BurntSushi/toml v1.2.1 // indirect
github.com/Kunde21/markdownfmt/v3 v3.1.0 // indirect
github.com/Masterminds/goutils v1.1.1 // indirect
github.com/Masterminds/semver/v3 v3.2.0 // indirect
github.com/Masterminds/sprig/v3 v3.2.3 // indirect
github.com/ProtonMail/go-crypto v1.1.6 // indirect
github.com/apparentlymart/go-textseg/v15 v15.0.0 // indirect
github.com/armon/go-radix v1.0.0 // indirect
github.com/bgentry/speakeasy v0.1.0 // indirect
github.com/bmatcuk/doublestar/v4 v4.9.1 // indirect
github.com/cloudflare/circl v1.6.1 // indirect
github.com/fatih/color v1.16.0 // indirect
github.com/google/uuid v1.3.0 // indirect
github.com/hashicorp/cli v1.1.7 // indirect
github.com/hashicorp/errwrap v1.1.0 // indirect
github.com/hashicorp/go-checkpoint v0.5.0 // indirect
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
github.com/hashicorp/go-multierror v1.1.1 // indirect
github.com/hashicorp/go-retryablehttp v0.7.7 // indirect
github.com/hashicorp/go-uuid v1.0.3 // indirect
github.com/hashicorp/go-version v1.7.0 // indirect
github.com/hashicorp/hc-install v0.9.2 // indirect
github.com/hashicorp/terraform-exec v0.24.0 // indirect
github.com/hashicorp/terraform-json v0.27.2 // indirect
github.com/huandu/xstrings v1.3.3 // indirect
github.com/imdario/mergo v0.3.15 // indirect
github.com/mattn/go-colorable v0.1.14 // indirect
github.com/mattn/go-isatty v0.0.20 // indirect
github.com/mattn/go-runewidth v0.0.9 // indirect
github.com/mitchellh/copystructure v1.2.0 // indirect
github.com/mitchellh/reflectwalk v1.0.2 // indirect
github.com/posener/complete v1.2.3 // indirect
github.com/shopspring/decimal v1.3.1 // indirect
github.com/spf13/cast v1.5.0 // indirect
github.com/yuin/goldmark v1.7.7 // indirect
github.com/yuin/goldmark-meta v1.1.0 // indirect
github.com/zclconf/go-cty v1.17.0 // indirect
go.abhg.dev/goldmark/frontmatter v0.2.0 // indirect
golang.org/x/crypto v0.38.0 // indirect
golang.org/x/exp v0.0.0-20230626212559-97b1e661b5df // indirect
golang.org/x/mod v0.28.0 // indirect
golang.org/x/sys v0.36.0 // indirect
golang.org/x/text v0.30.0 // indirect
gopkg.in/yaml.v2 v2.3.0 // indirect
gopkg.in/yaml.v3 v3.0.1 // indirect
)
================================================
FILE: tools/go.sum
================================================
dario.cat/mergo v1.0.0 h1:AGCNq9Evsj31mOgNPcLyXc+4PNABt905YmuqPYYpBWk=
dario.cat/mergo v1.0.0/go.mod h1:uNxQE+84aUszobStD9th8a29P2fMDhsBdgRYvZOxGmk=
github.com/BurntSushi/toml v1.2.1 h1:9F2/+DoOYIOksmaJFPw1tGFy1eDnIJXg+UHjuD8lTak=
github.com/BurntSushi/toml v1.2.1/go.mod h1:CxXYINrC8qIiEnFrOxCa7Jy5BFHlXnUU2pbicEuybxQ=
github.com/Kunde21/markdownfmt/v3 v3.1.0 h1:KiZu9LKs+wFFBQKhrZJrFZwtLnCCWJahL+S+E/3VnM0=
github.com/Kunde21/markdownfmt/v3 v3.1.0/go.mod h1:tPXN1RTyOzJwhfHoon9wUr4HGYmWgVxSQN6VBJDkrVc=
github.com/Masterminds/goutils v1.1.1 h1:5nUrii3FMTL5diU80unEVvNevw1nH4+ZV4DSLVJLSYI=
github.com/Masterminds/goutils v1.1.1/go.mod h1:8cTjp+g8YejhMuvIA5y2vz3BpJxksy863GQaJW2MFNU=
github.com/Masterminds/semver/v3 v3.2.0 h1:3MEsd0SM6jqZojhjLWWeBY+Kcjy9i6MQAeY7YgDP83g=
github.com/Masterminds/semver/v3 v3.2.0/go.mod h1:qvl/7zhW3nngYb5+80sSMF+FG2BjYrf8m9wsX0PNOMQ=
github.com/Masterminds/sprig/v3 v3.2.3 h1:eL2fZNezLomi0uOLqjQoN6BfsDD+fyLtgbJMAj9n6YA=
github.com/Masterminds/sprig/v3 v3.2.3/go.mod h1:rXcFaZ2zZbLRJv/xSysmlgIM1u11eBaRMhvYXJNkGuM=
github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY=
github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU=
github.com/ProtonMail/go-crypto v1.1.6 h1:ZcV+Ropw6Qn0AX9brlQLAUXfqLBc7Bl+f/DmNxpLfdw=
github.com/ProtonMail/go-crypto v1.1.6/go.mod h1:rA3QumHc/FZ8pAHreoekgiAbzpNsfQAosU5td4SnOrE=
github.com/apparentlymart/go-textseg/v15 v15.0.0 h1:uYvfpb3DyLSCGWnctWKGj857c6ew1u1fNQOlOtuGxQY=
github.com/apparentlymart/go-textseg/v15 v15.0.0/go.mod h1:K8XmNZdhEBkdlyDdvbmmsvpAG721bKi0joRfFdHIWJ4=
github.com/armon/go-radix v1.0.0 h1:F4z6KzEeeQIMeLFa97iZU6vupzoecKdU5TX24SNppXI=
github.com/armon/go-radix v1.0.0/go.mod h1:ufUuZ+zHj4x4TnLV4JWEpy2hxWSpsRywHrMgIH9cCH8=
github.com/bgentry/speakeasy v0.1.0 h1:ByYyxL9InA1OWqxJqqp2A5pYHUrCiAL6K3J+LKSsQkY=
github.com/bgentry/speakeasy v0.1.0/go.mod h1:+zsyZBPWlz7T6j88CTgSN5bM796AkVf0kBD4zp0CCIs=
github.com/bmatcuk/doublestar/v4 v4.9.1 h1:X8jg9rRZmJd4yRy7ZeNDRnM+T3ZfHv15JiBJ/avrEXE=
github.com/bmatcuk/doublestar/v4 v4.9.1/go.mod h1:xBQ8jztBU6kakFMg+8WGxn0c6z1fTSPVIjEY1Wr7jzc=
github.com/cloudflare/circl v1.6.1 h1:zqIqSPIndyBh1bjLVVDHMPpVKqp8Su/V+6MeDzzQBQ0=
github.com/cloudflare/circl v1.6.1/go.mod h1:uddAzsPgqdMAYatqJ0lsjX1oECcQLIlRpzZh3pJrofs=
github.com/cyphar/filepath-securejoin v0.4.1 h1:JyxxyPEaktOD+GAnqIqTf9A8tHyAG22rowi7HkoSU1s=
github.com/cyphar/filepath-securejoin v0.4.1/go.mod h1:Sdj7gXlvMcPZsbhwhQ33GguGLDGQL7h7bg04C/+u9jI=
github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
github.com/emirpasic/gods v1.18.1 h1:FXtiHYKDGKCW2KzwZKx0iC0PQmdlorYgdFG9jPXJ1Bc=
github.com/emirpasic/gods v1.18.1/go.mod h1:8tpGGwCnJ5H4r6BWwaV6OrWmMoPhUl5jm/FMNAnJvWQ=
github.com/fatih/color v1.16.0 h1:zmkK9Ngbjj+K0yRhTVONQh1p/HknKYSlNT+vZCzyokM=
github.com/fatih/color v1.16.0/go.mod h1:fL2Sau1YI5c0pdGEVCbKQbLXB6edEj1ZgiY4NijnWvE=
github.com/frankban/quicktest v1.14.3 h1:FJKSZTDHjyhriyC81FLQ0LY93eSai0ZyR/ZIkd3ZUKE=
github.com/frankban/quicktest v1.14.3/go.mod h1:mgiwOwqx65TmIk1wJ6Q7wvnVMocbUorkibMOrVTHZps=
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 h1:+zs/tPmkDkHx3U66DAb0lQFJrpS6731Oaa12ikc+DiI=
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376/go.mod h1:an3vInlBmSxCcxctByoQdvwPiA7DTK7jaaFDBTtu0ic=
github.com/go-git/go-billy/v5 v5.6.2 h1:6Q86EsPXMa7c3YZ3aLAQsMA0VlWmy43r6FHqa/UNbRM=
github.com/go-git/go-billy/v5 v5.6.2/go.mod h1:rcFC2rAsp/erv7CMz9GczHcuD0D32fWzH+MJAU+jaUU=
github.com/go-git/go-git/v5 v5.14.0 h1:/MD3lCrGjCen5WfEAzKg00MJJffKhC8gzS80ycmCi60=
github.com/go-git/go-git/v5 v5.14.0/go.mod h1:Z5Xhoia5PcWA3NF8vRLURn9E5FRhSl7dGj9ItW3Wk5k=
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 h1:f+oWsMOmNPc8JmEHVZIycC7hBoQxHH9pNKQORJNozsQ=
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8/go.mod h1:wcDNUvekVysuuOpQKo3191zZyTpiI6se1N1ULghS0sw=
github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
github.com/google/uuid v1.3.0 h1:t6JiXgmwXMjEs8VusXIJk2BXHsn+wx8BZdTaoZ5fu7I=
github.com/google/uuid v1.3.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
github.com/hashicorp/cli v1.1.7 h1:/fZJ+hNdwfTSfsxMBa9WWMlfjUZbX8/LnUxgAd7lCVU=
github.com/hashicorp/cli v1.1.7/go.mod h1:e6Mfpga9OCT1vqzFuoGZiiF/KaG9CbUfO5s3ghU3YgU=
github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I=
github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
github.com/hashicorp/go-checkpoint v0.5.0 h1:MFYpPZCnQqQTE18jFwSII6eUQrD/oxMFp3mlgcqk5mU=
github.com/hashicorp/go-checkpoint v0.5.0/go.mod h1:7nfLNL10NsxqO4iWuW6tWW0HjZuDrwkBuEQsVcpCOgg=
github.com/hashicorp/go-cleanhttp v0.5.0/go.mod h1:JpRdi6/HCYpAwUzNwuwqhbovhLtngrth3wmdIIUrZ80=
github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ=
github.com/hashicorp/go-cleanhttp v0.5.2/go.mod h1:kO/YDlP8L1346E6Sodw+PrpBSV4/SoxCXGY6BqNFT48=
github.com/hashicorp/go-hclog v1.6.3 h1:Qr2kF+eVWjTiYmU7Y31tYlP1h0q/X3Nl3tPGdaB11/k=
github.com/hashicorp/go-hclog v1.6.3/go.mod h1:W4Qnvbt70Wk/zYJryRzDRU/4r0kIg0PVHBcfoyhpF5M=
github.com/hashicorp/go-multierror v1.0.0/go.mod h1:dHtQlpGsu+cZNNAkkCN/P3hoUDHhCYQXV3UM06sGGrk=
github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=
github.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9/fmwbPZ6JB6eMoM=
github.com/hashicorp/go-retryablehttp v0.7.7 h1:C8hUCYzor8PIfXHa4UrZkU4VvK8o9ISHxT2Q8+VepXU=
github.com/hashicorp/go-retryablehttp v0.7.7/go.mod h1:pkQpWZeYWskR+D1tR2O5OcBFOxfA7DoAO6xtkuQnHTk=
github.com/hashicorp/go-uuid v1.0.0/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
github.com/hashicorp/go-uuid v1.0.3 h1:2gKiV6YVmrJ1i2CKKa9obLvRieoRGviZFL26PcT/Co8=
github.com/hashicorp/go-uuid v1.0.3/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
github.com/hashicorp/go-version v1.7.0 h1:5tqGy27NaOTB8yJKUZELlFAS/LTKJkrmONwQKeRZfjY=
github.com/hashicorp/go-version v1.7.0/go.mod h1:fltr4n8CU8Ke44wwGCBoEymUuxUHl09ZGVZPK5anwXA=
github.com/hashicorp/hc-install v0.9.2 h1:v80EtNX4fCVHqzL9Lg/2xkp62bbvQMnvPQ0G+OmtO24=
github.com/hashicorp/hc-install v0.9.2/go.mod h1:XUqBQNnuT4RsxoxiM9ZaUk0NX8hi2h+Lb6/c0OZnC/I=
github.com/hashicorp/terraform-exec v0.24.0 h1:mL0xlk9H5g2bn0pPF6JQZk5YlByqSqrO5VoaNtAf8OE=
github.com/hashicorp/terraform-exec v0.24.0/go.mod h1:lluc/rDYfAhYdslLJQg3J0oDqo88oGQAdHR+wDqFvo4=
github.com/hashicorp/terraform-json v0.27.2 h1:BwGuzM6iUPqf9JYM/Z4AF1OJ5VVJEEzoKST/tRDBJKU=
github.com/hashicorp/terraform-json v0.27.2/go.mod h1:GzPLJ1PLdUG5xL6xn1OXWIjteQRT2CNT9o/6A9mi9hE=
github.com/hashicorp/terraform-plugin-docs v0.24.0 h1:YNZYd+8cpYclQyXbl1EEngbld8w7/LPOm99GD5nikIU=
github.com/hashicorp/terraform-plugin-docs v0.24.0/go.mod h1:YLg+7LEwVmRuJc0EuCw0SPLxuQXw5mW8iJ5ml/kvi+o=
github.com/huandu/xstrings v1.3.3 h1:/Gcsuc1x8JVbJ9/rlye4xZnVAbEkGauT8lbebqcQws4=
github.com/huandu/xstrings v1.3.3/go.mod h1:y5/lhBue+AyNmUVz9RLU9xbLR0o4KIIExikq4ovT0aE=
github.com/imdario/mergo v0.3.11/go.mod h1:jmQim1M+e3UYxmgPu/WyfjB3N3VflVyUjjjwH0dnCYA=
github.com/imdario/mergo v0.3.15 h1:M8XP7IuFNsqUx6VPK2P9OSmsYsI/YFaGil0uD21V3dM=
github.com/imdario/mergo v0.3.15/go.mod h1:WBLT9ZmE3lPoWsEzCh9LPo3TiwVN+ZKEjmz+hD27ysY=
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 h1:BQSFePA1RWJOlocH6Fxy8MmwDt+yVQYULKfN0RoTN8A=
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99/go.mod h1:1lJo3i6rXxKeerYnT8Nvf0QmHCRC1n8sfWVwXF2Frvo=
github.com/kevinburke/ssh_config v1.2.0 h1:x584FjTGwHzMwvHx18PXxbBVzfnxogHaAReU4gf13a4=
github.com/kevinburke/ssh_config v1.2.0/go.mod h1:CT57kijsi8u/K/BOFA39wgDQJ9CxiF4nAY/ojJ6r6mM=
github.com/kr/pretty v0.3.0 h1:WgNl7dwNpEZ6jJ9k1snq4pZsg7DOEN8hP9Xw0Tsjwk0=
github.com/kr/pretty v0.3.0/go.mod h1:640gp4NfQd8pI5XOwp5fnNeVWj67G7CFk/SaSQn7NBk=
github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
github.com/mattn/go-colorable v0.1.14 h1:9A9LHSqF/7dyVVX6g0U9cwm9pG3kP9gSzcuIPHPsaIE=
github.com/mattn/go-colorable v0.1.14/go.mod h1:6LmQG8QLFO4G5z1gPvYEzlUgJ2wF+stgPZH1UqBm1s8=
github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
github.com/mattn/go-runewidth v0.0.9 h1:Lm995f3rfxdpd6TSmuVCHVb/QhupuXlYr8sCI/QdE+0=
github.com/mattn/go-runewidth v0.0.9/go.mod h1:H031xJmbD/WCDINGzjvQ9THkh0rPKHF+m2gUSrubnMI=
github.com/mitchellh/copystructure v1.0.0/go.mod h1:SNtv71yrdKgLRyLFxmLdkAbkKEFWgYaq1OVrnRcwhnw=
github.com/mitchellh/copystructure v1.2.0 h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw=
github.com/mitchellh/copystructure v1.2.0/go.mod h1:qLl+cE2AmVv+CoeAwDPye/v+N2HKCj9FbZEVFJRxO9s=
github.com/mitchellh/reflectwalk v1.0.0/go.mod h1:mSTlrgnPZtwu0c4WaC2kGObEpuNDbx0jmZXqmk4esnw=
github.com/mitchellh/reflectwalk v1.0.2 h1:G2LzWKi524PWgd3mLHV8Y5k7s6XUvT0Gef6zxSIeXaQ=
github.com/mitchellh/reflectwalk v1.0.2/go.mod h1:mSTlrgnPZtwu0c4WaC2kGObEpuNDbx0jmZXqmk4esnw=
github.com/pjbgf/sha1cd v0.3.2 h1:a9wb0bp1oC2TGwStyn0Umc/IGKQnEgF0vVaZ8QF8eo4=
github.com/pjbgf/sha1cd v0.3.2/go.mod h1:zQWigSxVmsHEZow5qaLtPYxpcKMMQpa09ixqBxuCS6A=
github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
github.com/posener/complete v1.2.3 h1:NP0eAhjcjImqslEwo/1hq7gpajME0fTLTezBKDqfXqo=
github.com/posener/complete v1.2.3/go.mod h1:WZIdtGGp+qx0sLrYKtIRAruyNpv6hFCicSgv7Sy7s/s=
github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=
github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc=
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 h1:n661drycOFuPLCN3Uc8sB6B/s6Z4t2xvBgU1htSHuq8=
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3/go.mod h1:A0bzQcvG0E7Rwjx0REVgAGH58e96+X0MeOfepqsbeW4=
github.com/shopspring/decimal v1.2.0/go.mod h1:DKyhrW/HYNuLGql+MJL6WCR6knT2jwCFRcu2hWCYk4o=
github.com/shopspring/decimal v1.3.1 h1:2Usl1nmF/WZucqkFZhnfFYxxxu8LG21F6nPQBE5gKV8=
github.com/shopspring/decimal v1.3.1/go.mod h1:DKyhrW/HYNuLGql+MJL6WCR6knT2jwCFRcu2hWCYk4o=
github.com/skeema/knownhosts v1.3.1 h1:X2osQ+RAjK76shCbvhHHHVl3ZlgDm8apHEHFqRjnBY8=
github.com/skeema/knownhosts v1.3.1/go.mod h1:r7KTdC8l4uxWRyK2TpQZ/1o5HaSzh06ePQNxPwTcfiY=
github.com/spf13/cast v1.3.1/go.mod h1:Qx5cxh0v+4UWYiBimWS+eyWzqEqokIECu5etghLkUJE=
github.com/spf13/cast v1.5.0 h1:rj3WzYc11XZaIZMPKmwP96zkFEnnAmV8s6XbB2aY32w=
github.com/spf13/cast v1.5.0/go.mod h1:SpXXQ5YoyJw6s3/6cMTQuxvgRl3PCJiyaX9p6b155UU=
github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
github.com/stretchr/testify v1.8.2 h1:+h33VjcLVPDHtOdpUCuF+7gSuG3yGIftsP1YvFihtJ8=
github.com/stretchr/testify v1.8.2/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
github.com/xanzy/ssh-agent v0.3.3 h1:+/15pJfg/RsTxqYcX6fHqOXZwwMP+2VyYWJeWM2qQFM=
github.com/xanzy/ssh-agent v0.3.3/go.mod h1:6dzNDKs0J9rVPHPhaGCukekBHKqfl+L3KghI1Bc68Uw=
github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
github.com/yuin/goldmark v1.7.7 h1:5m9rrB1sW3JUMToKFQfb+FGt1U7r57IHu5GrYrG2nqU=
github.com/yuin/goldmark v1.7.7/go.mod h1:uzxRWxtg69N339t3louHJ7+O03ezfj6PlliRlaOzY1E=
github.com/yuin/goldmark-meta v1.1.0 h1:pWw+JLHGZe8Rk0EGsMVssiNb/AaPMHfSRszZeUeiOUc=
github.com/yuin/goldmark-meta v1.1.0/go.mod h1:U4spWENafuA7Zyg+Lj5RqK/MF+ovMYtBvXi1lBb2VP0=
github.com/zclconf/go-cty v1.17.0 h1:seZvECve6XX4tmnvRzWtJNHdscMtYEx5R7bnnVyd/d0=
github.com/zclconf/go-cty v1.17.0/go.mod h1:wqFzcImaLTI6A5HfsRwB0nj5n0MRZFwmey8YoFPPs3U=
go.abhg.dev/goldmark/frontmatter v0.2.0 h1:P8kPG0YkL12+aYk2yU3xHv4tcXzeVnN+gU0tJ5JnxRw=
go.abhg.dev/goldmark/frontmatter v0.2.0/go.mod h1:XqrEkZuM57djk7zrlRUB02x8I5J0px76YjkOzhB4YlU=
golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
golang.org/x/crypto v0.3.0/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4=
golang.org/x/crypto v0.38.0 h1:jt+WWG8IZlBnVbomuhg2Mdq0+BBQaHbtqHEFEigjUV8=
golang.org/x/crypto v0.38.0/go.mod h1:MvrbAqul58NNYPKnOra203SB9vpuZW0e+RRZV+Ggqjw=
golang.org/x/exp v0.0.0-20230626212559-97b1e661b5df h1:UA2aFVmmsIlefxMk29Dp2juaUSth8Pyn3Tq5Y5mJGME=
golang.org/x/exp v0.0.0-20230626212559-97b1e661b5df/go.mod h1:FXUEEKJgO7OQYeo8N01OfiKP8RXMtf6e8aTskBGqWdc=
golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
golang.org/x/mod v0.28.0 h1:gQBtGhjxykdjY9YhZpSlZIsbnaE2+PgjfLWUQTnoZ1U=
golang.org/x/mod v0.28.0/go.mod h1:yfB/L0NOf/kmEbXjzCPOx1iK1fRutOydrCMsqRhEBxI=
golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
golang.org/x/net v0.2.0/go.mod h1:KqCZLdyyvdV855qA2rE3GC2aiw5xGR5TEjj8smXukLY=
golang.org/x/net v0.38.0 h1:vRMAPTMaeGqVhG5QyLJHqNDwecKTomGeqbnfZyKlBI8=
golang.org/x/net v0.38.0/go.mod h1:ivrbrMbzFq5J41QOQh0siUuly180yBYtLp+CKbEaFx8=
golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.2.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.36.0 h1:KVRy2GtZBrk1cBYA7MKu5bEZFxQk4NIDV6RLVcC8o0k=
golang.org/x/sys v0.36.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
golang.org/x/term v0.2.0/go.mod h1:TVmDHMZPmdnySmBfhjOoOdhjzdE1h4u1VwSiw2l1Nuc=
golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
golang.org/x/tools v0.37.0 h1:DVSRzp7FwePZW356yEAChSdNcQo6Nsp+fex1SUW09lE=
golang.org/x/tools v0.37.0/go.mod h1:MBN5QPQtLMHVdvsbtarmTNukZDdgwdwlO5qGacAzF0w=
golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
gopkg.in/warnings.v0 v0.1.2 h1:wFXVbFY8DY5/xOe1ECiWdKCzZlxgshcYVNkBHstARME=
gopkg.in/warnings.v0 v0.1.2/go.mod h1:jksf8JmL6Qr/oQM2OXTHunEvvTAsrWBLb6OOjuVWRNI=
gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
gopkg.in/yaml.v2 v2.3.0 h1:clyUAQHOM3G0M3f5vQj7LuJrETvjVot3Z5el9nffUtU=
gopkg.in/yaml.v2 v2.3.0/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
================================================
FILE: tools/tools.go
================================================
// Copyright (c) HashiCorp, Inc.
// SPDX-License-Identifier: MPL-2.0
//go:build generate
package tools
import (
_ "github.com/hashicorp/terraform-plugin-docs/cmd/tfplugindocs"
)
// Format Terraform code for use in documentation.
// If you do not have Terraform installed, you can remove the formatting command, but it is suggested
// to ensure the documentation is formatted properly.
//go:generate terraform fmt -recursive ../examples/
// Generate documentation.
//go:generate go run github.com/hashicorp/terraform-plugin-docs/cmd/tfplugindocs generate --provider-dir .. -provider-name sops -rendered-website-dir=docs
gitextract_d3abhnqd/
├── .github/
│ └── workflows/
│ ├── nightly-govulncheck.yaml
│ ├── release.yml
│ └── test.yml
├── .gitignore
├── GNUmakefile
├── LICENSE
├── README.md
├── docker/
│ ├── Dockerfile
│ └── hooks/
│ └── build
├── docs/
│ ├── data-sources/
│ │ ├── external.md
│ │ └── file.md
│ ├── ephemeral-resources/
│ │ ├── external.md
│ │ └── file.md
│ ├── guides/
│ │ └── legacy_usage.md
│ └── index.md
├── examples/
│ ├── README.md
│ ├── data-sources/
│ │ ├── sops_external/
│ │ │ └── data-source.tf
│ │ └── sops_file/
│ │ └── data-source.tf
│ ├── ephemeral-resources/
│ │ ├── sops_external/
│ │ │ └── ephemeral-resources.tf
│ │ └── sops_file/
│ │ └── ephemeral-resources.tf
│ └── provider/
│ └── provider.tf
├── go.mod
├── go.sum
├── main.go
├── sops/
│ ├── data.go
│ ├── data_sops_external.go
│ ├── data_sops_external_test.go
│ ├── data_sops_file.go
│ ├── data_sops_file_test.go
│ ├── ephemeral_sops_external.go
│ ├── ephemeral_sops_external_test.go
│ ├── ephemeral_sops_file.go
│ ├── ephemeral_sops_file_test.go
│ ├── flatten.go
│ ├── flatten_test.go
│ ├── internal/
│ │ ├── dotenv/
│ │ │ ├── dotenv.go
│ │ │ └── dotenv_test.go
│ │ └── ini/
│ │ ├── ini.go
│ │ └── ini_test.go
│ ├── provider.go
│ ├── provider_test.go
│ ├── read_data.go
│ ├── test-fixtures/
│ │ ├── basic.json
│ │ ├── basic.yaml
│ │ ├── complex-list.yaml
│ │ ├── nested.yaml
│ │ ├── raw.txt
│ │ └── simple-list.yaml
│ ├── validate.go
│ └── validate_test.go
├── templates/
│ ├── guides/
│ │ └── legacy_usage.md.tmpl
│ └── index.md.tmpl
├── test/
│ └── testing-key.pgp
└── tools/
├── go.mod
├── go.sum
└── tools.go
SYMBOL INDEX (102 symbols across 21 files)
FILE: main.go
function main (line 13) | func main() {
FILE: sops/data.go
type summaryError (line 13) | type summaryError struct
method Error (line 18) | func (e summaryError) Error() string {
function newSummaryError (line 22) | func newSummaryError(summary string, err error) summaryError {
function getFileData (line 29) | func getFileData(sourceFile types.String, inputType types.String) (data ...
function getExternalData (line 65) | func getExternalData(source types.String, inputType types.String) (data ...
FILE: sops/data_sops_external.go
function newExternalDataSource (line 13) | func newExternalDataSource() datasource.DataSource {
type externalDataSource (line 17) | type externalDataSource struct
method Metadata (line 27) | func (d *externalDataSource) Metadata(_ context.Context, _ datasource....
method Schema (line 31) | func (d *externalDataSource) Schema(_ context.Context, _ datasource.Sc...
method Read (line 63) | func (d *externalDataSource) Read(ctx context.Context, req datasource....
type externalDataSourceModel (line 19) | type externalDataSourceModel struct
FILE: sops/data_sops_external_test.go
constant configTestDataSourceSopsExternal_basic (line 11) | configTestDataSourceSopsExternal_basic = `
function TestDataSourceSopsExternal (line 17) | func TestDataSourceSopsExternal(t *testing.T) {
constant configTestDataSourceSopsExternal_nested (line 40) | configTestDataSourceSopsExternal_nested = `
function TestDataSourceSopsExternal_nested (line 46) | func TestDataSourceSopsExternal_nested(t *testing.T) {
constant configTestDataSourceSopsExternal_raw (line 66) | configTestDataSourceSopsExternal_raw = `
function TestDataSourceSopsExternal_raw (line 72) | func TestDataSourceSopsExternal_raw(t *testing.T) {
constant configTestDataSourceSopsExternal_simplelist (line 91) | configTestDataSourceSopsExternal_simplelist = `
function TestDataSourceSopsExternal_simplelist (line 97) | func TestDataSourceSopsExternal_simplelist(t *testing.T) {
constant configTestDataSourceSopsExternal_complexlist (line 118) | configTestDataSourceSopsExternal_complexlist = `
function TestDataSourceSopsExternal_complexlist (line 124) | func TestDataSourceSopsExternal_complexlist(t *testing.T) {
constant configTestDataSourceSopsExternal_json (line 147) | configTestDataSourceSopsExternal_json = `
function TestDataSourceSopsExternal_json (line 153) | func TestDataSourceSopsExternal_json(t *testing.T) {
FILE: sops/data_sops_file.go
function newFileDataSource (line 13) | func newFileDataSource() datasource.DataSource {
type fileDataSource (line 17) | type fileDataSource struct
method Metadata (line 27) | func (d *fileDataSource) Metadata(_ context.Context, _ datasource.Meta...
method Schema (line 31) | func (d *fileDataSource) Schema(_ context.Context, _ datasource.Schema...
method Read (line 65) | func (d *fileDataSource) Read(ctx context.Context, req datasource.Read...
type fileDataSourceModel (line 19) | type fileDataSourceModel struct
FILE: sops/data_sops_file_test.go
constant configTestDataSourceSopsFile_basic (line 11) | configTestDataSourceSopsFile_basic = `
function TestDataSourceSopsFile_basic (line 16) | func TestDataSourceSopsFile_basic(t *testing.T) {
constant configTestDataSourceSopsFile_nested (line 39) | configTestDataSourceSopsFile_nested = `
function TestDataSourceSopsFile_nested (line 44) | func TestDataSourceSopsFile_nested(t *testing.T) {
constant configTestDataSourceSopsFile_raw (line 64) | configTestDataSourceSopsFile_raw = `
function TestDataSourceSopsFile_raw (line 70) | func TestDataSourceSopsFile_raw(t *testing.T) {
constant configTestDataSourceSopsFile_simplelist (line 89) | configTestDataSourceSopsFile_simplelist = `
function TestDataSourceSopsFile_simplelist (line 94) | func TestDataSourceSopsFile_simplelist(t *testing.T) {
constant configTestDataSourceSopsFile_complexlist (line 115) | configTestDataSourceSopsFile_complexlist = `
function TestDataSourceSopsFile_complexlist (line 120) | func TestDataSourceSopsFile_complexlist(t *testing.T) {
constant configTestDataSourceSopsFile_json (line 143) | configTestDataSourceSopsFile_json = `
function TestDataSourceSopsFile_json (line 148) | func TestDataSourceSopsFile_json(t *testing.T) {
FILE: sops/ephemeral_sops_external.go
function newExternalEphemeral (line 13) | func newExternalEphemeral() ephemeral.EphemeralResource {
type externalEphemeralResource (line 17) | type externalEphemeralResource struct
method Metadata (line 26) | func (d *externalEphemeralResource) Metadata(_ context.Context, _ ephe...
method Schema (line 30) | func (d *externalEphemeralResource) Schema(_ context.Context, _ epheme...
method Open (line 58) | func (d *externalEphemeralResource) Open(ctx context.Context, req ephe...
type externalEphemeralModel (line 19) | type externalEphemeralModel struct
FILE: sops/ephemeral_sops_external_test.go
constant configTestEphemeralSopsExternal_basic (line 11) | configTestEphemeralSopsExternal_basic = `
function TestEphemeralSopsExternal (line 24) | func TestEphemeralSopsExternal(t *testing.T) {
constant configTestEphemeralSopsExternal_nested (line 47) | configTestEphemeralSopsExternal_nested = `
function TestEphemeralSopsExternal_nested (line 60) | func TestEphemeralSopsExternal_nested(t *testing.T) {
constant configTestEphemeralSopsExternal_raw (line 80) | configTestEphemeralSopsExternal_raw = `
function TestEphemeralSopsExternal_raw (line 93) | func TestEphemeralSopsExternal_raw(t *testing.T) {
constant configTestEphemeralSopsExternal_simplelist (line 112) | configTestEphemeralSopsExternal_simplelist = `
function TestEphemeralSopsExternal_simplelist (line 125) | func TestEphemeralSopsExternal_simplelist(t *testing.T) {
constant configTestEphemeralSopsExternal_complexlist (line 146) | configTestEphemeralSopsExternal_complexlist = `
function TestEphemeralSopsExternal_complexlist (line 159) | func TestEphemeralSopsExternal_complexlist(t *testing.T) {
constant configTestEphemeralSopsExternal_json (line 182) | configTestEphemeralSopsExternal_json = `
function TestEphemeralSopsExternal_json (line 195) | func TestEphemeralSopsExternal_json(t *testing.T) {
FILE: sops/ephemeral_sops_file.go
function newFileEphemeralResource (line 13) | func newFileEphemeralResource() ephemeral.EphemeralResource {
type fileEphemeralResource (line 17) | type fileEphemeralResource struct
method Metadata (line 26) | func (d *fileEphemeralResource) Metadata(_ context.Context, _ ephemera...
method Schema (line 30) | func (d *fileEphemeralResource) Schema(_ context.Context, _ ephemeral....
method Open (line 60) | func (d *fileEphemeralResource) Open(ctx context.Context, req ephemera...
type fileEphemeralResourceModel (line 19) | type fileEphemeralResourceModel struct
FILE: sops/ephemeral_sops_file_test.go
constant configTestEphemeralSopsFile_basic (line 11) | configTestEphemeralSopsFile_basic = `
function TestEphemeralSopsFile_basic (line 23) | func TestEphemeralSopsFile_basic(t *testing.T) {
constant configTestEphemeralSopsFile_nested (line 46) | configTestEphemeralSopsFile_nested = `
function TestEphemeralSopsFile_nested (line 58) | func TestEphemeralSopsFile_nested(t *testing.T) {
constant configTestEphemeralSopsFile_raw (line 78) | configTestEphemeralSopsFile_raw = `
function TestEphemeralSopsFile_raw (line 91) | func TestEphemeralSopsFile_raw(t *testing.T) {
constant configTestEphemeralSopsFile_simplelist (line 110) | configTestEphemeralSopsFile_simplelist = `
function TestEphemeralSopsFile_simplelist (line 122) | func TestEphemeralSopsFile_simplelist(t *testing.T) {
constant configTestEphemeralSopsFile_complexlist (line 143) | configTestEphemeralSopsFile_complexlist = `
function TestEphemeralSopsFile_complexlist (line 155) | func TestEphemeralSopsFile_complexlist(t *testing.T) {
constant configTestEphemeralSopsFile_json (line 178) | configTestEphemeralSopsFile_json = `
function TestEphemeralSopsFile_json (line 190) | func TestEphemeralSopsFile_json(t *testing.T) {
FILE: sops/flatten.go
function flatten (line 10) | func flatten(data map[string]interface{}) map[string]string {
function flattenSlice (line 35) | func flattenSlice(data []interface{}) map[string]string {
function convertMap (line 60) | func convertMap(originalMap map[interface{}]interface{}) map[string]inte...
FILE: sops/flatten_test.go
function TestFlattening (line 8) | func TestFlattening(t *testing.T) {
FILE: sops/internal/dotenv/dotenv.go
function Unmarshal (line 9) | func Unmarshal(in []byte, out *map[string]interface{}) error {
FILE: sops/internal/dotenv/dotenv_test.go
function TestUnmarshal (line 8) | func TestUnmarshal(t *testing.T) {
FILE: sops/internal/ini/ini.go
function Unmarshal (line 7) | func Unmarshal(in []byte, out *map[string]interface{}) error {
FILE: sops/internal/ini/ini_test.go
function TestUnmarshal (line 8) | func TestUnmarshal(t *testing.T) {
FILE: sops/provider.go
type SopsProvider (line 15) | type SopsProvider struct
method Metadata (line 21) | func (p *SopsProvider) Metadata(_ context.Context, _ provider.Metadata...
method Schema (line 25) | func (p *SopsProvider) Schema(_ context.Context, _ provider.SchemaRequ...
method Configure (line 31) | func (p *SopsProvider) Configure(_ context.Context, _ provider.Configu...
method DataSources (line 34) | func (p *SopsProvider) DataSources(_ context.Context) []func() datasou...
method Resources (line 41) | func (p *SopsProvider) Resources(_ context.Context) []func() resource....
method EphemeralResources (line 45) | func (p *SopsProvider) EphemeralResources(_ context.Context) []func() ...
function New (line 17) | func New() provider.Provider {
FILE: sops/provider_test.go
function TestProvider_impl (line 17) | func TestProvider_impl(t *testing.T) {
FILE: sops/read_data.go
function readData (line 15) | func readData(content []byte, format string) (map[string]string, string,...
FILE: sops/validate.go
function validateInputType (line 14) | func validateInputType(inputType string) error {
FILE: sops/validate_test.go
function testValidateInputType (line 5) | func testValidateInputType(inputType string, t *testing.T) {
function TestValidateInputType_yaml (line 12) | func TestValidateInputType_yaml(t *testing.T) {
function TestValidateInputType_json (line 17) | func TestValidateInputType_json(t *testing.T) {
function TestValidateInputType_raw (line 22) | func TestValidateInputType_raw(t *testing.T) {
function TestValidateInputType_bad (line 27) | func TestValidateInputType_bad(t *testing.T) {
Condensed preview — 56 files, each showing path, character count, and a content snippet. Download the .json file or copy for the full structured content (200K chars).
[
{
"path": ".github/workflows/nightly-govulncheck.yaml",
"chars": 757,
"preview": "# Adapted from https://www.jvt.me/posts/2025/09/11/govulncheck-github-actions/\n\nname: Check dependencies through `govuln"
},
{
"path": ".github/workflows/release.yml",
"chars": 720,
"preview": "name: Release\n\non:\n push:\n tags:\n - v*\n\n# Request permissions to write (edit, create) new releases\npermissions:"
},
{
"path": ".github/workflows/test.yml",
"chars": 862,
"preview": "name: Tests\n\non:\n pull_request:\n push:\n branches:\n - master\n\njobs:\n build-and-test:\n name: Build and Test\n"
},
{
"path": ".gitignore",
"chars": 49,
"preview": "bin/\nbinaries/\nreleases/\nterraform-provider-sops\n"
},
{
"path": "GNUmakefile",
"chars": 1890,
"preview": "export CGO_ENABLED = 0\nVERSION = $(shell git describe --tags --match='v*' --always)\nRELEASE = $(patsubst v%,%,$(VERSION)"
},
{
"path": "LICENSE",
"chars": 16725,
"preview": "Mozilla Public License Version 2.0\n==================================\n\n1. Definitions\n--------------\n\n1.1. \"Contributor\""
},
{
"path": "README.md",
"chars": 5057,
"preview": "# terraform-sops\n\nA Terraform plugin for using files encrypted with [SOPS](https://github.com/getsops/sops).\n\n**NOTE:** "
},
{
"path": "docker/Dockerfile",
"chars": 518,
"preview": "FROM hashicorp/terraform:0.12.0\nARG SOPS_PLUGIN_VERSION\nENV SOPS_PLUGIN_VERSION=${SOPS_PLUGIN_VERSION}\nRUN wget https://"
},
{
"path": "docker/hooks/build",
"chars": 394,
"preview": "#!/usr/bin/env bash\nset -eufo pipefail\nif ! echo ${DOCKER_TAG} | grep -qE '^v[0-9\\.]+'; then\n\t# If the tag is not a vers"
},
{
"path": "docs/data-sources/external.md",
"chars": 1163,
"preview": "---\n# generated by https://github.com/hashicorp/terraform-plugin-docs\npage_title: \"sops_external Data Source - sops\"\nsub"
},
{
"path": "docs/data-sources/file.md",
"chars": 1559,
"preview": "---\n# generated by https://github.com/hashicorp/terraform-plugin-docs\npage_title: \"sops_file Data Source - sops\"\nsubcate"
},
{
"path": "docs/ephemeral-resources/external.md",
"chars": 1132,
"preview": "---\n# generated by https://github.com/hashicorp/terraform-plugin-docs\npage_title: \"sops_external Ephemeral Resource - so"
},
{
"path": "docs/ephemeral-resources/file.md",
"chars": 1468,
"preview": "---\n# generated by https://github.com/hashicorp/terraform-plugin-docs\npage_title: \"sops_file Ephemeral Resource - sops\"\n"
},
{
"path": "docs/guides/legacy_usage.md",
"chars": 2477,
"preview": "---\npage_title: \"terraform-sops on older Terraform versions\"\ndescription: |-\n Migration guide for moving from a old Ter"
},
{
"path": "docs/index.md",
"chars": 909,
"preview": "---\n# generated by https://github.com/hashicorp/terraform-plugin-docs\npage_title: \"sops Provider\"\ndescription: |-\n A Te"
},
{
"path": "examples/README.md",
"chars": 714,
"preview": "# Examples\n\nThis directory contains examples that are mostly used for documentation, but can also be run/tested manually"
},
{
"path": "examples/data-sources/sops_external/data-source.tf",
"chars": 265,
"preview": "data \"http\" \"remote_sops_data\" {\n url = \"https://sops.example/my-data\"\n}\n\ndata \"sops_external\" \"demo_secret\" {\n source"
},
{
"path": "examples/data-sources/sops_file/data-source.tf",
"chars": 570,
"preview": "provider \"sops\" {}\n\ndata \"sops_file\" \"demo-secret\" {\n source_file = \"demo-secret.enc.json\"\n}\n\noutput \"root-value-passwo"
},
{
"path": "examples/ephemeral-resources/sops_external/ephemeral-resources.tf",
"chars": 275,
"preview": "data \"http\" \"remote_sops_data\" {\n url = \"https://sops.example/my-data\"\n}\n\nephemeral \"sops_external\" \"demo_secret\" {\n s"
},
{
"path": "examples/ephemeral-resources/sops_file/ephemeral-resources.tf",
"chars": 575,
"preview": "provider \"sops\" {}\n\nephemeral \"sops_file\" \"demo_secret\" {\n source_file = \"demo_secret.enc.json\"\n}\n\noutput \"root_value_p"
},
{
"path": "examples/provider/provider.tf",
"chars": 257,
"preview": "provider \"sops\" {}\n\ndata \"sops_file\" \"demo_secret\" {\n source_file = \"demo-secret.enc.json\"\n}\n\noutput \"db_password\" {\n "
},
{
"path": "go.mod",
"chars": 8990,
"preview": "module github.com/carlpett/terraform-provider-sops\n\ngo 1.25.8\n\nrequire (\n\tgithub.com/getsops/sops/v3 v3.12.2\n\tgithub.com"
},
{
"path": "go.sum",
"chars": 57486,
"preview": "c2sp.org/CCTV/age v0.0.0-20251208015420-e9274a7bdbfd h1:ZLsPO6WdZ5zatV4UfVpr7oAwLGRZ+sebTUruuM4Ra3M=\nc2sp.org/CCTV/age v"
},
{
"path": "main.go",
"chars": 550,
"preview": "package main\n\nimport (\n\t\"context\"\n\t\"flag\"\n\t\"log\"\n\n\t\"github.com/hashicorp/terraform-plugin-framework/providerserver\"\n\n\t\"g"
},
{
"path": "sops/data.go",
"chars": 1995,
"preview": "package sops\n\nimport (\n\t\"fmt\"\n\t\"io\"\n\t\"os\"\n\t\"path\"\n\t\"strings\"\n\n\t\"github.com/hashicorp/terraform-plugin-framework/types\"\n)"
},
{
"path": "sops/data_sops_external.go",
"chars": 2749,
"preview": "package sops\n\nimport (\n\t\"context\"\n\n\t\"github.com/hashicorp/terraform-plugin-framework/datasource\"\n\t\"github.com/hashicorp/"
},
{
"path": "sops/data_sops_external_test.go",
"chars": 5506,
"preview": "package sops\n\nimport (\n\t\"fmt\"\n\t\"os\"\n\t\"testing\"\n\n\t\"github.com/hashicorp/terraform-plugin-testing/helper/resource\"\n)\n\ncons"
},
{
"path": "sops/data_sops_file.go",
"chars": 2908,
"preview": "package sops\n\nimport (\n\t\"context\"\n\n\t\"github.com/hashicorp/terraform-plugin-framework/datasource\"\n\t\"github.com/hashicorp/"
},
{
"path": "sops/data_sops_file_test.go",
"chars": 5192,
"preview": "package sops\n\nimport (\n\t\"fmt\"\n\t\"os\"\n\t\"testing\"\n\n\t\"github.com/hashicorp/terraform-plugin-testing/helper/resource\"\n)\n\ncons"
},
{
"path": "sops/ephemeral_sops_external.go",
"chars": 2599,
"preview": "package sops\n\nimport (\n\t\"context\"\n\n\t\"github.com/hashicorp/terraform-plugin-framework/ephemeral\"\n\t\"github.com/hashicorp/t"
},
{
"path": "sops/ephemeral_sops_external_test.go",
"chars": 5840,
"preview": "package sops\n\nimport (\n\t\"fmt\"\n\t\"os\"\n\t\"testing\"\n\n\t\"github.com/hashicorp/terraform-plugin-testing/helper/resource\"\n)\n\ncons"
},
{
"path": "sops/ephemeral_sops_file.go",
"chars": 2743,
"preview": "package sops\n\nimport (\n\t\"context\"\n\n\t\"github.com/hashicorp/terraform-plugin-framework/ephemeral\"\n\t\"github.com/hashicorp/t"
},
{
"path": "sops/ephemeral_sops_file_test.go",
"chars": 5586,
"preview": "package sops\n\nimport (\n\t\"fmt\"\n\t\"os\"\n\t\"testing\"\n\n\t\"github.com/hashicorp/terraform-plugin-testing/helper/resource\"\n)\n\ncons"
},
{
"path": "sops/flatten.go",
"chars": 1674,
"preview": "package sops\n\nimport \"fmt\"\n\n// flatten flattens the nested struct.\n//\n// All keys will be joined by dot\n// e.g. {\"a\": {\""
},
{
"path": "sops/flatten_test.go",
"chars": 1776,
"preview": "package sops\n\nimport (\n\t\"reflect\"\n\t\"testing\"\n)\n\nfunc TestFlattening(t *testing.T) {\n\ttc := []struct {\n\t\tname string\n"
},
{
"path": "sops/internal/dotenv/dotenv.go",
"chars": 548,
"preview": "package dotenv\n\nimport (\n\t\"bytes\"\n\t\"fmt\"\n\t\"strings\"\n)\n\nfunc Unmarshal(in []byte, out *map[string]interface{}) error {\n\ti"
},
{
"path": "sops/internal/dotenv/dotenv_test.go",
"chars": 433,
"preview": "package dotenv\n\nimport (\n\t\"reflect\"\n\t\"testing\"\n)\n\nfunc TestUnmarshal(t *testing.T) {\n\tinput := []byte(`# Comment!\npasswo"
},
{
"path": "sops/internal/ini/ini.go",
"chars": 609,
"preview": "package ini\n\nimport (\n\t\"gopkg.in/ini.v1\"\n)\n\nfunc Unmarshal(in []byte, out *map[string]interface{}) error {\n\tf, err := in"
},
{
"path": "sops/internal/ini/ini_test.go",
"chars": 545,
"preview": "package ini\n\nimport (\n\t\"reflect\"\n\t\"testing\"\n)\n\nfunc TestUnmarshal(t *testing.T) {\n\tinput := []byte(`; Comment!\nrootKey ="
},
{
"path": "sops/provider.go",
"chars": 1466,
"preview": "package sops\n\nimport (\n\t\"context\"\n\n\t\"github.com/hashicorp/terraform-plugin-framework/datasource\"\n\t\"github.com/hashicorp/"
},
{
"path": "sops/provider_test.go",
"chars": 545,
"preview": "package sops\n\nimport (\n\t\"testing\"\n\n\t\"github.com/hashicorp/terraform-plugin-framework/provider\"\n\t\"github.com/hashicorp/te"
},
{
"path": "sops/read_data.go",
"chars": 972,
"preview": "package sops\n\nimport (\n\t\"encoding/json\"\n\t\"fmt\"\n\n\t\"github.com/getsops/sops/v3\"\n\t\"github.com/getsops/sops/v3/decrypt\"\n\t\"go"
},
{
"path": "sops/test-fixtures/basic.json",
"chars": 1708,
"preview": "{\n\t\"hello\": \"ENC[AES256_GCM,data:vye/uc0=,iv:CasWaUwDHpLDkGTPrIE5Z4bI2KEBCtdw94ROfL4qlbE=,tag:I7OBTDV8JsrjLg4SfRNf8w==,t"
},
{
"path": "sops/test-fixtures/basic.yaml",
"chars": 1760,
"preview": "hello: ENC[AES256_GCM,data:gzR9Gz4=,iv:cbMZU1nUyo5mFCW+Vel2UYbnbMA/0wKxsQzy/WVAYw8=,tag:tETDJMCJYo+4K4LwsSw4Dw==,type:st"
},
{
"path": "sops/test-fixtures/complex-list.yaml",
"chars": 1769,
"preview": "a_list:\n- name: ENC[AES256_GCM,data:nX7D,iv:HdTElsGgx0Z2LcNmUGSbMCTyVhRD0UQMi8ztAEYQqJQ=,tag:D/sIqf+TXpUhyTbugEPpww==,"
},
{
"path": "sops/test-fixtures/nested.yaml",
"chars": 1507,
"preview": "db:\n user: ENC[AES256_GCM,data:FPeD,iv:J72gLGxfRX+8PZZrD7f5/7zPQPbMgBxL7OUxyvvFH1A=,tag:qJvyhtA4MXRjUkuYMctPlg==,type"
},
{
"path": "sops/test-fixtures/raw.txt",
"chars": 1321,
"preview": "{\n\t\"data\": \"ENC[AES256_GCM,data:LOXVpbH9B6ZV+V16esP9HQ==,iv:BTeG8dZCpG1sNpnajwPdP1v/fBk/647CQ+y9ns3nn78=,tag:bPir7Bd96Jg"
},
{
"path": "sops/test-fixtures/simple-list.yaml",
"chars": 1506,
"preview": "a_list:\n- ENC[AES256_GCM,data:sxhIdQ==,iv:y2HITUKrZ/JgJT+9+UI5BDj1SMaGO0pTSvjJhsSW6r4=,tag:ZuCjI7N9WKjAshTaPYpspQ==,type"
},
{
"path": "sops/validate.go",
"chars": 421,
"preview": "package sops\n\nimport \"fmt\"\n\nvar validTypes = map[string]bool{\n\t\"json\": true,\n\t\"yaml\": true,\n\t\"dotenv\": true,\n\t\"ini\": t"
},
{
"path": "sops/validate_test.go",
"chars": 757,
"preview": "package sops\n\nimport \"testing\"\n\nfunc testValidateInputType(inputType string, t *testing.T) {\n\terr := validateInputType(i"
},
{
"path": "templates/guides/legacy_usage.md.tmpl",
"chars": 2477,
"preview": "---\npage_title: \"terraform-sops on older Terraform versions\"\ndescription: |-\n Migration guide for moving from a old Ter"
},
{
"path": "templates/index.md.tmpl",
"chars": 648,
"preview": "---\n# generated by https://github.com/hashicorp/terraform-plugin-docs\npage_title: \"sops Provider\"\ndescription: |-\n A Te"
},
{
"path": "test/testing-key.pgp",
"chars": 5195,
"preview": "-----BEGIN PGP PRIVATE KEY BLOCK-----\n\nlQOXBFxIOOYBCADXBowkLNMC+iBS0LIl03VDLqF2KRVcbs7gbWNCZEYTWag7vR5m\nugxjpMUXjqWeR8tG"
},
{
"path": "tools/go.mod",
"chars": 2314,
"preview": "module tools\n\ngo 1.25.3\n\nrequire github.com/hashicorp/terraform-plugin-docs v0.24.0\n\nrequire (\n\tgithub.com/BurntSushi/to"
},
{
"path": "tools/go.sum",
"chars": 17251,
"preview": "dario.cat/mergo v1.0.0 h1:AGCNq9Evsj31mOgNPcLyXc+4PNABt905YmuqPYYpBWk=\ndario.cat/mergo v1.0.0/go.mod h1:uNxQE+84aUszobSt"
},
{
"path": "tools/tools.go",
"chars": 625,
"preview": "// Copyright (c) HashiCorp, Inc.\n// SPDX-License-Identifier: MPL-2.0\n\n//go:build generate\n\npackage tools\n\nimport (\n\t_ \"g"
}
]
About this extraction
This page contains the full source code of the carlpett/terraform-provider-sops GitHub repository, extracted and formatted as plain text for AI agents and large language models (LLMs). The extraction includes 56 files (183.9 KB), approximately 76.3k tokens, and a symbol index with 102 extracted functions, classes, methods, constants, and types. Use this with OpenClaw, Claude, ChatGPT, Cursor, Windsurf, or any other AI tool that accepts text input. You can copy the full output to your clipboard or download it as a .txt file.
Extracted by GitExtract — free GitHub repo to text converter for AI. Built by Nikandr Surkov.