Merge branch 'master' into fix/populate-id

Author: fabiencastarede

CHANGELOG.md

@@ -1,3 +1,33 @@
+## 2.10.0 (November 27, 2025)
+
+⚙️ General:
+
+* Bump dependency golang.org/x/crypto from 0.38.0 to 0.45.0 ([#1161](https://github.com/ovh/terraform-provider-ovh/pull/1161))
+
+🎉 Features:
+
+* Add provider option `ignore_init_error` to ignore initialization errors in specific scenarios ([#1163](https://github.com/ovh/terraform-provider-ovh/pull/1163))
+
+💪 Improvements:
+
+* `r/ovh_cloud_project_storage`: Add option to delete bucket replicas on resource deletion ([#1158](https://github.com/ovh/terraform-provider-ovh/pull/1158))
+* `r/ovh_cloud_project_storage`: Add field to avoid saving objects in state ([#1154](https://github.com/ovh/terraform-provider-ovh/pull/1154))
+
+🐜 Bug fixes:
+
+* `r/ovh_cloud_project_storage`: `name` and `region` attributes modification now triggers a resource re-creation ([#1152](https://github.com/ovh/terraform-provider-ovh/pull/1152))
+* `r/ovh_cloud_project_volume`: Fix available volume types list ([#1167](https://github.com/ovh/terraform-provider-ovh/pull/1167))
+* `r/ovh_cloud_project_user_s3_credential`: Do not remove ID in case of read error ([#1160](https://github.com/ovh/terraform-provider-ovh/pull/1160))
+* `r/ovh_cloud_project_loadbalancer`: Wait for flavor update to complete before saving state ([#1153](https://github.com/ovh/terraform-provider-ovh/pull/1153))
+* `r/ovh_cloud_project_alerting`: Handle email no longer returned by API ([#1151](https://github.com/ovh/terraform-provider-ovh/pull/1151))
+* `r/ovh_cloud_project_network_private`: Use correct route to delete regional networks ([#1145](https://github.com/ovh/terraform-provider-ovh/pull/1145))
+
+📚 Documentation:
+
+* `r/ovh_okms_secret`: Fix category in documentation ([#1144](https://github.com/ovh/terraform-provider-ovh/pull/1144))
+
+❤️ Thanks for your contributions ❤️
+
 ## 2.9.0 (November 4, 2025)
 
 🎉 Features:

docs/data-sources/cloud_project_storage.md

@@ -28,6 +28,7 @@ data "ovh_cloud_project_storage" "storage" {
 
 ### Optional
 
+- `hide_objects` (Boolean) If true, objects list will not be saved in state (useful for large buckets)
 - `limit` (Number) Limit the number of objects returned (1000 maximum, defaults to 1000)
 - `marker` (String) Key to start with when listing objects
 - `prefix` (String) List objects whose key begins with this prefix

docs/data-sources/okms_secret.md

@@ -70,21 +70,21 @@ In addition to the arguments above, the following attributes are exported:
 - `version` (Number) The resolved version number (requested or current latest).
 - `data` (String, Sensitive) Raw JSON secret payload (present only if `include_data` is true).
 - `metadata` (Block) Secret metadata:
-	- `cas_required` (Boolean)
-	- `created_at` (String)
-	- `updated_at` (String)
-	- `current_version` (Number)
-	- `oldest_version` (Number)
-	- `max_versions` (Number)
-	- `deactivate_version_after` (String)
-	- `custom_metadata` (Map of String)
+  - `cas_required` (Boolean)
+  - `created_at` (String)
+  - `updated_at` (String)
+  - `current_version` (Number)
+  - `oldest_version` (Number)
+  - `max_versions` (Number)
+  - `deactivate_version_after` (String)
+  - `custom_metadata` (Map of String)
 - `iam` (Block) IAM resource metadata:
-	- `display_name` (String)
-	- `id` (String)
-	- `tags` (Map of String)
-	- `urn` (String)
+  - `display_name` (String)
+  - `id` (String)
+  - `tags` (Map of String)
+  - `urn` (String)
 
 ## Behavior & Notes
 
 - The `data` attribute retains the raw JSON returned by the API. Use `jsondecode()` to work with individual keys.
-- Changing only `include_data` (true -> false) will cause the `data` attribute to become null in subsequent refreshes (state no longer holds the payload).
+- Changing only `include_data` (true -> false) will cause the `data` attribute to become null in subsequent refreshes (state no longer holds the payload).

docs/index.md

@@ -196,6 +196,8 @@ The following arguments are supported:
 
 * `api_rate_limit` - (Optional) Specify the API request rate limit, X operations by seconds. If omitted, unlimited.
 
+* `ignore_init_error` - (Optional) **⚠️ Use with caution and only if you know what you are doing.** If set to `true`, the provider will skip authentication validation during initialization. If omitted, the `OVH_IGNORE_INIT_ERROR` environment variable is used. This allows the provider to load even with invalid credentials, but any actual API calls will still fail. This is intended for development/testing purposes only where valid credentials are not available but the provider configuration must be present.
+
 ## Terraform State storage in an OVHcloud Object Storage (S3 compatibility)
 
 In order to store your Terraform states on a High Performance (S3) OVHcloud Object Storage, please follow the [guide](https://help.ovhcloud.com/csm/en-public-cloud-compute-terraform-high-perf-object-storage-backend-state?id=kb_article_view&sysparm_article=KB0051345).

docs/resources/cloud_project_storage.md

@@ -35,6 +35,7 @@ resource "ovh_cloud_project_storage" "storage" {
 ### Optional
 
 - `encryption` (Attributes) Encryption configuration (see [below for nested schema](#nestedatt--encryption))
+- `hide_objects` (Boolean) If true, objects list will not be saved in state (useful for large buckets)
 - `limit` (Number) Limit the number of objects returned (1000 maximum, defaults to 1000)
 - `marker` (String) Key to start with when listing objects
 - `owner_id` (Number) Container owner user ID
@@ -92,6 +93,7 @@ Required:
 Optional:
 
 - `storage_class` (String) Destination storage class
+- `remove_on_main_bucket_deletion` (Boolean) Whether to remove replicated bucket when the main bucket is deleted (make sure to apply your configuration when changing this value before deleting the main bucket)
 
 <a id="nestedatt--replication--rules--filter"></a>
 

docs/resources/cloud_project_volume.md

@@ -28,7 +28,7 @@ The following arguments are supported:
 * `description` - A description of the volume
 * `name` - Name of the volume
 * `size` - Size (GB) of the volume
-* `type` - Type of the volume **Changing this value recreates the resource.**
+* `type` - Type of the volume **Changing this value recreates the resource.** Available types are: classic, classic-luks, classic-multiattach, high-speed, high-speed-luks, high-speed-gen2, high-speed-gen2-luks
 
 ## Attributes Reference
 

docs/resources/dedicated_server.md

@@ -140,7 +140,7 @@ resource "ovh_dedicated_server" "server" {
       * `raid_level` - Software raid type
       * `size` - Partition size in MiB
     * `scheme_name` - Partitioning scheme (if applicable with selected operating system)
-* `properties` - Deprecated, has no effect
+* `properties` - Attribute 'properties' is deprecated and has no effect
 
 ### Arguments used to control the lifecycle of a dedicated server
 

docs/resources/dedicated_server_reinstall_task.md

@@ -128,7 +128,7 @@ resource "ovh_dedicated_server_reinstall_task" "server_install" {
     http_headers = {
       Authorization = "Basic bG9naW46cGFzc3dvcmQ="
     }
-    image_url              = "https://github.com/ashmonger/akution_test/releases/download/0.5-compress/deb11k6.qcow2"
+    image_url           = "https://github.com/ashmonger/akution_test/releases/download/0.5-compress/deb11k6.qcow2"
   }
 }
 ```
@@ -239,7 +239,7 @@ The following arguments are supported:
 
 ~> **WARNING** Some customizations may be required on some Operating Systems. [Check how to list the available and required customization(s) for your operating system](https://help.ovhcloud.com/csm/en-dedicated-servers-api-os-installation?id=kb_article_view&sysparm_article=KB0061951#os-inputs) (do not forget to adapt camel case customization name to snake case parameter).
 
-* `properties` - Deprecated, has no effect
+* `properties` - Attribute 'properties' is deprecated and has no effect.
 
 * `storage`: OS reinstallation storage configurations. [More details about disks, hardware/software RAID and partitioning configuration](https://help.ovhcloud.com/csm/en-dedicated-servers-api-partitioning?id=kb_article_view&sysparm_article=KB0043882) (do not forget to adapt camel case parameters to snake case parameters).
   * `disk_group_id`: Disk group id to install the OS to (default is 0, meaning automatic).

docs/resources/okms_secret.md

@@ -1,4 +1,3 @@
-
 ---
 subcategory : "Key Management Service (KMS)"
 ---
@@ -48,6 +47,25 @@ output "api_key" {
 }
 ```
 
+# Reading a field from the secret version data:
+
+```terraform
+data "ovh_okms_secret" "latest_with_data" {
+	okms_id      = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
+	path         = "app/api_credentials"
+	include_data = true
+}
+
+locals {
+	secret_obj = jsondecode(data.ovh_okms_secret.latest_with_data.data)
+}
+
+output "api_key" {
+	value     = local.secret_obj.api_key
+	sensitive = true
+}
+```
+
 Updating the secret (new version) while enforcing optimistic concurrency control using CAS:
 
 ```terraform

go.mod

@@ -16,7 +16,7 @@ require (
 	github.com/ybriffa/rfc3339 v0.0.0-20220203155318-1789e3fd6e70
 	go.uber.org/ratelimit v0.3.1
 	golang.org/x/exp v0.0.0-20230809150735-7b3493d9a819
-	golang.org/x/net v0.40.0
+	golang.org/x/net v0.47.0
 	gopkg.in/yaml.v3 v3.0.1
 )
 
@@ -56,18 +56,18 @@ require (
 	github.com/vmihailenco/msgpack/v5 v5.4.1 // indirect
 	github.com/vmihailenco/tagparser/v2 v2.0.0 // indirect
 	github.com/zclconf/go-cty v1.16.2 // indirect
-	golang.org/x/crypto v0.38.0 // indirect
-	golang.org/x/mod v0.24.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/mod v0.29.0 // indirect
 	golang.org/x/oauth2 v0.27.0 // indirect
-	golang.org/x/sync v0.14.0 // indirect
-	golang.org/x/sys v0.33.0 // indirect
-	golang.org/x/text v0.25.0 // indirect
-	golang.org/x/tools v0.33.0 // indirect
+	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/text v0.31.0 // indirect
+	golang.org/x/tools v0.38.0 // indirect
 	google.golang.org/appengine v1.6.8 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20241015192408-796eee8c2d53 // indirect
 	google.golang.org/grpc v1.69.4 // indirect
 	google.golang.org/protobuf v1.36.3 // indirect
 	gopkg.in/ini.v1 v1.67.0 // indirect
 )
 
-go 1.23.0
+go 1.24.0