Add an example for updating .terraform.lock.hcl

.circleci/config.yml

@@ -74,6 +74,10 @@ commands:
       provider_name:
         description: A name of provider
         type: string
+      terraform_version:
+        description: A version of terraform command for updating a lock file
+        type: string
+        default: latest
     steps:
       - run:
           name: Update terraform-provider-<< parameters.provider_name >> to latest
@@ -87,6 +91,32 @@ commands:
             else
               git checkout -b update-terraform-provider-<< parameters.provider_name >>-to-v${VERSION} origin/<< parameters.base_branch >>
               tfupdate provider << parameters.provider_name >> -v ${VERSION} << parameters.args >>
+
+              # install terraform
+              TERRAFORM_VERSION=<< parameters.terraform_version >>
+              if [ "${TERRAFORM_VERSION}" = "latest" ]; then
+                TERRAFORM_VERSION=$(tfupdate release latest hashicorp/terraform)
+              fi
+              wget -qO- https://releases.hashicorp.com/terraform/${TERRAFORM_VERSION}/terraform_${TERRAFORM_VERSION}_linux_amd64.zip | unzip -d /bin - && chmod +x /bin/terraform
+              terraform version
+
+              # create a local filesystem mirror to avoid duplicate downloads
+              FS_MIRROR="/tmp/terraform.d/plugins"
+              terraform providers mirror -platform=linux_amd64 -platform=darwin_amd64 "${FS_MIRROR}"
+
+              # update the lock file
+              ALL_DIRS=$(find . -type f -name '*.tf' | xargs -I {} dirname {} | grep -v 'modules/')
+              for dir in ${ALL_DIRS}
+              do
+                pushd "$dir"
+                # always create a new lock to avoid duplicate downloads by terraoform init -upgrade
+                rm -f .terraform.lock.hcl
+                # generate h1 hashes for all platforms you need
+                # recording zh hashes requires to download from origin, so we intentionally ignore them.
+                terraform providers lock -fs-mirror="${FS_MIRROR}" -platform=linux_amd64 -platform=darwin_amd64
+                popd
+              done
+
               if git add . && git diff --cached --exit-code --quiet; then
                 echo "No changes"
               else
@@ -108,6 +138,7 @@ jobs:
       - tfupdate_terraform
       - tfupdate_provider:
           provider_name: 'aws'
+          terraform_version: '0.14.0'
 
 workflows:
   version: 2

.gitignore

@@ -0,0 +1 @@
+.terraform/

dev/main.tf

@@ -0,0 +1,10 @@
+terraform {
+  required_version = "0.14.0"
+
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "3.15.0"
+    }
+  }
+}

main.tf

@@ -1,5 +1,5 @@
 terraform {
-  required_version = "0.14.0-beta2"
+  required_version = "0.14.0"
 
   required_providers {
     aws = {

prod/main.tf

@@ -0,0 +1,10 @@
+terraform {
+  required_version = "0.14.0"
+
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "3.15.0"
+    }
+  }
+}