From 0f25f796e1c780c77e91ea7308e7b9e1d9a082d6 Mon Sep 17 00:00:00 2001 From: Paul Tyng Date: Thu, 16 Apr 2020 09:34:35 -0400 Subject: [PATCH 1/3] Add page explaining provider trust tiers --- website/docs/registry/providers/tiers.html.md | 20 +++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 website/docs/registry/providers/tiers.html.md diff --git a/website/docs/registry/providers/tiers.html.md b/website/docs/registry/providers/tiers.html.md new file mode 100644 index 0000000000..dd1be510ed --- /dev/null +++ b/website/docs/registry/providers/tiers.html.md @@ -0,0 +1,20 @@ +--- +layout: "registry" +page_title: "Terraform Registry - Provider Tiers +sidebar_current: "docs-registry-provider-tiers +description: |- + Published Provider tiers in the Terraform Registry +--- + +# Provider Tiers + +There are three tiers of providers in the Terraform Registry: + +* **Official Providers** - are built, signed, and supported by HashiCorp. Official Providers can typically used without providing + provider source information in your Terraform configuration. +* **Partner Providers** - are built, signed, and supported by a third party. HashiCorp has verified the ownership of the private + key and we provide a chain of trust to the CLI to verify this programatically. To use Partner Providers in your Terraform + configuration, you need to specify the namespace and name to download from the registry. +* **Community Providers** - are built, signed, and supported by a third party. HashiCorp does not provide a verification or chain + of trust for the signing. You will want to obtain and validate fingerprints manually if you want to ensure you are using a + binary you can trust. From 663a57b2631213823fee7024614cebffbbed2900 Mon Sep 17 00:00:00 2001 From: Paul Tyng Date: Thu, 16 Apr 2020 10:02:48 -0400 Subject: [PATCH 2/3] Update website/docs/registry/providers/tiers.html.md Co-Authored-By: Alisdair McDiarmid --- website/docs/registry/providers/tiers.html.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/website/docs/registry/providers/tiers.html.md b/website/docs/registry/providers/tiers.html.md index dd1be510ed..9356cd6ab3 100644 --- a/website/docs/registry/providers/tiers.html.md +++ b/website/docs/registry/providers/tiers.html.md @@ -10,7 +10,7 @@ description: |- There are three tiers of providers in the Terraform Registry: -* **Official Providers** - are built, signed, and supported by HashiCorp. Official Providers can typically used without providing +* **Official Providers** - are built, signed, and supported by HashiCorp. Official Providers can typically be used without providing provider source information in your Terraform configuration. * **Partner Providers** - are built, signed, and supported by a third party. HashiCorp has verified the ownership of the private key and we provide a chain of trust to the CLI to verify this programatically. To use Partner Providers in your Terraform From 3856dacc1ef7c1bb7c182edac5411e2e8a25613e Mon Sep 17 00:00:00 2001 From: Paul Tyng Date: Thu, 16 Apr 2020 10:03:52 -0400 Subject: [PATCH 3/3] Update website/docs/registry/providers/tiers.html.md --- website/docs/registry/providers/tiers.html.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/website/docs/registry/providers/tiers.html.md b/website/docs/registry/providers/tiers.html.md index 9356cd6ab3..591d7e54ed 100644 --- a/website/docs/registry/providers/tiers.html.md +++ b/website/docs/registry/providers/tiers.html.md @@ -14,7 +14,7 @@ There are three tiers of providers in the Terraform Registry: provider source information in your Terraform configuration. * **Partner Providers** - are built, signed, and supported by a third party. HashiCorp has verified the ownership of the private key and we provide a chain of trust to the CLI to verify this programatically. To use Partner Providers in your Terraform - configuration, you need to specify the namespace and name to download from the registry. + configuration, you need to specify the provider source, typically this is the namespace and name to download from the registry. * **Community Providers** - are built, signed, and supported by a third party. HashiCorp does not provide a verification or chain of trust for the signing. You will want to obtain and validate fingerprints manually if you want to ensure you are using a binary you can trust.