mirror of
https://github.com/opentofu/opentofu.git
synced 2025-01-15 19:22:46 -06:00
264a3cf031
Although origin registries return specific [filename, hash] pairs, our various different installation methods can't produce a structured mapping from platform to hash without breaking changes. Therefore, as a compromise, we'll continue to do platform-specific checks against upstream data in the cases where that's possible (installation from origin registry or network mirror) but we'll treat the lock file as just a flat set of equally-valid hashes, at least one of which must match after we've completed whatever checks we've made against the upstream-provided checksums/signatures. This includes only the minimal internal/getproviders updates required to make this compile. A subsequent commit will update that package to actually support the idea of verifying against multiple hashes.
21 lines
378 B
HCL
21 lines
378 B
HCL
|
|
provider "terraform.io/test/version-only" {
|
|
version = "1.0.0"
|
|
}
|
|
|
|
provider "terraform.io/test/version-and-constraints" {
|
|
version = "1.2.0"
|
|
constraints = "~> 1.2"
|
|
}
|
|
|
|
provider "terraform.io/test/all-the-things" {
|
|
version = "3.0.10"
|
|
constraints = ">= 3.0.2"
|
|
|
|
hashes = [
|
|
"test:placeholder-hash-1",
|
|
"test:placeholder-hash-2",
|
|
"test:placeholder-hash-3",
|
|
]
|
|
}
|