# HCP Terraform **URL:** https://discuss.hashicorp.com/c/terraform-core/hcp-terraform/44.md [Latest](https://discuss.hashicorp.com/latest.md) · [Categories](https://discuss.hashicorp.com/categories.md) · [Tags](https://discuss.hashicorp.com/tags.md) --- ## [About the HCP Terraform category](https://discuss.hashicorp.com/t/about-the-hcp-terraform-category/7247)
**Author:** [@joatmon08](https://discuss.hashicorp.com/u/joatmon08)\ **Replies:** 1\ **Last updated:** [February 18, 2021, 11:02pm UTC](https://discuss.hashicorp.com/t/about-the-hcp-terraform-category/7247 "2021-02-18T23:02:26Z")
Tag HCP Terraform (Terraform Cloud) content with hcp-terraform. Tag Terraform Enterprise content with terraform-enterprise. Terraform Enterprise users are welcome to share experiences and best practices. Support question… --- ## [Best practice for using Vault Agent with Redis/RabbitMQ without storing secrets in configuration files](https://discuss.hashicorp.com/t/best-practice-for-using-vault-agent-with-redis-rabbitmq-without-storing-secrets-in-configuration-files/77586)
**Author:** [@rajglory892](https://discuss.hashicorp.com/u/rajglory892)\ **Replies:** 2\ **Last updated:** [August 4, 2026, 10:55am UTC](https://discuss.hashicorp.com/t/best-practice-for-using-vault-agent-with-redis-rabbitmq-without-storing-secrets-in-configuration-files/77586 "2026-08-04T10:55:57Z")
Hi, I’m integrating Vault Community Edition (HA + TLS + Vault Agent) with our Jenkins/Puppet deployment. Current flow: Vault Agent ↓ Fetch secrets from Vault ↓ Render redis.conf / rabbitmq.conf ↓ Start ser… --- ## [Trigger patterns trigger empty-plan runs on unrelated workspaces due to merge-commit diffs intended or a bug?](https://discuss.hashicorp.com/t/trigger-patterns-trigger-empty-plan-runs-on-unrelated-workspaces-due-to-merge-commit-diffs-intended-or-a-bug/77525)
**Author:** [@gokce.demir](https://discuss.hashicorp.com/u/gokce.demir)\ **Replies:** 0\ **Last updated:** [June 23, 2026, 5:58pm UTC](https://discuss.hashicorp.com/t/trigger-patterns-trigger-empty-plan-runs-on-unrelated-workspaces-due-to-merge-commit-diffs-intended-or-a-bug/77525 "2026-06-23T17:58:49Z")
Setup: A repo with multiple VCS-connected workspaces, each scoped to its own directory via trigger patterns (e.g. workspace A → /dirA/\*\*/\*, workspace B → /dirB/\*\*/\*). What happens: When a PR’s feature branch contains a M… --- ## [Terraform Enterprise 2.0.2 is available](https://discuss.hashicorp.com/t/terraform-enterprise-2-0-2-is-available/77428)
**Author:** [@team-tf-enterprise](https://discuss.hashicorp.com/u/team-tf-enterprise)\ **Replies:** 0\ **Last updated:** [May 15, 2026, 5:34pm UTC](https://discuss.hashicorp.com/t/terraform-enterprise-2-0-2-is-available/77428 "2026-05-15T17:34:34Z")
The Terraform Enterprise team would like to announce the release 2.0.2 is now available. Some key highlights and important bits from the release notes: Known Issues When a Terraform Enterprise node enters a draining s… --- ## [Terraform Enterprise 2.0.1 is available](https://discuss.hashicorp.com/t/terraform-enterprise-2-0-1-is-available/77405)
**Author:** [@team-tf-enterprise](https://discuss.hashicorp.com/u/team-tf-enterprise)\ **Replies:** 0\ **Last updated:** [May 6, 2026, 3:03pm UTC](https://discuss.hashicorp.com/t/terraform-enterprise-2-0-1-is-available/77405 "2026-05-06T15:03:42Z")
The Terraform Enterprise team would like to announce the release 2.0.1 is now available. Some key highlights and important bits from the release notes: Known Issues When a Terraform Enterprise node enters a draining s… --- ## [Triggering Plan for specific PR using API](https://discuss.hashicorp.com/t/triggering-plan-for-specific-pr-using-api/77215)
**Author:** [@1Wiktor](https://discuss.hashicorp.com/u/1Wiktor)\ **Replies:** 0\ **Last updated:** [March 5, 2026, 10:21am UTC](https://discuss.hashicorp.com/t/triggering-plan-for-specific-pr-using-api/77215 "2026-03-05T10:21:25Z")
Hi, I’ve got a question is it possible to provide PR details in request body in request to create speculative plan? I was able to create a plan based on PR using API by reusing configuration\_version from Plan automatic… --- ## [Terraform Cloud - changing VCS branch triggers plan](https://discuss.hashicorp.com/t/terraform-cloud-changing-vcs-branch-triggers-plan/36888)
**Author:** [@bozho](https://discuss.hashicorp.com/u/bozho)\ **Replies:** 3\ **Last updated:** [February 13, 2026, 6:55pm UTC](https://discuss.hashicorp.com/t/terraform-cloud-changing-vcs-branch-triggers-plan/36888 "2026-02-13T18:55:22Z")
Hi, We have a Terraform+Ansible project, hosted on GitLab. Our Terraform Cloud has a workspace tracking the master branch on the repository, triggered only on changes to the terraform configuration directory. That works… --- ## [Terraform Import: How to Handle Optional Field That’s API-Unretrievable & Non-Updatable?](https://discuss.hashicorp.com/t/terraform-import-how-to-handle-optional-field-that-s-api-unretrievable-non-updatable/77008)
**Author:** [@lity9](https://discuss.hashicorp.com/u/lity9)\ **Replies:** 1\ **Last updated:** [January 5, 2026, 11:55pm UTC](https://discuss.hashicorp.com/t/terraform-import-how-to-handle-optional-field-that-s-api-unretrievable-non-updatable/77008 "2026-01-05T23:55:07Z")
I’m developing a Terraform Provider and encountered an issue: I have an optional immutable field configured with Optional: true + RequireReplace(), and the remote API cannot retrieve this field. Creating resources direct… --- ## [Remote Execution in Terraform Cloud](https://discuss.hashicorp.com/t/remote-execution-in-terraform-cloud/37186)
**Author:** [@Sheshgiriv](https://discuss.hashicorp.com/u/Sheshgiriv)\ **Replies:** 3\ **Last updated:** [December 10, 2025, 4:02pm UTC](https://discuss.hashicorp.com/t/remote-execution-in-terraform-cloud/37186 "2025-12-10T16:02:24Z")
I tried to migrate my terraform state and code from my local machine to Terraform cloud , I have been able to migrate the state successfully but I’m unable to run Terraform plan or apply from the Terraform cloud and gett… --- ## [Unable to Update Aurora PostgreSQL Cluster through Terraform When Activity Streams are Active](https://discuss.hashicorp.com/t/unable-to-update-aurora-postgresql-cluster-through-terraform-when-activity-streams-are-active/76903)
**Author:** [@ankit.cs.03](https://discuss.hashicorp.com/u/ankit.cs.03)\ **Replies:** 0\ **Last updated:** [December 9, 2025, 9:43am UTC](https://discuss.hashicorp.com/t/unable-to-update-aurora-postgresql-cluster-through-terraform-when-activity-streams-are-active/76903 "2025-12-09T09:43:38Z")
I’m facing an issue where Terraform fails to apply any topological changes to an Aurora PostgreSQL cluster—including converting a regional cluster to a global cluster, adding read replicas, or performing a major version … --- ## [Requests: Workspace variables and variable sets for workspaces with local execution](https://discuss.hashicorp.com/t/requests-workspace-variables-and-variable-sets-for-workspaces-with-local-execution/39217)
**Author:** [@arnodirlam](https://discuss.hashicorp.com/u/arnodirlam)\ **Replies:** 3\ **Last updated:** [October 1, 2025, 1:19am UTC](https://discuss.hashicorp.com/t/requests-workspace-variables-and-variable-sets-for-workspaces-with-local-execution/39217 "2025-10-01T01:19:42Z")
Hi there, I’m using Terraform Cloud via the TFE provider with a workspace in Execution Mode: Local. I’ve created a variable set that’s global (should be included in all workspaces), and expected the workspace variables … --- ## [Confusion about desired state vs actual state in terraform](https://discuss.hashicorp.com/t/confusion-about-desired-state-vs-actual-state-in-terraform/76450)
**Author:** [@rahulnemade42](https://discuss.hashicorp.com/u/rahulnemade42)\ **Replies:** 1\ **Last updated:** [September 9, 2025, 4:00pm UTC](https://discuss.hashicorp.com/t/confusion-about-desired-state-vs-actual-state-in-terraform/76450 "2025-09-09T16:00:10Z")
I have the following code in my Terraform file. Using this, I created a resource group in Azure. After the resource group was created, I manually added tags to it from the Azure portal. Based on my knowledge, when I run … --- ## [Completely remove state in TF Cloud](https://discuss.hashicorp.com/t/completely-remove-state-in-tf-cloud/58498)
**Author:** [@woter324](https://discuss.hashicorp.com/u/woter324)\ **Replies:** 3\ **Last updated:** [September 3, 2025, 10:18pm UTC](https://discuss.hashicorp.com/t/completely-remove-state-in-tf-cloud/58498 "2025-09-03T22:18:42Z")
Hi, In my testing, things have got in a mess and I want to completely delete the remote state file, managed by TF Cloud and start again. I’ve already deleted the (Azure) resource group. When I configured remote state t… --- ## [Feature Request: Structured Run Output Expand All Button](https://discuss.hashicorp.com/t/feature-request-structured-run-output-expand-all-button/76020)
**Author:** [@clayton.olley](https://discuss.hashicorp.com/u/clayton.olley)\ **Replies:** 0\ **Last updated:** [July 31, 2025, 10:38pm UTC](https://discuss.hashicorp.com/t/feature-request-structured-run-output-expand-all-button/76020 "2025-07-31T22:38:41Z")
Hello, I hope this is the right place to put this. I’d really like to see a button on TFC plans with the Structured Run Output option to expnd all resources to see their changes. I prefer this UI to the console one beca… --- ## [Unable to delete modules from private registry](https://discuss.hashicorp.com/t/unable-to-delete-modules-from-private-registry/75842)
**Author:** [@khushal\_singh](https://discuss.hashicorp.com/u/khushal_singh)\ **Replies:** 1\ **Last updated:** [July 30, 2025, 12:30am UTC](https://discuss.hashicorp.com/t/unable-to-delete-modules-from-private-registry/75842 "2025-07-30T00:30:34Z")
Hi, I’m encountering a persistent issue—possibly a bug—with the Terraform Cloud API related to managing VCS providers. Recently, the token for our Azure DevOps VCS provider expired, and I unintentionally deleted the ex… --- ## [Custom/Flexible workspace role assignment](https://discuss.hashicorp.com/t/custom-flexible-workspace-role-assignment/75845)
**Author:** [@rchkmlshle](https://discuss.hashicorp.com/u/rchkmlshle)\ **Replies:** 0\ **Last updated:** [July 17, 2025, 1:21pm UTC](https://discuss.hashicorp.com/t/custom-flexible-workspace-role-assignment/75845 "2025-07-17T13:21:30Z")
For microsoft Fabric, we have Terraform HCL built in configs. \[Terraform Registry\](https://Fabric workspace Role Assignment) I have a workspace\_role\_assignment.yml whereby permission has been granted for each environme… --- ## [Manually Triggering a Terraform Cloud Workspace Run for a Specific Repository Tag](https://discuss.hashicorp.com/t/manually-triggering-a-terraform-cloud-workspace-run-for-a-specific-repository-tag/75765)
**Author:** [@ryan.bonner](https://discuss.hashicorp.com/u/ryan.bonner)\ **Replies:** 0\ **Last updated:** [July 9, 2025, 4:17pm UTC](https://discuss.hashicorp.com/t/manually-triggering-a-terraform-cloud-workspace-run-for-a-specific-repository-tag/75765 "2025-07-09T16:17:20Z")
Hi. I’m trying to kick off a plan-only run in one of my TFC workspaces that is connected to a GitHub repository of mine using the “New Run” button within the workspace: I specifically want to trigger a run for the repos… --- ## [Terraform external module fails deployment](https://discuss.hashicorp.com/t/terraform-external-module-fails-deployment/75711)
**Author:** [@AndrzejGromala](https://discuss.hashicorp.com/u/AndrzejGromala)\ **Replies:** 0\ **Last updated:** [July 4, 2025, 9:54pm UTC](https://discuss.hashicorp.com/t/terraform-external-module-fails-deployment/75711 "2025-07-04T21:54:47Z")
Hi all, I’ve been fighting with strange issue that I have never experienced before. I am trying to deploy Azure Function App, App Service and App Service Plan. I have created modules for all the resources and in all cas… --- ## [User Token does not match expected privileges](https://discuss.hashicorp.com/t/user-token-does-not-match-expected-privileges/75629)
**Author:** [@enpicie](https://discuss.hashicorp.com/u/enpicie)\ **Replies:** 0\ **Last updated:** [June 30, 2025, 4:13am UTC](https://discuss.hashicorp.com/t/user-token-does-not-match-expected-privileges/75629 "2025-06-30T04:13:49Z")
According to API Tokens documentation, User Tokens should be allowed to modify the org. I have a user token created from https://app.terraform.io/app/settings/tokens for the user who is the organization owner for the org… --- ## [Terraform rewrite rules are not assciating routing rules](https://discuss.hashicorp.com/t/terraform-rewrite-rules-are-not-assciating-routing-rules/75384)
**Author:** [@raihan1khan](https://discuss.hashicorp.com/u/raihan1khan)\ **Replies:** 0\ **Last updated:** [June 10, 2025, 7:48pm UTC](https://discuss.hashicorp.com/t/terraform-rewrite-rules-are-not-assciating-routing-rules/75384 "2025-06-10T19:48:10Z")
rewrite is not creating associate rules, anyone can help i can provide more info --- ## [Passing inputs to Terraform Stacks](https://discuss.hashicorp.com/t/passing-inputs-to-terraform-stacks/75300)
**Author:** [@shape\_of\_earth](https://discuss.hashicorp.com/u/shape_of_earth)\ **Replies:** 0\ **Last updated:** [June 3, 2025, 6:18pm UTC](https://discuss.hashicorp.com/t/passing-inputs-to-terraform-stacks/75300 "2025-06-03T18:18:09Z")
I am learning Terraform Stacks. Is it possible to pass inputs to it from workspaces? Currently my environment is defined in workspaces. I see https://developer.hashicorp.com/terraform/language/stacks/deploy/pass-data onl… --- ## [Can dynamic credentials be used with the Cloudflare provider?](https://discuss.hashicorp.com/t/can-dynamic-credentials-be-used-with-the-cloudflare-provider/75205)
**Author:** [@amrhcp](https://discuss.hashicorp.com/u/amrhcp)\ **Replies:** 0\ **Last updated:** [May 27, 2025, 8:41pm UTC](https://discuss.hashicorp.com/t/can-dynamic-credentials-be-used-with-the-cloudflare-provider/75205 "2025-05-27T20:41:14Z")
Is it possible to use dynamic credentials with the Cloudflare Terraform provider, similar to the setup for the AWS provider that uses HCP Terraform’s native OpenID Connect integration with AWS? --- ## [Unable to create Teams in Terraform](https://discuss.hashicorp.com/t/unable-to-create-teams-in-terraform/61208)
**Author:** [@vandana\_ratnaparkhi](https://discuss.hashicorp.com/u/vandana_ratnaparkhi)\ **Replies:** 1\ **Last updated:** [May 25, 2025, 9:13am UTC](https://discuss.hashicorp.com/t/unable-to-create-teams-in-terraform/61208 "2025-05-25T09:13:45Z")
Hi Team, I have created one organization and when i selected that organization , and go to the teams option, I am not getting option to create new team. --- ## [Skip plan depending on result of HCP Terraform Agents pre-plan hook](https://discuss.hashicorp.com/t/skip-plan-depending-on-result-of-hcp-terraform-agents-pre-plan-hook/74961)
**Author:** [@amrhcp](https://discuss.hashicorp.com/u/amrhcp)\ **Replies:** 0\ **Last updated:** [May 14, 2025, 8:39pm UTC](https://discuss.hashicorp.com/t/skip-plan-depending-on-result-of-hcp-terraform-agents-pre-plan-hook/74961 "2025-05-14T20:39:48Z")
In HCP Terraform (Terraform Cloud), when using the HCP Terraform Agent pre-plan hook, is it possible to skip the plan depending on the hook’s result/output? We are thinking of running a local plan in the pre-plan hook an… --- ## [Prevent plans from making external HTTP calls to non-whitelisted URLs](https://discuss.hashicorp.com/t/prevent-plans-from-making-external-http-calls-to-non-whitelisted-urls/74900)
**Author:** [@amrhcp](https://discuss.hashicorp.com/u/amrhcp)\ **Replies:** 0\ **Last updated:** [May 12, 2025, 4:36pm UTC](https://discuss.hashicorp.com/t/prevent-plans-from-making-external-http-calls-to-non-whitelisted-urls/74900 "2025-05-12T16:36:08Z")
In HCP Terraform (Terraform Cloud), is it possible to prevent a plan from making external HTTP calls to non-whitelisted URLs? It seems to be possible to use Sentinel policies to only allow whitelisted URLs to be used in… --- ## [Sanitize the plan output before allowing it to be viewable](https://discuss.hashicorp.com/t/sanitize-the-plan-output-before-allowing-it-to-be-viewable/74899)
**Author:** [@amrhcp](https://discuss.hashicorp.com/u/amrhcp)\ **Replies:** 0\ **Last updated:** [May 12, 2025, 4:30pm UTC](https://discuss.hashicorp.com/t/sanitize-the-plan-output-before-allowing-it-to-be-viewable/74899 "2025-05-12T16:30:48Z")
In HCP Terraform (Terraform Cloud), is it possible to run custom scripts to sanitize the plan output before allowing it to be viewable? It seems to be possible for a plan to leak sensitive values if a provider raises an … --- ## [\`tfe\_registry\_module\` is not created. (resource not found)](https://discuss.hashicorp.com/t/tfe-registry-module-is-not-created-resource-not-found/46524)
**Author:** [@marload](https://discuss.hashicorp.com/u/marload)\ **Replies:** 3\ **Last updated:** [March 27, 2025, 4:51pm UTC](https://discuss.hashicorp.com/t/tfe-registry-module-is-not-created-resource-not-found/46524 "2025-03-27T16:51:48Z")
I want to create custom module via tfe\_registry\_module. But when I create this resource, I keep getting the error. There is absolutely no problem when creating from the Web Console. resource "tfe\_registry\_module" "work… --- ## [Terraform resources not tracked after failure, even when successfully deployed](https://discuss.hashicorp.com/t/terraform-resources-not-tracked-after-failure-even-when-successfully-deployed/73976)
**Author:** [@bobbydazzler](https://discuss.hashicorp.com/u/bobbydazzler)\ **Replies:** 1\ **Last updated:** [March 21, 2025, 10:48pm UTC](https://discuss.hashicorp.com/t/terraform-resources-not-tracked-after-failure-even-when-successfully-deployed/73976 "2025-03-21T22:48:21Z")
Hi, Hopefully someone can shed some light on this issue that I see every now and then, which has become more pressing after an Azure network deployment (using Terraform Cloud) failed towards the end. It may be that there… --- ## [Https://app.eu.terraform.io/ unavailable - maintenance](https://discuss.hashicorp.com/t/https-app-eu-terraform-io-unavailable-maintenance/73754)
**Author:** [@piotr.sz](https://discuss.hashicorp.com/u/piotr.sz)\ **Replies:** 0\ **Last updated:** [March 11, 2025, 10:55am UTC](https://discuss.hashicorp.com/t/https-app-eu-terraform-io-unavailable-maintenance/73754 "2025-03-11T10:55:10Z")
When I go to https://app.eu.terraform.io/ a maintenance page appears. What is the ETA on the platform to be available? Also, it does not seem like the above EU site is included on https://status.hashicorp.com/. --- ## [Terraform service catalog from sigle to multiple shares, existing account share lost](https://discuss.hashicorp.com/t/terraform-service-catalog-from-sigle-to-multiple-shares-existing-account-share-lost/73741)
**Author:** [@ct24p](https://discuss.hashicorp.com/u/ct24p)\ **Replies:** 0\ **Last updated:** [March 10, 2025, 10:44pm UTC](https://discuss.hashicorp.com/t/terraform-service-catalog-from-sigle-to-multiple-shares-existing-account-share-lost/73741 "2025-03-10T22:44:17Z")
previous code: resource "aws\_servicecatalog\_portfolio\_share" "this\_share" { principal\_id = "123456789" portfolio\_id = aws\_servicecatalog\_portfolio.this\_portfolio.id type = "ACCOUNT" } Change to: resource… [Next page](https://discuss.hashicorp.com/c/terraform-core/hcp-terraform/44.md?page=1)