# Latest

**URL:** https://discuss.hashicorp.com/latest.md

[Latest](https://discuss.hashicorp.com/latest.md) · [Categories](https://discuss.hashicorp.com/categories.md) · [Tags](https://discuss.hashicorp.com/tags.md)

---

## [Announcing urga: a terminal UI for Nomad](https://discuss.hashicorp.com/t/announcing-urga-a-terminal-ui-for-nomad/77794)

<div class="topic-metadata">

**Author:** [@ingvarch](https://discuss.hashicorp.com/u/ingvarch)\
**Replies:** 3\
**Last updated:** [October 14, 2026, 6:27pm UTC](https://discuss.hashicorp.com/t/announcing-urga-a-terminal-ui-for-nomad/77794 "2026-10-14T18:27:07Z")

</div>

Hi all, I’ve released urga, an open source terminal UI for Nomad (Go, MIT): GitHub - ingvarch/urga: Terminal UI for HashiCorp Nomad. One binary, no config to write, no browser. · GitHub One binary, no config file. It r…

---

## [Syntax highlighting FALSELY? indicating problems in Terraform code](https://discuss.hashicorp.com/t/syntax-highlighting-falsely-indicating-problems-in-terraform-code/77796)

<div class="topic-metadata">

**Author:** [@garth.allen](https://discuss.hashicorp.com/u/garth.allen)\
**Replies:** 1\
**Last updated:** [October 14, 2026, 5:30pm UTC](https://discuss.hashicorp.com/t/syntax-highlighting-falsely-indicating-problems-in-terraform-code/77796 "2026-10-14T17:30:42Z")

</div>

Hi, this is probably a silly question, but I’m having a very hard time trying to figure this out. I assume it has something to do with versions, the version of code I’m writing in and the version being used to check the …

---

## [CRL Implementation for Vault API Client](https://discuss.hashicorp.com/t/crl-implementation-for-vault-api-client/77818)

<div class="topic-metadata">

**Author:** [@shub-est](https://discuss.hashicorp.com/u/shub-est)\
**Replies:** 3\
**Last updated:** [October 14, 2026, 1:44pm UTC](https://discuss.hashicorp.com/t/crl-implementation-for-vault-api-client/77818 "2026-10-14T13:44:56Z")

</div>

The Vault Go API client (github.com/hashicorp/vault/api) currently does not check if the Vault server’s TLS certificate was revoked. TLSConfig supports CACert, CACertBytes, CAPath, ClientCert/ClientKey, TLSServerName, an…

---

## [SnowflakeDB v2.22.0 provider missing destination name expires\_on in \*resources.roleGrant](https://discuss.hashicorp.com/t/snowflakedb-v2-22-0-provider-missing-destination-name-expires-on-in-resources-rolegrant/77845)

<div class="topic-metadata">

**Author:** [@MacawDJP](https://discuss.hashicorp.com/u/MacawDJP)\
**Replies:** 0\
**Last updated:** [October 14, 2026, 1:15pm UTC](https://discuss.hashicorp.com/t/snowflakedb-v2-22-0-provider-missing-destination-name-expires-on-in-resources-rolegrant/77845 "2026-10-14T13:15:13Z")

</div>

When running a terraform plan, when the Snowflake provider does a refresh state, it fails with "missing destination name expires\_on in \*resources.roleGrant" This seems to be because it runs a Snowflake SHOW GRANTS OF {r…

---

## [Tool to do automated nomad/consul/vault cluster upgrades...somebody might find this useful perhaps](https://discuss.hashicorp.com/t/tool-to-do-automated-nomad-consul-vault-cluster-upgrades-somebody-might-find-this-useful-perhaps/77844)

<div class="topic-metadata">

**Author:** [@afreidah](https://discuss.hashicorp.com/u/afreidah)\
**Replies:** 0\
**Last updated:** [October 14, 2026, 10:58am UTC](https://discuss.hashicorp.com/t/tool-to-do-automated-nomad-consul-vault-cluster-upgrades-somebody-might-find-this-useful-perhaps/77844 "2026-10-14T10:58:39Z")

</div>

While I know most people don’t share my love of chef/cinc over ansible/puppet/whatever so that part won’t be useful but it could easily be taken out and replaced by a different mechanism the cinc is used for there: actua…

---

## [Curious how others handle deployments](https://discuss.hashicorp.com/t/curious-how-others-handle-deployments/77843)

<div class="topic-metadata">

**Author:** [@afreidah](https://discuss.hashicorp.com/u/afreidah)\
**Replies:** 0\
**Last updated:** [October 14, 2026, 10:46am UTC](https://discuss.hashicorp.com/t/curious-how-others-handle-deployments/77843 "2026-10-14T10:46:49Z")

</div>

I’ve been meaning to ask this..I don’t handle job deployments at work, my work is way lower level than that, but for my homelab nomad/consul/vault cluster I am managing all the jobs. How are professional teams deploying…

---

## [Terraform v1.17.0-rc2 released](https://discuss.hashicorp.com/t/terraform-v1-17-0-rc2-released/77842)

<div class="topic-metadata">

**Author:** [@radeksimko](https://discuss.hashicorp.com/u/radeksimko)\
**Replies:** 0\
**Last updated:** [October 14, 2026, 10:45am UTC](https://discuss.hashicorp.com/t/terraform-v1-17-0-rc2-released/77842 "2026-10-14T10:45:56Z")

</div>

Terraform v1.17.0-rc2 is out. See the CHANGELOG for more details.

---

## [Terraform v1.16.6 released](https://discuss.hashicorp.com/t/terraform-v1-16-6-released/77841)

<div class="topic-metadata">

**Author:** [@radeksimko](https://discuss.hashicorp.com/u/radeksimko)\
**Replies:** 0\
**Last updated:** [October 14, 2026, 9:41am UTC](https://discuss.hashicorp.com/t/terraform-v1-16-6-released/77841 "2026-10-14T09:41:50Z")

</div>

We just released Terraform v1.16.6. This patch release fixes a few bugs. See the CHANGELOG for more details.

---

## [Nomad update groups separately within a job](https://discuss.hashicorp.com/t/nomad-update-groups-separately-within-a-job/48672)

<div class="topic-metadata">

**Author:** [@Dgotlieb](https://discuss.hashicorp.com/u/Dgotlieb)\
**Replies:** 4\
**Last updated:** [October 14, 2026, 9:04am UTC](https://discuss.hashicorp.com/t/nomad-update-groups-separately-within-a-job/48672 "2026-10-14T09:04:22Z")

</div>

Hi, According to the update stanza, the parameter max\_parallel applies for tasks within a group. The doc also states that The task groups themselves are updated in parallel I was wondering if there is a way to update …

---

## [How to start up the tasks of a nomad job in a specific order](https://discuss.hashicorp.com/t/how-to-start-up-the-tasks-of-a-nomad-job-in-a-specific-order/77798)

<div class="topic-metadata">

**Author:** [@mihael](https://discuss.hashicorp.com/u/mihael)\
**Replies:** 4\
**Last updated:** [October 14, 2026, 8:10am UTC](https://discuss.hashicorp.com/t/how-to-start-up-the-tasks-of-a-nomad-job-in-a-specific-order/77798 "2026-10-14T08:10:41Z")

</div>

Hi, i am new to Nomad and have an application which consists of 3 middleware docker container and 3 docker containers which are my application. I need to have the middleware started before my application starts. I have …

---

## [Deprecation of Boundary Community Edition](https://discuss.hashicorp.com/t/deprecation-of-boundary-community-edition/77828)

<div class="topic-metadata">

**Author:** [@anando.chatterjee](https://discuss.hashicorp.com/u/anando.chatterjee)\
**Replies:** 2\
**Last updated:** [October 14, 2026, 6:50am UTC](https://discuss.hashicorp.com/t/deprecation-of-boundary-community-edition/77828 "2026-10-14T06:50:21Z")

</div>

Today we are deprecating Boundary Community Edition and shifting our focus toward developing enterprise capabilities, effective immediately. We are sincerely grateful to everyone who has used Boundary Community Edition, …

---

## [Is there a way to disable the jwks validation check when its configured?](https://discuss.hashicorp.com/t/is-there-a-way-to-disable-the-jwks-validation-check-when-its-configured/77805)

<div class="topic-metadata">

**Author:** [@rsherget](https://discuss.hashicorp.com/u/rsherget)\
**Replies:** 4\
**Last updated:** [October 13, 2026, 4:49pm UTC](https://discuss.hashicorp.com/t/is-there-a-way-to-disable-the-jwks-validation-check-when-its-configured/77805 "2026-10-13T16:49:05Z")

</div>

We are planning to use the JWT auth method to authenticate with Vault, but we are running into an issue when trying to configure the jwt auth configuration on the Vault side. Our jwks url will not and cannot be running a…

---

## [Aztfexport Azure resource groups](https://discuss.hashicorp.com/t/aztfexport-azure-resource-groups/77836)

<div class="topic-metadata">

**Author:** [@mt9090](https://discuss.hashicorp.com/u/mt9090)\
**Replies:** 0\
**Last updated:** [October 13, 2026, 2:45pm UTC](https://discuss.hashicorp.com/t/aztfexport-azure-resource-groups/77836 "2026-10-13T14:45:55Z")

</div>

Hi all, I wanted to get some advice from the community. I’ve recently been tasked with bringing our existing Azure estate under Terraform management. Historically, most of our Azure resources have been deployed manuall…

---

## [HCSEC-2026-45 - Updates to HashiCorp subprocessors](https://discuss.hashicorp.com/t/hcsec-2026-45-updates-to-hashicorp-subprocessors/77833)

<div class="topic-metadata">

**Author:** [@mariajosep.lopez](https://discuss.hashicorp.com/u/mariajosep.lopez)\
**Replies:** 0\
**Last updated:** [October 13, 2026, 9:39am UTC](https://discuss.hashicorp.com/t/hcsec-2026-45-updates-to-hashicorp-subprocessors/77833 "2026-10-13T09:39:42Z")

</div>

Bulletin ID: HCSEC-2026-45 Publication Date: October 13, 2026 Summary As part of HashiCorp’s ongoing commitment to privacy and transparency, we have updated our subprocessors list. These updates include details about …

---

## [Vault Helm chart customization for injector-clusterrole](https://discuss.hashicorp.com/t/vault-helm-chart-customization-for-injector-clusterrole/77573)

<div class="topic-metadata">

**Author:** [@evgenkisel](https://discuss.hashicorp.com/u/evgenkisel)\
**Replies:** 1\
**Last updated:** [October 12, 2026, 11:52am UTC](https://discuss.hashicorp.com/t/vault-helm-chart-customization-for-injector-clusterrole/77573 "2026-10-12T11:52:39Z")

</div>

Hello, I’d like to use the Vault Helm chart to install Vault agent injector in my organization but the chart doesn’t allow to customize injector-clusterrole rules. My organization doesn’t allow some verbs in rules for a…

---

## [Boundary Community Edition: long-term scope and paid edition benefits](https://discuss.hashicorp.com/t/boundary-community-edition-long-term-scope-and-paid-edition-benefits/77334)

<div class="topic-metadata">

**Author:** [@Syphax95260](https://discuss.hashicorp.com/u/Syphax95260)\
**Replies:** 6\
**Last updated:** [October 9, 2026, 9:34pm UTC](https://discuss.hashicorp.com/t/boundary-community-edition-long-term-scope-and-paid-edition-benefits/77334 "2026-10-09T21:34:56Z")

</div>

Hello, The compagny I work for is evaluating Boundary and I would like to better understand the long-term direction of the Community Edition. Is there any general guidance on whether features currently available in Bou…

---

## [Vault 2.2.0-rc1 released!](https://discuss.hashicorp.com/t/vault-2-2-0-rc1-released/77827)

<div class="topic-metadata">

**Author:** [@ChrisForan](https://discuss.hashicorp.com/u/ChrisForan)\
**Replies:** 0\
**Last updated:** [October 8, 2026, 7:21pm UTC](https://discuss.hashicorp.com/t/vault-2-2-0-rc1-released/77827 "2026-10-08T19:21:34Z")

</div>

Hi all, The Vault team is announcing the release candidates for 2.2.0. Release candidates must not be used in production, but your feedback is critical for a smooth final release. The 2.2.0 Community Edition and Enterp…

---

## [Vault 2.1.2, 1.21.12, 1.20.17, and 1.19.23 released!](https://discuss.hashicorp.com/t/vault-2-1-2-1-21-12-1-20-17-and-1-19-23-released/77825)

<div class="topic-metadata">

**Author:** [@ChrisForan](https://discuss.hashicorp.com/u/ChrisForan)\
**Replies:** 0\
**Last updated:** [October 8, 2026, 6:55pm UTC](https://discuss.hashicorp.com/t/vault-2-1-2-1-21-12-1-20-17-and-1-19-23-released/77825 "2026-10-08T18:55:44Z")

</div>

Hi all, The Vault team is announcing the release of Vault Community Edition 2.1.2 and Vault Enterprise 2.1.2, 1.21.12, 1.20.17, and 1.19.23. The 2.1.2 Community Edition and Enterprise editions are available on our rele…

---

## [Community provider: Terraform for Google Ads — v0.6.0](https://discuss.hashicorp.com/t/community-provider-terraform-for-google-ads-v0-6-0/77823)

<div class="topic-metadata">

**Author:** [@vittorfp](https://discuss.hashicorp.com/u/vittorfp)\
**Replies:** 0\
**Last updated:** [October 8, 2026, 5:22pm UTC](https://discuss.hashicorp.com/t/community-provider-terraform-for-google-ads-v0-6-0/77823 "2026-10-08T17:22:46Z")

</div>

I’ve released v0.6.0 of an independent community Terraform provider for managing Google Ads as code. The provider currently supports core Search and Performance Max stacks, conversion actions, assets, targeting, shared …

---

## [ETA or Guidance for Redshift Serverless Cross-Region Snapshot Copy Support?](https://discuss.hashicorp.com/t/eta-or-guidance-for-redshift-serverless-cross-region-snapshot-copy-support/77821)

<div class="topic-metadata">

**Author:** [@kirangelli](https://discuss.hashicorp.com/u/kirangelli)\
**Replies:** 0\
**Last updated:** [October 8, 2026, 4:45pm UTC](https://discuss.hashicorp.com/t/eta-or-guidance-for-redshift-serverless-cross-region-snapshot-copy-support/77821 "2026-10-08T16:45:45Z")

</div>

Hello everyone, We are currently building out our Multi-Region / Disaster Recovery architecture using Terraform and are looking to automate the copying of native Amazon Redshift Serverless snapshots from our primary reg…

---

## [HCSEC-2026-44 - Go-getter vulnerable to a path traversal in S3/GCS directory download handling](https://discuss.hashicorp.com/t/hcsec-2026-44-go-getter-vulnerable-to-a-path-traversal-in-s3-gcs-directory-download-handling/77819)

<div class="topic-metadata">

**Author:** [@james.warren](https://discuss.hashicorp.com/u/james.warren)\
**Replies:** 0\
**Last updated:** [October 8, 2026, 3:16pm UTC](https://discuss.hashicorp.com/t/hcsec-2026-44-go-getter-vulnerable-to-a-path-traversal-in-s3-gcs-directory-download-handling/77819 "2026-10-08T15:16:21Z")

</div>

Bulletin ID: HCSEC-2026-44 Affected Products / Versions: Go-getter up to 1.8.9 and 2.2.4; fixed in go-getter 1.8.10 and 2.2.5 Publication Date: October 8, 2026 Summary HashiCorp go-getter versions before 1.8.10 and g…

---

## [HCSEC-2026-43 - Vault Inconsistent ACL Policy Evaluation May Allow Bypass of Deny Restrictions](https://discuss.hashicorp.com/t/hcsec-2026-43-vault-inconsistent-acl-policy-evaluation-may-allow-bypass-of-deny-restrictions/77815)

<div class="topic-metadata">

**Author:** [@mariajosep.lopez](https://discuss.hashicorp.com/u/mariajosep.lopez)\
**Replies:** 0\
**Last updated:** [October 7, 2026, 10:00pm UTC](https://discuss.hashicorp.com/t/hcsec-2026-43-vault-inconsistent-acl-policy-evaluation-may-allow-bypass-of-deny-restrictions/77815 "2026-10-07T22:00:11Z")

</div>

Bulletin ID: HCSEC-2026-43 Affected Products / Versions: Vault Community Edition up to 2.1.1; fixed in Vault Community Edition 2.1.2. Vault Enterprise up to 2.1.1; fixed in Vault Enterprise 2.1.2, 1.21.12, 1.20.17, and …

---

## [HCSEC-2026-42 - Vault Enterprise ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution](https://discuss.hashicorp.com/t/hcsec-2026-42-vault-enterprise-acl-policy-cache-vulnerable-to-cross-namespace-policy-resolution/77814)

<div class="topic-metadata">

**Author:** [@mariajosep.lopez](https://discuss.hashicorp.com/u/mariajosep.lopez)\
**Replies:** 0\
**Last updated:** [October 7, 2026, 9:46pm UTC](https://discuss.hashicorp.com/t/hcsec-2026-42-vault-enterprise-acl-policy-cache-vulnerable-to-cross-namespace-policy-resolution/77814 "2026-10-07T21:46:47Z")

</div>

Bulletin ID: HCSEC-2026-42 Affected Products / Versions: Vault Enterprise up to 2.1.1; fixed in Vault Enterprise 2.1.2, 1.21.12, 1.20.17, and 1.19.23. Publication Date: October 7, 2026 Summary Vault’s ACL policy cach…

---

## [HCSEC-2026-41 - Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots](https://discuss.hashicorp.com/t/hcsec-2026-41-vault-vulnerable-to-arbitrary-code-execution-via-plugin-catalog-entries-restored-from-raft-snapshots/77813)

<div class="topic-metadata">

**Author:** [@mariajosep.lopez](https://discuss.hashicorp.com/u/mariajosep.lopez)\
**Replies:** 0\
**Last updated:** [October 7, 2026, 9:34pm UTC](https://discuss.hashicorp.com/t/hcsec-2026-41-vault-vulnerable-to-arbitrary-code-execution-via-plugin-catalog-entries-restored-from-raft-snapshots/77813 "2026-10-07T21:34:25Z")

</div>

Bulletin ID: HCSEC-2026-41 Affected Products / Versions: Vault Community Edition and Vault Enterprise up to 2.1.1; fixed in Vault Community Edition 2.1.2, and Vault Enterprise 2.1.2, 1.21.12, 1.20.17, and 1.19.23. Publ…

---

## [HCSEC-2026-40 - Vault PKI ACME Default Directory Policy May Issue Certificates With Unverified Identities](https://discuss.hashicorp.com/t/hcsec-2026-40-vault-pki-acme-default-directory-policy-may-issue-certificates-with-unverified-identities/77812)

<div class="topic-metadata">

**Author:** [@mariajosep.lopez](https://discuss.hashicorp.com/u/mariajosep.lopez)\
**Replies:** 0\
**Last updated:** [October 7, 2026, 9:18pm UTC](https://discuss.hashicorp.com/t/hcsec-2026-40-vault-pki-acme-default-directory-policy-may-issue-certificates-with-unverified-identities/77812 "2026-10-07T21:18:47Z")

</div>

Bulletin ID: HCSEC-2026-40 Affected Products / Versions: Vault Community Edition 1.14.0 up to 2.1.1; fixed in Vault Community Edition 2.1.2. Vault Enterprise 1.14.0 up to 2.1.1; fixed in Vault Enterprise 2.1.2, 1.21.12,…

---

## [How to pass a module output into dynamic content block](https://discuss.hashicorp.com/t/how-to-pass-a-module-output-into-dynamic-content-block/77807)

<div class="topic-metadata">

**Author:** [@xasc2](https://discuss.hashicorp.com/u/xasc2)\
**Replies:** 0\
**Last updated:** [October 7, 2026, 3:09am UTC](https://discuss.hashicorp.com/t/how-to-pass-a-module-output-into-dynamic-content-block/77807 "2026-10-07T03:09:13Z")

</div>

we organize the terraform structure in below form, but there is problem, or maybe not a problem, just don’t know how to do it, we have dynamic block defined in root modules, we use the root module in below form, but how …

---

## [Terraform v1.16.5 released](https://discuss.hashicorp.com/t/terraform-v1-16-5-released/77800)

<div class="topic-metadata">

**Author:** [@sarah.french](https://discuss.hashicorp.com/u/sarah.french)\
**Replies:** 0\
**Last updated:** [October 2, 2026, 2:43pm UTC](https://discuss.hashicorp.com/t/terraform-v1-16-5-released/77800 "2026-10-02T14:43:13Z")

</div>

We just released v1.16.5 of Terraform. This patch release fixes two bugs, as described in the CHANGELOG : BUG FIXES: Fixed a crash that happens when a tainted instance state is seen without a valid status (#39287) …

---

## [Behavior of \`module.output\` in the \`terraform validate\` command](https://discuss.hashicorp.com/t/behavior-of-module-output-in-the-terraform-validate-command/77792)

<div class="topic-metadata">

**Author:** [@oshiro](https://discuss.hashicorp.com/u/oshiro)\
**Replies:** 2\
**Last updated:** [October 1, 2026, 12:14am UTC](https://discuss.hashicorp.com/t/behavior-of-module-output-in-the-terraform-validate-command/77792 "2026-10-01T00:14:24Z")

</div>

I want the terraform validate command to flag the following case as a invalid. However, when I run terraform validate, it returns a “valid” result. Is there any mention of this behavior in the Terraform documentation? I…

---

## [Terraform Tutorial using AWS Free Tier - Unauthorised Operation](https://discuss.hashicorp.com/t/terraform-tutorial-using-aws-free-tier-unauthorised-operation/77795)

<div class="topic-metadata">

**Author:** [@infraprovider](https://discuss.hashicorp.com/u/infraprovider)\
**Replies:** 1\
**Last updated:** [September 30, 2026, 4:28pm UTC](https://discuss.hashicorp.com/t/terraform-tutorial-using-aws-free-tier-unauthorised-operation/77795 "2026-09-30T16:28:25Z")

</div>

I’ve ran into this problem with several Terraform tutorials that have suggested to use the AWS Free Tier. Can Terraform confirm whether this is an issue or a workaround on AWS Free Tier? I’m testing Terraform with this …

---

## [Nomad Driver Exec2 v0.2.0 Released](https://discuss.hashicorp.com/t/nomad-driver-exec2-v0-2-0-released/77791)

<div class="topic-metadata">

**Author:** [@ritesh-harihar](https://discuss.hashicorp.com/u/ritesh-harihar)\
**Replies:** 0\
**Last updated:** [September 29, 2026, 1:48pm UTC](https://discuss.hashicorp.com/t/nomad-driver-exec2-v0-2-0-released/77791 "2026-09-29T13:48:29Z")

</div>

Dear All, We are excited to announce the release of Nomad Driver Exec2 v0.2.0. This release includes the following changes. Features Linux ambient capabilities — A new allow\_caps plugin configuration option, togethe…

[Next page](https://discuss.hashicorp.com/latest.md?page=1)
