chore: remove coder_secret Terraform integration (#25512)

Removes the coder_secret Terraform integration: the data.coder_secret
consumption path through provisionerdserver → provisioner.proto →
provisioner/terraform, the dynamic-parameter secret-requirement
validation, and the workspace-update / resolve-autostart surfaces that
depended on it. This is being done due to a product/feature direction
change (see PLAT-243). User-secret CRUD (DB, REST, CLI, UI, telemetry, audit)
and the agent-manifest secret-injection path are untouched.

The provisionerd API is bumped from v1.17 to v1.18 rather than rolled
back: v1.17 shipped in v2.33.x, so user_secrets field numbers are
reserved and the changelog documents both versions.

Generated with assistance from Coder Agents.
This commit is contained in:
Zach
2026-05-21 09:19:29 -06:00
committed by GitHub
parent 26a0805dcd
commit ddc0e99c69
45 changed files with 835 additions and 3859 deletions
+5 -14
View File
@@ -162,27 +162,18 @@ type PreviewParameterValidation struct {
}
type DynamicParametersRequest struct {
// ID identifies the request for response ordering. Websocket response
// IDs are monotonically increasing and may exceed the request ID when
// server-side events trigger additional renders.
// ID identifies the request. The response contains the same
// ID so that the client can match it to the request.
ID int `json:"id"`
Inputs map[string]string `json:"inputs"`
// OwnerID if uuid.Nil, it defaults to `codersdk.Me`
OwnerID uuid.UUID `json:"owner_id,omitempty" format:"uuid"`
}
type SecretRequirementStatus struct {
Env string `json:"env,omitempty"`
File string `json:"file,omitempty"`
HelpMessage string `json:"help_message"`
Satisfied bool `json:"satisfied"`
}
type DynamicParametersResponse struct {
ID int `json:"id"`
Diagnostics []FriendlyDiagnostic `json:"diagnostics"`
Parameters []PreviewParameter `json:"parameters"`
SecretRequirements []SecretRequirementStatus `json:"secret_requirements,omitempty"`
ID int `json:"id"`
Diagnostics []FriendlyDiagnostic `json:"diagnostics"`
Parameters []PreviewParameter `json:"parameters"`
// TODO: Workspace tags
}
-4
View File
@@ -680,10 +680,6 @@ func (c *Client) WorkspaceQuota(ctx context.Context, organizationID string, user
type ResolveAutostartResponse struct {
ParameterMismatch bool `json:"parameter_mismatch"`
// SecretMismatch is true when the active template version declares
// `coder_secret` requirements that the workspace owner's secrets do not
// satisfy.
SecretMismatch bool `json:"secret_mismatch"`
}
func (c *Client) ResolveAutostart(ctx context.Context, workspaceID string) (ResolveAutostartResponse, error) {