v2.42.2

Improvements

• Terraform runner jobs now talk to Devhub over the internal cluster network instead of the public address, so plans work on installs behind an authenticating proxy and plan files never leave the cluster.
• Terraform runner pods no longer carry a Kubernetes service account token into Terraform runs.

Bug Fixes

• Retrying a Terraform plan no longer collides with the job left behind by the previous attempt.
• A plan upload or download that gets rejected now fails the run immediately with a clear error, instead of appearing to succeed and failing confusingly later.
• An apply that can't start now says so on the plan itself rather than only going red.
• Google workload identity settings are validated when saved: the provider ID must be a real one (not the pasted-in template) and can't be enabled with missing values.
• Saving workspace settings without changing any field no longer errors.
• Failed init containers no longer flood the server log with errors.
• Users whose email isn't all lowercase are now correctly matched to their license seat.
• On a linked install, someone who already holds a seat can sign in instead of being stuck as pending.