1.7.0
Terraform State Store and native runner credentials
2026-07-08 · #16 · closes #12, #15
Snap CD can now store Terraform state itself, so a separate storage backend is no longer required.
- StateStore and StateFile entities with full CRUD, RBAC (Owner, Contributor, Reader, IdentityAccessManager) and AES-256 encryption of state blobs.
- The Terraform HTTP backend protocol (GET, POST, DELETE, LOCK, UNLOCK), authenticated with Service Principal credentials over HTTP Basic.
- Versioning — each write creates a new version rather than overwriting, with configurable retention (
MaxStateFileVersions, default 20) and automatic pruning. - Version restore with automatic serial and lineage patching, so a restored version is a valid successor rather than a rewind Terraform will reject.
- Dashboard UI — nested version panels, per-version download/restore/delete, per-file rename/force-unlock/delete, and a Monaco editor for viewing state JSON.
- Native runner credentials — a
RunnerEnvVarssection injects environment variables into every task execution, sourceable from external secret stores with hot reload. Server-resolved values take precedence over runner-local ones.