Support double hop in the provisioner connection settings for winrm

hashicorp / terraform

Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

https://www.terraform.io/

Other

42.32k stars 9.49k forks source link

Support double hop in the provisioner connection settings for winrm #33859

Open wilber82 opened 1 year ago

wilber82 commented 1 year ago

Terraform Version

1.5.7

Use Cases

When running some PowerShell commands on a Windows server, it may need double hop.

For example: Terraform connects to a Windows domain member server to run "Get-AdComputer" to retrieve a server's AD information.

Attempted Solutions

The current Winrm connection only supports NTLM or basic. They don't support double hop.

Proposal

Support Kerberos and CredSSP

References

No response

crw commented 1 year ago

Thanks for this request! To set expectations, provisioners are not actively maintained so not likely (though not impossible) to be updated with new features. Still, thanks for posting this request!