← Back to all requests

Share private Terraform providers across spaces (parity with module space_shares)

Private Terraform providers are only visible to stacks in the provider’s space and inheriting children. Modules already have space_shares and SPACE_SHARE_MODULE (including share-by-label) so we can grant download without inherit_entities from root.

spacelift_terraform_provider has no equivalent, only type, space, labels, and public. Type is unique per account, so we cannot publish one copy per space.

We need the same sharing model for providers: Terraform + GraphQL + UI, and the run-token registry download must honour it. A share should allow downloading that provider only, not Space Read on the rest of the owner space. This is not another public/private toggle.

WorkaroundNone, the only two alternatives are not possible for supporting our use case: inherit_entities = true on the entity container so it can see root-owned providers. That also inherits every other root entity (stacks, contexts, policies, worker pools) and grants humans Space Read on root so we lose the isolation per space we need. public = true, which publishes the plugin to other Spacelift accounts after login, we cannot share these providers publicly.
ProblemWe cannot keep spaces isolation and still consume one private provider from shared catalog modules. Module registry already has the sharing model we need; provider registry does not.

Please authenticate to join the conversation.

Upvoters
Status

👀 In Review

Board

💡 Feature Requests

Tags

Spacelift Provider

Date

About 10 hours ago

Subscribe to request

Get notified by email when there are changes.