From 5afb1a10a11fdf3144c0602fc54075f3343ae748 Mon Sep 17 00:00:00 2001 From: Jesus-DelRiego Date: Wed, 19 Nov 2025 16:21:27 -0600 Subject: [PATCH 1/3] Add known issue for agent registration failures with Docker and custom TLS certificates --- .../1.1.x/docs/enterprise/releases/1.1.x/index.mdx | 1 + 1 file changed, 1 insertion(+) diff --git a/content/terraform-enterprise/1.1.x/docs/enterprise/releases/1.1.x/index.mdx b/content/terraform-enterprise/1.1.x/docs/enterprise/releases/1.1.x/index.mdx index ec6166bdae..2d2766e549 100644 --- a/content/terraform-enterprise/1.1.x/docs/enterprise/releases/1.1.x/index.mdx +++ b/content/terraform-enterprise/1.1.x/docs/enterprise/releases/1.1.x/index.mdx @@ -62,6 +62,7 @@ Flexible Deployment Options `terraform-enterprise` container digest: amd64/linux ## Known Issues 1. You may experience failures when using an S3-compatible storage solution. An updated AWS library may trigger authentication issues with some third-party storage solutions. As a result, you may experience errors when running plans and applies or when accessing Terraform state files. Refer to issue 2960 on the AWS SDK GitHub issues page for more information. Please ensure your S3-compatible storage solution is fully updated. +1. Agents fail to register when you deploy Terraform Enterprise using Docker with custom TLS certificates. The agent container cannot read the CA certificate bundle because file permissions restrict access to root only. When agents fail TLS verification, runs cannot execute and you receive `x509: certificate signed by unknown authority` errors. This issue affects self-signed certificates, Let's Encrypt certificates, and certificates from internal certificate authorities. Version 1.1.1 resolves this issue. ## Deprecations 1. PostgreSQL 13 is [reaching end-of-life](https://www.postgresql.org/support/versioning/) in November. We are deprecating support for PostgreSQL 13 in this release, and we will remove support in the 1.2.0 release. From 5a0df47afa85f5c2db3261a091dabac4c5853596 Mon Sep 17 00:00:00 2001 From: Jesus-DelRiego Date: Wed, 19 Nov 2025 16:42:18 -0600 Subject: [PATCH 2/3] Clarify known issue regarding agent registration failures with custom CA bundles in Docker deployments --- .../1.1.x/docs/enterprise/releases/1.1.x/index.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/terraform-enterprise/1.1.x/docs/enterprise/releases/1.1.x/index.mdx b/content/terraform-enterprise/1.1.x/docs/enterprise/releases/1.1.x/index.mdx index 2d2766e549..308b059716 100644 --- a/content/terraform-enterprise/1.1.x/docs/enterprise/releases/1.1.x/index.mdx +++ b/content/terraform-enterprise/1.1.x/docs/enterprise/releases/1.1.x/index.mdx @@ -62,7 +62,7 @@ Flexible Deployment Options `terraform-enterprise` container digest: amd64/linux ## Known Issues 1. You may experience failures when using an S3-compatible storage solution. An updated AWS library may trigger authentication issues with some third-party storage solutions. As a result, you may experience errors when running plans and applies or when accessing Terraform state files. Refer to issue 2960 on the AWS SDK GitHub issues page for more information. Please ensure your S3-compatible storage solution is fully updated. -1. Agents fail to register when you deploy Terraform Enterprise using Docker with custom TLS certificates. The agent container cannot read the CA certificate bundle because file permissions restrict access to root only. When agents fail TLS verification, runs cannot execute and you receive `x509: certificate signed by unknown authority` errors. This issue affects self-signed certificates, Let's Encrypt certificates, and certificates from internal certificate authorities. Version 1.1.1 resolves this issue. +1. Agents launched by Terraform Enterprise using a custom CA bundle, when Terraform Enterprise is using Docker as its run pipeline, may error when registering with TFE, resulting in Terraform runs failing to complete. Runs remain in pending status and eventually fail with `x509: certificate signed by unknown authority` errors. Version 1.1.1 resolves this issue. ## Deprecations 1. PostgreSQL 13 is [reaching end-of-life](https://www.postgresql.org/support/versioning/) in November. We are deprecating support for PostgreSQL 13 in this release, and we will remove support in the 1.2.0 release. From d0a0b9680fc5038c53aa281a72496cdbdb83a52e Mon Sep 17 00:00:00 2001 From: Jesus-DelRiego Date: Wed, 19 Nov 2025 16:49:42 -0600 Subject: [PATCH 3/3] Clarify error message for agents using custom CA bundles in Docker deployments --- .../1.1.x/docs/enterprise/releases/1.1.x/index.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/terraform-enterprise/1.1.x/docs/enterprise/releases/1.1.x/index.mdx b/content/terraform-enterprise/1.1.x/docs/enterprise/releases/1.1.x/index.mdx index 308b059716..62eafe18be 100644 --- a/content/terraform-enterprise/1.1.x/docs/enterprise/releases/1.1.x/index.mdx +++ b/content/terraform-enterprise/1.1.x/docs/enterprise/releases/1.1.x/index.mdx @@ -62,7 +62,7 @@ Flexible Deployment Options `terraform-enterprise` container digest: amd64/linux ## Known Issues 1. You may experience failures when using an S3-compatible storage solution. An updated AWS library may trigger authentication issues with some third-party storage solutions. As a result, you may experience errors when running plans and applies or when accessing Terraform state files. Refer to issue 2960 on the AWS SDK GitHub issues page for more information. Please ensure your S3-compatible storage solution is fully updated. -1. Agents launched by Terraform Enterprise using a custom CA bundle, when Terraform Enterprise is using Docker as its run pipeline, may error when registering with TFE, resulting in Terraform runs failing to complete. Runs remain in pending status and eventually fail with `x509: certificate signed by unknown authority` errors. Version 1.1.1 resolves this issue. +1. Agents launched by Terraform Enterprise using a custom CA bundle, when Terraform Enterprise is using Docker as its run pipeline, may error when registering with Terraform Enterprise, resulting in Terraform runs failing to complete. Runs remain in pending status and eventually fail with `x509: certificate signed by unknown authority` errors. Version 1.1.1 resolves this issue. ## Deprecations 1. PostgreSQL 13 is [reaching end-of-life](https://www.postgresql.org/support/versioning/) in November. We are deprecating support for PostgreSQL 13 in this release, and we will remove support in the 1.2.0 release.