Merge remote-tracking branch 'origin/main' into synthetics-params

* origin/main: (23 commits)
  Regenerate Kibana client (elastic#1189)
  Addressing feedback on elastic#1178 (elastic#1180)
  Bump github.com/getkin/kin-openapi from 0.127.0 to 0.131.0 (elastic#1190)
  Remove explicit misspell (elastic#1182)
  Move tools to go.mod managed tools (elastic#1185)
  fix(deps): update module github.com/hashicorp/terraform-plugin-docs to v0.22.0 (elastic#1188)
  Bump github.com/cloudflare/circl from 1.6.0 to 1.6.1 in /tools (elastic#1187)
  Migrate the System User resource to the plugin framework.  (elastic#1154)
  Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 in /tools (elastic#1184)
  Bump golang.org/x/net from 0.36.0 to 0.38.0 in /libs/go-kibana-rest (elastic#1183)
  chore(deps): update golang:1.24.4 docker digest to 20a022e (elastic#1177)
  Bump github.com/getkin/kin-openapi from 0.127.0 to 0.131.0 in /tools (elastic#1181)
  Add basic docs around the current kbapi generation (elastic#1178)
  chore(deps): update module github.com/golangci/golangci-lint to v2.2.1 (elastic#1176)
  chore(deps): update docker.elastic.co/elasticsearch/elasticsearch docker tag to v9.0.3 (elastic#1170)
  chore(deps): update docker.elastic.co/kibana/kibana docker tag to v9.0.3 (elastic#1171)
  chore(deps): update dependency go to v1.24.4 (elastic#1159)
  fix(deps): update module github.com/elastic/go-elasticsearch/v8 to v8.18.1 (elastic#1168)
  chore(deps): update golang docker tag to v1.24.4 (elastic#1161)
  fix(deps): update module github.com/goreleaser/goreleaser/v2 to v2.10.2 (elastic#1162)
  ...

Author: tobio

.buildkite/release.yml

@@ -1,7 +1,7 @@
 steps:
   - label: Release
     agents:
-      image: "golang:1.24.3@sha256:81bf5927dc91aefb42e2bc3a5abdbe9bb3bae8ba8b107e2a4cf43ce3402534c6"
+      image: "golang:1.24.4@sha256:20a022e5112a144aa7b7aeb3f22ebf2cdaefcc4aac0d64e8deeee8cdc18b9c0f"
       cpu: "16"
       memory: "24G"
       ephemeralStorage: "20G"

.github/workflows/test.yml

@@ -37,9 +37,9 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
         with:
-          go-version-file: 'tools/go.mod'
+          go-version-file: 'go.mod'
           cache: true
-          cache-dependency-path: tools/go.sum
+          cache-dependency-path: go.sum
       - uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3
         with:
           terraform_wrapper: false

.golangci.yaml

@@ -1,5 +1,7 @@
 version: "2"
 linters:
+  enable:
+    - misspell
   exclusions:
     generated: lax
     presets:

CHANGELOG.md

@@ -1,6 +1,8 @@
 ## [Unreleased]
 
 - Add `headers` for the provider connection ([#1057](https://github.com/elastic/terraform-provider-elasticstack/pull/1057))
+- Migrate `elasticstack_elasticsearch_system_user` resource to Terraform plugin framework ([#1154](https://github.com/elastic/terraform-provider-elasticstack/pull/1154))
+- Add custom `endpoint` configuration support for snapshot repository setup ([#1158](https://github.com/elastic/terraform-provider-elasticstack/pull/1158))
 
 ## [0.11.15] - 2025-04-23
 

CONTRIBUTING.md

@@ -2,6 +2,11 @@
 
 Fork the repo, work on an issue
 
+## Updating the generated Kibana client.
+
+If your work involves the Kibana API, the endpoints may or may not be included in the generated client.
+Check [generated/kbapi](./generated/kbapi/) for more details.
+
 ## Acceptance tests
 
 ```bash
@@ -60,4 +65,4 @@ To release a new provider version:
 - updates CHANGELOG.md with the list of changes being released.
 [Example](https://github.com/elastic/terraform-provider-elasticstack/commit/be866ebc918184e843dc1dd2f6e2e1b963da386d).
 
-* Once the PR merged, the release CI pipeline can be started by pushing a new release tag to `main` branch.
+* Once the PR is merged, the release CI pipeline can be started by pushing a new release tag to the `main` branch.

Makefile

@@ -225,7 +225,7 @@ docker-clean: ## Try to remove provisioned nodes and assigned network
 
 .PHONY: docs-generate
 docs-generate: tools ## Generate documentation for the provider
-	@ $(GOBIN)/tfplugindocs
+	@ go tool github.com/hashicorp/terraform-plugin-docs/cmd/tfplugindocs
 
 
 .PHONY: gen
@@ -245,31 +245,16 @@ install: build ## Install built provider into the local terraform cache
 
 
 .PHONY: tools
-tools: $(GOBIN) tools-golangci-lint ## Install useful tools for linting, docs generation and development
-	@ cd tools && go install github.com/client9/misspell/cmd/misspell
-	@ cd tools && go install github.com/hashicorp/terraform-plugin-docs/cmd/tfplugindocs
-	@ cd tools && go install github.com/goreleaser/goreleaser/v2
-	@ cd tools && go install github.com/oapi-codegen/oapi-codegen/v2/cmd/oapi-codegen
-	@ cd tools && go install go.uber.org/mock/mockgen
-
-.PHONY: tools-golangci-lint
-tools-golangci-lint: ## Download golangci-lint locally if necessary.
-	@[[ -f $(GOBIN)/golangci-lint ]] || curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(GOBIN) v2.1.6
-
-
-.PHONY: misspell
-misspell:
-	@ $(GOBIN)/misspell -error -source go ./internal/
-	@ $(GOBIN)/misspell -error -source text ./templates/
-
+tools: $(GOBIN)  ## Download golangci-lint locally if necessary.
+	@[[ -f $(GOBIN)/golangci-lint ]] || curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(GOBIN) v2.2.1
 
 .PHONY: golangci-lint
 golangci-lint:
 	@ $(GOBIN)/golangci-lint run --max-same-issues=0 $(GOLANGCIFLAGS) ./internal/...
 
 
 .PHONY: lint
-lint: setup misspell golangci-lint check-fmt check-docs ## Run lints to check the spelling and common go patterns
+lint: setup golangci-lint check-fmt check-docs ## Run lints to check the spelling and common go patterns
 
 .PHONY: fmt
 fmt: ## Format code
@@ -290,22 +275,21 @@ check-docs: docs-generate  ## Check uncommitted changes on docs
 
 
 .PHONY: setup
-setup: tools ## Setup the dev environment
-
+setup: tools vendor ## Setup the dev environment
 
 .PHONY: release-snapshot
 release-snapshot: tools ## Make local-only test release to see if it works using "release" command
-	@ $(GOBIN)/goreleaser release --snapshot --clean
+	@ go tool github.com/goreleaser/goreleaser/v2 release --snapshot --clean
 
 
 .PHONY: release-no-publish
 release-no-publish: tools check-sign-release ## Make a release without publishing artifacts
-	@ $(GOBIN)/goreleaser release --skip=publish,announce,validate  --parallelism=2
+	@ go tool github.com/goreleaser/goreleaser/v2 release --skip=publish,announce,validate  --parallelism=2
 
 
 .PHONY: release
 release: tools check-sign-release check-publish-release ## Build, sign, and upload your release
-	@ $(GOBIN)/goreleaser release --clean  --parallelism=4
+	@ go tool github.com/goreleaser/goreleaser/v2 release --clean  --parallelism=4
 
 
 .PHONY: check-sign-release

docs/resources/elasticsearch_security_system_user.md

@@ -41,10 +41,10 @@ resource "elasticstack_elasticsearch_security_system_user" "kibana_system" {
 
 ### Optional
 
-- `elasticsearch_connection` (Block List, Max: 1, Deprecated) Elasticsearch connection configuration block. This property will be removed in a future provider version. Configure the Elasticsearch connection via the provider configuration instead. (see [below for nested schema](#nestedblock--elasticsearch_connection))
+- `elasticsearch_connection` (Block List, Deprecated) Elasticsearch connection configuration block. (see [below for nested schema](#nestedblock--elasticsearch_connection))
 - `enabled` (Boolean) Specifies whether the user is enabled. The default value is true.
-- `password` (String, Sensitive) The user’s password. Passwords must be at least 6 characters long.
-- `password_hash` (String, Sensitive) A hash of the user’s password. This must be produced using the same hashing algorithm as has been configured for password storage (see https://www.elastic.co/guide/en/elasticsearch/reference/current/security-settings.html#hashing-settings).
+- `password` (String, Sensitive) The user's password. Passwords must be at least 6 characters long.
+- `password_hash` (String, Sensitive) A hash of the user's password. This must be produced using the same hashing algorithm as has been configured for password storage (see https://www.elastic.co/guide/en/elasticsearch/reference/current/security-settings.html#hashing-settings).
 
 ### Read-Only
 

docs/resources/elasticsearch_snapshot_repository.md

@@ -166,6 +166,7 @@ Optional:
 - `chunk_size` (String) Maximum size of files in snapshots.
 - `client` (String) The name of the S3 client to use to connect to S3.
 - `compress` (Boolean) If true, metadata files, such as index mappings and settings, are compressed in snapshots.
+- `endpoint` (String) Custom S3 service endpoint, useful when using VPC endpoints or non-default S3 URLs.
 - `max_restore_bytes_per_sec` (String) Maximum snapshot restore rate per node.
 - `max_snapshot_bytes_per_sec` (String) Maximum snapshot creation rate per node.
 - `path_style_access` (Boolean) If true, path style access pattern will be used.

generated/alerting/api_alerting_mocks.go

@@ -0,0 +1,3 @@
+package alerting
+
+//go:generate go tool go.uber.org/mock/mockgen -destination=./api_alerting_mocks.go -package=alerting -source ./api_alerting.go AlertingAPI