1.add domain for tag client used for lock file. 2.adjust endpoint formation.

Author: lyu571

internal/backend/remote-state/cos/backend.go

@@ -6,9 +6,11 @@ package cos
 import (
 	"context"
 	"fmt"
+	"log"
 	"net/http"
 	"net/url"
 	"os"
+	"regexp"
 	"strconv"
 	"strings"
 	"time"
@@ -29,6 +31,7 @@ const (
 	PROVIDER_SECURITY_TOKEN               = "TENCENTCLOUD_SECURITY_TOKEN"
 	PROVIDER_REGION                       = "TENCENTCLOUD_REGION"
 	PROVIDER_ENDPOINT                     = "TENCENTCLOUD_ENDPOINT"
+	PROVIDER_DOMAIN                       = "TENCENTCLOUD_DOMAIN"
 	PROVIDER_ASSUME_ROLE_ARN              = "TENCENTCLOUD_ASSUME_ROLE_ARN"
 	PROVIDER_ASSUME_ROLE_SESSION_NAME     = "TENCENTCLOUD_ASSUME_ROLE_SESSION_NAME"
 	PROVIDER_ASSUME_ROLE_SESSION_DURATION = "TENCENTCLOUD_ASSUME_ROLE_SESSION_DURATION"
@@ -50,6 +53,7 @@ type Backend struct {
 	key     string
 	encrypt bool
 	acl     string
+	domain  string
 }
 
 // New creates a new backend for TencentCloud cos remote state.
@@ -91,9 +95,15 @@ func New() backend.Backend {
 			"endpoint": {
 				Type:        schema.TypeString,
 				Optional:    true,
-				Description: "The custom endpoint for the COS API. eg: http://{Bucket}.cos-internal.{Region}.tencentcos.cn",
+				Description: "The custom endpoint for the COS API. eg: http://cos-internal.{Region}.tencentcos.cn, both http or https can be accepted.",
 				DefaultFunc: schema.EnvDefaultFunc(PROVIDER_ENDPOINT, nil),
 			},
+			"domain": {
+				Type:        schema.TypeString,
+				Optional:    true,
+				DefaultFunc: schema.EnvDefaultFunc(PROVIDER_DOMAIN, nil),
+				Description: "The root domain of the API request, Default is `tencentcloudapi.com`.",
+			},
 			"prefix": {
 				Type:        schema.TypeString,
 				Optional:    true,
@@ -238,10 +248,28 @@ func (b *Backend) configure(ctx context.Context) error {
 		return err
 	}
 
+	if v, ok := data.GetOk("domain"); ok {
+		b.domain = v.(string)
+		log.Printf("[DEBUG][backend] set domain for TencentCloud api client. domain:[%s]", b.domain)
+	}
 	// set url as endpoint when it provided
+	// "http://{Bucket}.cos-internal.{Region}.tencentcos.cn"
 	if v, ok := data.GetOk("endpoint"); ok {
 		endpoint := v.(string)
-		u, err = url.Parse(endpoint)
+
+		re := regexp.MustCompile(`^(http(s)?)://cos-internal\.([^.]+)\.tencentcos\.cn$`)
+		matches := re.FindStringSubmatch(endpoint)
+		if len(matches) != 4 {
+			return fmt.Errorf("[backend] invalid URL, must be: %v", "http(s)://cos-internal.{Region}.tencentcos.cn")
+		}
+
+		protocol := matches[1]
+		region := matches[3]
+
+		// URL after converting
+		newUrl := fmt.Sprintf("%s://%s.cos-internal.%s.tencentcos.cn", protocol, b.bucket, region)
+		u, err = url.Parse(newUrl)
+		log.Printf("[DEBUG][backend] set cos url as:[%s]", newUrl)
 	}
 	if err != nil {
 		return err
@@ -349,6 +377,8 @@ func (b *Backend) NewClientProfile(timeout int) *profile.ClientProfile {
 	cpf.HttpProfile.ReqMethod = "POST"
 	// request timeout
 	cpf.HttpProfile.ReqTimeout = timeout
+	// request domain
+	cpf.HttpProfile.RootDomain = b.domain
 
 	return cpf
 }

website/docs/language/settings/backends/cos.mdx

@@ -65,6 +65,7 @@ The following configuration options or environment variables are supported:
 - `acl` - (Optional) Object ACL to be applied to the state file, allows `private` and `public-read`. Defaults to `private`.
 - `accelerate` - (Optional) Whether to enable global Acceleration. Defaults to `false`.
 - `endpoint` - (Optional) The Custom Endpoint for the COS backend. It supports environment variables `TENCENTCLOUD_ENDPOINT`.
+- `domain` - (Optional) The root domain of the API request. Defaults to `tencentcloudapi.com`. It supports environment variables `TENCENTCLOUD_DOMAIN`.
 
 ### Assume Role
 If provided with an assume role, Terraform will attempt to assume this role using the supplied credentials.
@@ -112,7 +113,7 @@ $ terraform plan
 ### Endpoint
 If provided with an endpoint url, Terraform will attempt to access COS backend by the `endpoint` configuration or environment variables `TENCENTCLOUD_ENDPOINT`.
 
-A typical endpoint like this: `http://{Bucket}.cos-internal.{Region}.tencentcos.cn`, both http or https can be accepted.
+A typical endpoint like this: `http://cos-internal.{Region}.tencentcos.cn`, both http or https can be accepted.
 
 Usage:
 
@@ -122,7 +123,7 @@ terraform {
     region   = "ap-guangzhou"
     bucket   = "bucket-for-terraform-state-1258798060"
     prefix   = "terraform/state"
-    endpoint = "http://bucket-for-terraform-state-1258798060.cos-internal.ap-guangzhou.tencentcos.cn"
+    endpoint = "http://cos-internal.ap-guangzhou.tencentcos.cn"
   }
 }
 ```