kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
ed9fd6b08de690a90fd99e938e78ee97cd9e60c2
hunfabric/CHANGELOG.md
Ludovico Magnocavallo ed9fd6b08d Align documentation, move glb blueprint (#921) 
* aling documentation, move glb blueprint

* modules README, sort modules

* reorder modules

* fix bp links

* fix moved blueprint test

* use a single cloud shell image in the repo
2022-10-26 14:31:04 +02:00

72 KiB
Raw Blame History

Changelog

All notable changes to this project will be documented in this file.

Unreleased

BLUEPRINTS

  • [#915] TFE OIDC with GCP WIF blueprint added (averbuks)
  • [#899] Static routes monitoring metrics added to network dashboard BP (maunope)
  • [#909] GCS2BQ: Move images and templates in sub-folders (lcaggio)
  • [#907] Fix CloudSQL blueprint (lcaggio)
  • [#897] Project-factory: allow folder_id to be defined in defaults_file (Malet)
  • [#900] Improve net dashboard variables (juliocc)
  • [#896] Network Dashboard: CFv2 and performance improvements (aurelienlegrand)
  • [#871] Firewall Policy Metrics, parallel writes, aligned timestamps (maunope)
  • [#884] BigQuery factory blueprint (marcjwo)
  • [#889] Minor fixes to PSC hybrid blueprint readmes (LucaPrete)
  • [#888] Let the cloudsql module generate a random password (skalolazka)
  • [#879] New PSC hybrid blueprint (LucaPrete)
  • [#880] incompatible change: Refactor net-vpc module for Terraform 1.3 (ludoo)
  • [#872] added support 2nd generation cloud function (som-nitjsr)
  • [#875] incompatible change: Refactor GKE nodepool for Terraform 1.3, refactor GKE blueprints and FAST stage (ludoo)
  • [#873] Fix docker tag command and link to Cloud Shell in WP blueprint (skalolazka)
  • [#870] Temporarily revert to Terraform 1.3.1 to support Cloud Shell (skalolazka)
  • [#856] Add network firewall metrics to network dashboard (maunope)
  • [#868] incompatible change: Refactor GKE module for Terraform 1.3 (ludoo)
  • [#818] Example wordpress (skalolazka)
  • [#861] Leverage new shared VPC project config defaults across the repo (juliocc)
  • [#854] Added an example of a Nginx reverse proxy cluster using RMIGs (rosmo)
  • [#850] Made sample alert creation optional (maunope)
  • [#837] Network dashboard: Subnet IP utilization update (aurelienlegrand)
  • [#848] updated quota monitoring CF doc (maunope)
  • [#847] incompatible change: Quotas monitoring, time series format update (maunope)
  • [#839] incompatible change: Update to terraform 1.3 (juliocc)
  • [#828] Update firewall rules. (lcaggio)
  • [#813] Add documentation example test for pf (ludoo)
  • [#809] Renaming and moving blueprints (juliocc)

DOCUMENTATION

FAST

  • [#911] FAST: Additional PGA DNS records (sruffilli)
  • [#903] Initial replacement for CI/CD stage (ludoo)
  • [#898] Update FAST bootstrap README.md (juliocc)
  • [#880] incompatible change: Refactor net-vpc module for Terraform 1.3 (ludoo)
  • [#875] incompatible change: Refactor GKE nodepool for Terraform 1.3, refactor GKE blueprints and FAST stage (ludoo)
  • [#566] FAST: Separate network environment (sruffilli)
  • [#870] Temporarily revert to Terraform 1.3.1 to support Cloud Shell (skalolazka)
  • [#868] incompatible change: Refactor GKE module for Terraform 1.3 (ludoo)
  • [#867] FAST: Replace NVAs in 02-networking-nva with COS-based VMs (sruffilli)
  • [#865] Enable FAST 00-cicd provider test (ludoo)
  • [#861] Leverage new shared VPC project config defaults across the repo (juliocc)
  • [#858] Default gcp-support to gcp-devops (juliocc)
  • [#842] Comment redundant role in bootstrap stage, align IAM.md files, improve IAM tool (ludoo)
  • [#841] FAST: revert 00-cicd provider changes (ludoo)
  • [#835] Fix workflow-gitlab.yaml template rendering (muresan)
  • [#828] Update firewall rules. (lcaggio)
  • [#807] FAST: refactor Gitlab template (ludoo)

MODULES

  • [#908] GKE module: autopilot fixes (ludoo)
  • [#906] GKE module: add managed_prometheus to features (apichick)
  • [#916] Add support for DNS routing policies (juliocc)
  • [#918] Fix race condition in SimpleNVA (sruffilli)
  • [#914] incompatible change: Update DNS module (juliocc)
  • [#904] Add missing description field (dsbutler101)
  • [#891] Add internal_ips output to compute-vm module (LucaPrete)
  • [#890] Add auto_delete and instance_redistribution_type to compute-vm and compute-mig modules. (giovannibaratta)
  • [#883] Fix csi-driver, logging and monitoring default values when autopilot … (danielmarzini)
  • [#880] incompatible change: Refactor net-vpc module for Terraform 1.3 (ludoo)
  • [#872] added support 2nd generation cloud function (som-nitjsr)
  • [#877] fix autoscaling block (ludoo)
  • [#875] incompatible change: Refactor GKE nodepool for Terraform 1.3, refactor GKE blueprints and FAST stage (ludoo)
  • [#870] Temporarily revert to Terraform 1.3.1 to support Cloud Shell (skalolazka)
  • [#869] Fix optionals for resource_usage_export field in gke-cluster (juliocc)
  • [#868] incompatible change: Refactor GKE module for Terraform 1.3 (ludoo)
  • [#866] Update ipprefix_by_netmask.sh in nva module (sruffilli)
  • [#860] incompatible change: Refactor compute-vm for Terraform 1.3 (ludoo)
  • [#861] Leverage new shared VPC project config defaults across the repo (juliocc)
  • [#859] Make project shared VPC fields optional (juliocc)
  • [#853] Fixes NVA issue when health checks are not enabled (sruffilli)
  • [#846] COS based simple networking appliance (sruffilli)
  • [#851] nginx-tls: only use hostname part for TLS certificate (rosmo)
  • [#844] Management of GCP project default service accounts (ddaluka)
  • [#845] added root password support for MS SQL Server (cmalpe)
  • [#843] Add support for disk encryption to instance templates in compute-vm module (ludoo)
  • [#840] incompatible change: Refactor net-address module for 1.3 (ludoo)
  • [#839] incompatible change: Update to terraform 1.3 (juliocc)
  • [#824] Add simple composer 2 blueprint (lcaggio)
  • [#834] Add support for service_label property in internal load balancer (kmucha555)
  • [#833] regional MySQL DBs - automatic backup conf (skalolazka)
  • [#827] Project module: Add Artifactregistry Service Identity SA creation. (lcaggio)
  • [#826] Added new binary_authorization argument in gke-cluster module (sirohia)
  • [#819] Removed old and unused modules (juliocc)

TOOLS

  • [#919] Rename workflow names (juliocc)
  • [#902] Bring back sorted variables check (juliocc)
  • [#887] Disable parallel execution of tests and plugin cache (ludoo)
  • [#886] Revert "Improve handling of tf plugin cache in tests" (ludoo)
  • [#885] Improve handling of tf plugin cache in tests (ludoo)
  • [#881] Run tests in parallel using pytest-xdist (ludoo)
  • [#876] Make changelog tool slower to work around inconsistencies in API results (ludoo)
  • [#865] Enable FAST 00-cicd provider test (ludoo)
  • [#864] incompatible change: Bump terraform required version (ludoo)
  • [#842] Comment redundant role in bootstrap stage, align IAM.md files, improve IAM tool (ludoo)
  • [#811] Fix changelog generator (ludoo)
  • [#810] Fully recursive e2e test runner for examples (juliocc)

18.0.0 - 2022-09-09

FAST

  • [#804] GKE CI/CD (ludoo)
  • [#803] FAST: fix GCS location in stage 00 and 01 (miklosn)
  • [#700] FAST: GKE multitenant infrastructure (ludoo)
  • [#800] FAST: add support for storage locations in stages 0 and 1 (ludoo)
  • [#799] FAST: add support for project parents to bootstrap stage (ludoo)
  • [#793] FAST: fix typo in CI/CD stage outputs. (fawzihmouda)
  • [#774] FAST: fix data-platform-dev folder in stage 03-data-platform (sttomm)
  • [#770] FAST: fix to move without output_location (daisuky-jp)
  • [#767] Allow interpolating SAs in project factory subnet IAM bindings (ludoo)
  • [#766] FAST: refactor teams branch (ludoo)
  • [#765] FAST: move region trigrams to a variable in network stages (ludoo)
  • [#759] FAST: fix missing value to format principalSet (imp14a)
  • [#753] Add support for IAM bindings on service accounts to project factory (ludoo)
  • [#745] FAST: specify gitlab / github providers in CI/CD stage (imp14a)
  • [#734] FAST: Use spot VMs for test VM and for NVAs (sruffilli)
  • [#733] FAST: fix data platform drop BQ dataset name (juliocc)
  • [#730] FAST: add billing IAM for billing group (ludoo)
  • [#721] FAST: add billing.costManager role to project factory SAs (sruffilli)
  • [#716] FAST: added missing format argument to project factory CI/CD IAM bindings (mgfeller)
  • [#715] FAST: fix optional service accounts in networking stages (ludoo)
  • [#711] FAST: update several stage READMEs about usage of *.auto.tfvars files (mgfeller)
  • [#703] FAST: configuration switches for features (ludoo)
  • [#706] Bump providers versions and pin versions for tests (juliocc)
  • [#702] FAST: also trigger GitHub workflow on PR synchronize event (mgfeller)
  • [#692] FAST: fix KMS delegation role in security stage (lcaggio)
  • [#699] FAST: add repository_owner to GitHub identity attributes (ludoo)
  • [#694] FAST: add 00-cicd stage to allow managing repositories in Gitlab/GitHub, other CI/CD improvements (rosmo)
  • [#690] FAST: fix stage tfvars link paths in documentation (lcaggio)
  • [#676] FAST: add group creation GIF to documentation (amgoogle)
  • [#687] FAST: fix service identity/SA mismatch in project factory (dosti-tee)
  • [#668] FAST: add cleanup instructions to documentation (ajlopezn)
  • [#682] FAST: fix CI/CD source repositories in stage 01 (imp14a)
  • [#675] FAST: fix audit logs when using pubsub as destination (juliocc)
  • [#674] FAST: remove team folders comment from 01 variables, clarify README (ludoo)
  • [#671] FAST: fix Gitlab WIF attributes (ludoo)
  • [#669] FAST: CI/CD support for Source Repository and Cloud Build (ludoo)

EXAMPLES

MODULES

  • [#805] Change modules/project service_config default (juliocc)
  • [#787] Support manager role in cloud identity group module (lcaggio)
  • [#786] Secret manager flag sensitive output (ddaluka)
  • [#775] net-glb: Added support for regional external HTTP(s) load balancing (rosmo)
  • [#784] fix envoy-traffic-director config for xDS v3 (drebes)
  • [#785] nginx-tls module (drebes)
  • [#783] fix service unit indent on cloud-config-container module (drebes)
  • [#782] typo fix (max_scale -> min_scale) (skalolazka)
  • [#778] incompatible change: instance_termination_action must be set for compute-vm spot instances (sruffilli)
  • [#727] Fix ip_range variable description in apigee-x-instance module (alexlo03)
  • [#773] incompatible change: Refactor Cloud Run module (ludoo)
  • [#754] Add support to a public access to cloudsql-instance (alefmreis)
  • [#768] Add egress / ingress policy example to VPC SC module (ludoo)
  • [#767] Allow interpolating SAs in project factory subnet IAM bindings (ludoo)
  • [#764] Add dependency on shared vpc service project attachment to project module outputs (apichick)
  • [#761] Fix gke hub module features condition (ludoo)
  • [#760] incompatible change: GKE hub module refactor (ludoo)
  • [#756] Set cluster id output to sensitive in GKE module (apichick)
  • [#752] Also depend on shared vpc host in project module (apichick)
  • [#747] Added gkehub.googleapis.com to jit services (apichick)
  • [#744] Fixed issue with missing project reference in Cloud DNS data source (rosmo)
  • [#741] Added servicemesh feature to GKE hub and included fleet robot service… (apichick)
  • [#737] Move Cloud Run VPC Connector annotations to template metadata (#735) (sethmoon)
  • [#732] Add support for topic message duration to pubsub module (ludoo)
  • [#731] Avoid setting empty IAM binding in subnet factory (ludoo)
  • [#729] Fix connector create logic in cloud run module (ludoo)
  • [#726] Fix documentation for organization-policy module (averbuks)
  • [#722] OrgPolicy module (factory) using new org-policy API, #698 (averbuks)
  • [#695] Modified reserved IP address outputs in net-glb module (apichick)
  • [#709] Fix incompatibility between logging and monitor config/service arguments in GKE module (psabhishekgoogle)
  • [#708] Fix incompatibility between backup and autopilot in GKE module (ludoo)
  • [#707] Fix addons for autopilot clusters and add specific tests in GKE module (juliocc)
  • [#706] Bump providers versions and pin versions for tests (juliocc)
  • [#704] Add consumer_accept_list to apigee-x-instance (juliocc)
  • [#696] Added missing image in GLB and Cloud Armor example (apichick)
  • [#689] New binary authorization module and example (apichick)
  • [#686] Revert "Binary authorization module and example" (ludoo)
  • [#683] Binary authorization module and example (apichick)
  • [#684] Cloud function module: add support for secrets (ludoo)

TOOLS

  • [#796] Remove duplicate path component from doc_examples test names. (juliocc)
  • [#794] Test documentation examples in the examples/ folder (juliocc)
  • [#788] fix yaml quotes for merge-pr workflow (drebes)
  • [#763] Changelog generator (ludoo)
  • [#762] Update changelog on pull request merge (ludoo)
  • [#680] Tools: fix ValueError raised in check_names.py when overlong names are detected (27Bslash6)
  • [#672] Module attribution and version updater tool, plus release automation (rosmo)

16.0.0 - 2022-06-06

  • add support for Spot VMs to gke-nodepool module
  • incompatible change add support for Spot VMs to compute-vm module
  • SQL Server AlwaysOn availability groups example
  • fixed Terraform change detection in CloudSQL when backup is disabled
  • allow multiple CIDR blocks in the ip_range for Apigee Instance
  • add prefix to project factory SA bindings
  • incompatible change subnets_l7ilb variable is deprecated in the net-vpc module, instead subnets_proxy_only variable should be used
  • add support for Private Service Connect and Proxy-only subnets to net-vpc module
  • bump Google provider versions to >= 4.17.0
  • bump Terraform version to >= 1.1.0
  • add shielded_instance_config support for instance template on compute-vm module
  • add support for gke_backup_agent_config to GKE module addons
  • add support for subscription filters to PubSub module
  • refactor Hub and Spoke with VPN example
  • fix tfdoc parsing on newllines in outputs
  • fix subnet factory example in vpc module README
  • fix condition in subnet factory flow logs
  • added new example on GLB and Cloud Armor
  • revamped and expanded Contributing Guide
  • add support for Workload Identity Federation and CI/CD repositories
  • simplify VPN tunnel configuration in the Hub and Spoke VPN network stage
  • fix subnet YAML schema

15.0.0 - 2022-04-05

  • incompatible change the variable for PSA ranges in the net-vpc module has changed to support configuring peering routes
  • fix permadiff in net-vpc-firewall module rules
  • new gke-hub module
  • new unmanaged-instances-healthcheck example
  • add support for IAM to data-catalog-policy-tag module
  • add support for IAM additive to folder module, fixes #580
  • optionally turn off gcplogs driver in COS modules
  • fix tag output on data-catalog-policy-tag module
  • add shared-vpc support on gcs-to-bq-with-least-privileges
  • new net-ilb-l7 module
  • new 02-networking-peering networking stage
  • incompatible change the variable for PSA ranges in networking stages have changed

14.0.0 - 2022-02-25

  • incompatible change removed iam key from logging sink configuration in the project and organization modules
  • remove GCS to BQ with Dataflow example, replace by GCS to BQ with least privileges
  • the net-vpc and project modules now use the beta provider for shared VPC-related resources
  • new iot-core module
  • incompatible change the variables for host and service Shared VPCs have changed in the project module
  • incompatible change the variable for service identities IAM has changed in the project factory
  • add data-catalog-policy-tag module
  • new workload identity federetion example
  • new api-gateway module and example.
  • incompatible change the psn_ranges variable has been renamed to psa_ranges in the net-vpc module and its type changed from list(string) to map(string)
  • incompatible change removed iam flag for organization and folder level sinks
  • incompatible change removed ingress_settings configuration option in the cloud-functions module.
  • new m4ce VM example
  • Support for resource management tags in the organization, folder, project, compute-vm, and kms modules
  • new data platform stage 3
  • new 02-networking-nva networking stage
  • allow customizing the names of custom roles
  • added environment and context resource management tags
  • use resource management tags to restrict scope of roles/orgpolicy.policyAdmin
  • use xpnServiceAdmin (custom role) for stage 3 service accounts that need to attach to a shared VPC
  • simplify and standarize ourputs from each stage
  • standarize names of projects, service accounts and buckets
  • swtich to folder-level xpnAdmin and xpnServiceAdmin
  • moved networking projects to folder matching their enviroments

13.0.0 - 2022-01-27

  • initial Fabric FAST implementation
  • new net-glb module for Global External Load balancer
  • new project-factory module in blueprints/factories
  • add missing service identity accounts (artifactregistry, composer) in project module
  • new "Cloud Storage to Bigquery with Cloud Dataflow with least privileges" example
  • support service dependencies for crypto key bindings in project module
  • refactor project module in multiple files
  • add support for per-file option overrides to tfdoc

12.0.0 - 2022-01-11

  • new repo structure. All end-to-end examples moved to the top level examples folder

11.2.0 - 2022-01-11

  • fix net-vpc subnet factory bug preventing the use of yamls with different shapes

11.1.0 - 2022-01-11

  • add support for additive IAM bindings to kms module

11.0.0 - 2022-01-04

  • incompatible change remove location from gcs bucket names
  • add support for interpolating access levels based on keys to the vpc-sc module

10.0.1 - 2022-01-03

  • remove lifecycle block from vpc sc perimeter resources

10.0.0 - 2021-12-31

  • fix cases where bridge perimeter status resources are null in vpc-sc module
  • re-release 9.0.3 as a major release as it contains breaking changes
  • update hierarchical firewall resources to use the newer google_compute_firewall_* resources
  • incompatible change rename firewall_policy_attachments to firewall_policy_association in the organization and folder modules
  • incompatible change updated API for the net-vpc-sc module

9.0.3 - 2021-12-31

  • update hierarchical firewall resources to use the newer google_compute_firewall_* resources
  • incompatible change rename firewall_policy_attachments to firewall_policy_association in the organization and folder modules
  • incompatible change updated API for the net-vpc-sc module

9.0.2 - 2021-12-22

  • ignore description changes in firewall policy rule to avoid permadiff, add factory example to folder module documentation

9.0.0 - 2021-12-22

  • new cloud-run module
  • added gVNIC support to compute-vm module
  • added a rule factory to net-vpc-firewall module
  • added a subnet factory to net-vpc module
  • incompatible change added support for partitioned tables to organization module sinks
  • incompatible change renamed private_service_networking_range variable to psc_ranges in net-vpcmodule, and changed its type to list(string)
  • added a firewall policy factory to organization and firewall module
  • refactored tfdoc
  • added support for metric scopes to the project module

8.0.0 - 2021-10-21

  • added support for GCS notifications in gcs module
  • added new skip_delete variable to compute-vm module
  • incompatible change all modules and examples now require Terraform >= 1.0.0 and Google provider >= 4.0.0

7.0.0 - 2021-10-21

  • new cloud operations example showing how to deploy infrastructure for Compute Engine image builder based on Hashicorp Packer
  • incompatible change the format of the records variable in the dns module has changed, to better support dynamic values
  • new naming-convention module
  • new cloudsql-instance module
  • added support for website to gcs module, and removed auto-set labels
  • new factories top-level folder with initial subnets, firewall-hierarchical-policies, firewall-vpc-rules and example-environments examples
  • added new description variable to compute-vm module
  • added support for L7 ILB subnets to net-vpc module
  • added support to override default description in compute-vm
  • added support for backup retention count in cloudsql-instance
  • added new description variable to cloud-function module
  • added new description variable to bigquery-dataset module
  • added new description variable to iam-service-account module
  • incompatible change fix deprecated message from gke-nodepool, change your workload_metadata_config to correct values (GCE_METADATA or GKE_METADATA)
  • incompatible change changed maintenance window definition from maintenance_start_time to maintenance_config in gke-cluster
  • added monitoring_config,logging_config, dns_config and enable_l4_ilb_subsetting to gke-cluster

6.0.0 - 2021-10-04

  • new apigee-organization and apigee-x-instance
  • generate email and iam_email statically in the iam-service-account module
  • new billing-budget module
  • fix scheduled-asset-inventory-export-bq module
  • output custom role information from the organization module
  • enable multiple vpc-sc perimeters over multiple modules
  • new cloud operations example showing how to restrict service usage using delegated role grants
  • incompatible change multiple instance support has been removed from the compute-vm module, to bring its interface in line with other modules and enable simple use of for_each at the module level; its variables have also slightly changed (attached_disks, boot_disk_delete, crate_template, zone)
  • incompatible change dropped the admin_ranges_enabled variable in net-vpc-firewall. Set admin_ranges = [] to get the same effect
  • added the named_ranges variable to net-vpc-firewall

5.1.0 - 2021-08-30

  • add support for lifecycle_rule in gcs module
  • create pubsub service identity if service is enabled
  • support for creation of GKE Autopilot clusters
  • add support for CMEK keys in Data Foundation end to end example
  • add support for VPC-SC perimeters in Data Foundation end to end example
  • fix vpc-sc module
  • new networking example showing how to use Private Service Connect to call a Cloud Function from on-premises
  • new networking example showing how to organize decentralized firewall management on GCP

5.0.0 - 2021-06-17

  • fix message_retention_duration variable type in pubsub module
  • move bq robot service account into the robot service account project output
  • add IAM cryptDecrypt role to robot service account on specified keys
  • add Service Identity creation on project module if secretmanager enabled
  • add Data Foundation end to end example

4.9.0 - 2021-06-04

  • incompatible change updated resource name for google_dns_policy on the net-vpc module
  • added support for VPC-SC Ingress Egress policies on the vpc-sc module
  • update CI to Terraform 0.15 and fix minor incompatibilities
  • add deletion_protection to the bigquery-dataset module
  • add support for dataplane v2 to GKE cluster module
  • add BGP peer outputs to HA VPN module

4.8.0 - 2021-05-12

  • added support for CORS to the gcs module
  • make cluster creation optional in the Shared VPC example
  • make service account creation optional in iam-service-account module
  • new third-party-solutions top-level folder with initial openshift example
  • added support for DNS Policies to the net-vpc module

4.7.0 - 2021-04-21

  • incompatible change add support for master_global_access_config block in gke-cluster module
  • add support for group-based IAM to resource management modules
  • add support for private service connect

4.6.1 - 2021-04-01

  • incompatible change support one group per zone in the compute-vm module

4.6.0 - 2021-03-31

  • incompatible change logging sinks now create non-authoritative bindings when iam=true
  • fixed IAM bindings for module bigquery not specifying project_id
  • remove device_policy from vpc_sc module as it requires BeyondCorp Enterprise Premium
  • allow using unsuffixed name in compute_vm module

4.5.1 - 2021-03-27

  • allow creating private DNS zones with no visible VPCs in dns module

4.5.0 - 2021-03-20

  • new logging-bucket module to create Cloud Logging Buckets
  • add support to create logging sinks using logging buckets as the destination
  • incompatible change extended logging sinks to support per-sink exclusions
  • new net-vpc-firewall-yaml module
  • add support for regions, device policy and access policy dependency to vpc-sc module
  • add support for joining VPC-SC perimeters in project module
  • add userinfo.email to default scopes in compute-vm module

4.4.2 - 2021-03-05

  • fix versions constraints on modules to avoid the no available releases match the given constraints error

4.4.1 - 2021-03-05

  • depend specific org module resources (eg policies) from IAM bindings
  • set version for google-beta provider in project module

4.4.0 - 2021-03-02

  • new filtering_proxy networking example
  • add support for a second region in the onprem networking example
  • add support for per-tunnel router to VPN HA and VPN dynamic modules
  • incompatible change the attached_disks variable type has changed in the compute-vm module, to add support for regional persistent disks, and attaching existing disks to instances / templates
  • the hub and spoke via peering example now supports project creation, resource prefix, and GKE peering configuration
  • make the project_id output from the project module non-dynamic. This means you can use this output as a key for map fed into a for_each (for example, as a key for iam_project_bindings in the iam-service-accounts module)
  • add support for essential contacts in the in the project, folder and organization modules

4.3.0 - 2021-01-11

  • new DNS for Shared VPC example
  • incompatible change removed the logging-sinks module. Logging sinks can now be created the logging_sinks variable in the in the project, folder and organization modules
  • add support for creating logging exclusions in the project, folder and organization modules
  • add support for Confidential Compute to compute-vm module
  • add support for handling IAM policy (bindings, audit config) as fully authoritative in the organization module

4.2.0 - 2020-11-25

  • incompatible change the org_id variable and output in the vpc-sc module have been renamed to organization_id, the variable now accepts values in organizations/nnnnnnnn format
  • incompatible change the forwarders variable in the dns module has a different type, to support specifying forwarding path
  • add support for MTU in net-vpc module
  • incompatible change access variables have been renamed in the bigquery-dataset module
  • add support for IAM to the bigquery-dataset module
  • fix default OAuth scopes in gke-nodepool module
  • add support for hierarchical firewalls to the folder and organization modules
  • incompatible change the org_id variable and output in the organization module have been renamed to organization_id, the variable now accepts values in organizations/nnnnnnnn format

4.1.0 - 2020-11-16

  • incompatible change rename prefix for node configuration variables in gke-nodepool module [#156]
  • add support for internally managed service account in gke-nodepool module [#156]
  • made examples in READMEs runnable and testable [#157]
  • incompatible change iam_additive is now keyed by role to be more resilient with dynamic values, a new iam_additive_members variable has been added for backwards compatibility.
  • add support for node taints in gke-nodepool module
  • add support for CMEK in gke-nodepool module

4.0.0 - 2020-11-06

  • This is a major refactor adding support for Terraform 0.13 features
  • incompatible change minimum required terraform version is now 0.13.0
  • incompatible change folders module renamed to folder
  • incompatible change iam-service-accounts module renamed to iam-service-account
  • incompatible change all iam_roles and iam_member variables merged into a single iam variable. This change affects most modules
  • incompatible change modules like folder, gcs, iam-service-account now create a single resource. Use for_each at the module level if you need multiple instances
  • added basic variable validations to some modules

3.5.0 - 2020-10-27

  • end to end example for scheduled Cloud Asset Inventory export to Bigquery
  • decouple Cloud Run from Istio in GKE cluster module
  • depend views on tables in bigquery dataset module
  • bring back logging options for firewall rules in net-vpc-firewall module
  • removed interpolation-only expressions causing terraform warnings
  • incompatible change simplify alias IP specification in compute-vm. We now use a map (alias range name to list of IPs) instead of a list of maps.
  • allow using alias IPs with instance_count in compute-vm
  • add support for virtual displays in compute-vm
  • add examples of alias IPs in compute-vm module
  • fix support for creating disks from images in compute-vm
  • allow creating single-sided peerings in net-vpc and net-vpc-peering
  • use service project registration to Shared VPC in GKE example to remove need for two-step apply

3.4.0 - 2020-09-24

  • add support for logging and better type for the retention_policies variable in gcs module
  • incompatible change deprecate bucket_policy_only in favor of uniform_bucket_level_access in gcs module
  • incompatible change allow project module to configure itself as both shared VPC service and host project

3.3.0 - 2020-09-01

  • remove extra readers in gcs-to-bq-with-dataflow example (issue: 128)
  • make VPC creation optional in net-vpc module to allow managing a pre-existing VPC
  • make HA VPN gateway creation optional in net-vpn-ha module
  • add retention_policy in gcs module
  • refactor net-address module variables, and add support for internal address purpose

3.2.0 - 2020-08-29

  • incompatible change add alias IP support in cloud-vm module
  • add tests for data-solutions examples
  • fix apply errors on dynamic resources in dataflow example
  • make zone creation optional in dns module
  • new quota-monitoring end-to-end example in cloud-operations

3.1.1 - 2020-08-26

  • fix error in project module
  • incompatible change make HA VPN Gateway creation optional for net-vpn-ha module. Now an existing HA VPN Gateway can be used. Updating to the new version of the module will cause VPN Gateway recreation which can be handled by terraform state rm/terraform import operations.

3.1.0 - 2020-08-16

  • incompatible change add support for specifying a different project id in the GKE cluster module; if using the peering_config variable, peering_config.project_id now needs to be explicitly set, a null value will reuse the project_id variable for the peering

3.0.0 - 2020-08-15

  • incompatible change the top-level infrastructure folder has been renamed to networking
  • add end-to-end example for ILB as next hop
  • add basic tests for foundations and networking end-to-end examples
  • fix Shared VPC end-to-end example and documentation

2.8.0 - 2020-08-01

  • fine-grained Cloud DNS IAM via Service Directory example
  • add feed id output dependency on IAM roles in pubsub module

2.7.1 - 2020-07-24

  • fix provider issue in bigquery module

2.7.0 - 2020-07-24

  • add support for VPC connector and ingress settings to cloud-function module
  • add support for logging to net-cloudnat module

2.6.0 - 2020-07-19

  • incompatible changes setting zone in the compute-vm module is now done via an optional zones variable, that accepts a list of zones
  • fix optional IAM permissions in folder unit module

2.5.0 - 2020-07-10

  • new vpc-sc module
  • add support for Shared VPC to the project module
  • fix bug with compute-vm address reservations introduced in 2.4.1

2.4.2 - 2020-07-09

  • add support for Shielded VM to compute-vm

2.4.1 - 2020-07-06

  • better fix external IP assignment in compute-vm

2.4.0 - 2020-07-06

  • fix external IP assignment in compute-vm
  • new top-level cloud-operations example folder
  • Cloud Asset Inventory end to end example in cloud-operations

2.3.0 - 2020-07-02

  • new 'Cloud Storage to Bigquery with Cloud Dataflow' end to end data solution
  • incompatible change additive IAM bindings are now keyed by identity instead of role, and use a single iam_additive_bindings variable, refer to [#103] for details
  • set delete_contents_on_destroy in the foundations examples audit dataset to allow destroying
  • trap errors raised by the project module on destroy

2.2.0 - 2020-06-29

  • make project creation optional in project module to allow managing a pre-existing project
  • new cloud-endpoints module
  • new cloud-function module

2.1.0 - 2020-06-22

  • incompatible change routes in the net-vpc module now interpolate the VPC name to ensure uniqueness, upgrading from a previous version will drop and recreate routes
  • the top-level docker-images folder has been moved inside modules/cloud-config-container/onprem
  • dns_keys output added to the dns module
  • add group-config variable, groups and group_self_links outputs to net-ilb module to allow creating ILBs for externally managed instances
  • make the IAM bindings depend on the compute instance in the compute-vm module

2.0.0 - 2020-06-11

  • new data-solutions section and cmek-via-centralized-kms example
  • incompatible change static VPN routes now interpolate the VPN gateway name to enforce uniqueness, upgrading from a previous version will drop and recreate routes

1.9.0 - 2020-06-10

  • new bigtable-instance module
  • add support for IAM bindings to compute-vm module

1.8.1 - 2020-06-07

  • use all instead of specifying protocols in the admin firewall rule of the net-vpc-firewall module
  • add support for encryption keys in gcs module
  • set next_hop_instance_zone in net-vpc for next hop instance routes to avoid triggering recreation

1.8.0 - 2020-06-03

  • incompatible change the kms module has been refactored and will be incompatible with previous state
  • incompatible change robot and default service accounts outputs in the project module have been refactored and are now exposed via a single service_account output (cf [#82])
  • add support for PD CSI driver in GKE module
  • refactor iam-service-accounts module outputs to be more resilient
  • add option to use private GCR to cos-generic-metadata module

1.7.0 - 2020-05-30

  • add support for disk encryption to the compute-vm module
  • new datafusion module
  • new container-registry module
  • new artifact-registry module

1.6.0 - 2020-05-20

  • add output to gke-cluster exposing the cluster's CA certificate
  • fix gke-cluster autoscaling options
  • add support for Service Directory bound zones to the dns module
  • new service-directory module
  • new source-repository module

1.5.0 - 2020-05-11

  • incompatible change the bigquery module has been removed and replaced by the new bigquery-dataset module
  • incompatible change subnets in the net-vpc modules are now passed as a list instead of map, and all related variables for IAM and flow logs use region/name instead of name keys; it's now possible to have the same subnet name in different regions
  • replace all references to the removed resourceviews.googleapis.com API with container.googleapis.com
  • fix advanced options in gke-nodepool module
  • fix health checks in compute-mig and net-ilb modules
  • new cos-generic-metadata module in the cloud-config-container suite
  • new envoy-traffic-director module in the cloud-config-container suite
  • new pubsub module

1.4.1 - 2020-05-02

  • new secret-manager module
  • fix access in bigquery module, this is the last version of this module to support multiple datasets, future versions will be called bigquery-dataset

1.4.0 - 2020-05-01

  • fix DNS module internal zone lookup
  • fix Cloud NAT module internal router name lookup
  • re-enable and update outputs for the foundations environments example
  • add peering route configuration for private clusters to GKE cluster module
  • incompatible changes in the GKE nodepool module: rename node_config_workload_metadata_config variable to workload_metadata_config, new default for workload_metadata_config is GKE_METADATA_SERVER
  • incompatible change in the compute-vm module: removed support for MIG and the group_manager variable
  • add compute-mig and net-ilb modules
  • incompatible change in net-vpc: a new name attribute has been added to the subnets variable, allowing to directly set subnet name, to update to the new module add an extra name = false attribute to each subnet

1.3.0 - 2020-04-08

  • add organization policy module
  • add support for organization policies to folders and project modules

1.2.0 - 2020-04-06

  • add squid container to the cloud-config-container module

1.1.0 - 2020-03-27

  • rename the cos-container suite of modules to cloud-config-container
  • refactor the onprem-in-a-box module to only manage the cloud-config configuration, and make it part of the cloud-config-container suite of modules
  • update the onprem-google-access-dns example to use the refactored onprem module
  • fix the external_addresses output in the compute-vm module
  • small tweaks and fixes to the cloud-config-container modules

1.0.0 - 2020-03-27

  • merge development branch with suite of new modules and end-to-end examples