All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- Removed S3 Multi-Region Access Point workspaces from IRSA run triggers in the Helm chart. IRSA workspaces will now run via variable changes instead.
- Added Terraform Cloud external secret support for S3 Multi-Region Access Point (MRAP) outputs.
- Updated helm and helm-docs versions so the unittest plugin would work again.
- Updated default Lambda module version to 8.0.1
- Remove
ownervariable from Lambda workspaces (this is no longer used by the module and produces an error whenever it's used).
- Update
gluemodule to latest version (to include a bugfix)
- Added support for
gluemodule
- Added support for
backstage.componentbeing set onWorkspaceresources
- Added
kinesis-firehoseto supported resources list for terraform cloud helm chart
- Added support for
kinesis-firehoseworkspaces
- Add environment variable to set AWS default tag
TerraformCloudWorkspace
- INFRA-36982: Support for S3 multi-region access point and replication rules modules.
- Bump
opensearchmodule to1.6.0
- Bump
redismodule to1.3.0 - Bump
memcachedmodule to1.0.3
- Added dynamodb deletion_protection_enabled defaults
- Bump
dynamodbmodule version to1.3.0
- Bump
redismodule version to1.2.1
- Bump
redismodule version to1.2.0
- Remove v1 operator support (only v2 is supported now)
- Fix handling of
workspaceNameOverridewhenoperatorVersion: "migrate"used
- Fix handling of
workspaceNameOverride- was being unset prior to rendering of Module
- Update v2 workspace to configure
spec.teamAccesss
- Update v2 workspace to configure
spec.tags
- Remove v2 workspace custom-extension annotations (will be handled by
spec.tagsandspec.teamAccess)
- Added IRSA tests for workspace-v2 (copied and adjust v1 version)
- Fix call to
irsaRunTriggersfor v2 workspace (was rendering v1 version)
- Update logic around default destroy mode. Same function is now used to handle the custom
app.mintel.com/terraform-allow-destroyand the v2spec.allowDestroyPlan
- Add global default for setting Workspace
workspaceAllowDestroy - Add global default for setting Workspace
applyMethod
- Add support for
app.terraform.io/v1alpha2API version
- Update v2 configuration to use same defaults for allowing workspace-destroy in prod/logs account. Also allow overrides at resource-config layer.
- Added support for terraform-cloud-operator v2. v1 is still the default and would result in a noop for appliations consuming this chart.
- Bumped all module versions to the current latest
- Bumped s3 module version to
2.0.5
- Bumped rds related module versions to
1.3.0 - Bumped default terraform version to
1.2.9
- Added support for
datasyncworkspaces
- SQS support for subscribing to SNS topics in another region.
- Extra Job service accounts now get added to the list of accounts that are granted access to AWS resources if required.
- Bump IRSA module version. Fixes an issue with duplicate SIDs being created for S3 buckets with mixed sources.
- Added tfcloud-auto-approver Lambda notifications to IRSA workspaces
- Update
componentreporting label to default to application name (global.name)
- Added support for new reporting labels
applicationandcomponent
- Upgrade external-secrets api version from v1alpha1 to v1beta1.
- Bump ssh key module (fixes key generation script)
- Bump rds module version. Fixes an issue when using gp3 as the storage type (hashicorp/terraform-provider-aws#28271)
- Remove
helm.sh/chartannotation from all remaining manifests.
- Support for creating Lambda functions
- Bump api-gateway module to 0.3.2
- Added
api-gateway-httpmodule
- Alphabetized resources in values.yaml
- No-op release to trigger chart releaser action which didn't run for v0.40.0 release
- Add
cms-backupmodule
- Update
s3module tov1.4.1for acl fix with additional dependency
- Update
s3module tov1.4.0for acl fix
- Update
sqsmodule tov1.1.0
- Add ability set MintelEventBus tags for SQS and SNS
- Add ability to set custom tags for aws resources
- Update
opensearchmodule tov1.2.1
- Add snapshot tests
- Upgrade to helm-unittest v0.3.0; fix problems it found
- Bump s3 module version to get new fixes
- Bump app-iam module version to include refactor of resource filtering
- Add extraIAM resource type to allow additional IAM users and roles
- Bump app-iam module version to include bugfix
- Update
opensearchmodule tov1.2.0
- Refactor use of the
defaulttemplate function (sometimes usecoalesce) - Remove pointless
printandprintffunction calls - Make concatenated lists sorted and unique
- Make spacing inside
{{ }}consistent
- Bump version of S3 Terraform module to allow option to create cloudfront distribution
- Now supports creating an ExternalSecret for the Secrets Manager secret the app-iam module can create (see here)
- Bump version of OpenSearch Terraform module to fix AWS provider version constraints
- Bump version of S3 Terraform module to allow sftp access
- Bump versions of mariadb, postgresql, redis and staticWebsite Terraform modules
- Added option to configure ArgoCD
sync-waveper resource-type
- Bump version of sshKeyPairSecret module
- Actually enabling eks_namespace var to be passed to sshKeyPairSecret module
- Bump version of sshKeyPairSecret module
- Bumped ssh-keypair-secret module version
- Added sshKeyPairSecret module
- Fixed readme
- Support for activeMQ, auroraMySql and auroraPostgresql via AWS and Terraform module
- Update RDS Terraform module version to fix AWS provider version constraint problem
- Bump S3 module to v1.1.2
- Bump IAM role module to v2.0.0
- Bump default Opensearch module version to add scheduled snapshot functionality
- Bump default S3 module version to setup access logging by default
- Bump default memcached module version for bugfix in picking up private app subnets
- Give precedence to defaultVars over environment defaults when setting module variables
- Ability to use data to adjust secret key values in external secret
- Point irsa module version default to 1.0.1 after bugfix for destroy
- Correct multi_az prod default for rds to true
- Bump RDS version to v1.0.1
- Bump all terraform cloud module versions to v1.0.0
- Bump rds and opensearch modules to allow using a var for snapshot bucket versioning
- Consolidate default workspace tags to avoid hitting limits
- Bump default s3, rds and opensearch module versions to avoid S3 mfa_delete bug
- Annotations to be used for terraform cloud operator extension with helpers and overrides
- Initial support for step-functions-eks module
- Ability to make external secret creation optional
- Add direct app.kubernetes.io/name label for workspaces to avoid overriding by wrappers
- Bump s3, mariadb, postgesql and opensearch default versions for versioning bugfix
- Add shortened name label to deal with char limit
- Bump default s3, rds and opensearch versions to deliver new S3 versioning fix
- Bumped version of opensearch module to fixed version
- Bumped version of opensearch module
- Fix precedence of dicts when considering env defaults
- Bump default app-iam module
- Add ability to override workspace name
- Setting environment based defaults for resources via helpers
- refactor helpers to have
mintel_common.terraform_cloudprefix rather than justmintel_common. - bump sqs module version
- Apply kebabcase to instance name when generating workspace name
- Bump default app-iam module version to fix issue with consume_sqs_queues var
- Add ability to create irsa workspace explicitly
- Bump default terraform module versions for app-iam, redis and opensearch
- Bump default app-iam module version
- Use helper for instance name to generate runTriggers
- Syntax error with name helper
- Use helper to generate instance name across secret and workspace
- Update irsa required helper to use string
- Auto add mntl- prefix to S3 bucket name if not added explicitly
- Shorten IRSA workspace names
- Remove hash trigger for IRSA as not needed with run triggers
- Add sync wave for Output secret
- Issue with IRSA workspace adding in null var
- Refactor workspace logic to use more helpers
- Add option to tf cloud config for it to control IRSA and allow blue-green deploy with IAM role having app-iam prefix
- Add ability to create IRSA using app-iam module when provisioning required resources
- Add ability to override terraform version at the module level
- Fixed issue where could not override certain vars
- Bumped default referenced modules for redis and S3
- Added app.mintel.com/altManifestFileSuffix to workspace spec to be used in manifest generation
- Changed workspace-output-secret secret store to aws-secrets-manager-local
- Changed workspace-output-secret name to match what is currently used in standard app stack i.e app_name-resource_type
- Set agentPoolId as a value to be pulled from cluster env jsonnet
- First full release of the Terraform-cloud helm chart