terraform-aws-alternat

What's Changed

This change removes the Lambda VPC endpoint from Alternat. This endpoint is unnecessary for Alternat to function. If you need a Lambda endpoint for some other reason, you should now manage that in your configuration directly.

Contributors

• Thanks to @nitrocode for a readme fix!
• Thanks to @BrainsDevOps for flagging the unnecessary lambda endpoint!

Full Changelog: https://github.com/chime/terraform-aws-alternat/compare/v0.6.0...v0.7.0

What's Changed

Alternat is now available on the Terraform registry! https://registry.terraform.io/modules/chime/alternat/aws/latest

• Move from @1debit to @chime by @inga in https://github.com/chime/terraform-aws-alternat/pull/94
• Adds integration tests for alternat module by @bwhaley in https://github.com/chime/terraform-aws-alternat/pull/93
• Fixes workflow status badge by @bwhaley in https://github.com/chime/terraform-aws-alternat/pull/97
• Updates repo structure to conform to the Terraform Registry requirements by @bwhaley in https://github.com/chime/terraform-aws-alternat/pull/98

New Contributors

• @inga made their first contribution in https://github.com/chime/terraform-aws-alternat/pull/94

Full Changelog: https://github.com/chime/terraform-aws-alternat/compare/v0.5.0...v0.6.0

What's Changed

• Upgrade lambda runtime to python3.12 by @armona in https://github.com/1debit/alternat/pull/92

Note: terraform-aws-provider >= v5.32.0 is required when using this release with the Python Lambda runtime.

Thanks to @armona for this contribution!

Full Changelog: https://github.com/1debit/alternat/compare/v0.4.10...v0.5.0

What's Changed

• Make connectivity check more robust by @kristian-lesko in https://github.com/1debit/alternat/pull/91
• Allow overriding NAT Gateway for fallback by @kristian-lesko in https://github.com/1debit/alternat/pull/89

Big thanks to @kristian-lesko for these contributions!

Full Changelog: https://github.com/1debit/alternat/compare/v0.4.9...v0.4.10

What's Changed

• New option to disable IPv6 in the connectivity test by @bwhaley in https://github.com/1debit/alternat/pull/88

What's Changed

• Adds a new option to include a pre-install user data script. The initial use case is to allow setting IPv4 precedence for better boot performance on dual stack networks.

Contributors

• Thanks to @nickpetrovic for their first contribution in https://github.com/1debit/alternat/pull/86

Full Changelog: https://github.com/1debit/alternat/compare/v0.4.7...v0.4.8

What's Changed

• Add output for autoscaling group names for monitoring by @ascandella in https://github.com/1debit/alternat/pull/85
• Declare versions for provider by @trpalmer in https://github.com/1debit/alternat/pull/83

Contributors

• Thanks to @trpalmer for their first contribution in https://github.com/1debit/alternat/pull/83!
• Thanks to @ascandella for their second contribution in https://github.com/1debit/alternat/pull/85

Full Changelog: https://github.com/1debit/alternat/compare/v0.4.6...v0.4.7

What's Changed

• Add option to specify CIDR blocks to allow for ingress by @pv93 in https://github.com/1debit/alternat/pull/82

Thanks to @pv93 for this contribution!

What's Changed

• Remove deprecated vpc argument to aws_eip by @ascandella in https://github.com/1debit/alternat/pull/80

New Contributors

• Thanks to @ascandella for this contribution. 🎉

Full Changelog: https://github.com/1debit/alternat/compare/v0.4.4...v0.4.5

What's Changed

• Add support for lambda layers by @asafadar in https://github.com/1debit/alternat/pull/79

Many thanks to @asafadar for this enhancement!

Full Changelog: https://github.com/1debit/alternat/compare/v0.4.3...v0.4.4

Exposes Lambda function architectures.

What's Changed

• Expose Lambda function architectures by @bwhaley in https://github.com/1debit/alternat/pull/71

The Terraform module now accepts var.architectures to configure whether to use arm64 or x86_64.

Thanks to @n-tucker for the contribution.

Full Changelog: https://github.com/1debit/alternat/compare/v0.4.2...v0.4.3

Adds a new input, nat_instance_user_data_post_install, that can contain a script to run on NAT instances at boot time after alternat is configured. Many thanks to @eddycek for this contribution!

What's Changed

• Add support for installing third party software on EC2 by @eddycek in https://github.com/1debit/alternat/pull/63

New Contributors

• @eddycek made their first contribution in https://github.com/1debit/alternat/pull/63

Full Changelog: https://github.com/1debit/alternat/compare/v0.4.1...v0.4.2

• Adds a new output, nat_instance_security_group_id
• Adds a new variable, nat_instance_block_devices, to customize the block devices on alternat instances.

Many thanks to @Halama and @irasnyd for these contributions!

What's Changed

• docs: fix typos by @oponomarov-tu in https://github.com/1debit/alternat/pull/54
• Clarify alterNAT value prop in the README by @bwhaley in https://github.com/1debit/alternat/pull/58
• Adds optional EBS volume customization by @bwhaley in https://github.com/1debit/alternat/pull/57
• Output NAT Instance Security Group by @irasnyd in https://github.com/1debit/alternat/pull/61

New Contributors

• @irasnyd made their first contribution in https://github.com/1debit/alternat/pull/61

Full Changelog: https://github.com/1debit/alternat/compare/v0.4.0...v0.4.1

This update removes the dependency on the python requests library from the replace-route function and replaces it with the native urllib. alterNAT can now be deployed using AWS Lambda Python runtime which by default has all the required third-party dependencies preinstalled (boto3).

The alternat_image_* inputs are now optional. Nothing has changed for the Docker image runtime which remains the default deployment scenario.

Many thanks to @jgr-trackunit and @oponomarov-tu for this contribution!

Moves some noisy log messages to debug level.

Allows the user to optionally disable the creation and management of NAT Gateways by alterNAT by setting create_nat_gateways=false. When set, The user can manage NAT gateways separately - within the vpc module, for example - and alterNAT will work with those rather than provision its own.

When using create_nat_gateways=false, you must allow alterNAT to manage the 0.0.0.0/0 route. That is, do not use an aws_route resource for the NAT Gateway with 0.0.0.0/0 as a destination. alterNAT expects to be able to manage the route on its own using the NAT instance userdata script and the replace-route Lambda function. You can either remove the aws_route resource from your configuration or set:

  lifecycle {
    ignore_changes = all
  }

on the resource to ensure that Terraform ignores it.

Adds support for VPCs with multiple CIDR block associations.

Adds support for native lambda deployments. You can now pass lambda_package_type = "Image (the default) to use a container image, or lambda_package_type = Zip to use a zip file.

Thanks to @oponomarov-tu for this contribution!

Replaces the template_cloudinit_config resource introduced in v0.2.0 with cloudinit_config to avoid a dependency on the deprecated template provider.

This update includes backwards incompatible changes. Follow the migration guide to update without downtime for existing NAT instances.

This update includes a few important changes:

• Modifies the userdata and Lambda function inputs for compatibility with other IaC tooling such as CDK that cannot use Terraform template style.
• Allows multiple sets of private subnets/route tables. Previously it was only possible to include one set of private route tables and subnets within a VPC.
• Exposes the Auto Scaling Group Lifecycle hook heartbeat timeout value.
• Eliminates the dependency on a particular naming convention for private subnets. Subnets are now passed explicitly, so we don't need to discover them by name.