cloud-foundation-fabric

In this release

• add support for VPC connector and ingress settings to cloud-function module
• add support for logging to net-cloudnat module

In this release

• incompatible change setting zone in the compute-vm module is now done via an optional zones variable, that accepts a list of zones
• fix optional IAM permissions in folder unit module

In this release

• new vpc-sc module
• add support for Shared VPC to the project module
• fix bug with compute-vm address reservations introduced in [2.4.1]

add support for Shielded VM to compute-vm

Better fix for external address reservation in compute-vm module.

In this release

• fix external IP assignment in compute-vm
• new top-level cloud-operations example folder
• Cloud Asset Inventory end to end example in cloud-operations

In this release:

• new 'Cloud Storage to Bigquery with Cloud Dataflow' end to end data solution
• incompatible change additive IAM bindings are now keyed by identity instead of role, and use a single iam_additive_bindings variable, refer to [#103] for details
• set delete_contents_on_destroy in the foundations examples audit dataset to allow destroying
• trap errors raised by the project module on destroy

In this release:

• make project creation optional in project module to allow managing a pre-existing project
• new cloud-endpoints module
• new cloud-function module

In this release:

• incompatible change routes in the net-vpc module now interpolate the VPC name to ensure uniqueness, upgrading from a previous version will drop and recreate routes
• the top-level docker-images folder has been moved inside modules/cloud-config-container/onprem
• dns_keys output added to the dns module
• add group-config variable, groups and group_self_links outputs to net-ilb module to allow creating ILBs for externally managed instances
• make the IAM bindings depend on the compute instance in the compute-vm module

In this release:

• new data-solutions section and cmek-via-centralized-kms example
• incompatible change static VPN routes now interpolate the VPN gateway name to enforce uniqueness, upgrading from a previous version will drop and recreate routes

In this release:

• new bigtable-instance module
• add support for IAM bindings to compute-vm module

In this release

• use all instead of specifying protocols in the admin firewall rule of the net-vpc-firewall module
• add support for encryption keys in gcs module
• set next_hop_instance_zone in net-vpc for next hop instance routes to avoid triggering recreation

In this release

• incompatible change the kms module has been refactored and will be incompatible with previous state
• incompatible change robot and default service accounts outputs in the project module have been refactored and are now exposed via a single service_account output (cf [#82])
• add support for PD CSI driver in GKE module
• refactor iam-service-accounts module outputs to be more resilient
• add option to use private GCR to cos-generic-metadata module

In this release

• add support for disk encryption to the compute-vm module
• new datafusion module
• new container-registry module
• new artifact-registry module

In this release:

• add output to gke-cluster exposing the cluster's CA certificate
• fix gke-cluster autoscaling options
• add support for Service Directory bound zones to the dns module
• new service-directory module
• new source-repository module

New in this release:

• incompatible change the bigquery module has been removed and replaced by the new bigquery-dataset module
• incompatible change subnets in the net-vpc modules are now passed as a list instead of map, and all related variables for IAM and flow logs use region/name instead of name keys; it's now possible to have the same subnet name in different regions
• replace all references to the removed resourceviews.googleapis.com API with container.googleapis.com
• fix advanced options in gke-nodepool module
• fix health checks in compute-mig and net-ilb modules
• new cos-generic-metadata module in the cloud-config-container suite
• new envoy-traffic-director module in the cloud-config-container suite
• new pubsub module

• new Secret Manager module
• fix issues in the bigquery module (this is the last release to contain this module, future versions will support single datasets and will be renamed to bigquery-dataset)

• fix DNS module internal zone lookup
• fix Cloud NAT module internal router name lookup
• re-enable and update outputs for the foundations environments example
• add peering route configuration for private clusters to GKE cluster module
• incompatible changes in the GKE nodepool module
  • rename node_config_workload_metadata_config variable to workload_metadata_config
  • new default for workload_metadata_config is GKE_METADATA_SERVER
• incompatible change in the compute-vm module
  • removed support for MIG and the group_manager variable
• add compute-mig and net-ilb modules
• incompatible change in net-vpc
  • a new name attribute has been added to the subnets variable, allowing to directly set subnet name, to update to the new module add an extra name = false attribute to each subnet

New organization module, organization policy support in folders and project modules.

• Add squid container to cloud-config module