Releases: cloudposse/terraform-aws-components
Releases · cloudposse/terraform-aws-components
v1.529.0
v1.528.0
Allow removal of cluster name from aurora ssm parameter @darrenl33 (#1162)
## what- ssm parameter is prefixed with the cluster name, adding an cluster_name_override to not set
- allows prefix to follow naming convention for other parameters by only using ssm_path_prefix
Update Changelog for `1.527.0` @github-actions (#1182)
Update Changelog for [`1.527.0`](https://github.com/cloudposse/terraform-aws-components/releases/tag/1.527.0)v1.527.0
update dd lambda to allow specifying region for configuration component @Benbentwo (#1163)
## what- allows datadog-lambda forwarder to specify a global region override for environment
why
- since we cannot do dynamic providers we should make
datadog_configuration
be regional
Example Stack configuration
import:
- orgs/acme/plat/dev/_defaults
- mixins/region/us-east-1
- catalog/datadog/configuration
- catalog/datadog/lambda-forwarder
components:
terraform:
datadog-configuration:
vars:
datadog_secrets_store_type: SSM
datadog_secrets_source_store_account_stage: auto
datadog_secrets_source_store_account_region: "us-west-2"
datadog-lambda-forwarder:
vars:
datadog_configuration_environment: "use1"
Update Changelog for `1.526.0` @github-actions (#1181)
Update Changelog for [`1.526.0`](https://github.com/cloudposse/terraform-aws-components/releases/tag/1.526.0)v1.526.0
feat(kms): updates with embedded policy creation - part2 @Gowiem (#1136)
## what- Updates the KMS module to support embedded policy creation
why
- This allows for easy wiring in of aws-team-role roles into the KMS policy, so we do something like "Admins in the dev account have access to use this Key"
references
- This is a continuation of PR #523 which I could not continue as I no longer have access to push to Cloud Posse except as a fork 😢
- @nitrocode did a great review with some solid suggestions in #523. I have completed my work from that review as part of this newer PR.
Update Changelog for `1.524.0` @github-actions (#1179)
Update Changelog for [`1.524.0`](https://github.com/cloudposse/terraform-aws-components/releases/tag/1.524.0)v1.525.0
- No changes
v1.524.0
Announce code freeze @goruha (#1178)
## what * Announce code freeze on readmewhy
- Readme is more informative than issue (while issue will be emailed)
references
Update Changelog for `1.523.1` @github-actions (#1176)
Update Changelog for [`1.523.1`](https://github.com/cloudposse/terraform-aws-components/releases/tag/1.523.1)v1.523.1
feat(elasticache-redis): add snapshot retention limit @nitrocode (#1171)
## what- add snapshot retention limit
why
- Resolves ElastiCache.1 (ElastiCache (Redis OSS) clusters should have automatic backups enabled) securityhub control by giving the ability to set this value to a number greater than 0
references
- Default is 0 https://github.com/cloudposse/terraform-aws-elasticache-redis/blob/9104d9a6a120ae9c90f59c5eb4ea711cc2d2c6bb/variables.tf#L223-L227
- Module received the feature 5 years ago so no need to update the module version cloudposse/terraform-aws-elasticache-redis#45
- Related PR #1170 which upgrades the module
🤖 Automatic Updates
Update Changelog for `1.523.0` @github-actions (#1174)
Update Changelog for [`1.523.0`](https://github.com/cloudposse/terraform-aws-components/releases/tag/1.523.0)v1.523.0
v1.522.0
🚀 Enhancements
feat(elasticache-redis): add engine input for valkey support @nitrocode (#1170)
## what- add engine input for valkey support
why
- Valkey is far cheaper than redis
Notes
- Design options
- Add a new key to
local.cluster_attributes
and add a variable to the component, default it toredis
, and pass as an argument to the module as-is- We could shy away from the pattern to using
engine = var.engine
in thelocal
.
- We could shy away from the pattern to using
- Allow
var.redis_clusters
to supplyengine
with a default forredis
and pass to module as-is - Same as option 2 but allow
local.cluster_attributes
to overwrite it- This might be best of both worlds however no other argument does this so it would be breaking the pattern
- Add a new key to
- Went with option 2 so the argument isn't a new requirement for everyone and it doesn't break consistency
references
- https://github.com/cloudposse/terraform-aws-elasticache-redis/releases/tag/v1.7.0
- https://aws.amazon.com/blogs/opensource/why-aws-supports-valkey/
- https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticache_replication_group#engine
- hashicorp/terraform-provider-aws#39641
- https://github.com/hashicorp/terraform-provider-aws/releases/tag/v5.73.0
- https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/Clusters.Create.html
- https://www.lastweekinaws.com/blog/aws-valkey-play-when-a-fork-becomes-a-price-cut/
v1.521.0
[eks/spacelift-worker-pool], [eks/spacelift-worker-pool-controller] Initial commit @Nuru (#1168)
## what- [eks/spacelift-worker-pool] Initial commit
- [eks/spacelift-worker-pool-controller] Initial commit
why
- Support deployment of the Kubernetes Operator for Spacelift Worker Pools to an EKS cluster
[dns-delegated] Fix README.md to remove suggestion of deploying regionally @Nuru (#1167)
## what- Remove suggestion from README that it can be deployed regionally
- Add details and references about using
dns-delegated
anddns-primary
why
- Old information was wrong and lacking in detail, causing confusion