Templates v0.6.0

This release contains major new features and breaking changes. If you are using an older version of templates, it is easier to migrate your configs to this new version and do a fresh deployment. Also note that tfengine v0.5.0 is needed to work with templates-v0.6.0 version.

If you see the following error while migrating:

Error: Provider configuration not present

To work with
module.project.module.project-factory.data.null_data_source.default_service_account
its original provider configuration at
provider["registry.terraform.io/-/null"] is required, but it has been removed.
This occurs when a provider configuration is removed while objects created by
that provider still exist in the state. Re-add the provider configuration to
destroy
module.project.module.project-factory.data.null_data_source.default_service_account,
after which you can remove the provider configuration again.

You can run this command to fix it

terraform state rm module.project.module.project-factory.data.null_data_source.default_service_account

Breaking changes

• migrated to Terraform 0.13 and dropped Terraform 0.12 support. (#687)
• upgraded to Project Factory module v10.0.0
• upgraded to Network module v3.0.0 (networks might need to be recreated)
• upgraded to VM module v6.0.0

New features (some contains breaking changes as well)

• support creating and managing Cloud Identity groups/memberships through Data Protection Suite
• support multi-env cicd (#645)
• support resource only deployment (#662)
• support fetching remote state and use across deployments (#683)
• support activate API identities (#672)
• support several new features in Healthcare API, e.g. FHIR Store stream configs, etc.
• support adding readers and writers to csr repo (#651)
• add default gitignore (#677)

Bug fixes

• fix healthcare template missing comma (#694)
• Fix billing account permission (#653)

Templates v0.5.0

• add more fields to be configurable in service accounts (#617)

• support custom SA in GKE (#616)

• [Breaking change] chore(deps): update terraform terraform-google-modules/kubernetes-engine/google to v12 (#610)

  Migration instruction: see https://github.com/terraform-google-modules/terraform-google-kubernetes-engine/blob/master/CHANGELOG.md#1200-2020-10-16

Binaries release version v0.4.0

Terraform Engine

• Add basic version constraint checking to the engine and policygen (#583)

Policy Generator

• Add basic version constraint checking to the engine and policygen (#583)

Templates v0.4.0

• [Breaking change] support cron cloud build jobs (#579)

  Migration instruction:
  Rename branch_regex to branch_name in cicd template, and restrict target branch to be exactly one branch.

• Update Terraform terraform-google-modules/vm/google to v5 (#594)

• support custom log filters (#609)

Policies v0.4.0

• add initial constraint for allow only hipaa aligned apis (#599)

Binaries release version v0.3.1

Binaries v0.3.1

Binaries release version v0.3.0

New features

• [Breaking change] policygen: support multiple state paths (#567)
  • To migrate from 0.2.0, change --state_path to --state_paths in the policygen command.
• policygen: support google_*_iam_bindings in policygen (#559)
• tfengine: new --add_licenses flag to control whether Google license is added to generated configs (#558)
• tfengine: new --templates flag to only deploy a subset of templates in a config (#545)

Templates v0.3.0

templates-v0.3.0

Templates v0.3.0

Policies v0.3.0

Compatible with

• CFT Scorecard version >= v0.3.4
• Forseti version >= v2.26.0 (To be released)

Binaries release version v0.2.0

Terraform Engine

• output_path is now available for all deployments. This can be used for the default value of state_path_prefix in engine templates.
• template data no longer merges slices.

Policy Generator

• include templates and utils in policygen generated files (#450)
• fix duplicated policy name for the same role (#463)