Skip to content

Releases: GoogleCloudPlatform/solution-acceleration-toolkit

Templates templates-v0.2.0

06 Aug 18:07
e83a8ff
Compare
Choose a tag to compare

Config changes required by users

  • Field enable_bootstrap_gcs_backend has been renamed to enable_gcs_backend.
  • CICD block has moved from devops.hcl recipe to its own dedicated cicd.hcl recipe.
  • Field cicd.{validate,plan,apply}_trigger previously in recipe devops.hcl has been renamed to triggers.{validate,plan,apply} in recipe cicd.hcl .
  • Recipes no longer set the output_path. Users must explicitly set the output_path to be the directory they want to write the files for the recipes. For example, in 0.1 you could use the audit.hcl recipe and set output_path to ./live. This would create an audit directory in ./live. Now, you need to explicitly set output_path to ./live/audit, or simply ./audit.
  • Recipe cicd.hcl now has a new field managed_dirs which controls the root terraform modules deployed by the CICD as well as their order. Recipes now also typically only create one Terraform root module (not multiple like before). Thus, the user can control the module names being deployed.
  • deployments in project.hcl has been removed. Simply move all resources within this field into the top level resources field.
  • secret_locations is now required if secrets are set.
  • Org Policies: enforce SA key creation, upload and default IAM grants (#507)

Migration steps

  • Due to the change in directory structure, it is recommended to delete the existing generated configs and let the engine re-generate a new set of configs. If you made manual changes, they will need to be migrated manually to the new generated configs.
  • Due to the numerous changes in the directory structure, it is recommended to run the Terraform importer on every root module. Carefully review the terraform plan after each import.

Policies policies-v0.2.0

06 Aug 18:07
e83a8ff
Compare
Choose a tag to compare
  • Use newer version of IAM bindings policy. (#443)
  • Include templates and utils in policygen generated files (#450)
  • fix duplicated policy name for the same role (#463)
  • Pluralize policy targets. (#522)
    • works with CFT Scorecard version >= v0.3.4
    • works with Forseti version >= v2.26.0 (To be released)
  • move org policy to tfengine (#533)
  • Org Policies: enforce SA key creation, upload and default IAM grants (#507)

Templates v0.1.1

28 Jul 21:08
a1c1dba
Compare
Choose a tag to compare
templates-v0.1.1

Templates v0.1.1

Binaries v0.1.1

20 Jul 15:45
c9282a0
Compare
Choose a tag to compare

New feature:

  • Support fetching template dependencies on the fly: #233 (#427, #433)

Binaries v0.1.0

14 Jul 15:38
93935f0
Compare
Choose a tag to compare
Binaries release version v0.1.0

Templates v0.1.0

14 Jul 15:41
93935f0
Compare
Choose a tag to compare
templates-v0.1.0

Terraform Engine templates release version v0.1.0

Policies v0.1.0

14 Jul 15:41
93935f0
Compare
Choose a tag to compare
policies-v0.1.0

Policygen policies release version v0.1.0