Releases: cloudposse-terraform-components/aws-rds
v1.535.9
🤖 Automatic Updates
Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#59)
## what This is an auto-generated PR that updates the README.md and docswhy
To have most recent changes of README.md and doc from origin templates
chore(deps): update terraform cloudposse/iam-role/aws to v0.23.0 @[renovate[bot]](https://github.com/apps/renovate) (#58)
This PR contains the following updates:| Package | Type | Update | Change |
|---|---|---|---|
| cloudposse/iam-role/aws (source) | module | minor | 0.22.0 → 0.23.0 |
Release Notes
cloudposse/terraform-aws-iam-role (cloudposse/iam-role/aws)
v0.23.0
fix: adding tags to the aws_iam_instance_profile object @rrusso1982 (#83)
what
This adds the tags used for other objects in the module to the aws_iam_instance_profile object.
why
To promote consistency in tagging between deployed aws objects for this module
references
🤖 Automatic Updates
Fix go version in tests @osterman (#90)
what
- Update go
1.24
why
- Error loading shared library libresolv.so.2 in Go 1.20
References
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
- If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
v1.535.8
🤖 Automatic Updates
Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#56)
## what This is an auto-generated PR that updates the README.md and docswhy
To have most recent changes of README.md and doc from origin templates
chore(deps): update terraform cloudposse/rds/aws to v1.2.0 @[renovate[bot]](https://github.com/apps/renovate) (#55)
This PR contains the following updates:| Package | Type | Update | Change |
|---|---|---|---|
| cloudposse/rds/aws (source) | module | minor | 1.1.3 → 1.2.0 |
Release Notes
cloudposse/terraform-aws-rds (cloudposse/rds/aws)
v1.2.0
feat(security-groups): add ingress prefix lists @draugelis-at-oag (#205)
what
- Allow using prefix lists for allowing ingress traffic using.
- New variable:
allowed_prefix_list_ids - New resource:
aws_security_group_rule.ingress_cidr_blocks
why
- Improve visibility, manageability and reusability when using prefix lists for repeating CIDR blocks instead of duplicating these CIDR blocks for each RDS module call.
references
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
- If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#54)
## what This is an auto-generated PR that updates the README.md and docswhy
To have most recent changes of README.md and doc from origin templates
chore(deps): update tflint plugin terraform-linters/tflint-ruleset-aws to v0.45.0 @[renovate[bot]](https://github.com/apps/renovate) (#53)
This PR contains the following updates:| Package | Type | Update | Change |
|---|---|---|---|
| terraform-linters/tflint-ruleset-aws | plugin | minor | 0.44.0 -> 0.45.0 |
Release Notes
terraform-linters/tflint-ruleset-aws (terraform-linters/tflint-ruleset-aws)
v0.45.0
What's Changed
Breaking Changes
Enhancements
- Update AWS provider/module and generated content by @github-actions[bot] in #981
- Update AWS provider/module and generated content by @github-actions[bot] in #990
- Update AWS provider/module and generated content by @github-actions[bot] in #999
- Update AWS provider/module and generated content by @github-actions[bot] in #1000
- Update AWS provider/module and generated content by @github-actions[bot] in #1004
- Update AWS provider/module and generated content by @github-actions[bot] in #1005
- Update AWS provider/module and generated content by @github-actions[bot] in #1011
- Update AWS provider/module and generated content by @github-actions[bot] in #1021
Bug Fixes
- dms_s3_endpoint: fix enum validations by @bendrucker in #991
resource_missing_tags: handle explicit refs to default provider by @bendrucker in #1003
Chores
- Bump the aws-sdk group with 7 updates by @dependabot[bot] in #980
- Bump the aws-sdk group with 7 updates by @dependabot[bot] in #982
- Bump github.com/hashicorp/aws-sdk-go-base/v2 from 2.0.0-beta.67 to 2.0.0-beta.68 by @dependabot[bot] in #983
- Bump the aws-sdk group with 7 updates by @dependabot[bot] in #987
- Bump golang.org/x/net from 0.46.0 to 0.47.0 by @dependabot[bot] in #988
- Replace Ruby SDK models with official Smithy repository by @bendrucker in #901
- generator: add tests and improve error handling by @bendrucker in #992
- Bump actions/setup-go from 6.0.0 to 6.1.0 by @dependabot[bot] in #996
- Bump actions/checkout from 5.0.0 to 6.0.0 by @dependabot[bot] in #995
- Bump the aws-sdk group with 7 updates by @dependabot[bot] in #997
- Bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 by @dependabot[bot] in #994
- Bump the aws-sdk group with 7 updates by @dependabot[bot] in #1001
- Bump actions/checkout from 6.0.0 to 6.0.1 by @dependabot[bot] in #1006
- Bump github.com/aws/smithy-go from 1.23.2 to 1.24.0 by @dependabot[bot] in #1009
- Bump the aws-sdk group with 7 updates by @dependabot[bot] in #1008
- Bump peter-evans/create-pull-request from 7.0.9 to 7.0.11 by @dependabot[bot] in [#1007](https://redirect.github.com/terraform-linters/tflint-ruleset-aws...
v1.535.7
🤖 Automatic Updates
Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#52)
## what This is an auto-generated PR that updates the README.md and docswhy
To have most recent changes of README.md and doc from origin templates
chore(deps): update terraform cloudposse/rds/aws to v1.1.3 @[renovate[bot]](https://github.com/apps/renovate) (#51)
This PR contains the following updates:| Package | Type | Update | Change |
|---|---|---|---|
| cloudposse/rds/aws (source) | module | patch | 1.1.2 -> 1.1.3 |
Release Notes
cloudposse/terraform-aws-rds (cloudposse/rds/aws)
v1.1.3
feat(rds): add database_insights_mode @cdobbyn (#195)
what
- Add
database_insights_mode. - Bump aws provider version requirement to
>= 5.92.0
why
- AWS is asking customers to migrate from the rds performance insights to the cloudwatch performance insights by November 2025. This variable will allow for migrating.
references
chore: add descriptions for example outputs to fix bats tests @RoseSecurity (#199)
what
- Resolve the following:
File: output-descriptions.bats
---------------------------------
private_subnet_cidrs is missing a description
public_subnet_cidrs is missing a description
vpc_cidr is missing a description
---------------------------------
And:
File: input-descriptions.bats
---------------------------------
availability_zones is missing a description
---------------------------------
[!NOTE]
It would be nice if the bats tests didn't run on theexamplesdirectory
🤖 Automatic Updates
Fix go version in tests @osterman (#196)
what
- Update go
1.24
why
- Error loading shared library libresolv.so.2 in Go 1.20
References
Replace Makefile with atmos.yaml @osterman (#193)
what
- Remove
Makefile - Add
atmos.yaml
why
- Replace
build-harnesswithatmosfor readme genration
References
- DEV-3229 Migrate from build-harness to atmos
Migrate new test account @osterman (#189)
what
- Update
.github/settings.yml - Update
.github/chatops.ymlfiles
why
- Re-apply
.github/settings.ymlfrom org level to getterratestenvironment - Migrate to new
testaccount
References
- DEV-388 Automate clean up of test account in new organization
- DEV-387 Update terratest to work on a shared workflow instead of a dispatch action
- DEV-386 Update terratest to use new testing account with GitHub OIDC
Update .github/settings.yml @osterman (#188)
what
- Update
.github/settings.yml - Drop
.github/auto-release.ymlfiles
why
- Re-apply
.github/settings.ymlfrom org level - Use organization level auto-release settings
references
- DEV-1242 Add protected tags with Repository Rulesets on GitHub
Update .github/settings.yml @osterman (#186)
what
- Update
.github/settings.yml - Drop
.github/auto-release.ymlfiles
why
- Re-apply
.github/settings.ymlfrom org level - Use organization level auto-release settings
references
- DEV-1242 Add protected tags with Repository Rulesets on GitHub
Update .github/settings.yml @osterman (#185)
what
- Update
.github/settings.yml - Drop
.github/auto-release.ymlfiles
why
- Re-apply
.github/settings.ymlfrom org level - Use organization level auto-release settings
references
- DEV-1242 Add protected tags with Repository Rulesets on GitHub
Update release workflow to allow pull-requests: write @osterman (#183)
what
- Update workflow (
.github/workflows/release.yaml) to have permission to comment on PR
why
- So we can support commenting on PRs with a link to the release
Update GitHub Workflows to use shared workflows from '.github' repo @osterman (#182)
what
- Update workflows (
.github/workflows) to use shared workflows from.githubrepo
why
- Reduce nested levels of reusable workflows
Update GitHub Workflows to Fix ReviewDog TFLint Action @osterman (#180)
what
- Update workflows (
.github/workflows) to addissue: writepermission needed by ReviewDogtflintaction
why
- The ReviewDog action will comment with line-level suggestions based on linting failures
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
- If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
chore(deps): update tflint plugin terraform-linters/tflint-ruleset-aws to v0.44.0 @[renovate[bot]](https://github.com/apps/renovate) (#50)
This PR contains the following updates:| Package | Type | Update | Change |
|---|---|---|---|
| terraform-linters/tflint-ruleset-aws | plugin | minor | 0.43.0 -> 0.44.0 |
Release Notes
terraform-linters/tflint-ruleset-aws (terraform-linters/tflint-ruleset-aws)
v0.44.0
What's Changed
Support for Cosign signatures has been removed from this release. The checksums.txt.keyless.sig and checksums.txt.pem will not be included in the release.
These files are not used in normal use cases, so in most cases this will not affect you, but if you are affected, you can use Artifact Attestations instead.
Breaking Changes
- Bump github.com/terraform-linters/tflint-plugin-sdk from 0.22.0 to 0.23.1 by @dependabot[bot] in #966
- Requires TFLint v0.46+
Enhancements
- Update AWS provider/module and generated content by @github-actions[bot] in #954
- Update AWS provider/module and generated content by @github-actions[bot] in #959
- Update Lambda runtime deprecation dates by @Copilot in #969
- Add missing ElastiCache node type: cache.r6gd.large by @Copilot in #971
- Fix typos in AWS RDS DB instance types by @Copilot in #972
- Add missing AWS S3 bucket naming restrictions by @Copilot in #976
Chores
- Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.251.2 to 1.253.0 in the aws-sdk group by @dependabot[bot] in #952
- Bump github.com/hashicorp/terraform-json from 0.26.0 to 0.27.2 by @dependabot[bot] in #953
- Bump the aws-sdk group with 7 updates by [@dependabot](https://redirect.githu...
v1.535.6
Allow users to set component names in remote state @j4zzcat (#41)
Allow users to set component names in remote state.- Defined input variables
eks_component_nameanddns_delegated_component_name. - Variables default to preserving the behaviour of the current version.
- Remote state uses these variables to pull in the state of the components.
- This update allows the codebase to adopt more standardized structure and naming practices.
Summary by CodeRabbit
- New Features
- Added configurable options for EKS and Delegated DNS component names, allowing users to customize these names via variables.
- Chores
- Updated infrastructure configuration to use variable-based component names instead of fixed values for improved flexibility.
🤖 Automatic Updates
Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#42)
## what This is an auto-generated PR that updates the README.md and docswhy
To have most recent changes of README.md and doc from origin templates
v1.535.5
Allows users to set the VPC component name @j4zzcat (#39)
Allow users to set the VPC component name: * Defined input variable `vpc_component_name` with default of '`vpc`' * Remote state uses this variable to pull in the state of the VPC * Default behavior stays the way it was before this changeSummary by CodeRabbit
- New Features
- Added a configurable option for the VPC component name, allowing users to customize it via a new variable.
- Chores
- Updated configuration to use the new variable for setting the VPC component name instead of a fixed value.
🤖 Automatic Updates
Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#40)
## what This is an auto-generated PR that updates the README.md and docswhy
To have most recent changes of README.md and doc from origin templates
v1.535.4
chore(deps): restrict aws provider version to < 6.0.0 @Benbentwo (#36)
This pull request includes a version constraint update for the AWS provider in the Terraform configuration file `src/versions.tf`. The change ensures compatibility with versions up to but not including 6.0.0.src/versions.tf: Updated the version constraint for theawsprovider to>= 4.9.0, < 6.0.0to ensure compatibility with future versions while avoiding potential breaking changes in version 6.0.0.
🤖 Automatic Updates
Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#37)
## what This is an auto-generated PR that updates the README.md and docswhy
To have most recent changes of README.md and doc from origin templates
v1.535.3
🤖 Automatic Updates
Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#34)
## what This is an auto-generated PR that updates the README.md and docswhy
To have most recent changes of README.md and doc from origin templates
chore(deps): update terraform cloudposse/rds/aws to v1.1.2 @[renovate[bot]](https://github.com/apps/renovate) (#4)
This PR contains the following updates:| Package | Type | Update | Change |
|---|---|---|---|
| cloudposse/rds/aws (source) | module | patch | 1.1.0 -> 1.1.2 |
Release Notes
cloudposse/terraform-aws-rds (cloudposse/rds/aws)
v1.1.2
🚀 Enhancements
fix: use try on length(var.subnets) @nitrocode (#179)
what
- fix: use try on length(var.subnets)
why
- If the length is used without a try, if subnets are not passed in, the module will fail
- The use case is when the
rdscomponent is deployed withenabled = false, it relies on thevpccomponent which may not be deployed yet. So theenabled: falseflag is used for both thevpcandrds, howeverrdswill still try to retrieve from the remote statevpcwhich will try to pass in a null list of subnets which causes this failure - A local plan against this branch results in the correct plan
references
N/A
🤖 Automatic Updates
Update GitHub workflows @osterman (#178)
what
- Update workflows (
.github/workflows/settings.yaml)
why
- Support new readme generation workflow.
- Generate banners
v1.1.1
fix: Default iops to null (#168) @kbolino (#176)
what
The default value of the iops variable is changed from 0 to null.
why
Resolves an issue with gp3 storage type when allocated storage is below 400 GB. This shouldn't cause problems in other cases, as the parameter is optional at the provider level.
references
🤖 Automatic Updates
Use GitHub Action Workflows from `cloudposse/.github` Repo @osterman (#175)
what
- Install latest GitHub Action Workflows
why
- Use shared workflows from
cldouposse/.githubrepository - Simplify management of workflows from centralized hub of configuration
Add GitHub Settings @osterman (#173)
what
- Install a repository config (
.github/settings.yaml)
why
- Programmatically manage GitHub repo settings
Update Scaffolding @osterman (#172)
what
- Reran
make readmeto rebuildREADME.mdfromREADME.yaml - Migrate to square badges
- Add scaffolding for repo settings and Mergify
why
- Upstream template changed in the
.githubrepo - Work better with repository rulesets
- Modernize look & feel
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
- If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
v1.535.2
🤖 Automatic Updates
Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#33)
## what This is an auto-generated PR that updates the README.md and docswhy
To have most recent changes of README.md and doc from origin templates
chore(deps): update terraform cloudposse/iam-role/aws to v0.22.0 @[renovate[bot]](https://github.com/apps/renovate) (#32)
This PR contains the following updates:| Package | Type | Update | Change |
|---|---|---|---|
| cloudposse/iam-role/aws (source) | module | minor | 0.21.0 -> 0.22.0 |
Release Notes
cloudposse/terraform-aws-iam-role (cloudposse/iam-role/aws)
v0.22.0
feat: Allow overriding the whole assume policy @pablotp (#86)
what
Adds the assume_role_policy_document variable, allowing users to provide a complete JSON assume role policy for the IAM role. When set, this overrides the principals, assume_role_conditions, and assume_role_actions variables.
why
This enables advanced use cases where a custom trust policy is needed, offering more flexibility than the module’s built-in policy generation. If not set, the module’s default behavior remains unchanged.
Example of an assume policy that couldn't be generated before
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Principal": {
"AWS": [
"arn:aws:iam::111122223333:role/app-prod-ci-agent",
"AROAEXAMPLEID1",
"arn:aws:iam::444455556666:role/ci-agent",
"arn:aws:iam::111122223333:role/app-prod-use1-mz-4-ci-agent"
]
},
"Action": "sts:AssumeRole"
},
{
"Effect": "Allow",
"Principal": {
"Federated": "arn:aws:iam::444455556666:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/EXAMPLEOIDC"
},
"Action": "sts:AssumeRoleWithWebIdentity",
"Condition": {
"StringEquals": {
"oidc.eks.us-east-1.amazonaws.com/id/EXAMPLEOIDC:sub": "system:serviceaccount:ci:ci-agent"
}
}
}
]
}With the previous implementation, you could not generate the second statement with a different action (sts:AssumeRoleWithWebIdentity) and a different condition for the Federated principal.
references
- Alternative to https://github.com/cloudposse/terraform-aws-iam-role/pull/85
- When this feature is released, the Atmos component will be updated: https://github.com/cloudposse-terraform-components/aws-iam-role/pull/29
Cleanup Go mod for tests @Benbentwo (#87)
This pull request updates the `go.mod` file in the `test/src` directory to modernize the Go toolchain and dependencies. The most important changes include upgrading the Go version, introducing a new toolchain, and updating or adding several dependencies to newer versions.Go toolchain updates:
- Upgraded Go version from
1.16to1.23.0and added thetoolchain go1.24.3specification for better compatibility and performance.
Dependency updates:
- Updated existing dependencies to newer versions, including
github.com/klauspost/compress(to v1.16.7) andgithub.com/stretchr/testify(to v1.10.0). - Added new dependencies, such as
github.com/hashicorp/go-cleanhttp(v0.5.2),github.com/hashicorp/go-safetemp(v1.0.0), andgithub.com/zclconf/go-cty(v1.15.0), to enhance functionality and support for modern features. - Removed outdated dependencies, such as
cloud.google.com/go/computeandgithub.com/aws/aws-sdk-go, which are no longer required.
🤖 Automatic Updates
Replace Makefile with atmos.yaml @osterman (#84)
what
- Remove
Makefile - Add
atmos.yaml
why
- Replace
build-harnesswithatmosfor readme genration
References
- DEV-3229 Migrate from build-harness to atmos
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
- If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
Enable merge queue @goruha (#31)
## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners fileswhy
- Support auto merge PRs
- Create merge queue
- Implement new CodeOwners policy
Enable merge queue @goruha (#30)
## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners fileswhy
- Support auto merge PRs
- Create merge queue
- Implement new CodeOwners policy
chore(deps): update tflint plugin terraform-linters/tflint-ruleset-aws to v0.40.0 @[renovate[bot]](https://github.com/apps/renovate) (#8)
This PR contains the following updates:| Package | Type | Update | Change |
|---|---|---|---|
| terraform-linters/tflint-ruleset-aws | plugin | minor | 0.23.1 -> 0.40.0 |
Release Notes
terraform-linters/tflint-ruleset-aws (terraform-linters/tflint-ruleset-aws)
v0.40.0
What's Changed
Enhancements
- feat: warn against data sources with ephemeral alternatives by @aristosvo in https://github.com/terraform-linters/tflint-ruleset-aws/pull/861
- rules: Update Lambda deprecated runtimes by @wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/886
- Update AWS provider/module and generated content by @github-actions in https://github.com/terraform-linters/tflint-ruleset-aws/pull/870
Chores
- Bump sigstore/cosign-installer from 3.8.1 to 3.8.2 by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/872
- Bump the aws-sdk group with 3 updates by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/873
- Bump actions/attest-build-provenance from 2.2.3 to 2.3.0 by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/874
- Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.212.0 to 1.213.0 in the aws-sdk group by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/875
- docs: Rename aws_write_only_attributes.md -> aws_write_only_arguments.md by @wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/876
- Bump actions/setup-go from 5.4.0 to 5.5.0 by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/877
- Bump golang.org/x/net from 0.39.0 to 0.40.0 by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/879
- Bump the aws-sdk group with 2 updates by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/878
- Bump github.com/zclconf/go-cty from 1.16.2 to 1.16.3 by @dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/883
- Bump the aws-sdk group with 3 updates by @dependabot in [https://github...
v1.535.1
🤖 Automatic Updates
Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#28)
## what This is an auto-generated PR that updates the README.md and docswhy
To have most recent changes of README.md and doc from origin templates
Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#27)
## what This is an auto-generated PR that updates the README.md and docswhy
To have most recent changes of README.md and doc from origin templates
Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#26)
## what This is an auto-generated PR that updates the README.md and docswhy
To have most recent changes of README.md and doc from origin templates
chore(deps): update terraform cloudposse/stack-config/yaml to v1.8.0 @[renovate[bot]](https://github.com/apps/renovate) (#7)
This PR contains the following updates:| Package | Type | Update | Change |
|---|---|---|---|
| cloudposse/stack-config/yaml (source) | module | minor | 1.5.0 -> 1.8.0 |
Release Notes
cloudposse/terraform-yaml-stack-config (cloudposse/stack-config/yaml)
v1.8.0: [remote-state] Improve backend compatibility
Among other things detailed below, this release enables users to fix deprecation warnings like:
│ Warning: Deprecated Parameters
│
│ with module.account_map.data.terraform_remote_state.data_source[0],
│ on .terraform/modules/account_map/modules/remote-state/data-source.tf line 88, in data "terraform_remote_state" "data_source":
│ 88: data "terraform_remote_state" "data_source" {
│
│ The following parameters have been deprecated. Replace them as follows:
│ * role_arn -> assume_role.role_arn
If you are receiving deprecation warnings from remote-state, they can now be resolved by updating your backend/remote_state_backend configuration to match the version of Terraform or Tofu you are using. For example, change
terraform:
backend:
s3:
bucket: my-tfstate-bucket
dynamodb_table: my-tfstate-lock-table
role_arn: arn:aws:iam::123456789012:role/my-tfstate-access-role
remote_state_backend:
s3:
role_arn: arn:aws:iam::123456789012:role/my-tfstate-access-read-only-roleto
terraform:
backend:
s3:
bucket: my-tfstate-bucket
dynamodb_table: my-tfstate-lock-table
assume_role:
role_arn: arn:aws:iam::123456789012:role/my-tfstate-access-role
remote_state_backend:
s3:
assume_role:
role_arn: arn:aws:iam::123456789012:role/my-tfstate-access-read-only-role🚀 Enhancements
[remote-state] Improve backend compatibility @Nuru (#105)
what
- Improve remote-state backend compatibility
Rather than trying to parse the backend configuration, as a general rule we now just pass it through to the data source. This provides future-proof compatibility with all backends supported by Terraform and OpenTofu.
why
- This prevents the need for updates like #99 to provide configuration for future S3 backends, while eliminating compatibility issues like #102.
- This also eliminates deprecation warnings caused by forcing configuration to look a certain way.
- Now, users can manage their own remote state configuration to match their toolset.
references
- Closes #102
v1.7.0: (not recommended)
feat: support for gcs backends @burnzy (#95)
what
Simple change to add support for GCS backends
why
Allows GCP users (users with gcs backends) to make use of this remote-state module for sharing data between components.
references
🚀 Enhancements
Support local backend @Nuru (#104)
what
- Support retrieving remote state from local backends
- NOTE: Using relative paths in local backends is tricky, because the path needs to resolve to the same directory from the source root module directory as from the client root module directory.
- Fix Terratests
- The
spacelifttest suite is broken, and we never previously required it to work, so it is now skipped
- The
- Update test suite to use
gov1.21 and update dependencies
why
🤖 Automatic Updates
Bump the go_modules group in /test/src with 5 updates @dependabot (#94)
Bumps the go_modules group in /test/src with 5 updates:| Package | From | To |
|---|---|---|
| github.com/hashicorp/go-getter | 1.7.1 |
1.7.5 |
| golang.org/x/crypto | 0.1.0 |
0.17.0 |
| golang.org/x/net | 0.8.0 |
0.10.0 |
| google.golang.org/grpc | 1.51.0 |
1.56.3 |
| google.golang.org/protobuf | 1.28.1 |
1.30.0 |
Updates github.com/hashicorp/go-getter from 1.7.1 to 1.7.5
Release notes
Sourced from github.com/hashicorp/go-getter's releases.
v1.7.5
What's Changed
- Prevent Git Config Alteration on Git Update by
@dduzgun-securityin hashicorp/go-getter#497New Contributors
@dduzgun-securitymade their first contribution in hashicorp/go-getter#497Full Changelog: https://github.com/hashicorp/go-getter/compare/v1.7.4...v1.7.5
v1.7.4
What's Changed
- Escape user-provided strings in
gitcommands hashicorp/go-getter#483- Fixed a bug in
.netrchandling if the file does not exist hashicorp/go-getter#433Full Changelog: https://github.com/hashicorp/go-getter/compare/v1.7.3...v1.7.4
v1.7.3
What's Changed
- SEC-090: Automated trusted workflow pinning (2023-04-21) by
@hashicorp-tsccrin hashicorp/go-getter#432- SEC-090: Automated trusted workflow pinning (2023-09-11) by
@hashicorp-tsccrin hashicorp/go-getter#454- SEC-090: Automated trusted workflow pinning (2023-09-18) by