v2.3.1-alpha

What's Changed

• Added additional outputs by @jrsdav in #81

Full Changelog: v2.3.0-alpha...v2.3.1-alpha

v2.3.0-alpha

Overview

This release has many improvements to the module and has no breaking changes. Most notably:

• Enhancements to the managed-cloud submodule used for creating StreamNative's vendor access in a customer's AWS account. In particular, we now allow for the option to remove the iam:CreatePolicy capabilities to close any potential privilege escalation paths.
• Configuration support for Istio ingress-gateway resources to create an Internal or Internet-facing NLB
• Support for AWS China
• Enabled support for providing custom userdata.sh and AMIs for the EKS node groups
• Updates to default add-ons

What's Changed

• [module/vpc] Allow for finer grained VPC configuration by @jrsdav in #65
• [module/manaded-cloud] Improved security @jrsdav in #72 #79
• [istio] Configure Internal or Internet-Facing NLB by @jdmaguire in #71
• [aws-cn] Support AWS China by @maxsxu in #70, #77
• [eks/node-groups] Enable passing of custom AMI and userdata.sh for Node Groups by @jrsdav in #74
• Update addons to latest versions by @jrsdav in #80

New Contributors

• @jdmaguire made their first contribution in #73

Full Changelog: v2.2.4-alpha...v2.3.0-alpha

v2.2.4-alpha

What's Changed

• Improved tiered-storage and vault submodules by @jrsdav in #61

Full Changelog: v2.2.3-alpha...v2.2.4-alpha

v2.2.3-alpha

What's Changed

• [CI] Add doc bot by @yaalsn in #54
• Fix missing parameters in root-example by @maxsxu in #58
• Fixes tiered-storage-resources module when using latest AWS provider by @jrsdav in #60

New Contributors

• @yaalsn made their first contribution in #54
• @maxsxu made their first contribution in #58

Full Changelog: v2.2.2-alpha...v2.2.3-alpha

v2.2.2-alpha

What's Changed

• Add support for external_id/source_id and policy updates by @addisonj in #55

Full Changelog: v2.2.1-alpha...v2.2.2-alpha

v2.2.1-alpha

Patch

• fix using wrong subnet for count by @addisonj in #52

Full Changelog: v2.2.0-alpha...v2.2.1-alpha

v2.2.0-alpha

What's Changed

This release updates the IAM policies in the managed-cloud sub-module used for StreamNative's vendor access.

• Add the ability for bootstrap to manage r53 zones by @addisonj in #50
• Add missing permission to management policy needed by control plane by @jrsdav in #47
• Removed kubeconfig file by @jrsdav in #51

Removed inputs

The variable inputs kubeconfig_output_path and write_kubeconfig have been removed from the module. The module will no longer create a .kubeconfig file for the EKS cluster that gets created. To access the cluster, use the awscli update-kubeconfig sub-command.

Full Changelog: v2.1.0-alpha...v2.2.0-alpha

v2.1.0-alpha

Improvements/Bug Fixes

Improvement

• Shortened the names of the IAM Roles for various cluster add-on services. This addresses an issue where occasionally a add-on would fail to install because the resource name bumped into character length limits.

For existing resources managed by this module, this change will result in a delete/re-create of IAM Roles used by installed add-ons. There will be a brief disruption of add-on functionality (1-2 minutes) while the change is reconciled on the cluster, but it should not impact a running Pulsar cluster.

Bug Fix

• The values being passed to the cert-manager helm chart were invalid, resulting in permission issues due to a misconfigured KSA.

Full Changelog: v2.0.3-alpha...v2.1.0-alpha

v2.0.3-alpha

Bug fixes

• Fixed a conditional issue in the managed-cloud submodule for IAM policies that use the iam:CreateServiceLinkedRole action
• Fixed a formatting issue with node taints when var.enable_func_pool is set to true

v2.0.2-alpha

managed-cloud

A small update for the managed-cloud submodule, primarily focused on IAM resources for StreamNative's Vendor access into Cloud Managed environments.

Other than IAM policy changes, some other notable items:

• Added a CloudFormation template which mirrors managed-cloud functionality
• Removed use of template_file in the managed-cloud module in favor of the native templatefile() function