terraform-google-kubernetes-engine v9.1.0

Features

• Add boot disk kms key variable (#516) (9195f0f)
• Expose gce_pd_csi_driver for Safer Cluster modules #503 (#514) (d4e7dc6)

Bug Fixes

• Update auth module to handle empty clusters (#521) (dd2afca)

terraform-google-kubernetes-engine v9.0.0

⚠ BREAKING CHANGES

• Beta clusters have changed the default to use the GKE_METADATA_SERVER, to use the old option set node_metadata = "SECURE".
• Minimum provider change increased to 3.19.
• The ACM module has been refactored and resources will be recreated. This will show up in Terraform plans but is a safe no-op for Kubernetes.
• Minimum Google provider version increased to 3.16.
• For the safer cluster module, you must now specify release_channel instead of kubernetes_version.

Features

• [safer-cluster] Replace "kubernetes_version" with "release_channel" (#487) (5791ac1)
• Add an auth submodule outputting a kubeconfig (#469) (a5ace36)
• Add config sync module (#493) (c090d5b)
• Add fully configurable resource usage export block in GA and upgrade GCP provider (#491) (54eca6b)
• Add GCE PD CSI Driver beta support (#497) (d96afa7)
• Add support for setting firewall rules (#470) (16bdd6e)
• Enable GKE_METADATA_SERVER as default node_metadata for beta-clusters (#490) (#512) (8e14762)
• Expose the grant_registry_access variable in safer-cluster (#509) (0961613)

Bug Fixes

• Correct identity namespace output for beta clusters (#500) (c783659), closes #489

terraform-google-kubernetes-engine v8.1.0

Features

• Add peering_name output for private clusters and increase minimum provider version to 3.14 (#484) (ff6b5cc)
• Add support for enabling Nodelocal dns cache (var.dns_cache) (#477) (de8e1d5)

Bug Fixes

• Add stackdriver.resourceMetadata.writer role for SA to prevent monitoring errors (#485) (07de70b)

terraform-google-kubernetes-engine v8.0.0

⚠ BREAKING CHANGES

• Beta clusters now have Workload Identity enabled by default. To disable Workload Identity, set identity_namespace = null
• Beta clusters now have shielded nodes enabled by default. To disable, set enable_shielded_nodes = false.

Features

• Add support for setting var.istio_auth (#462) (fff4272)
• Added support for specifying autoscaling_profile in var.cluster_autoscaling (#456) (1ac2c5c)
• Enable WI and shielded nodes by default in beta clusters (#441) (704962b)
• Rollout default_max_pods_per_node setting to GA modules (#439) (36ddbbb)

Bug Fixes

• Correct bug in passing var.zones for safer cluster modules (#474) (7660b51)
• Fix CI for Workload Identity (#460) (025f8b7)
• Remove unused variable service_account in safer-cluster to avoid confusion (#448) (a30e7cd)
• update and pin kubernetes provider to >= 1.11.1 (#453) (418d9b3)
• Use gcloud module for ACM submodule, will force reinstall of ACM (#442) (9737190), closes #454

terraform-google-kubernetes-engine v7.3.0

Features

• Add enable_kubernetes_alpha flag for beta clusters (#437) (f6f7370)

Bug Fixes

• Rolled back to basic path routing for networks (#434) (8571f61)

terraform-google-kubernetes-engine v7.2.0

Features

• Add master_ipv4_cidr_block output for private clusters (#427) (2cc64c8)
• Allow workload identity submodule to update existing k8s SA. (#430) (51fba38)

Bug Fixes

• Pin Kubernetes provider to 1.10 (#432) (21d09ae)

terraform-google-kubernetes-engine v7.1.0

Features

• Add new Workload identity submodule (#417) (b4bcfb9)

Bug Fixes

• Change for_each splat syntax on update variants, closes #414 (#415) (a20425f)
• If release_channel is active, set min_master_version to null (#412) (4c7b399)
• Prevents "Invalid index" when creating private cluster (#422) (cc53d1c), closes #419
• Stop warning about deprecated external references from destroy provisioners. (#420) (c8fde26)

terraform-google-kubernetes-engine v7.0.0

⚠ BREAKING CHANGES

• Minimum beta provider version increased to 3.1 to allow surge upgrades.
• beta clusters now have surge upgrades turned on by default. This behavior can be tuned using the max_surge and max_unavailable inputs.
• moves node pool state location to allow using for_each on them

Features

• Add a service activation module (#146) (658ea51)
• Enable Surge Upgrades by specifying max_surge and max_unavailable (Beta) (#394) (e4abe78)
• move to using for_each for node pools (#257) (7d0c9aa)
• Tweak formatting in readme.txt (#410) (c656a5c)

Bug Fixes

• change pod_security_policy_config type to list(object()) (#408) (a99352a)

• Removed dependency on jq from wait-for-cluster.sh script (#402) (d2a5e28)

• Prepare upgrade guide for 7.0 (#407) (156952d), closes #407

v6.2.0

Release v6.2.0

v6.1.1

Update CHANGELOG.md