ENHANCEMENTS:

• #210: feat: (IAC-1378) Add Support for K8s 1.29
• #212: feat: (IAC-1402) Update Dependencies to Resolve Security Warnings

DOCUMENTATION:

• #211: docs: (IAC-1413) Update Copyright Information

Major Version Update

v6.0.0 of the viya4-iac-gcp project is a major version update. See details below in breaking changes.

BREAKING CHANGES

• #206: feat!: (IAC-1234) Update binaries & Terraform providers/modules

  • With the update to version 30.0.0 of the terraform-google-kubernetes-engine module, there has been a change to the account permissions of the default cluster service account that gets created during infrastructure provisioning.

  Additional notes from the terraform-google-kubernetes-engine module:

  The service account will now be created with Kubernetes Engine Default Node Service Account role instead of Kubernetes Engine Node Service Account roles which is deprecated now. This is the Google recommended least privileged role to be used for the service account attached to the GKE Nodes.

  This is a backwards incompatible release, meaning once you initially provisioned your infrastructure with this 6.0.0 release or update existing infrastructure using this viya4-iac-gcp release, any future modifications to your infrastructure must be made with the viya4-iac-gcp:6.0.0 release.

ENHANCEMENTS:

• #204: feat: (IAC-1348) Update the default Postgres server version to 15

DOCUMENTATION:

• #208: docs: (IAC-1234) Update cluster_autoscaling_profile docs to list all options

CHORE:

• #207: chore: (IAC-1339) Disable Blank GitHub Issues & Add Feature Request Template

Release Notes

Dependency Updates

As part of PR #203, the required binaries and Terraform providers/modules have been updated to resolve some security notices that were picked up by our scanning process. The Dockerfile has been updated so a newly built docker image from this release will include these updates automatically. If you are running this project without the use of the Docker image, it is advised to update your local binaries and Terraform providers/modules, following the steps below:

• See this section in the README a list of binaries you will need to install on your host. The versions listed are what we recommend and tested with, however the versions we listed back in the 5.0.0 release in this same document will still be compatible.
• For the Terraform providers and modules you will need to run terraform init --upgrade before running any terraform commands with the new code. Refer to the init documentation from HashiCorp.

Migration to viya4-iac-gcp:5.8.0

As part of PR #203, there has been updates to the Terraform modules and providers that introduced new variables around infrastructure deletion:

• hashicorp/google 5.12.0
  • Which adds the ability to set the deletion_policy for the google_service_networking_connection resource, we set this to ABANDON as required when used in conjunction with CloudSQL instances
• terraform-google-modules/kubernetes-engine/google//modules/private-cluster 29.0.0
  • Introduces a new variable deletion_protection which is set to true by default, we override this to false

NOTE:

• If you are coming from a previous viya4-iac-gcp:5.x.x release and want to update your infrastructure, running terraform apply should work just as before and will add these new values.
• If you are planning to delete infrastructure that was created with a previous viya4-iac-gcp:5.x.x release, it is advised to use the version that you created the infrastructure with to delete it, otherwise you will need to run terraform apply first to pull in the new variables around infrastructure deletion before running terraform destroy.

ENHANCEMENTS:

• #203: feat: (IAC-1312) Update Dependencies to Resolve Security Warnings

ENHANCEMENTS:

• #201: feat: (IAC-1263) Add Support for K8s 1.28

DOCUMENTATION:

• #199: docs: (IAC-1085) Update SAS Documentation URLs

CHORE:

• #197: chore: (IAC-1195) Update Branch Selector for GitHub Workflow
• #198: chore: (IAC-1230) Resolve Linting Warning

ENHANCEMENTS:

• #194: feat: (IAC-1022) Increase the Default IP Range for database_subnet_cidr

ENHANCEMENTS:

• #192: feat: (IAC-1125) Add Support for K8s 1.27
• #191: feat: (IAC-1097) Update Google Cloud CLI to 440.0.0

BUG FIXES

• #189: fix: (IAC-1091) Prevent Jump VM cloud-init from overwriting existing file permissions/ownership

ENHANCEMENTS:

• #187: feat: (IAC-1063) Optimize Dockerfile

DOCUMENTATION:

• #185: docs: (IAC-1050) Document that Permissions to GAR are also granted

ENHANCEMENTS:

• #183: feat: (IAC-1065) Add Hadolint, ShellCheck and TFLint Checks via GitHub Actions

DOCUMENTATION:

• #181: docs: (IAC-1006) GKE - Update IAC CDS Postgres CONFIG VARS documentation

ENHANCEMENTS:

• #178: feat: (IAC-895) Add Support to Toggle the Google Cloud Managed Service for Prometheus
• #180: feat: (IAC-1037) Update Dockerfile to resolve security issues