Changelog

All notable changes to this project will be documented in this file.

Unreleased

incompatible change routes in the net-vpc module now interpolate the VPC name to ensure uniqueness, upgrading from a previous version will drop and recreate routes
the top-level docker-images folder has been moved inside modules/cloud-config-container/onprem
dns_keys output added to the dns module

new data-solutions section and cmek-via-centralized-kms example
incompatible change static VPN routes now interpolate the VPN gateway name to enforce uniqueness, upgrading from a previous version will drop and recreate routes

use all instead of specifying protocols in the admin firewall rule of the net-vpc-firewall module
add support for encryption keys in gcs module
set next_hop_instance_zone in net-vpc for next hop instance routes to avoid triggering recreation

incompatible change the kms module has been refactored and will be incompatible with previous state
incompatible change robot and default service accounts outputs in the project module have been refactored and are now exposed via a single service_account output (cf #82)
add support for PD CSI driver in GKE module
refactor iam-service-accounts module outputs to be more resilient
add option to use private GCR to cos-generic-metadata module

incompatible change the bigquery module has been removed and replaced by the new bigquery-dataset module
incompatible change subnets in the net-vpc modules are now passed as a list instead of map, and all related variables for IAM and flow logs use region/name instead of name keys; it's now possible to have the same subnet name in different regions
replace all references to the removed resourceviews.googleapis.com API with container.googleapis.com
fix advanced options in gke-nodepool module
fix health checks in compute-mig and net-ilb modules
new cos-generic-metadata module in the cloud-config-container suite
new envoy-traffic-director module in the cloud-config-container suite
new pubsub module

new secret-manager module
fix access in bigquery module, this is the last version of this module to support multiple datasets, future versions will be called bigquery-dataset

fix DNS module internal zone lookup
fix Cloud NAT module internal router name lookup
re-enable and update outputs for the foundations environments example
add peering route configuration for private clusters to GKE cluster module
incompatible changes in the GKE nodepool module
- rename node_config_workload_metadata_config variable to workload_metadata_config
- new default for workload_metadata_config is GKE_METADATA_SERVER
incompatible change in the compute-vm module
- removed support for MIG and the group_manager variable
add compute-mig and net-ilb modules
incompatible change in net-vpc
- a new name attribute has been added to the subnets variable, allowing to directly set subnet name, to update to the new module add an extra name = false attribute to each subnet

rename the cos-container suite of modules to cloud-config-container
refactor the onprem-in-a-box module to only manage the cloud-config configuration, and make it part of the cloud-config-container suite of modules
update the onprem-google-access-dns example to use the refactored onprem module
fix the external_addresses output in the compute-vm module
small tweaks and fixes to the cloud-config-container modules