v1.434.0

`sqs-queue` better support dead-letter queues @Benbentwo (#1037)

what

• Updates component sqs-queue to better support dead-letter queues

why

• This is an awkward component currently, it is really just a pass through to an sqs resource. This should probably be broken down into a module and then wrapped with a component. In the meantime, this will allow easier access to other sqs-queues' URL for the redrive policy which is used for deadletter queues

references

• https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/sqs_queue_redrive_policy

v1.433.0

`sqs-queue`: Update to include SQS Policy @Benbentwo (#1035)

what

• Update SQS Queue component to include an access policy block
• Add IAM Policy variable to make it writeable per queue
• Added helpers to add filters like current account and current queue arn

why

• need an access policy that can allow s3 notifications

v1.432.0

Better support for KUBECONFIG file authentication @Nuru (#1034)

what

• Update providers-helm.tf to provide better support for KUBECONFIG file authentication
• Add support for computing the KUBECONFIG context name from the EKS cluster name

why

• Previous support had bugs, and lacked support for alternative access to EKS clusters, such as via a gateway (authenticating) proxy, such as Teleport
• Enable support for KUBECONFIG files which configure access for multiple clusters, selected via "context" setting

v1.431.1

[eks/cluster] Update to use AWS Auth API @Nuru (#1033)

Breaking Changes

[!WARNING]
This release contains breaking changes to the eks/cluster component.
Read the migration guidance in the CHANGELOG

what

• Upgrade the eks/cluster component to use the AWS API for access control

why

• The old mechanism, using a ConfigMap, was unreliable

references

• terraform-aws-eks-cluster v4.0.0 Release Notes
• terraform-aws-eks-cluster v4 Migration Guide
• New API for EKS access control

🤖 Automatic Updates

Update GitHub Workflows to Fix ReviewDog TFLint Action @osterman (#1030)

what

• Update workflows (.github/workflows) to add issue: write permission needed by ReviewDog tflint action

why

• The ReviewDog action will comment with line-level suggestions based on linting failures

v1.431.0

feat: Spacelift worker pool enhancements @RoseSecurity (#1029)

what

• Adds instance_lifetime variable
• Adds logic for launch_template_version
• Makes AMI filter for architecture extensible

why

• Adds instance_lifetime to enhance security of worker by terminating and replacing long-lived instances

[!NOTE]
The addition of this variable is purely for security purposes and can be removed if contributors deem it unnecessary

• A refresh will not start when version = "$Latest" is configured in the launch_template block. To trigger the instance refresh when a launch template is changed, configure version to use the latest_version attribute of the aws_launch_template resource.

references

• Autoscaling Resource

v1.430.1

fix: update spacelift worker installation for latest images @RoseSecurity (#1023)

what

• Utilizes ECR credential helper

why

• Spacelift updated their AMI to AL23, resulting in broken packages with the current installation script

🤖 Automatic Updates

Update GitHub workflows @osterman (#1028)

what

• Update workflows (.github/workflows/settings.yaml)

why

• Support new readme generation workflow.
• Generate banners

v1.430.0

`[New Docs]` ECS Partial Task Definiton @Benbentwo (#1027)

what

• What is and how do you setup ECS Partial task definitions

why

• Documentation for clearing up ECS Partial Task definitions.
• Creates a place for us to update when adding more information for ECS partial task definitions

references

• cloudposse/docs#608

v1.429.0

feat(aurora-postgres): allow additional cluster parameters @kevcube (#1004)

what

Let users specify additional cluster_parameters for their Postgres cluster.

why

Sometimes you gotta do that

v1.428.0

feat: add input_storage rds variable @wavemoran (#1026)

what

• Add the storage_throughput variable for the aws_db_instance resource

why

• This variable is needed for gp3 storage types

references

• https://github.com/cloudposse/terraform-aws-rds/blob/ed5c31c3171da0406d228649bc583988d985a05a/main.tf#L65
• https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Storage.html#gp3-storage

v1.427.0

feat: Provide Anonymous ArgoCD Access @RoseSecurity (#1017)

what

• Enables anonymous user access. The anonymous access to Argo CD can be enabled using users.anonymous.enabled field in argocd-cm (see argocd-cm.yaml). The anonymous users get default role permissions specified by policy.default in argocd-rbac-cm.yaml. For read-only access you'll want policy.default: role:readonly.

why

• Provides anonymous user access

references

• Argo CD Documentation