Version 0.6.4

What's Changed

• Backport to add support for CML backup trust policy to aws xaccount role

Full Changelog: v0.6.3...v0.6.4

Modules Updated

ℹ️ List of the modules updated as part of this release.

Module	Comment
terraform-cdp-aws-pre-reqs

Impact of updates

• Backported the recent addition of the AWS backup service trust relationship to the Cross Account role to version 0.6.x release of the terraform-cdp-aws-pre-reqs module.

Version 0.9.1

What's Changed

• Add terraform install step to GH actions by @jimright in #90
• Added terraform-aws-bastion module by @dennaloh in #93
• Add multi-az mapping of proxy route table to NLB ENIs by @jimright in #88
• Add terraform-aws-fw-vpc and terraform-aws-firewall modules by @jimright in #89
• Add module for CML on AWS permissions by @jimright in #94

New Contributors

• @dennaloh made their first contribution in #93

Full Changelog: v0.9.0...v0.9.1

Modules Updated

ℹ️ List of the modules updated as part of this release.

Module	Comment
terraform-aws-bastion	New module
terraform-aws-cml-permissions	New module
terraform-aws-firewall	New module
terraform-aws-nfw-vpc	New module
terraform-aws-proxy
terraform-aws-cred-permissions
terraform-cdp-aws-pre-reqs

Impact of updates

• New modules added:
  ** terraform-aws-bastion to create a bastion VM on AWS. This is not used in the aws pre-reqs module but can be called from a root module if required.
  ** terraform-aws-firewall and terraform-aws-nfw-vpc to support in deploying Cloudera Data Platform (CDP) Public Cloud in a fully private networking configuration where the CDP Environment is connected to a Networking VPC running the Firewall.
  ** terraform-aws-cml-permissions to create the required IAM permission to perform the backup and restore of a CML workbench. This is not used in the aws pre-reqs module but can be called from a root module if required.
• The terraform-aws-cred-permissions module has been updated to optionally add a trust relationship to the AWS backup service in the cross account role. This is also required for CML backup and restore. This option is disabled by default so should have no impact in existing deployments.
• An extra input variable (xaccount_cml_backup_assume_role has been added to the terraform-cdp-aws-pre-reqs module to allow the above AWS backup trust relationship to be enabled if required. This variable is set to false by default so should have no impact in existing deployments.
• The terraform-aws-proxy has been updated to allow multi-az mapping of proxy route table to NLB ENI.

Version 0.9.0

What's Changed

• Add variable validation for input variables to all modules by @jimright in #82
• Resolve deprecated storage account parameters in AzureRM provider by @jimright in #84
• Add module for Azure private endpoints to storage accounts by @jimright in #85
• Update google Terraform provider by @jimright in #87

Full Changelog: v0.8.4...v0.9.0

Modules Updated

ℹ️ List of the modules updated as part of this release.

Module	Comment
terraform-azure-storage-endpoints	New module
terraform-cdp-aws-pre-reqs
terraform-cdp-azure-pre-reqs
terraform-cdp-gcp-pre-reqs
terraform-cdp-deploy
terraform-aws-cred-permissions
terraform-aws-permissions
terraform-aws-proxy
terraform-aws-tgw
terraform-aws-vpc
terraform-azure-cdw-permissions
terraform-azure-nfs

Impact of updates

• Variable validation has been added to all modules to ensure names or prefix input variable conform with required conventions of the various resources.
• The Google Terraform provider has been updated in the terraform-cdp-gcp-pre-reqs module. This should resolve issues where a lag is encountered between creation of service account resources in Terraform and it being available to use.
• The terraform-cdp-azure-pre-reqs has been updated to remove deprecated storage_account_name parameters when referencing the Azure Storage Account (e.g. in the azurerm_storage_container resource). This will resolve warning messages which are printed related to this deprecated parameter. The deprecated parameters will be removed in release 5.0 of the azurerm Terraform provider.
• The terraform-azure-storage-endpoints module will create Azure private endpoints to storage accounts for specified subnets. This is used in the terraform-cdp-azure-pre-reqs module and enabled by default.

Version 0.8.4

What's Changed

• Update tflint config option by @jimright in #83
• Remove report_deployment_logs variable from deploy module by @jimright in #86

Full Changelog: v0.8.3...v0.8.4

Version 0.8.3

What's Changed

• Unset default value of report_deployment_log in cdp deploy by @jimright in #81
• Update Azure NFS module outputs and cloud init script by @jimright in #80

Full Changelog: v0.8.2...v0.8.3

Version 0.8.2

What's Changed

• Update CDP provider constraint to use version 0.7.0 by @jimright in #79
• Add support for FreeIPA and DL major operating system by @jimright in #57

Full Changelog: v0.8.1...v0.8.2

Version 0.8.1

What's Changed

• Update azurerm provider constraint by @jimright in #77
• Add notes and update example to support GCP project as env vars by @jimright in #78

Full Changelog: v0.8.0...v0.8.1

Version 0.8.0

What's Changed

• Add new modules for required storage/idbroker and credential permissions for AWS by @jimright in #75
• Add module for Azure CDW permissions by @jimright in #73
• Reduce GCP xaccount SA policies by @jimright in #76

Full Changelog: v0.7.4...v0.8.0

Version 0.7.4

What's Changed

• Remove datalake_custom_instance_groups input variable in cdp-deploy module by @jimright in #74

Full Changelog: v0.7.3...v0.7.4

Version 0.7.3

What's Changed

• Loosen pinning on CDP provider by @jimright in #72

Full Changelog: v0.7.2...v0.7.3