Version 0.11.0

What's Changed

• Add Action to check documentation on each module by @jimright in #106
• Added azure bastion module by @dennaloh in #104
• Update top-level readme for new Azure bastion module by @jimright in #108
• Update Azure module to support separate network and Cloudera resource groups by @jimright in #107
• Add terraform-azure-cred-permissions module by @jimright in #109
• Add support for externalized compute clusters to cdp_deploy module by @jimright in #100

Full Changelog: v0.10.2...v0.11.0

Modules Updated

ℹ️ List of the modules updated as part of this release.

Module	Comment
terraform-azure-bastion	New module
terraform-azure-cred-permissions	New module
terraform-cdp-azure-pre-reqs
terraform-cdp-deploy

Impact of updates

• New modules introduced for terraform-azure-bastion and terraform-azure-cred-permissions.
  • terraform-azure-cred-permissions is called from the terraform-cdp-azure-pre-reqs module to create the Cloudera credential pre-requisites for Azure.
• Support for Compute Cluster creation on Cloudera on Azure & AWS environment has been added to the terraform-cdp-deploy module.
  • This is disabled by default but can be set via the compute_cluster_enabled variable and configured via compute_cluster_configuration
  • This is available once version >= 0.10.2 of the Terraform Cloudera provider is used

Version 0.10.2

What's Changed

• Add public_access_prevention for GCS buckets in GCP pre-req module by @jimright in #105

Full Changelog: v0.10.1...v0.10.2

Modules Updated

ℹ️ List of the modules updated as part of this release.

Module	Comment
terraform-cdp-gcp-pre-reqs

Impact of updates

• In the terraform-cdp-gcp-pre-reqs module the public_access_prevention parameter has been added to the GCS bucket resource. By default this is set to enforced so that public access is not allowed.

Version 0.10.1

What's Changed

• Increase validation for max length of Azure managed identities name by @jimright in #102

Full Changelog: v0.10.0...v0.10.1

Modules Updated

ℹ️ List of the modules updated as part of this release.

Module	Comment
terraform-azure-cdw-permissions
terraform-cdp-azure-pre-reqs

Impact of updates

• In the terraform-cdp-azure-pre-reqs and terraform-azure-cdw-permissions` modules, for the validation of Azure managed identities, the maximum allowed name is increased from 24 to 128.

Version 0.10.0

What's Changed

• Remove DL restore policy attachment from log role by @jimright in #97
• Add validation to ensure xaccount role trust has AWS backup service by @jimright in #96
• Added get_password_data and updated public ip ouput by @dennaloh in #99
• Add variable validation for cloud provider specific variables in deploy module by @jimright in #98
• Add modules for Azure resource groups and VNet by @jimright in #95
• Improve creation and handling of CDP groups in cdp-deploy by @jimright in #101

Full Changelog: v0.9.1...v0.10.0

Modules Updated

ℹ️ List of the modules updated as part of this release.

Module	Comment
terraform-azure-resource-group	New module
terraform-azure-vnet	New module
terraform-cdp-azure-pre-reqs
terraform-aws-permissions
terraform-cdp-deploy

Impact of updates

• New modules added:
  ** terraform-azure-resource-group to create an Azure Resource Group. This is can from the terraform-cdp-azure-pre-reqs module.
  ** terraform-azure-vnet to create an Azure VNet. This is can from the terraform-cdp-azure-pre-reqs module.
• terraform-cdp-deploy has been updated to add validations for required parameters with each Cloud Service Provider (i.e. the infra_type input parameter)
• terraform-cdp-deploy has added a new cdp_groups list of maps parameter which supports adding pre-existing Cloudera on cloud group to an environments IDBroker mapping (as well as creating the group if required).
  ** This change removed the cdp_user_group_name and cdp_admin_group_name input variables so a migration to this new cdp_groups input is required when updating to this release.

Version 0.6.5

What's Changed

• Backport to remove DL restore policy attachment from log role

Full Changelog: v0.6.4...v0.6.5

Modules Updated

ℹ️ List of the modules updated as part of this release.

Module	Comment
terraform-cdp-aws-pre-reqs

Impact of updates

• Backported the recent removal of the DL restore policy attachment from AWS IAM log role to version 0.6.x release of the terraform-cdp-aws-pre-reqs module.

Version 0.6.4

What's Changed

• Backport to add support for CML backup trust policy to aws xaccount role

Full Changelog: v0.6.3...v0.6.4

Modules Updated

ℹ️ List of the modules updated as part of this release.

Module	Comment
terraform-cdp-aws-pre-reqs

Impact of updates

• Backported the recent addition of the AWS backup service trust relationship to the Cross Account role to version 0.6.x release of the terraform-cdp-aws-pre-reqs module.

Version 0.9.1

What's Changed

• Add terraform install step to GH actions by @jimright in #90
• Added terraform-aws-bastion module by @dennaloh in #93
• Add multi-az mapping of proxy route table to NLB ENIs by @jimright in #88
• Add terraform-aws-fw-vpc and terraform-aws-firewall modules by @jimright in #89
• Add module for CML on AWS permissions by @jimright in #94

New Contributors

• @dennaloh made their first contribution in #93

Full Changelog: v0.9.0...v0.9.1

Modules Updated

ℹ️ List of the modules updated as part of this release.

Module	Comment
terraform-aws-bastion	New module
terraform-aws-cml-permissions	New module
terraform-aws-firewall	New module
terraform-aws-nfw-vpc	New module
terraform-aws-proxy
terraform-aws-cred-permissions
terraform-cdp-aws-pre-reqs

Impact of updates

• New modules added:
  ** terraform-aws-bastion to create a bastion VM on AWS. This is not used in the aws pre-reqs module but can be called from a root module if required.
  ** terraform-aws-firewall and terraform-aws-nfw-vpc to support in deploying Cloudera Data Platform (CDP) Public Cloud in a fully private networking configuration where the CDP Environment is connected to a Networking VPC running the Firewall.
  ** terraform-aws-cml-permissions to create the required IAM permission to perform the backup and restore of a CML workbench. This is not used in the aws pre-reqs module but can be called from a root module if required.
• The terraform-aws-cred-permissions module has been updated to optionally add a trust relationship to the AWS backup service in the cross account role. This is also required for CML backup and restore. This option is disabled by default so should have no impact in existing deployments.
• An extra input variable (xaccount_cml_backup_assume_role has been added to the terraform-cdp-aws-pre-reqs module to allow the above AWS backup trust relationship to be enabled if required. This variable is set to false by default so should have no impact in existing deployments.
• The terraform-aws-proxy has been updated to allow multi-az mapping of proxy route table to NLB ENI.

Version 0.9.0

What's Changed

• Add variable validation for input variables to all modules by @jimright in #82
• Resolve deprecated storage account parameters in AzureRM provider by @jimright in #84
• Add module for Azure private endpoints to storage accounts by @jimright in #85
• Update google Terraform provider by @jimright in #87

Full Changelog: v0.8.4...v0.9.0

Modules Updated

ℹ️ List of the modules updated as part of this release.

Module	Comment
terraform-azure-storage-endpoints	New module
terraform-cdp-aws-pre-reqs
terraform-cdp-azure-pre-reqs
terraform-cdp-gcp-pre-reqs
terraform-cdp-deploy
terraform-aws-cred-permissions
terraform-aws-permissions
terraform-aws-proxy
terraform-aws-tgw
terraform-aws-vpc
terraform-azure-cdw-permissions
terraform-azure-nfs

Impact of updates

• Variable validation has been added to all modules to ensure names or prefix input variable conform with required conventions of the various resources.
• The Google Terraform provider has been updated in the terraform-cdp-gcp-pre-reqs module. This should resolve issues where a lag is encountered between creation of service account resources in Terraform and it being available to use.
• The terraform-cdp-azure-pre-reqs has been updated to remove deprecated storage_account_name parameters when referencing the Azure Storage Account (e.g. in the azurerm_storage_container resource). This will resolve warning messages which are printed related to this deprecated parameter. The deprecated parameters will be removed in release 5.0 of the azurerm Terraform provider.
• The terraform-azure-storage-endpoints module will create Azure private endpoints to storage accounts for specified subnets. This is used in the terraform-cdp-azure-pre-reqs module and enabled by default.

Version 0.8.4

What's Changed

• Update tflint config option by @jimright in #83
• Remove report_deployment_logs variable from deploy module by @jimright in #86

Full Changelog: v0.8.3...v0.8.4

Version 0.8.3

What's Changed

• Unset default value of report_deployment_log in cdp deploy by @jimright in #81
• Update Azure NFS module outputs and cloud init script by @jimright in #80

Full Changelog: v0.8.2...v0.8.3