-
-
Notifications
You must be signed in to change notification settings - Fork 1
chore(deps): update terraform cloudposse/documentdb-cluster/aws to v0.30.0 #3
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
/terratest |
Merge ProtectionsYour pull request matches the following merge protections and will not be merged until they are valid. 🟠 Require terratestWaiting checks:
|
Heads up! This pull request looks stale. It will be closed soon, if there are no new commits. ⏳ |
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
SupportNeed help? Join our Discord community for assistance with any issues or questions. Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
Heads up! This pull request looks stale. It will be closed soon, if there are no new commits. ⏳ |
Heads up! This pull request looks stale. It will be closed soon, if there are no new commits. ⏳ |
Heads up! This pull request looks stale. It will be closed soon, if there are no new commits. ⏳ |
Heads up! This pull request looks stale. It will be closed soon, if there are no new commits. ⏳ |
Heads up! This pull request looks stale. It will be closed soon, if there are no new commits. ⏳ |
Heads up! This pull request looks stale. It will be closed soon, if there are no new commits. ⏳ |
Heads up! This pull request looks stale. It will be closed soon, if there are no new commits. ⏳ |
/terratest |
There are no real tests for this component. So we set terratest statuses to successful execution without running any tests |
Heads up! This pull request looks stale. It will be closed soon, if there are no new commits. ⏳ |
/terratest |
Heads up! This pull request looks stale. It will be closed soon, if there are no new commits. ⏳ |
/terratest |
Heads up! This pull request looks stale. It will be closed soon, if there are no new commits. ⏳ |
/terratest |
Heads up! This pull request looks stale. It will be closed soon, if there are no new commits. ⏳ |
/terratest |
3276b9e
to
9d274b1
Compare
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
This PR contains the following updates:
0.14.0
->0.30.0
Release Notes
cloudposse/terraform-aws-documentdb-cluster (cloudposse/documentdb-cluster/aws)
v0.30.0
Compare Source
v0.29.0
Compare Source
Revert "chore: Replace Makefile with atmos.yaml" @goruha (#120)
Reverts cloudposse/terraform-aws-documentdb-cluster#119v0.28.0
Compare Source
chore: Replace Makefile with atmos.yaml @osterman (#119)
what
v0.27.0
Compare Source
fix: address invalid count bug @RoseSecurity (#118)
what and why
data.aws_ssm_parameter.password.value
is passed to this module, it is tagged as a sensitive in the AWS provider, and that tag travels with the value all the way into the module. Because we don’t mark variablemaster_password
assensitive = true
, the value is off-limits to functions likelength()
or to meta-arguments likecount
. Terraform refuses to evaluate them → “invalid count argument”.v0.26.3
Compare Source
🚀 Enhancements
feat: consolidate enable parameters to locals and fix invalid count bug @RoseSecurity (#117)
what
enabled
logic into localslocal.enabled && length(var.master_password) == 0
count
expression withcount = module.this.enabled && local.is_master_password_empty ? 1 : 0
.why
count = module.this.enabled && var.master_password == "" ? 1 : 0
expression referencedvar.master_password
, which, when wired to something likeaws_ssm_parameter.db_password.value
, is unknown until apply timereferences
🐛 Bug Fixes
feat: consolidate enable parameters to locals and fix invalid count bug @RoseSecurity (#117)
what
enabled
logic into localslocal.enabled && length(var.master_password) == 0
count
expression withcount = module.this.enabled && local.is_master_password_empty ? 1 : 0
.why
count = module.this.enabled && var.master_password == "" ? 1 : 0
expression referencedvar.master_password
, which, when wired to something likeaws_ssm_parameter.db_password.value
, is unknown until apply timereferences
🤖 Automatic Updates
Migrate new test account @osterman (#110)
what
.github/settings.yml
.github/chatops.yml
fileswhy
.github/settings.yml
from org level to getterratest
environmenttest
accountReferences
v0.26.2
Compare Source
feat: added output cluster_members for resource aws_docdb_cluster @Faris96Hub (#107)
what
Added the Output "cluster_members" for the resource "aws_docdb_cluster".why
Needed for monitoring reasons of the DocumentDB Cluster on a Node-level. Needed when creating a CloudWatch alarm on Node-level because the Dimesion of the alarm needs the cluster memebers.references
https://docs.aws.amazon.com/documentdb/latest/developerguide/cloud_watch.html#:~:text=and%20ReadIOPS.-,Amazon%20DocumentDB%20dimensions,-The%20metrics%20for🤖 Automatic Updates
Update .github/settings.yml @osterman (#109)
what
.github/settings.yml
.github/auto-release.yml
fileswhy
.github/settings.yml
from org levelreferences
Update .github/settings.yml @osterman (#108)
what
.github/settings.yml
.github/auto-release.yml
fileswhy
.github/settings.yml
from org levelreferences
v0.26.1
Compare Source
fix: upgrade aws provider to 5.29.0 to support storage_type @gmeligio (#103)
what
why
references
closes https://github.com/cloudposse/terraform-aws-documentdb-cluster/issues/86
🚀 Enhancements
chore(deps): bump github.com/hashicorp/go-getter from 1.7.4 to 1.7.5 in /test/src @dependabot (#102)
Bumps [github.com/hashicorp/go-getter](https://redirect.github.com/hashicorp/go-getter) from 1.7.4 to 1.7.5.Release notes
Sourced from github.com/hashicorp/go-getter's releases.
Commits
5a63fd9
Merge pull request #497 from hashicorp/fix-git-update5b7ec5f
fetch tags on update and fix tests9906874
recreate git config during update to prevent config alterationDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
🤖 Automatic Updates
chore(deps): bump github.com/hashicorp/go-getter from 1.7.4 to 1.7.5 in /test/src @dependabot (#102)
Bumps [github.com/hashicorp/go-getter](https://redirect.github.com/hashicorp/go-getter) from 1.7.4 to 1.7.5.Release notes
Sourced from github.com/hashicorp/go-getter's releases.
Commits
5a63fd9
Merge pull request #497 from hashicorp/fix-git-update5b7ec5f
fetch tags on update and fix tests9906874
recreate git config during update to prevent config alterationDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Update .github/settings.yml @osterman (#101)
what
.github/settings.yml
.github/auto-release.yml
fileswhy
.github/settings.yml
from org levelreferences
v0.26.0
Compare Source
test: update test framework to use latest best practices and reduce boilerplate @gmeligio (#100)
what
Update this module's test framework. Reduce boilerplate and make reusable functions.
Changelog:
go
to 1.21.test/Makefile
andtest/src/Makefile
from https://github.com/cloudposse/terraform-aws-eks-node-group/tree/e9f908c026d8ca5dc30190a050de68a510ff3983/testenabled=true
from fixtures and add new testTestExamplesCompleteDisabled
for whenenabled=false
Test_ExistingDeployment
for faster test cycle, and modify Makefile accordinglywhy
references
[CHORE] Update variable description @RuiSMagalhaes (#99)
what
enabled_cloudwatch_logs_exports
variable descriptionREADME.md
anddocs/terraform.md
why
references
🚀 Enhancements
feat(aws_docdb_cluster): add allow_major_version_upgrade argument @gmeligio (#94)
what
This PR adds the argument allow_major_version_upgrade that was released in https://github.com/hashicorp/terraform-provider-aws/releases/tag/v5.21.0
It includes with the changes in the test framework from https://github.com/cloudposse/terraform-aws-documentdb-cluster/pull/100 .
why
When upgrading the
engine_version
to a new major version,allow_major_version_upgrade
needs to be enabled for AWS to apply the upgrade.references
🤖 Automatic Updates
Update release workflow to allow pull-requests: write @osterman (#97)
what
.github/workflows/release.yaml
) to have permission to comment on PRwhy
Update GitHub Workflows to use shared workflows from '.github' repo @osterman (#96)
what
.github/workflows
) to use shared workflows from.github
repowhy
Update GitHub Workflows to Fix ReviewDog TFLint Action @osterman (#93)
what
.github/workflows
) to addissue: write
permission needed by ReviewDogtflint
actionwhy
Update GitHub workflows @osterman (#92)
what
.github/workflows/settings.yaml
)why
Use GitHub Action Workflows from `cloudposse/.github` Repo @osterman (#91)
what
why
cldouposse/.github
repositoryAdd GitHub Settings @osterman (#90)
what
.github/settings.yaml
)why
Update Scaffolding @osterman (#87)
what
make readme
to rebuildREADME.md
fromREADME.yaml
why
.github
repoUpdate README.md and docs @cloudpossebot (#83)
what
This is an auto-generated PR that updates the README.md and docs
why
To have most recent changes of README.md and doc from origin templates
v0.25.0
Compare Source
feat: add storage_type parameter @adubeniuk (#79)
what
Amazon has announced IO-optimized storage type for DocumentDB. Support for it has been added since HashiCorp AWS provider version 5.29.0
why
Keep standard as default but also add ability to create IO-optimized DocumentDB clusters.
references
https://aws.amazon.com/about-aws/whats-new/2023/11/amazon-documentdb-i-o-optimized/
https://registry.terraform.io/providers/hashicorp/aws/5.29.0/docs/resources/docdb_cluster#storage_type
feat: allow to attach external SG to the documentDB @rasta-rocket (#69)
what
Hey folks 👋
First of all thanks for the work 💪
Here the goal is to allow the user of the module to attach security groups which are managed outside of the module
why
This is pretty useful, when you have some design where security groups are centrally managed and so outside of the scope of the module
references
Note: If you have any questions don't hesitate to ping me 😉
Cheers ☀️
v0.24.0
Compare Source
feat(aws-docdb-cluster): enable the ssm parameter store to record the… @haidargit (#77)
what
In this PR, we can use the Cloud Posse ssm parameter store module to store the documentdb master_password information.
why
The objective behind this PR is to ensure the secure distribution of the docdb cluster's master password within the AWS infrastructure. We can centrally manage and protect sensitive information, increasing operational efficiency.
references
No issue relates to the current improvement.
I have run these required commands.
make init
make readme
Kindly review this PR for documentdb module improvements. Thank you, Cloud Posse Team!
v0.23.0
Compare Source
add variable certificate change @rabihaggle (#72)
what
We need to have the possibility to select the certificate we need to use, or directly the default amazon one.
why
Because https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL-certificate-rotation.html
references
Please read the link -> https://docs.aws.amazon.com/es_es/documentdb/latest/developerguide/ca_cert_rotation.html
v0.22.0
Compare Source
Fix: Don't create random_password resource if not enabled. @petur (#44)
what
why
The sense of the variable was backwards - setting enabled to false meant that the count was always set to 1. A minimal configuration to reproduce this is:
module "disabled_docdb" {
source = "../../work/terraform-aws-documentdb-cluster"
enabled = false
vpc_id = ""
subnet_ids = []
}
v0.21.0
Compare Source
adding a feature to customize the egress rule @haidargit (#54)
what
egress_source_port
,egress_dest_port
,egress_protocol
, andallowed_egress_cidr_blocks
for the"aws_security_group_rule" "egress"
resource.0.0.0.0/0
will be created. If user is expected to restrict outbound traffic, they can specify the required values.why
0.0.0.0/0
. By providing the option to customize the egress rule, we are giving users a control over their security posture (compliance). For example, our docdb may only connected with internal applications inside the aws eks cluster, or users may integrate their cloud resources with a third party, such as Prisma Cloud or maybe use tfsec as their security scanner, which prompts users to kindly avoid0.0.0.0/0
for security best practices.references
Thank you
v0.20.0
Compare Source
Support AWS Provider V5 @max-lobur (#63)
what
Support AWS Provider V5
Linter fixes
why
Maintenance
references
https://github.com/hashicorp/terraform-provider-aws/releases/tag/v5.0.0
v0.19.0
Compare Source
Enable intra-security group traffic on DB port @kevcube (#61)
what
allow_ingress_from_self
which configures the security group to allow traffic within itself on DB portwhy
references
https://github.com/cloudposse/terraform-aws-rds-cluster/pull/145
v0.18.0
Compare Source
Add master_password output to return generated password. @petur (#45)
what
why
aws_secretsmanager_secret_version
as part of the terraform configuration that creates the cluster.references
Sync github @max-lobur (#60)
Rebuild github dir from the template
v0.17.1
Compare Source
Sync .github @max-lobur (#58)
Sync github workflows with the template
🚀 Enhancements
fix: propagate `preferred_maintenance_window` to the docdb cluster instances resources @sherifkayad (#57)
propagated
preferred_maintenance_window
to the docdb cluster instances resourceswhat
aws_docdb_cluster_instance.default
such that the cluster and its instances have the same value given by the userwhy
references
v0.17.0
Compare Source
v0.16.0
Compare Source
feat: add enable performance insights @brunordias (#50)
what
why
references
git.io->cloudposse.tools update @dylanbannon (#46)
what and why
Change all references to
git.io/build-harness
intocloudposse.tools/build-harness
, sincegit.io
redirects will stop working on April 29th, 2022.References
v0.15.0
Compare Source
Generate random password when master_password is empty @dkossako (#42)
what
why
v0.14.1
Compare Source
🤖 Automatic Updates
Update Terraform cloudposse/route53-cluster-hostname/aws to v0.12.2 @renovate (#38)
This PR contains the following updates:
0.12.1
->0.12.2
Release Notes
cloudposse/terraform-aws-route53-cluster-hostname
v0.12.2
Compare Source
🚀 Enhancements
Bump AWS provider 3.0 @​nitrocode (#​36)
what
why
references
N/A
Configuration
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Renovate will not automatically rebase this PR, because other commits have been found.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by WhiteSource Renovate. View repository job log here.
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.