All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog and this project adheres to Semantic Versioning.
- Upgrade RDS version from
aurora5.6
toaurora-mysql5.7
- Ensure generated passwords meet Apache Ranger password criteria - see #18
- Support for user-specified CNAME for ranger admin and ranger database hosts - see #15
- Support for Docker private registry - see #10.
- Pin module to use
terraform-aws-provider v1.60.0
- Migrate from Vault to AWS Secrets Manager - see #6.
This is a backwards incompatible change, adds new variablesldap_ca_cert
,ldap_secret_name
, please refer to the README.md for usage.
- Tag resources that were not yet applying tags - see #4.
- initial terraform: See #1
- Aurora database for storing ranger configs and audit logs
- ranger admin service HA configuration with sticky sessions.
- ranger usersync service to sync ldap users and groups from Active Directory
- read database master password from vault
- route53 dns entries for ranger admin & database
- solr based auditing is not included in intial commit.