Releases: GoogleCloudPlatform/solution-acceleration-toolkit
Releases · GoogleCloudPlatform/solution-acceleration-toolkit
Templates templates-v0.2.0
Config changes required by users
- Field
enable_bootstrap_gcs_backend
has been renamed toenable_gcs_backend
. - CICD block has moved from
devops.hcl
recipe to its own dedicatedcicd.hcl
recipe. - Field
cicd.{validate,plan,apply}_trigger
previously in recipedevops.hcl
has been renamed totriggers.{validate,plan,apply}
in recipecicd.hcl
. - Recipes no longer set the
output_path
. Users must explicitly set theoutput_path
to be the directory they want to write the files for the recipes. For example, in 0.1 you could use theaudit.hcl
recipe and set output_path to./live
. This would create an audit directory in ./live. Now, you need to explicitly setoutput_path
to./live/audit
, or simply./audit
. - Recipe
cicd.hcl
now has a new fieldmanaged_dirs
which controls the root terraform modules deployed by the CICD as well as their order. Recipes now also typically only create one Terraform root module (not multiple like before). Thus, the user can control the module names being deployed. deployments
inproject.hcl
has been removed. Simply move all resources within this field into the top levelresources
field.secret_locations
is now required if secrets are set.- Org Policies: enforce SA key creation, upload and default IAM grants (#507)
Migration steps
- Due to the change in directory structure, it is recommended to delete the existing generated configs and let the engine re-generate a new set of configs. If you made manual changes, they will need to be migrated manually to the new generated configs.
- Due to the numerous changes in the directory structure, it is recommended to run the Terraform importer on every root module. Carefully review the
terraform plan
after each import.
Policies policies-v0.2.0
- Use newer version of IAM bindings policy. (#443)
- Include templates and utils in policygen generated files (#450)
- fix duplicated policy name for the same role (#463)
- Pluralize policy targets. (#522)
- works with CFT Scorecard version >= v0.3.4
- works with Forseti version >= v2.26.0 (To be released)
- move org policy to tfengine (#533)
- Org Policies: enforce SA key creation, upload and default IAM grants (#507)
Templates v0.1.1
templates-v0.1.1 Templates v0.1.1
Binaries v0.1.1
Binaries v0.1.0
Binaries release version v0.1.0
Templates v0.1.0
templates-v0.1.0 Terraform Engine templates release version v0.1.0
Policies v0.1.0
policies-v0.1.0 Policygen policies release version v0.1.0