v7.0.0

In this release:

• new cloud operations example showing how to deploy infrastructure for Compute Engine image builder based on Hashicorp Packer
• incompatible change the format of the records variable in the dns module has changed, to better support dynamic values
• new naming-convention module
• new cloudsql-instance module
• added support for website to gcs module, and removed auto-set labels
• new factories top-level folder with initial subnets, firewall-hierarchical-policies, firewall-vpc-rules and example-environments examples
• added new description variable to compute-vm module
• added support for L7 ILB subnets to net-vpc module
• added support to override default description in compute-vm
• added support for backup retention count in cloudsql-instance
• added new description variable to cloud-function module
• added new description variable to bigquery-dataset module
• added new description variable to iam-service-account module
• incompatible change fix deprecated message from gke-nodepool, change your workload_metadata_config to correct values (GCE_METADATA or GKE_METADATA)
• incompatible change changed maintenance window definition from maintenance_start_time to maintenance_config in gke-cluster
• added monitoring_config,logging_config, dns_config and enable_l4_ilb_subsetting to gke-cluster

v6.0.0

In this release

• new apigee-organization and apigee-x-instance
• generate email and iam_email statically in the iam-service-account module
• new billing-budget module
• fix scheduled-asset-inventory-export-bq module
• output custom role information from the organization module
• enable multiple vpc-sc perimeters over multiple modules
• new cloud operations example showing how to restrict service usage using delegated role grants
• incompatible change multiple instance support has been removed from the compute-vm module, to bring its interface in line with other modules and enable simple use of for_each at the module level; its variables have also slightly changed (attached_disks, boot_disk_delete, crate_template, zone)
• incompatible change dropped the admin_ranges_enabled variable in net-vpc-firewall. Set admin_ranges = [] to get the same effect
• added the named_ranges variable to net-vpc-firewall

v5.1.0

• add support for lifecycle_rule in gcs module
• create pubsub service identity if service is enabled
• support for creation of GKE Autopilot clusters
• add support for CMEK keys in Data Foundation end to end example
• add support for VPC-SC perimeters in Data Foundation end to end example
• fix vpc-sc module
• new networking example showing how to use Private Service Connect to call a Cloud Function from on-premises
• new networking example showing how to organize decentralized firewall management on GCP

v5.0.0

In this release

• Fix message_retention_duration variable type in pubsub module
• Move bq robot service account into the robot service account project output
• Add IAM cryptDecrypt role to robot service account on specified keys
• Add Service Identity creation on project module if secretmanager enabled
• add Data Foundation end to end example

v4.9.0

In this release

• incompatible change updated resource name for google_dns_policy on the net-vpc module
• added support for VPC-SC Ingress Egress policies on the vpc-sc module
• update CI to Terraform 0.15 and fix minor incompatibilities
• add deletion_protection to the bigquery-dataset module
• add support for dataplane v2 to GKE cluster module
• add BGP peer outputs to HA VPN module

v4.8.0

In this release

• added support for CORS to the gcs module
• make cluster creation optional in the Shared VPC example
• make service account creation optional in iam-service-account module
• new third-party-solutions top-level folder with initial openshift example
• added support for DNS Policies to the net-vpc module

v4.7.0

• incompatible change add support for master_global_access_config block in gke-cluster module
• add support for group-based IAM to resource management modules
• add support for private service connect

v4.6.1

In this release

• incompatible change support one group per zone in the compute-vm module
  the group output is now renamed to groups

v4.6.0

In this release

• incompatible change logging sinks now create non-authoritative bindings when iam=true
• fixed IAM bindings for module bigquery not specifying project_id
• remove device_policy from vpc_sc module as it requires BeyondCorp Enterprise Premium
• allow using unsuffixed name in compute_vm module

v4.5.1

This release fixes an issue in the dns module, where it was not possible to create private zones exposed to no networks.