Gruntwork release 2024-12
Guides / Update Guides / Releases / 2024-12
This page is lists all the updates to the Gruntwork Infrastructure as Code
Library that were released in 2024-12. For instructions
on how to use these updates in your code, check out the updating
documentation.
Here are the repos that were updated:
Published: 12/11/2024 | Release notes
- Added support for manual inputs other than strings or enums. The command line will now prompt the user for input for
int
, float
, bool
, list
, and map
variable types.
- Fixed manual input using
<no value>
if a default does not exist. User will be prompted again instead.
- Changed the visual appearance of the manual input to closer match the example.
This change will cause users to be prompted for more types of variables, and may find that they are required to populate Default values in more situations. If you have been relying on a variable that will now require manual input, but you want to use the Default, you will need to add the --non-interactive
flag to prevent the prompt.
Full Changelog: https://github.com/gruntwork-io/boilerplate/compare/v0.5.19...v0.6.0
Published: 12/17/2024 | Release notes
Published: 12/6/2024 | Release notes
Published: 12/19/2024 | Release notes
Published: 12/4/2024 | Release notes
Published: 12/9/2024 | Release notes
Published: 12/5/2024 | Release notes
Published: 12/4/2024 | Release notes
Published: 12/11/2024 | Release notes
Fix invalid session names generated when a pull request has been created by a GitHub App. This fix was backported from v0.29.0. When a GitHub App creates a pull request the author name contains [bot]
. The [
and ]
characters are invalid when used in an AWS session name. This change removes the [bot]
suffix from the author name used in the session name.
Published: 12/19/2024 | Release notes
This release contains an update to account factory to forward the boolean values disable_macie
disable_security_hub
and disable_guardduty
from the new account request files to the accounts.yml
file. This allows terragrunt units in infra-live to more easily access these three per-account configuration options and adjust their inputs appropriately.
Namely, in terraform-aws-architecture-catalog
v2.12.0
we update the functionality of the logs
account to read these values and disable the macie
and security_hub
modules, which prevents invites from being sent to accounts that don't have those features enabled. This isn't strictlty required, as previously the invites were sent and never accepted, but this reduces the number of resources provisioned and makes the real world infrastructure better match the intent of the IaC.
Bump to pipelines-actions v3.3.0
Full Changelog: https://github.com/gruntwork-io/pipelines-workflows/compare/v3...v3.5.0
Published: 12/9/2024 | Release notes
- Fixed a bug where changes to Pipelines Configurations as Code would trigger pipelines plan / apply to be run. These operations were no-ops as no infrastructure was changed, but were unnecessarily using github action minutes.
- Improved startup time for PipelinesCLI by removing terragrunt/tofu/terraform version checks when not running execute. This improves overall pipelines run time.
Published: 12/4/2024 | Release notes
Pipelines uses a concept of "Gruntwork Context" which is basically a large bundle of runtime context and pipelines configuration. Generating this context was several hundred lines of bash which included both simple read-and-store logic as well as sophisticated business logic. That code hard to test and a source of many bugs. This release includes a new implementation of all of that logic built into our pipelines binary (written in GoLang), which allows us to unit test the behavior and drive performance improvements over time.
Customers will likely not notice any chance with this release other than maybe 1-2 faster runs in some cases, and ideally fewer corner-case bugs based on less commonly used configurations.
Full Changelog: https://github.com/gruntwork-io/pipelines-workflows/compare/v3...v3.3.0
Published: 12/19/2024 | Release notes
Published: 12/13/2024 | Modules affected: server-group | Release notes
- AWS ASG Scaling parameters Update
Published: 12/16/2024 | Modules affected: infrastructure-deployer | Release notes
- Bump github.com/fatih/color from 1.13.0 to 1.18.0 in /modules/infrastructure-deployer
Published: 12/12/2024 | Modules affected: ecs-deploy-runner, infrastructure-deployer | Release notes
- build(deps): Bump github.com/urfave/cli/v2 from 2.27.4 to 2.27.5 in /modules/ecs-deploy-runner/docker/kaniko
- build(deps): Bump github.com/urfave/cli/v2 from 2.10.3 to 2.27.5 in /modules/infrastructure-deployer
- build(deps): Bump github.com/aws/aws-sdk-go-v2 from 1.32.4 to 1.32.6 in /modules/ecs-deploy-runner/docker/kaniko
Published: 12/21/2024 | Modules affected: aurora | Release notes
- Add Aurora Cluster and Instance level tagging
Published: 12/18/2024 | Modules affected: aurora | Release notes
- Address dependabot, fix terraform variable validation error message
Published: 12/20/2024 | Modules affected: eks-k8s-karpenter | Release notes
- Add optional future config values to allow for easier migration
Published: 12/13/2024 | Modules affected: eks-cluster-control-plane | Release notes
- Fix Duplicate Access Entries for Cluster Creator
- Add support for upgrade policy
- [Breaking Change] This is a breaking change. Upgrading to this version requires upgrading the AWS Terraform Provider to >= 5.61.0. This version of the AWS Provider is the minimum version that supports the upgrade_policy configuration block.
Published: 12/5/2024 | Modules affected: eks-alb-ingress-controller-iam-policy, eks-alb-ingress-controller, eks-aws-auth-merger, eks-cloudwatch-agent | Release notes
- Expose tags for all supported resources with associated variables.
Published: 12/18/2024 | Release notes
- Address dependabot updates in tests
Published: 12/18/2024 | Modules affected: alb | Release notes
- Added Default Action Definition for each Protocol:Port Combination
Published: 12/13/2024 | Release notes
- Address dependabot alerts
Published: 12/16/2024 | Modules affected: aws-config | Release notes
- modules/aws-config: add use_global_record_region to provide flexibility in recording_group behavior
Published: 12/11/2024 | Modules affected: private-s3-bucket | Release notes
- Added example of SSM with SOPS.
- Added a simpler way to provide a bucket policy from file.
Published: 12/23/2024 | Modules affected: landingzone | Release notes
- modules/landingzone: Add an optional child_accounts_yaml var to root account baseline
- tests: Bump golang.org/x/crypto from 0.27.0 to 0.31.0
Published: 12/19/2024 | Modules affected: networking | Release notes
Special thanks to the following users for their contribution!
Published: 12/11/2024 | Modules affected: landingzone | Release notes
- Add support for
insight_selector
where cloudtrail used
Published: 12/10/2024 | Modules affected: services | Release notes
- services/ecs-cluster: update terraform-aws-monitoring version
Published: 12/6/2024 | Modules affected: data-stores, networking, services | Release notes
- Add pass through variables for too_many_db_connections and high_cp…u_utilization alarm settings
- Add patch for eu-central-2 support for a few modules
- Update terraform-aws-eks to v0.72.1
- Expose Resource Tags For All Supported EKS Resources
Published: 12/18/2024 | Release notes
- Address dependabot alerts
Published: 12/2/2024 | Modules affected: cloudfront | Release notes
- Added Custom Origins for Cloudfront
- Split "monolithic" test package into several parallel test steps.
New Terraform module implements a CloudFront Distribution that supports custom origins and serves as an extensible foundation for a generic CloudFront module compatible with all origin types. The module incorporates 90%+ feature coverage and utilizes current attributes and structures, avoiding deprecated elements.
Published: 12/18/2024 | Release notes
Published: 12/2/2024 | Modules affected: network-firewall, vpc-app-network-acls | Release notes
- Added allow_private_persistence_internet_access flag to control NACL behavior.
- Split a big set of tests into smaller subsets.