Minimum required control plane version: v4.16.0
. Minimum required sidecar version: v4.16.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes from v4
to v5
of this module in the 5.0.0
release documentation below.
- Added support for private networking (#125)
Minimum required control plane version: v4.16.0
. Minimum required sidecar version: v4.16.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes from v4
to v5
of this module in the 5.0.0
release documentation below.
Minimum required control plane version: v4.16.0
. Minimum required sidecar version: v4.16.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes from v4
to v5
of this module in the 5.0.0
release documentation below.
- Update minimum required TF version (#123)
Minimum required control plane version: v4.16.0
. Minimum required sidecar version: v4.16.0
. This whole module will not work with previous sidecar or control plane versions.
Changes in default values:
health_check_grace_period
-- Default value change from600
(10 minutes) to300
(5 minutes) to speed up deployment and upgrades.volume_type
-- Default value change fromgp2
togp3
.
Removed input variables:
asg_count
-- No longer used.dd_api_key
-- No longer used.deploy_certificate_lambda
-- No longer used. Lambda got removed in favour of the Terraform TLS provider for self-signed certificate creation.deploy_secrets
-- No longer used. The secret will be created by the module automatically ifsecret_name
is empty. Ifsecret_name
assumes any value, it means the user created the secret externally to the module and it should not be responsible for managing it.hc_vault_integration_id
-- No longer used. Retrieved from the control plane when sidecar is running.log_integration
-- No longer used. Retrieved from the control plane when sidecar is running.metrics_integration
-- No longer used.sidecar_custom_certificate_account_id
-- No longer used. Corresponding feature no longer exists. See the Sidecar certificates page to get more information on how to use custom certificates with your sidecar.use_single_container
-- No longer used.
Renamed output variables:
aws_cloudwatch_log_group_name
->cloudwatch_log_group_name
aws_iam_role_arn
->iam_role_arn
aws_security_group_id
->security_group_id
sidecar_ca_certificate_role_arn
->ca_certificate_role_arn
sidecar_ca_certificate_secret_arn
->ca_certificate_secret_arn
sidecar_credentials_secret_arn
->secret_arn
sidecar_custom_host_role
->custom_host_role
sidecar_dns_hosted_zone_id
->dns_hosted_zone_id
sidecar_dns
->dns
sidecar_dns_name
->dns_name
sidecar_load_balancer_dns
->load_balancer_dns
sidecar_tls_certificate_role_arn
->tls_certificate_role_arn
sidecar_tls_certificate_secret_arn
->tls_certificate_secret_arn
Due to the removal of the certificate lambda (see Upgrade Notes),
the self-signed certificates will be recreated when upgrading from module v4
to v5
.
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- Avoid LB recreation in upgrades from v4.4 or previous (#122)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- Fix character limit issue (#121
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- ENG-14393: Fix lambda, environment variables and deprecation (#119
- Add example of custom_user_data usage (#117
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- Update hc_vault_integration_id input description (#114
- Docs - fix descriptions
- Add custom tags to resources created by launch template (#115)
- Add Name tag to launch template tag_specifications (#165)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- Avoid LB recreation in upgrades from v4.4 or previous (#122)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- Add custom_tags to launch template (#113)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- Add version constraints and highlight values (#111)
- Provide Variable to decide how TLS certs are generated (lamba or provider) (#112)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- Avoid LB recreation in upgrades from v4.4 or previous (#122)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- Add variable volume_type (#110)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- Avoid LB recreation in upgrades from v4.4 or previous (#122)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- ENG-14214: Add memory limit documentation (#109)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- ENG-12761: Add variable to control custom tags (#108)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- Avoid LB recreation in upgrades from v4.4 or previous (#122)pull/108))
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- ENG-14157: Add support for additional target groups (#105)
- ENG-13936: Add new variable 'load_balancer_security_groups' (#106)
- ENG-13935: Add output variables for AWS resources ARNs (#107)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- ENG-13783: Adds environment variables for sidecar exporter configuration (#104)
- Update docs for optional LB deployment (#103)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- ENG-12957: Add section for S3 File Browser configuration (#101)
- Advanced networking configuration (#102)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- Optionally deploy load balancer (#100)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- Rollback certificate lambda (#98)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- Fix var name (#93)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- Fix broken links in registry docs (#92)
- ENG-12832: Making load_certs echo Warning (#90)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- ENG-13003: Updating single container scripts (#91)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- ENG-12268: Make container registry info optional (#79)
- ENG-11596: Deprecate unused variables in sidecar v4.10 (#80)
- ENG-12509: Add parameter to use single container sidecar (#81)
- ENG-12118/ENG-12121: Enable instance recycle and dynamically manage sidecar version (#82)
- ENG-12120: Add custom EC2 health check script (#83)
- Remove unused env vars (#84)
- Set default value for
secrets_location
(#86) - ENG-12285: Export values in launch template for forward-compatibility (#87)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- ENG-12650: Fix Hostname for lambda invocation (#85)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- fix: Remove need for zip hash code file (#78)
- ENG-12327: Add consistency in case of
custom_user_data
variable does not contain all key s (#77) - ENG-12303: Refactor signed certificate lambda to be generated via pre-commit hook (#76)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- Add parameter to disable TLS certificate verification to sidecar templates (#73)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- Break out compose install (#72)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
- ENG-12055: Remove old variables (#71)
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
See the list of changes since v3
of this module in the 4.0.0
release documentation below.
Minimum required control plane version: v4.7.0
. Minimum required sidecar version: v4.7.0
. This whole module will not work with previous sidecar or control plane versions.
Health checks and metrics were merged into a single monitoring port starting in sidecar v4.7.0
. Due to this, we have opted to release a new major version
and use it to clean up deprecated variables related to the transition to control plane v4
. The list of removed and added parameters is as follows:
New input parameters:
asg_min_healthy_percentage
cloudwatch_log_group_name
instance_metadata_token
sidecar_ca_certificate_role_arn
sidecar_ca_certificate_secret_arn
sidecar_custom_host_role
sidecar_tls_certificate_role_arn
sidecar_tls_certificate_secret_arn
Removed input parameters:
elk_address
-- no longer used. Retrieved from the control plane when sidecar is running.elk_password
-- no longer used. Retrieved from the control plane when sidecar is running.elk_username
-- no longer used. Retrieved from the control plane when sidecar is running.healthcheck_inbound_cidr
-- usemonitoring_inbound_cidr
instead.healthcheck_port
-- fixed to port9000
.metrics_inbound_cidr
-- usemonitoring_inbound_cidr
instead.metrics_port
-- fixed to port9000
.mongodb_port_alloc_range_high
-- no longer used. Retrieved from the control plane when sidecar is running.mongodb_port_alloc_range_low
-- no longer used. Retrieved from the control plane when sidecar is running.mysql_multiplexed_port
-- no longer used. Retrieved from the control plane when sidecar is running.splunk_host
-- no longer used. Retrieved from the control plane when sidecar is running.splunk_index
-- no longer used. Retrieved from the control plane when sidecar is running.splunk_port
-- no longer used. Retrieved from the control plane when sidecar is running.splunk_tls
-- no longer used. Retrieved from the control plane when sidecar is running.splunk_token
-- no longer used. Retrieved from the control plane when sidecar is running.sumologic_host
-- no longer used. Retrieved from the control plane when sidecar is running.sumologic_uri
-- no longer used. Retrieved from the control plane when sidecar is running.
- Add automatic ASG refresh and validations (#67)
- ENG-10585: Add TF param for IMDS token and clean up IMDS usage (#54)
- ENG-11072: Add certificate generation to sidecar templates (#61)
- ENG-11417: Update template to use the new healthcheck endpoint and logic (#60)
- ENG-11888: Add external parameter to name cloudwatch log groups (#65)
- ENG-11847: Merge healthcheck and metrics inbound CIDR fields into a single monitoring inbound cidr (#62)
- Remove deprecated variables (#63)
Minimum required control plane version: v2.34.6
. Minimum required sidecar version: v2.34.6
. This whole module will not work with previous sidecar or control plane versions.
Minimum required control plane version: v2.34.6
. Minimum required sidecar version: v2.34.6
. This whole module will not work with previous sidecar or control plane versions.
- ENG-10707: Add metrics aggregator to services (#55)
Minimum required control plane version: v2.34.6
. Minimum required sidecar version: v2.34.6
. This whole module will not work with previous sidecar or control plane versions.
- ENG-11115: Change IMDS hop count from 2 to 1 (#56)
- ENG-10518: Add deprecation note to the mongodb low/high alloc ports variables (#53)
Minimum required control plane version: v2.34.6
. Minimum required sidecar version: v2.34.6
. This whole module will not work with previous sidecar or control plane versions.
- ENG-10517: Add deprecation note to the mysql_multiplexed_port variable ([#51](https://github.com/cyralinc/terraform-aws-sidecar-ec2/pull/
- ENG-10518: Add deprecation note to the mongodb low/high alloc ports variables (#53)
Minimum required control plane version: v2.34.6
. Minimum required sidecar version: v2.34.6
. This whole module will not work with previous sidecar or control plane versions.
- ENG-9772: Remove references to rest wire (#50)
Minimum required control plane version: v2.34.6
. Minimum required sidecar version: v2.34.6
. This whole module will not work with previous sidecar or control plane versions.
- ENG-8822: Make management of sidecar-created certificate internal to the sidecar (#47)
- ENG-9286: Deprecate public docker route (#48)
- ENG-9322: Replace launch configuration by launch template (#49)
Minimum required sidecar version: v2.34
. This whole module is fully compatible with sidecars <2.34
, although the dynamodb
control will be ignored in them.
- ENG-9007: Add DynamoDB to list of supported repositories (#45)
Minimum required sidecar version: v2.31
.
- Fix minimum AWS provider requirements (#46)
- ENG-8959: Fix race condition when upgrading sidecar (#44)
Minimum required sidecar version: v2.31
.
- Fix for_each dependency issue (#43)
Minimum required sidecar version: v2.31
.
- Improve README
Minimum required sidecar version: v2.31
.
- ENG-8943: Allow custom S3 location for sidecar-created cert lambda (#42)
- Added Optional Runtime Ordering for User Supplied Bash Scripts (#41)
Minimum required sidecar version: v2.31
.
- Update the bootstrap script version that uses
rpm --force
(#40)
Minimum required sidecar version: v2.31
.
- ENG-8879: Change upper limit for name_prefix variable (#39)
Minimum required sidecar version: v2.31
.
- Addition of custom user-data script Input (#38)
Minimum required sidecar version: v2.31
.
- Update the bootstrap script version that uses
rpm --force
(#40)
Minimum required sidecar version: v2.31
.
- ENG-8679: Fix bug that did not allow disabling ssh access (#37)
Minimum required sidecar version: v2.31
.
- ENG-8601: Add new parameter to define kms key for secrets (#36)
Minimum required sidecar version: v2.31
.
- Update the bootstrap script version that uses
rpm --force
(#40)
Minimum required sidecar version: v2.31
.
- ENG-8553: Enable stickiness conditionally for specified ports in Terraform (#35)
Minimum required sidecar version: v2.31
.
- ENG-7369: Custom and sidecar-created certificate support (#33)
Minimum required sidecar version: v2.23
.
- Update the bootstrap script version that uses
rpm --force
(#40)
Minimum required sidecar version: v2.23
.
- ENG-8228: Add reduce_security_group_rules_count variable to avoid cartesian product in security group rules (#28)
Minimum required sidecar version: v2.23
.
- Update the bootstrap script version that uses
rpm --force
(#40)
Minimum required sidecar version: v2.23
.
- ENG-7488: Reduce sidecar default instance size (#25)
Minimum required sidecar version: v2.23
.
- Add LICENSE (#22)
Minimum required sidecar version: v2.23
.
- Fix initialization error handling for EC2-based sidecars (#19)
Minimum required sidecar version: v2.23
.
- Set proper partitions and account ID to IAM policies (#21)
Minimum required sidecar version: v2.23
.
- Add parameter to control cross zone load balancing (#20)
Minimum required sidecar version: v2.23
.
Minimum required sidecar version: v2.23
.
- Remove old dependencies and update docker compose version (#16)
Minimum required sidecar version: v2.23
.
- Improve logs (#15)
Minimum required sidecar version: v2.23
.
- Improve docs
Minimum required sidecar version: v2.23
.
- Update sidecar-templates with support for denodo and redshift repo types (#12)
Remove wrong defaults (#13)
Minimum required sidecar version: v2.23
.
- Fix default variable value and update docs (#11)
- Update docs (#9)
- MongoDB port allocation range definition (#10)
Minimum required sidecar version: v2.23
.
- Use single variable to assign database ports (#6)
Minimum required sidecar version: v2.20
.
- Support Vault integration configuration (#8)
Minimum required sidecar version: v2.20
.
- Initialize NGINX_RESOLVER env (#7)
Minimum required sidecar version: v2.20
.
- Reserve Ports for the Rest Service Plugin (#5)
Minimum required sidecar version: v2.20
.
- Replaced lifecycle hook with ELB health check (#2)
Minimum required sidecar version: v2.20
.
- Initial commit