Skip to content

v7.2.0

Compare
Choose a tag to compare
@terraform-ibm-modules-ops terraform-ibm-modules-ops released this 23 Jan 10:41
· 224 commits to main since this release
f5db77c

7.2.0 (2024-01-23)

Features

  • add support for the COS module creating a resource key for IAM only, or a resource key for IAM and HMAC.

    The following input variables are renamed:

    - create_hmac_key -> create_resource_key
    - hmac_key_name -> resource_key_name
    - hmac_key_role -> resource_key_role
    A new input variable is introduced: generate-hmac-credentials

    By default generate-hmac-credentials is false and an IAM only resource key is created. Change the value to true to generate an IAM and HMAC resource key. Note: This is a change in behavior, previously the default option was to generate an resource key containing both IAM and HMAC keys.

    When deploying for the first time at this level, everything is deployed as expected on the first apply.

    When upgrading and requiring the IAM and HMAC resource key, the upgrade sequence should be to two deploys. The first deploy should rename existing properties. Then apply. Then add generate-hmac-credentials = true. Then apply. During the first apply some new terraform_data resources are created, during the second deploy the resource key is upgraded in place.

    When upgrading and requiring an IAM only resource key, the upgrade sequence may not remove the HMAC key from resource key in the state file; but the IAM key is still present. This will correct itself later, or to force the removal; add generate-hmac-credentials = true. Then apply. Then remove generate-hmac-credentials and apply again. Both applies will be upgrade in place. (#506) (f5db77c)