v7.2.0
terraform-ibm-modules-ops
released this
23 Jan 10:41
·
224 commits
to main
since this release
7.2.0 (2024-01-23)
Features
- add support for the COS module creating a resource key for IAM only, or a resource key for IAM and HMAC.
The following input variables are renamed:
-create_hmac_key
->create_resource_key
-hmac_key_name
->resource_key_name
- hmac_key_role -> resource_key_role
A new input variable is introduced:generate-hmac-credentials
By defaultgenerate-hmac-credentials
is false and an IAM only resource key is created. Change the value totrue
to generate an IAM and HMAC resource key. Note: This is a change in behavior, previously the default option was to generate an resource key containing both IAM and HMAC keys.
When deploying for the first time at this level, everything is deployed as expected on the first apply.
When upgrading and requiring the IAM and HMAC resource key, the upgrade sequence should be to two deploys. The first deploy should rename existing properties. Then apply. Then add generate-hmac-credentials = true. Then apply. During the first apply some new terraform_data resources are created, during the second deploy the resource key is upgraded in place.
When upgrading and requiring an IAM only resource key, the upgrade sequence may not remove the HMAC key from resource key in the state file; but the IAM key is still present. This will correct itself later, or to force the removal; add generate-hmac-credentials = true. Then apply. Then remove generate-hmac-credentials and apply again. Both applies will be upgrade in place. (#506) (f5db77c)