CHANGELOG.md

Changelog

3.25.0 (2026-04-07)

Features

• Updated aws_lb_controller_iam_policy.json.tpl to grant required permissions (#136) (c212889)

3.24.1 (2026-02-17)

Bug Fixes

• Add global zk required port 2181 to SG (#148) (d2a09ee)

3.24.0 (2026-02-17)

Features

• Support cross region privatelink endpoint (#146) (0f4b8b5)

3.23.3 (2026-02-17)

Bug Fixes

• Move vpce:AllowMultiRegion to statement without tag condition (#144) (bd4f11f)

3.23.2 (2026-02-17)

Bug Fixes

• Update permission boundary for vpce permissions (#142) (a03b303)

3.23.1 (2026-02-17)

Bug Fixes

• Add permissions to create private link service cross regions (#140) (c0380cf)

3.23.0 (2025-09-18)

Features

• Declare SLB permissions on AliCloud (#137) (c9bb72e)

3.22.1 (2025-07-11)

Bug Fixes

• remove provider block in child module (#134) (3d6c3ff)

3.22.0 (2025-06-11)

Features

• Support alicloud international (#130) (fe64024)

3.21.0 (2025-04-15)

Features

• Support creating separate PSC for each zone in GCP (#127) (7b7746a)

3.20.0 (2025-04-03)

Features

• support volume access for gcp (#125) (45ed5ac)

Bug Fixes

• removed slash suffix for volume access module (#124) (32b5b54)
• Rename account id to google service account id (#126) (2c26a43)
• update s3 table permission (#122) (1264638)

3.19.0 (2025-02-28)

Features

• add permissions for karpenter (#105) (ec3f23b)
• simplify azure vendor access module (#118) (8f46442)
• Support s3 table (#111) (55280ad)

Bug Fixes

• add s3tables to boundary (#119) (91d111d)
• allow detach instance profile (#117) (ac58095)
• reduce s3table access permission (#120) (29ad930)

3.18.0 (2025-01-14)

Features

• Support permission init for control plane management volume (#104) (54cfb6f)

Bug Fixes

• azure: add depends_on for azure vendor-access module (#109) (64ee2b3)

3.17.0 (2025-01-07)

Features

• azure: add Storage Blob Data Owner for role assignment condition (#106) (b6506da)

3.16.1 (2024-11-25)

Bug Fixes

• Add new required EKS permissions (#99) (cfa2446)

3.16.0 (2024-11-20)

Features

• Allow array of Org IDs (#97) (3990b48)
• Split AWS Policies (#98) (9c404c0)

Bug Fixes

• update source path for new version (#95) (db248d5)

3.15.0 (2024-07-27)

Features

• aws: add private link module (#92) (b99a234)
• Support GCP impersonation (#94) (97cfe1c)

3.14.1 (2024-07-05)

Bug Fixes

• Prioritizing streamnative_google_account_ids (#87) (409f5e5)

3.14.0 (2024-07-02)

Features

• update federated web identify to support multiple gsa ids (#85) (bdf1df7)

3.13.1 (2024-05-22)

Bug Fixes

• autoscaling condition key (470011e)
• aws: autoscaling condition key (#84) (470011e)
• use wildcard dns records for brokers in Azure private endpoint module (#82) (0528113)

3.13.0 (2024-05-07)

Features

• Add KMS for encrypting k8s etcd (#77) (4632366)
• Allow iam:PutRolePolicy and iam:DeleteRolePolicy in aws (#79) (8740a56)
• aws: allow update route tables (#80) (577978d)

3.12.0 (2024-04-08)

Features

• add module for creating private endpoint and private dns record in Azure (#75) (bba75e0)
• update aws role session duration (#71) (0683fc6)

3.11.1 (2024-01-24)

Bug Fixes

• fix typo (#64) (fbafeb2)

3.11.0 (2024-01-23)

Features

• add azure production and staging env gsa ids (#56) (c935c91)

Bug Fixes

• github workflow permission (#57) (1217189)
• reduce character count (#62) (5c423ef)
• reduce character limitr (#61) (d022643)
• update aws policy (a08c964)
• update aws policy and docs (#59) (a08c964)

3.10.0 (2024-01-23)

Features

• add azure production and staging env gsa ids (#56) (c935c91)
• remove sub level permission for azure cloud manager (#55) (4631fb4)

Bug Fixes

• github workflow permission (#57) (1217189)
• update aws policy (a08c964)
• update aws policy and docs (#59) (a08c964)

3.9.0 (2023-12-11)

Features

• update permissions for bootstrap and boundary policy (#52) (711f06a)

Bug Fixes

• add pr check ci (e5bf7e6)
• add pr check ci (#53) (e5bf7e6)

3.8.0 (2023-11-01)

Features

• add ReadOnlyAccess policy for bootstrap and management role (#47) (5e26b08)

Bug Fixes

• Add provider version requirement for private service (#48) (ca4efe3)

3.7.0 (2023-10-24)

Features

• Add GCP BYOC vendor access module (#42) (98b0dd9)

3.6.1 (2023-10-09)

Bug Fixes

• typo in bootstrap template (#39) (70922ee)

3.6.0 (2023-10-09)

Features

• add iam policy for aws vpc peering (#37) (b67eeae)

3.5.0 (2023-08-02)

Features

• Support create private service endpoint on shared VPC (#34) (8c9dc5d)