Releases: sysdiglabs/terraform-google-secure-for-cloud
Releases · sysdiglabs/terraform-google-secure-for-cloud
v0.6.0
Features
- Add single-project deployment in K8s (#63)
Bug Fixes
- scan: Scan all repositories by default or let to specify the ones in repository_project_ids (#68)
v0.5.0
Features
- Deploy gcr subscriptions for each project in organizational mode (#64)
Breaking Change: This adds a new variable called project_scan_ids
which specifies the IDs of the projects where a subscription must be created for the expected gcr
topic in each project, and removes the create_gcr_topic
variable which may be confusing to the users, since some of the scanned projects may or may not contain this topic, and verifying if it exists is not an option.
Bug Fixes
- bench: Service Account Role binding (#65)
Fixes issue where we were binding the custom role (which includes the storage.buckets.getIamPolicy permission) to the service account as a resource instead of as an identity. This meant that the service account did not get this permission applied, and was getting 403 errors on certain policies.
- doc: Add
project_id
to usage
Small Modifications
- Delete unused inspec folder (#61)
Refactoring
v0.4.2
Features
Support externalID (#48)
Organizational example consolidation (#46)
Fixes
Create benchmark task last (#43)
Cleanup naming-prefix (#53)
Fix dynamo table (#52)
Use project name instead of display name (#58)
Docs
Add usage to readme and change sink logo (#42)
Add links to required APIs (#45)
v0.4.1
Docs
- Modify main README (#39)
- Add diagrams to README's (#41)
v0.4.0
Features
- Initial cloud-bench implementation (#30)
- Create diagrams for single project and organization example (#38)
v0.3.0
Features
- Add organizational support for cloud-scanning (#33)
- Add organizational support for threat detection (#32)
Fixes
- Use project ID instead of project name (#34)
v0.2.3
Bug Fixes
- Use latest instead of master for cloud images (#29)
v0.2.2
Small Modifications
- Remove all
google_project_service
resources (#28)
v0.2.1
Bug Fixes
- Add secret access to service account (#25)
- Solve error impersonating itself (#24)
- Add required service account and IAM for cloud build (#22)
- Add gcp region and gcp project to cloud connector config (#21)
Features
- Enable all required project services on install (#23)
- Add
cloud-scanning
module (#20)
v0.2.0
Features
- Add telemetry env var (#18)
Release
- Add automation for release processes (#19)
Small Modifications
- Remove unneeded permission (#17)