v1.538.0

fix: Removed Default Tags @milldr (#49)

## what

Removed passing module.this.tags to defaultTags to the alb controller chart

why

Services like echo-server were using k8s-common ALB instead of the provisioned alb-controller-ingress-group ALB, despite having ingress_type: "alb" configured.

The root cause was tag conflicts: the ALB Controller's defaultTags (from module.this.tags) applied Name: acme-plat-euc1-dev, while the ALB controller ingress group applied Name: acme-plat-euc1-dev-alb-controller-ingress-group. These conflicting Name tags prevented the AWS Load Balancer Controller from reconciling ingresses into the target group.

Ingresses should manage their own tags rather than inheriting the tags from this component.

references

• cloudposse-terraform-components/aws-eks-alb-controller-ingress-group#44

Summary by CodeRabbit

• Chores
  • Removed automatic default tags from the ALB controller values; tagging should now be managed externally.
• Notes
  • No public interfaces changed; no action required beyond updating your tagging strategy.

Update distributed-iam-policy.tf for latest version (v2.13.4) @Cubid (#45)

Update policy to be able to use latest versions of the `aws-load-balancer-controller` component

what

Update manually policy to last version.
Should not be an issue since it only add Actions to the policy

why

When using the latest version of aws-load-balancer-controller, the LB creation fails. Error message indicate missing elasticloadbalancing:DescribeListenerAttributes for the associated role

references

Please, refer to the documentation in the file which explains the update process

Summary by CodeRabbit

• New Features
  • Expanded AWS compatibility by granting additional EC2 permissions (e.g., security groups for VPCs, IPAM pools, route tables).
  • Enhanced Elastic Load Balancing management with listener attributes, capacity reservations, and IP pool modifications.
  • Improved WAF operations by allowing rule priority updates.
• Chores
  • Updated in-policy reference to IAM policy version 2.13.4.

🚀 Enhancements

chore(deps): bump github.com/ulikunitz/xz from 0.5.11 to 0.5.14 in /test @[dependabot[bot]](https://github.com/apps/dependabot) (#47)

Bumps [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) from 0.5.11 to 0.5.14.

Commits

• 7184815 Preparation of release v0.5.14
• 88ddf1d Address Security Issue GHSA-jc7w-c686-c4v9
• c8314b8 Add new package xio with WriteCloserStack
• 4f11dce Update README.md and SECURITY.md to address security questions
• f56ebbf TODO.md: fix a typo
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

🤖 Automatic Updates

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#48)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

chore(deps): bump github.com/ulikunitz/xz from 0.5.11 to 0.5.14 in /test @[dependabot[bot]](https://github.com/apps/dependabot) (#47)

Bumps [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) from 0.5.11 to 0.5.14.

Commits

• 7184815 Preparation of release v0.5.14
• 88ddf1d Address Security Issue GHSA-jc7w-c686-c4v9
• c8314b8 Add new package xio with WriteCloserStack
• 4f11dce Update README.md and SECURITY.md to address security questions
• f56ebbf TODO.md: fix a typo
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#46)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

<details...

v1.537.1

chore(deps): restrict aws provider version to < 6.0.0 @Benbentwo (#34)

This pull request includes a version constraint update for the AWS provider in the Terraform configuration file `src/versions.tf`. The change ensures compatibility with versions up to but not including 6.0.0.

• src/versions.tf: Updated the version constraint for the aws provider to >= 4.9.0, < 6.0.0 to ensure compatibility with future versions while avoiding potential breaking changes in version 6.0.0.

Summary by CodeRabbit

• Chores
  • Updated AWS provider version constraint to require versions between 4.9.0 (inclusive) and 6.0.0 (exclusive).

🤖 Automatic Updates

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#39)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

v1.537.0

chore(deps): restrict helm provider version to ~ 2.0.0 @Benbentwo (#35)

This pull request includes a version constraint update for the Helm provider in the Terraform configuration file `src/versions.tf`. The change ensures compatibility with versions up to but not including 3.0.0.

🤖 Automatic Updates

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#37)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

Enable merge queue @goruha (#33)

## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

Enable merge queue @goruha (#32)

## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

chore(deps): update tflint plugin terraform-linters/tflint-ruleset-aws to v0.40.0 @[renovate[bot]](https://github.com/apps/renovate) (#7)

This PR contains the following updates:

Package	Type	Update	Change
terraform-linters/tflint-ruleset-aws	plugin	minor	0.23.1 -> 0.40.0

---

Release Notes

terraform-linters/tflint-ruleset-aws (terraform-linters/tflint-ruleset-aws)

v0.40.0

Compare Source

What's Changed

Enhancements

• feat: warn against data sources with ephemeral alternatives by @​aristosvo in https://github.com/terraform-linters/tflint-ruleset-aws/pull/861
• rules: Update Lambda deprecated runtimes by @​wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/886
• Update AWS provider/module and generated content by @​github-actions in https://github.com/terraform-linters/tflint-ruleset-aws/pull/870

Chores

• Bump sigstore/cosign-installer from 3.8.1 to 3.8.2 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/872
• Bump the aws-sdk group with 3 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/873
• Bump actions/attest-build-provenance from 2.2.3 to 2.3.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/874
• Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.212.0 to 1.213.0 in the aws-sdk group by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/875
• docs: Rename aws_write_only_attributes.md -> aws_write_only_arguments.md by @​wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/876
• Bump actions/setup-go from 5.4.0 to 5.5.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/877
• Bump golang.org/x/net from 0.39.0 to 0.40.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/879
• Bump the aws-sdk group with 2 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/878
• Bump github.com/zclconf/go-cty from 1.16.2 to 1.16.3 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/883
• Bump the aws-sdk group with 3 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/882
• Bump github.com/hashicorp/terraform-json from 0.24.0 to 0.25.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/884

Full Changelog: terraform-linters/tflint-ruleset-aws@v0.39.0...v0.40.0

v0.39.0

Compare Source

What's Changed

Enhancements

• Update AWS provider/module and generated content by @​github-actions in https://github.com/terraform-linters/tflint-ruleset-aws/pull/840
• Add aws_iam_role_deprecated_policy_attributes rule by @​alexjfisher in https://github.com/terraform-linters/tflint-ruleset-aws/pull/833
• aws_write_only_arguments: recommend write-only arguments where available by @​aristosvo in https://github.com/terraform-linters/tflint-ruleset-aws/pull/860
• Update AWS provider/module and generated content by @​github-actions in https://github.com/terraform-linters/tflint-ruleset-aws/pull/855

Bug Fixes

• provider_missing_default_tags: correctly handle unknown values by @​bendrucker in https://github.com/terraform-linters/tflint-ruleset-aws/pull/851

Chores

• Bump the aws-sdk group with 7 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/839
• Bump golang.org/x/net from 0.35.0 to 0.37.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/842
• Bump the aws-sdk group with 7 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/841
• Bump the aws-sdk group with 2 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/845
• Pin GitHub Action versions by @​wata727 in https://github.com/terraform-linters/tflint-ruleset-aws/pull/846
• Bump actions/setup-go from 5.3.0 to 5.4.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/847
• Bump the aws-sdk group with 2 updates by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/848
• Bump github.com/hashicorp/aws-sdk-go-base/v2 from 2.0.0-beta.62 to 2.0.0-beta.63 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/849
• Bump golang.org/x/net from 0.37.0 to 0.38.0 by @​dependabot in https://github.com/terraform-linters/tflint-ruleset-aws/pull/853
• Bump the aws-sdk group with 3 updates by @​dependabot in [https://github.com/terraform-linters/tflint-ruleset-aws/pull/852](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pu...

v1.536.0

🤖 Automatic Updates

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#31)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

chore(deps): update terraform cloudposse/helm-release/aws to v0.10.1 @[renovate[bot]](https://github.com/apps/renovate) (#4)

This PR contains the following updates:

Package	Type	Update	Change
cloudposse/helm-release/aws (source)	module	patch	0.10.0 -> 0.10.1

---

Release Notes

cloudposse/terraform-aws-helm-release (cloudposse/helm-release/aws)

v0.10.1

Compare Source

🐛 Bug Fixes

Update iam-policy 2.0.0 -> 2.0.1 @​Nuru (#​53)

what

• Update iam-policy 2.0.0 -> 2.0.1

why

• Fix bug when iam_policy_statements is a tuple that cannot be converted to a list

references

• https://github.com/cloudposse/terraform-aws-iam-policy/pull/31

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

Enable merge queue @goruha (#30)

## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

Enable merge queue @goruha (#29)

## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

Enable merge queue @goruha (#28)

## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

Enable merge queue @goruha (#27)

## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

Enable merge queue @goruha (#26)

## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

Enable merge queue @goruha (#25)

## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

Enable merge queue @goruha (#24)

## what - Added `auto-merge` workflow - Update `settings.yaml` - Fix CodeOwners files

why

• Support auto merge PRs
• Create merge queue
• Implement new CodeOwners policy

Bump golang.org/x/crypto from 0.33.0 to 0.35.0 in /test @[dependabot[bot]](https://github.com/apps/dependabot) (#22)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.33.0 to 0.35.0.

Commits

• 7292932 ssh: limit the size of the internal packet queue while waiting for KEX
• f66f74b acme/autocert: check host policy before probing the cache
• b0784b7 x509roots/fallback: drop obsolete build constraint
• 911360c all: bump golang.org/x/crypto dependencies of asm generators
• 89ff08d all: upgrade go directive to at least 1.23.0 [generated]
• e47973b all: update certs for go1.24
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#21)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

v1.535.1

Added tests @goruha (#18)

# What * [x] Add `basic` component test * [x] Add `disabled` component test * [x] Test component drifting

Why

• Test basic component features
• Verify that the component does not create any resources when input enabled: false set
• Verify that the component does not drift on a second run with the same inputs
• Add test for any additional than basic use cases for the component

References

• Component test writing guide
• List of component tests are done

Summary by CodeRabbit

• Bug Fixes

  • Improved Kubernetes provider authentication handling for accurate role determination.

• Chores

  • Updated remote state modules and added ignore rules.
  • Established a new Go testing module with updated dependencies.
  • Removed an outdated test script.

• New Features

  • Introduced comprehensive CLI and sample configuration files for multi-account setups, EKS clusters, VPCs, and AWS Load Balancer Controller (both enabled and disabled modes).
  • Added vendor configuration for managing Terraform module dependencies.

• Tests

  • Added a new test suite to validate AWS Load Balancer Controller deployment.
  • Introduced additional test configurations for various components and environments.
  • Added import section for dependencies in test configurations.
  • Included new test cases for various configurations and components.
  • Added new YAML configuration files for various components and organizational setups.
  • Created a new test suite for validating deployment functionality in the EKS cluster.

🤖 Automatic Updates

Update README.md and docs @[cloudposse-releaser[bot]](https://github.com/apps/cloudposse-releaser) (#20)

## what This is an auto-generated PR that updates the README.md and docs

why

To have most recent changes of README.md and doc from origin templates

v1.535.0

Migrate component from cloudposse/terraform-aws-components

v1.534.0

Migrate component from cloudposse/terraform-aws-components

v1.533.0

Migrate component from cloudposse/terraform-aws-components

v1.532.0

Migrate component from cloudposse/terraform-aws-components