v38.0.0

FAST Upgrading Notes

• the moved/v37.4.0-v38.0.0.tf file can be used in the resource management stage to move several changed resources, link or copy it in the stage before applying the new version
• the project factory service accounts and buckets have been renamed, move project factory state to a local file before running the updated resource management, then restart project factory from local state with the new provider

Breaking Changes

• modules/vpc-sc: Referencing ingress/egress policies that are not defined results in an error (previously, undefined directional policies were silently ignored) [#2909]
• modules/project-factory: The automation.buckets attribute has been changed to automation.bucket and support for multiple state buckets has been dropped. Save your state to a local file for any automation-enabled project before applying changes in the project factory. [#2914]
• modules/project: Move input variable service_agents_config.services_enabled to project_reuse.project_attributes.services_enabled [#2900]
• fast/stages/0-boostrap: Enabled restrictProtocolForwardingCreationForTypes organization policy to internal only by default [#2884]
• fast/stages/0-boostrap/data/org-policies-managed: New set of org policies using managed constraints [#2884]
• fast/stages/0-boostrap: If you use var.org_policies_config.constraints.allowed_policy_member_domains or var.org_policies_config.constraints.allowed_policy_member_domains, move their values to a YAML file under bootstrap's org policy factory. [#2878]

What's Changed

• Flexible stage 2s in FAST resource manager by @ludoo in #2840
• Support mulitple universes in bootstrap by @juliocc in #2851
• Allow addons to any flex stage 2 by @juliocc in #2853
• Expose custom constraint factory in bootstrap by @juliocc in #2854
• Workflow fix by @karpok78 in #2864
• Add bucket IAM policy read by @karpok78 in #2872
• New FAST stages diagram by @ludoo in #2875
• Move DRS and essential contact domains to factory by @juliocc in #2878
• Add new set of org policies with managed constraints to FAST bootstrap by @juliocc in #2884
• Add restrictProtocolForwardingCreationForTypes to FAST import policies by @juliocc in #2888
• Address DNS issues with googleapis RPZ and forwarding by @ludoo in #2891
• Update VPC-SC module and FAST stage by @juliocc in #2887
• Add universe support to iam-service-account by @juliocc in #2892
• Add support for project-level log sinks to FAST stage 0 by @ludoo in #2893
• Make service agents work in different universes by @juliocc in #2894
• FAST project templates example by @ludoo in #2897
• Project factory additions, project module reuse implementation by @ludoo in #2899
• New SecOps anonymization pipeline by @simonebruzzechesse in #2794
• Allow passing explicit regions in net test addon subnets by @ludoo in #2902
• Fix default compute.restrictProtocolForwardingCreationForTypes value by @juliocc in #2904
• Update default FAST org policies by @juliocc in #2906
• Add ability to refer to other project service accounts in Project Factory by @wiktorn in #2900
• Add provider output files to project factory stage, single automation bucket in module by @ludoo in #2914
• Add title to VPC-SC directional policies by @juliocc in #2909
• Add error messages for failing interpolations in project-factory by @wiktorn in #2917

New Contributors

• @karpok78 made their first contribution in #2864

Full Changelog: v37.4.0...v38.0.0