6.0.0

FEATURES

• Adding efs and ebs kms key variables
• Parameter kms_key_arn no longer available

⚠️ BREAKING CHANGES AND HOW TO FIX ⚠️

The parameter kms_key_arn has been split into efs_key_arn and ebs_key_arn so it resource can use its own kms key.
If you are not using kms_key_arn variable the upgrade will not break the state.

EFS key change will cause terraform to recreate EFS resources

Version =< 5.9.0

module "ecs_apps" {
  source               = "git::https://github.com/DNXLabs/terraform-aws-ecs.git?ref=5.9.0"

  name                 = "${local.workspace["cluster_name"]}"
  intance_types        = ["t3.large","t2.large","m2.xlarge"]
  vpc_id               = "${data.aws_vpc.selected.id}"
  private_subnet_ids   = ["${data.aws_subnet_ids.private.ids}"]
  public_subnet_ids    = ["${data.aws_subnet_ids.public.ids}"]
  secure_subnet_ids    = ["${data.aws_subnet_ids.secure.ids}"]
  certificate_arn      = "${data.aws_acm_certificate.dnx_host.arn}"
  on_demand_percentage = 0
  asg_min              = 1
  asg_max              = 4
  asg_memory_target    = 50
  kms_key_arn          = "arn:aws:kms:us-east-1:xxxxxxxxxxxx:key/aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
}

New version >= 6.0.0

module "ecs_apps" {
  source               = "git::https://github.com/DNXLabs/terraform-aws-ecs.git?ref=5.9.0"

  name                 = "${local.workspace["cluster_name"]}"
  intance_types        = ["t3.large","t2.large","m2.xlarge"]
  vpc_id               = "${data.aws_vpc.selected.id}"
  private_subnet_ids   = ["${data.aws_subnet_ids.private.ids}"]
  public_subnet_ids    = ["${data.aws_subnet_ids.public.ids}"]
  secure_subnet_ids    = ["${data.aws_subnet_ids.secure.ids}"]
  certificate_arn      = "${data.aws_acm_certificate.dnx_host.arn}"
  on_demand_percentage = 0
  asg_min              = 1
  asg_max              = 4
  asg_memory_target    = 50
  efs_key_arn          = "arn:aws:kms:us-east-1:xxxxxxxxxxxx:key/aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
  ebs_key_arn          = "arn:aws:kms:us-east-1:xxxxxxxxxxxx:key/aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
}

5.9.0

What's Changed

• Enable use of EFS Lifecycle policy by @alexandrealvao in #37

Full Changelog: 5.8.0...5.9.0

5.8.3

What's Changed

• Adding policy to allow fetching from secrets manager by @adenot in #33

Full Changelog: 5.7.0...5.8.3

5.8.0

What's Changed

• Adding policy to allow fetching from secrets manager by @adenot in #33

Full Changelog: 5.7.0...5.8.0

5.7.0

What's Changed

• Capacity rebalance by @jrpradojr in #28
• 📦 NEW: Add CONTRIBUTING.md by @caiovfernandes in #30
• Adding optional egress sg rule to ALB, needed for OIDC authentication by @adenot in #32
• WAF rate limit rule and managed block rules by @adenot in #31

Full Changelog: 5.6.0...5.7.0

5.6.0

ENHANCEMENTS

• Control EFS creation unconditionally from Fargate

NOTES
⚠️ There's a possible drift caused by this update:

If you use fargate_only: true before this update, it would not create EFS.
After this update, it will create EFS.

So if you do not require EFS, you need to pass create_efs: false to disable it.

5.5.3

ENHANCEMENTS

• Optionally, private key can be generated to connect to ec2 of ecs nodes

5.5.2

BUGFIXES

• Adding policy to allow execute-command

5.5.1

ENHANCEMENTS

• Adding outbound SG rule to S3 endpoint when used

5.5.0

ENHANCEMENTS

• New parameter security_group_ecs_nodes_outbound_cidrs that controls outbound cidrs for ECS nodes SG