4.2.0

What's Changed

• chore: change all references to 'runatlantis' by @bschaatsbergen in #145
• chore: Configure Renovate by @renovate in #144
• chore(deps): update actions/checkout action to v4 by @renovate in #146
• fix: add repository to checkout step in ci.yml by @d-costa in #148
• fix: google_logging_enabled variable now correctly passed to instance template by @d-costa in #151
• chore: disable terraform-docs push when on forks and sign commit by @d-costa in #150
• chore(deps): update planetscale/ghcommit-action action to v0.1.36 by @renovate in #152
• chore(deps): update planetscale/ghcommit-action action to v0.1.37 by @renovate in #153
• chore(deps): update planetscale/ghcommit-action action to v0.1.38 by @renovate in #154
• feat: add option to expose /healthz without IAP by @d-costa in #159
• chore(deps): update planetscale/ghcommit-action action to v0.1.43 by @renovate in #155
• chore(deps): update terraform-docs/gh-actions action to v1.2.0 by @renovate in #157
• chore(deps): update planetscale/ghcommit-action action to v0.1.44 by @renovate in #160
• feat: add persistent_disk_type variable by @d-costa in #161
• chore(deps): update terraform-docs/gh-actions action to v1.2.2 by @renovate in #162
• chore(deps): update planetscale/ghcommit-action action to v0.1.45 by @renovate in #163
• chore(deps): update planetscale/ghcommit-action action to v0.1.47 by @renovate in #167
• chore(deps): update planetscale/ghcommit-action action to v0.2.0 by @renovate in #168
• Increase version requirement of vm module to v3.2 by @cblkwell in #170
• chore(deps): update terraform-docs/gh-actions action to v1.3.0 by @renovate in #165
• Add license scan report and status by @fossabot in #164
• chore: fix terraform docs behavior by @d-costa in #171
• Fix pinning of machine_type #2 by @dimisjim in #172

New Contributors

• @renovate made their first contribution in #144
• @fossabot made their first contribution in #164
• @dimisjim made their first contribution in #172

Full Changelog: 4.1.0...4.2.0

4.1.0

What's Changed

• Adding security policy variable for IAP backend by @cblkwell in #138
• feat: add option to enable confidential vm by @d-costa in #130
• feat: shared vpc support by @d-costa in #137
• chore: fix a reference to the Shared VPC example by @bschaatsbergen in #140
• chore(deps): update container-vm to 3.1.1 by @kpocius in #141
• run tfdocs by @bschaatsbergen in #142
• replace precommit with a CI job by @bschaatsbergen in #143

Full Changelog: 3.0.3...4.1.0

3.0.3

Update README.md @bschaatsbergen (#135)

v3.0.2

Minor fix in Cloud Armor README @bschaatsbergen (#134)

what

• Fix a typo in the README.

why

• It's referencing the incorrect example usage.

v3.0.1

feat: add monitoring and fluentbit tags @bschaatsbergen (#126)

what

• See #116

why

• See #116

references

• Closes #116

🚀 Enhancements

feat: add option to attach a security policy to the default backend @d-costa (#132)

what

• Give clients the option to attach a security policy to the default backend service.
• Create a new deployment example, using IAP and Cloud Armor, allowing only events coming from GitHub Webhooks.

why

• Google Cloud Armor security policies to protect applications running behind a load balancer from distributed denial-of-service (DDoS) and other web-based attacks. It also features preconfigured security policies.
• Improve the security of the default backend service: even if the webhook secret is compromised, only requests coming from the whitelisted IPs are allowed.

references

• GitHub Webhook IPs: https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/about-githubs-ip-addresses
• Log4j preconfigured WAF rule: https://cloud.google.com/armor/docs/waf-rules

v3.0.0

Allow metrics to be exposed publicly @bschaatsbergen (#123)

what

• Added a host rule and patch matcher to possibly expose metrics publicly.

why

• As Atlantis uses the /metrics path to expose certain metrics, we should make it possible to access it without IAP.

references

• Closes #120

v2.1.5

chore: fix typo in IAP example related to oauth2 config @bschaatsbergen (#124)

what

• Fixed a typo in the IAP section related to oauth2 config.

references

• Closes #121

v2.1.4

🚀 Enhancements

feat: add checkov @bschaatsbergen (#125)

what

• Added checkov to pre-commit
• Fixed some checkov warnings in the /examples.
• Added a GitHub Workflow to run pre-commit on each PR.

references

• Closes #63

v2.1.3

🚀 Enhancements

feat: add simple Terraform registry syntax example @bschaatsbergen (#119)

what

• Adds a simple example of the Terraform Module Registry syntax.

why

• Makes it easier to implement as there's a bit of reference code.

references

• Closes #56

v2.1.2

SSL Policy for Certificate is configurable @artusiep (#118)

what

• Adding new optional variable for SSL Policy
• Adding example with the most secure SSL Policy GCP provide

why

• configurable SSL Policy should be possible for Atlantis Server to be more secure