Skip to content

Releases: UKHomeOffice/acp-tf-msk-cluster

v1.8.0 - TLS enforcement

16 Aug 14:48
0b8fcef
Compare
Choose a tag to compare

This release enforces the use of TLS for the MSK clusters by doing the following:

  • Removal of Plaintext Broker and Zookeeper ports from the default Security Group, only TLS ports are explicitly allowed
  • Hard coding TLS in encryption_in_transit config block
  • Requiring TLS for in-cluster communications
  • This version is only compatible with Kafka versions >= 2.5.1

v1.7.1 - broker logging terraform fix

05 Aug 08:54
41c2764
Compare
Choose a tag to compare

The previous version v1.7.0 was unable to be upgraded to unless audit logging was enabled.

v1.7.0 - optional broker logs to s3 bucket

01 Aug 13:14
ce4f668
Compare
Choose a tag to compare
Merge pull request #33 from UKHomeOffice/issue-2379-2

v1.7.0 - broker logs s3 bucket

v1.6.1

12 May 10:44
e6c7133
Compare
Choose a tag to compare

Changed default client_broker from TLS_PLAINTEXT to TLS.

v1.6.0

27 Apr 09:14
be5ed89
Compare
Choose a tag to compare
  • Added storage autoscaling to the module.

v1.5.0

19 Jan 17:19
db3f162
Compare
Choose a tag to compare

Update to terraform 1.1.3

v1.4.2

18 Nov 12:39
74d4e63
Compare
Choose a tag to compare

Fix naming convention for to replace CertificateauthorityarnList with ca_arn

v1.4.1

18 Oct 10:27
05c8445
Compare
Choose a tag to compare
  • Fix condition for client_authentication to allow the CA that is created by the module to be used (#26)

v1.4.0

01 Oct 13:04
226a62b
Compare
Choose a tag to compare
  • Remove unneeded egress security group rule (#25)

v1.3.0

22 Jun 15:10
6ed799e
Compare
Choose a tag to compare
  • Add email address tags to IAM users
  • Add self service management of IAM keys