12.14.5 - new password rule for PCI compliance

Added

• Add a variable to set the requireAlphaAndNumeric password rule.

What's Changed

• Release 12.15.0 -- add rule alpha numeric by @briskt in #284

Full Changelog: 12.14.4...12.14.5

12.14.4 - backup error notification with Sentry

What's Changed

• Release -- add Sentry for backup error notification by @briskt in #285

Full Changelog: 12.14.3...12.14.4

12.14.3 -- deprecated auth_saml_entityId

What's Changed

• Release 12.14.3 -- deprecate auth_saml_entityId and calculate the value by @briskt in #283

Full Changelog: 12.14.2...12.14.3

12.14.2 - revert mfa_api_key and mfa_api_secret

Changed

• Revert the addition of mfa_api_key and mfa_api_secret and recommend Parameter Store instead.

What's Changed

• Release 12.14.2 -- revert addition of new MFA key/secret inputs by @briskt in #282

Full Changelog: 12.14.1...12.14.2

12.14.1 - deprecate redundant configuration

Deprecated

• Deprecate auth_saml_sloUrl and auth_saml_ssoUrl. Use new variable auth_saml_idp_url instead.
• Deprecated mfa_totp_apikey: replaced with mfa_api_key.
• Deprecated mfa_totp_apisecret: replaced with mfa_api_secret.
• Deprecated mfa_webauthn_apikey: replaced with mfa_api_key.
• Deprecated mfa_webauthn_apisecret: replaced with mfa_api_secret.
• Deprecated mfa_webauthn_appid: the value of password_profile_url + "/app-id.json" will be used if omitted.
• Deprecated mfa_webauthn_rpdisplayname: the value of idp_display_name will be used instead.
• Deprecated mfa_webauthn_rpid: the value of cloudflare_domain will be used instead.

See also: silinternational/idp-id-broker#400

What's Changed

• use one new variable (auth_saml_idp_url) for slo and sso URLs by @briskt in #281
• Release 12.14.1 -- deprecate some of the MFA service configuration variables by @briskt in #280

Full Changelog: 12.14.0...12.14.1

12.14.0 - add AWS Parameter Store

What's Changed

• Release 12.14.0 -- add AWS Parameter Store configuration by @briskt in #279

Full Changelog: 12.13.1...12.14.0

12.13.1

Changed

• Option to disable detailed monitoring

add IPv6 option for ingress

Added

• Add option to add IPv6 to VPC and ALB
• Add option to remove public IPv4 from ALB

What's Changed

• add IPv6 capability for ingress traffic by @briskt in #277

Full Changelog: 12.12.3...12.13.0

fixed Terraform CI check

Fixed

• Fixed Terraform check to include all directories

fixes for problems found by tflint

Added

• Added type on all variables that didn't already have it.

Fixed

• In the 030-phymyadmin module, connected the cpu and memory variables to the phpmyadmin module.

Removed

• Removed unused variables and data elements