oci-native-rm-1.0.9

• Removed some ingress rules from the oke-lb-nsg. Necessary ingress rules will be decided by the user when configuring the Ingress controller
• Added an ingress controller guide so that user can quickly understand the most important annotations
• Added a link to the GitOps stack

Full Changelog: v1.0.8...v1.0.9

oci-native-rm-1.0.8

• Fixed a bug for the FSS connectivity. Some source/destination rules were inverted before and there were some rules not necessary
• Added a rule to support FSS in-transit encryption with OKE
• Added an example of a node pool with pre-defined taints using cloud-init script

oci-native-rm-1.0.7

• Bumped OKE module to 5.2.4
• It is now possible to define a custom key to encrypt etcd through the OCI Resource Manager interface. This will require a policy to be in place, or the stack will fail.
• Documentation in oke.tf is now more clear, it is also easier to create a sample node pool

oci-native-rm-1.0.6

This release addresses the following:

• Some security rules have been added so that users can connect the created VCN with a DRG. Some security rules were missing, and the stack will now create them.
• Added support to create security rules so that the control plane can communicate to external services. This is particularly useful if you want to integrate OIDC authentication in OKE

oci-native-rm-1.0.5

• Some code refactoring and better comments
• Deprecated some components from the infra stack
• Default CNI is now Flannel
• Added worker NSG and pod NSG on the OKE stack
• You can now customize the source CIDR block that is allowed the reach the OKE control plane

oci-native-rm-1.0.4

• Fixed documentation
• Added documentation for worker nodes
• Bumped oke module and oci provider version

oci-native-rm-1.0.3

Updated the infra stack. It is now possible to create a bastion subnet that can be public or private. Deployment of the OCI Bastion instance is now optional. There have been also more fixes on some security rule for the bastion subnet, and I have also added an ingress rule so that the bastion subnet can reach workers.

oci-native-rm-1.0.2

Update concerning the infra stack:

• FSS NSG will be created always
• Added option to select individual subnets to create
• Added option to select existing NAT and Service Gateway, instead of creating them by default

Note that selecting gateways is only possible when you are trying to create the stack on an existing VCN.

oci-native-rm-1.0.1

Added home_region variable in the oke module, as in some tenancies it's not picked properly.

oci-native-rm-1.0.0

First release of the Resource Manager stacks to quick start a cloud native project