feat: updated IBM provider version: 1.78.1 -> 1.78.2<br>- updated landing-zone-vpc: 7.23.5 -> 7.23.12<br> - bug fixes and dependency updates<br>- updated landing-zone-vsi: 4.7.1 -> 5.1.23<br> - fixed a bug where the virtual network interface (VNI) was always getting created in the Default resource group(see below note on breaking change)<br> - Updated the scope of the KMS auth policy to now be scoped to the exact key. When upgrading from a previous version, the auth policy will be re-created, however the new policy will be created before the old one is destroyed so there will be no interruption to every day services (#998)

BREAKING CHANGE: If you are upgrading from a previous version of the landing zone VSI module or DA, the upgrade is going to destroy and re-create all virtual network interfaces and virtual service instances as they will get created in the correct resource group now. Ensure to plan accordingly before upgrading.

Author: toddgiguere

README.md

@@ -851,17 +851,17 @@ module "cluster_pattern" {
 
 | Name | Source | Version |
 |------|--------|---------|
-| <a name="module_bastion_host"></a> [bastion\_host](#module\_bastion\_host) | terraform-ibm-modules/landing-zone-vsi/ibm | 4.7.1 |
-| <a name="module_cluster"></a> [cluster](#module\_cluster) | terraform-ibm-modules/base-ocp-vpc/ibm | 3.46.14 |
+| <a name="module_bastion_host"></a> [bastion\_host](#module\_bastion\_host) | terraform-ibm-modules/landing-zone-vsi/ibm | 5.1.23 |
+| <a name="module_cluster"></a> [cluster](#module\_cluster) | terraform-ibm-modules/base-ocp-vpc/ibm | 3.48.3 |
 | <a name="module_dynamic_values"></a> [dynamic\_values](#module\_dynamic\_values) | ./dynamic_values | n/a |
-| <a name="module_f5_vsi"></a> [f5\_vsi](#module\_f5\_vsi) | terraform-ibm-modules/landing-zone-vsi/ibm | 4.7.1 |
+| <a name="module_f5_vsi"></a> [f5\_vsi](#module\_f5\_vsi) | terraform-ibm-modules/landing-zone-vsi/ibm | 5.1.23 |
 | <a name="module_key_management"></a> [key\_management](#module\_key\_management) | ./kms | n/a |
 | <a name="module_placement_group_map"></a> [placement\_group\_map](#module\_placement\_group\_map) | ./dynamic_values/config_modules/list_to_map | n/a |
 | <a name="module_ssh_keys"></a> [ssh\_keys](#module\_ssh\_keys) | ./ssh_key | n/a |
 | <a name="module_teleport_config"></a> [teleport\_config](#module\_teleport\_config) | ./teleport_config | n/a |
 | <a name="module_update_cbr_vpc_zone"></a> [update\_cbr\_vpc\_zone](#module\_update\_cbr\_vpc\_zone) | terraform-ibm-modules/cbr/ibm//modules/cbr-zone-module | 1.31.0 |
-| <a name="module_vpc"></a> [vpc](#module\_vpc) | terraform-ibm-modules/landing-zone-vpc/ibm | 7.23.5 |
-| <a name="module_vsi"></a> [vsi](#module\_vsi) | terraform-ibm-modules/landing-zone-vsi/ibm | 4.7.1 |
+| <a name="module_vpc"></a> [vpc](#module\_vpc) | terraform-ibm-modules/landing-zone-vpc/ibm | 7.23.12 |
+| <a name="module_vsi"></a> [vsi](#module\_vsi) | terraform-ibm-modules/landing-zone-vsi/ibm | 5.1.23 |
 
 ### Resources
 

bastion_host.tf

@@ -42,7 +42,7 @@ module "teleport_config" {
 
 module "bastion_host" {
   source                          = "terraform-ibm-modules/landing-zone-vsi/ibm"
-  version                         = "4.7.1"
+  version                         = "5.1.23"
   for_each                        = local.bastion_vsi_map
   resource_group_id               = each.value.resource_group == null ? null : local.resource_groups[each.value.resource_group]
   create_security_group           = each.value.security_group == null ? false : true

cluster.tf

@@ -244,7 +244,7 @@ module "cluster" {
     if cluster.kube_type == "openshift"
   }
   source             = "terraform-ibm-modules/base-ocp-vpc/ibm"
-  version            = "3.46.14"
+  version            = "3.48.3"
   resource_group_id  = local.resource_groups[each.value.resource_group]
   region             = var.region
   cluster_name       = each.value.cluster_name

examples/one-vpc-one-vsi/version.tf

@@ -3,7 +3,7 @@ terraform {
   required_providers {
     ibm = {
       source  = "IBM-Cloud/ibm"
-      version = "1.78.1"
+      version = "1.78.2"
     }
   }
 }

examples/override-example/version.tf

@@ -3,7 +3,7 @@ terraform {
   required_providers {
     ibm = {
       source  = "IBM-Cloud/ibm"
-      version = "1.78.1"
+      version = "1.78.2"
     }
   }
 }

f5_vsi.tf

@@ -117,7 +117,7 @@ locals {
 
 module "f5_vsi" {
   source                        = "terraform-ibm-modules/landing-zone-vsi/ibm"
-  version                       = "4.7.1"
+  version                       = "5.1.23"
   for_each                      = local.f5_vsi_map
   resource_group_id             = each.value.resource_group == null ? null : local.resource_groups[each.value.resource_group]
   create_security_group         = each.value.security_group == null ? false : true

main.tf

@@ -33,7 +33,7 @@ locals {
 # Due to existing implicit dependencies we do not think this will be an issue, including auth policies for activity tracker.
 module "vpc" {
   source                      = "terraform-ibm-modules/landing-zone-vpc/ibm"
-  version                     = "7.23.5"
+  version                     = "7.23.12"
   for_each                    = local.vpc_map
   name                        = each.value.prefix
   existing_vpc_id             = each.value.existing_vpc_id

patterns/mixed/versions.tf

@@ -8,7 +8,7 @@ terraform {
   required_providers {
     ibm = {
       source  = "IBM-Cloud/ibm"
-      version = "1.78.1"
+      version = "1.78.2"
     }
     external = {
       source  = "hashicorp/external"

patterns/roks-quickstart/version.tf

@@ -4,7 +4,7 @@ terraform {
     # renovate is set up to keep provider version at the latest for all DA solutions
     ibm = {
       source  = "IBM-Cloud/ibm"
-      version = "1.78.1"
+      version = "1.78.2"
     }
   }
 }

patterns/roks/module/versions.tf

@@ -9,7 +9,7 @@ terraform {
     # tflint-ignore: terraform_unused_required_providers
     ibm = {
       source  = "IBM-Cloud/ibm"
-      version = ">= 1.78.1"
+      version = ">= 1.78.2"
     }
     external = {
       source  = "hashicorp/external"