v1.1.0

Notes

• Site-to-Site VPN: the hub can now terminate an IPsec VPN against an on-premises or third-party peer, HA by default with two tunnels in separate availability zones (#51)
• Firewall Appliance Replaced: the hub-and-spoke-firewall flavor now deploys OPNsense 26.1 instead of pfSense 2.7.2, which is not an in-place upgrade and requires replacing the appliance (#32)
• Firewall Configuration as Code: the new firewall-config module pushes aliases, rules, NAT and routes to the OPNsense appliance through its API via terraform (#51)
• Platform Managed Kubernetes: the new platform-kubernetes module provisions a central, region-scoped SKE cluster with an HA baseline and optional KMS-encrypted volumes and observability (#39)

What's Changed

• chore(deps): bump the terraform-providers group across 1 directory with 2 updates by @dependabot[bot] in #25
• Updated STACKIT Marketplace link by @mahauber in #26
• feat(governance): support custom parent folder ID for resource manage… by @mahauber in #29
• chore(deps): bump stackitcloud/stackit from 0.96.0 to 0.97.0 in /src in the terraform-providers group across 1 directory by @dependabot[bot] in #27
• feat: add federated identity provider configuration for management se… by @mahauber in #24
• feat(firewall): switch from pfSense to OPNsense in configurations and… by @mahauber in #32
• chore(deps): bump stackitcloud/stackit from 0.97.0 to 0.98.0 in /src in the terraform-providers group across 1 directory by @dependabot[bot] in #33
• fix: update stackit version and correct firewall next hop IP description by @mahauber in #38
• chore(deps): bump stackitcloud/stackit from 0.98.0 to 0.99.0 in /src in the terraform-providers group across 1 directory by @dependabot[bot] in #42
• chore(deps): bump the terraform-providers group across 1 directory with 2 updates by @dependabot[bot] in #44
• feat: central/shared kubernetes platform landing zone and optional namespace creation in app landing zone by @lweberru in #39
• feat: add architecture documentation by @mahauber in #40
• chore(deps): bump stackitcloud/stackit from 0.101.0 to 0.104.0 in /src in the terraform-providers group across 1 directory by @dependabot[bot] in #45
• Add VPN + OPNSense firewall config by @mahauber in #51

New Contributors

• @lweberru made their first contribution in #39

Full Changelog: v1.0.0...v1.1.0

v1.0.0

We are excited to announce the first public release of our Landing Zone module examples.

v0.1.0

What's Changed

• Bump the terraform-providers group across 2 directories with 1 update by @dependabot[bot] in #1
• Bump the terraform-providers group across 7 directories with 1 update by @dependabot[bot] in #5
• Feature/cleanup and dynamic inputs by @mahauber in #10

New Contributors

• @dependabot[bot] made their first contribution in #1
• @mahauber made their first contribution in #10

Full Changelog: https://github.com/stackitcloud/stackit-landing-zone/commits/v0.1.0