v0.6.2

ENHANCEMENTS:

• zsec support for Zscaler Cloud: zscalergov.net

BUG FIXES:

• fix: VMSS improvements with new Zscaler Function Zip file v1.0.1

Full Changelog: v0.6.1...v0.6.2

v0.6.1

ENHANCEMENTS:

• zsec support server lookup resiliency improvements

BUG FIXES:

• AzureRM Provider version bump to 3.116.x default to address provider: skip registration for resource providers that are unavailable
• refactor: update Azure deprecated arguments:
  • azurerm_network_interface: enable_ip_forwarding change to ip_forwarding_enabled and enable_accelerated_networking to accelerated_networking_enabled
  • azurerm_route_table: disable_bgp_route_propagation (default true) change to bgp_route_propagation_enabled (default false)

Full Changelog: v0.6.0...v0.6.1

v0.6.0

What's Changed (September 5, 2024)

ENHANCEMENTS:

• refactor: code cleanup for unused variables and UX

FEATURES:

• Virtual Machine Scale Sets (VMSS) Support - (Requires new VHD version 24.3.2)
  • add: module terraform-zscc-ccvmss-azure for flexible orchestration VMSS and scaling policy template
  • add: module terraform-zscc-function-app-azure for Function App and dependency resources
  • add: module terraform-acc-identity-azure support for CC/VMSS and Function App Managed Identity separation
  • add: zsec script support for VMSS greenfield and brownfield deployments

Full Changelog: v0.5.1...v0.6.0

v0.5.1

What's Changed (August 26, 2024)

ENHANCEMENTS:

• feat: Official Azure Marketplace support for both usgovernment and china Azure Clouds. Product information for each can be located here

BUG FIXES:

• fix: remove local file depends_on to avoid conflicts if file does not exist or needs recreated

Full Changelog: v0.5.0...v0.5.1

v0.5.0

What's Changed (May 22, 2024)

FEATURES:

• add: terraform and zsec support for Azure Government ARM_ENVIRONMENT and regions by @jmolnar-zscaler in #36

ENHANCEMENTS:

• add: support for US GOV regions. Compatible with marketplace VHD version 24.3.1 released on May 22, 2024
• add: var zssupport_server to nsg module by @jmolnar-zscaler in #36
• add: zsec automatic lookup zssupport server IP for destination NSG rule by Zscaler Cloud by @jmolnar-zscaler in #36

Full Changelog: v0.4.1...v0.5.0

v0.4.1

What's Changed: (February 29, 2024)

BUG FIXES:

• update az_supported_regions static map to include regions: East US 2, Switzerland North, and UAE North availability zones support by @jmolnar-zscaler in #33
• ZSEC bash script fixes @jmolnar-zscaler in #33

Full Changelog: v0.4.0...v0.4.1

v0.4.0

What's Changed: (December 16, 2023)

FEATURES:

• Azure China support (China East, China East 2, China North, China North 2, and China North 3) by @jmolnar-zscaler and @nmizhquirizs in #27 and #29

BUG FIXES:

• fix: brownfield cc_lb defaults for non-zpa private dns deployments by @jmolnar-zscaler in #26

ENHANCEMENTS:

• ZSEC bash script support for Azure China regions by @jmolnar-zscaler in #27
• add: variable support_access_enabled for dynamic NSG rule creation for Zscaler Support Tunnel access by @jmolnar-zscaler in #28
• add: zsec prompt for support tunnel rule creation by @jmolnar-zscaler in #28
• add: Standard_DS2_v2 size support by @jmolnar-zscaler in #25
• ZSEC bash script refactoring by @jmolnar-zscaler in #25

Full Changelog: v0.3.0...v0.4.0

v0.3.0

[0.3.0] - 2023-09-30

---

FEATURES:

• Azure Private DNS module (terraform-zscc-private-dns-azure)
  • add: deployment types base_1cc_zpa/base_cc_lb_zpa (greenfield/pov/test) with Azure Private DNS module integration
  • add: conditional variable zpa_enabled for cc_lb (brownfield/prod) deployment for Azure Private DNS module integration
  • add: zsec additions for new deployment options + domains adding to Private DNS Resolver Rule creation
• AzureRM Provider version bump to 3.74.x default. Support from 3.46.x to 3.74.x

ENHANCEMENTS:

• Encryption at Host enabled by default
  • add: encryption_at_host_enabled variable and default to true
• change: workload VM for greenfield deployments dns_servers to Azure DNS default
• add: AZURE_MANAGED_IDENTITY_CLIENT_ID field to userdata generation
• change: variable load_distribution set to Azure "Default" corresponding to None/5-tuple session persistency in the Azure Portal.
• change: name_prefix variable default to zscc

BUG FIXES:

• refactor: terraform-zscc-network-azure to remove data source read dependencies
• add: variable probe_threshold for Azure LB health probe fixes

v0.2.0

[0.2.0] - 2023-03-18

---

• Mininum Azure Provider upgrade from 2.x to 3.x (3.46.x)
• refactor resources for 3.x provider: azurerm_public_ip, azurerm_lb_probe, and cc_lb_rule
• Fix for Azure Load Balancer frontend_ip creation in Regions that do not support availability zones. If a single zone is specified to variable "zones" and variable "zones_enabled" is true then the frontend_ip will be created in that single zone. If more than one zone is specified, we will default to all 3 zones (zone-redundant) to follow Azure Network API
• Fix for NSG data source read dependency when resource orginally created (byo_nsg = false) forcing recreate on subsequent terraform applies

v0.1.1

[0.1.1] - 2022-12-16

---

docs: comprehensive README
fix: variable condition tonumber. terraform #30919
fix: tflint terraform_deprecated_index
fix: public ip conditional create logic
fix: private_ip_address_allocation capitalize
feat: add westus3 zone support
chore: update codeowners
fix: zsec retain copy of zsecrc on destroy