Releases: oci-landing-zones/terraform-oci-modules-iam
Releases · oci-landing-zones/terraform-oci-modules-iam
Release 0.3.0
August 18, 2025 Release Notes - 0.3.0
Updates
- Compartments module
- Module now allows users to create a compartment with a tag default, that uses a tag from a tag namespace created in the same terraform run.
- Identity Domains module
- User lookup optimized. Users are now searched once for each provided identity domain and only for identity domains where the members attribute is non empty.
- Code formatted per Terraform standards.
Release 0.2.9
April 01, 2025 Release Notes - 0.2.9
Updates
- Identity Domains module
- Group membership updates managed through some means other than via the module can be either ignored or honored. This is enabled by new attribute ignore_external_membership_updates within identity_domain_groups_configuration variable. See it in variables.tf. The attribute behavior is described in Identity Domains module README.md.
- Removed attribute_sets = ["all"] from oci_identity_domains_group resource block, as it has been observed it prevents tags from being updated. A solution for the less harmful side effect of unsolicited updates during terraform plan is being sought.
- Added module default freeform tags to groups and dynamic groups.
- Policies module
- Moved permissions in template policies to application administrators for reading Tag namespaces, Compute images, Catalog listings and repositories to the tenancy level, even when an enclosing compartment is deployed.
- Description of policies updated to "Core Landing Zone policy for...".
Release 0.2.8
March 25, 2025 Release Notes - 0.2.8
Updates
- Identity Domains module
- Only ACTIVE users are looked up for group membership assignments in identity domains.
Release 0.2.7
January 10, 2025 Release Notes - 0.2.7
Updates
- Groups module
- Only ACTIVE users are looked up for group membership assignments.
Release 0.2.6
Updates
- Identity Domains module
- Added attribute_sets = ["all"] to oci_identity_domains_group resource block to avoid group memberships being updated when there are no updates to group memberships. Bug oracle/terraform-provider-oci#1933.
Release 0.2.5
November 01, 2024 Release Notes - 0.2.5
Updates
- Policies module
- Added IAM policies for OCI Network Firewall and ZPR.
- OCI Network Firewall granted manage permissions to Network admins.
- ZPR granted manage permissions to Security admins.
- Added IAM policies for OCI Network Firewall and ZPR.
Release 0.2.4
October 07, 2024 Release Notes - 0.2.4
Updates
- Identity Domains module
- Typo fixed in defined_tags and freeform_tags for dynamic groups.
Release 0.2.3
August 27, 2024 Release Notes - 0.2.3
Updates
- All modules now require Terraform binary equal or greater than 1.3.0.
- cislz-terraform-module tag renamed to ocilz-terraform-module.
Release 0.2.2
July 24, 2024 Release Notes - 0.2.2
New
- Identity Domains module
- Ability to define Identity Domain applications, with support for SAML applications, mobile applications, confidential applications, and the following catalog applications: Oracle Identity Domain, Generic SCIM (Client Credentials), and Oracle Fusion Applications Release 13.
Updates
- Auditor policies aligned with documentation.
- Aligned README.md structure to Oracle's GitHub organizations requirements.
Release 0.2.1
April 17, 2024 Release Notes - 0.2.1
Updates
All Modules
- Dependency variables are now strongly typed, enhancing usage guidance.
Policies Module
- FSS (File System Service) principal names fixed in realms with keys greater than 10.