Skip to content

Releases: oci-landing-zones/terraform-oci-modules-iam

Release 0.3.0

18 Aug 18:43
ddf1ecb
Compare
Choose a tag to compare

August 18, 2025 Release Notes - 0.3.0

Updates

  1. Compartments module
    • Module now allows users to create a compartment with a tag default, that uses a tag from a tag namespace created in the same terraform run.
  2. Identity Domains module
    • User lookup optimized. Users are now searched once for each provided identity domain and only for identity domains where the members attribute is non empty.
  3. Code formatted per Terraform standards.

Release 0.2.9

02 Apr 14:23
f11f5de
Compare
Choose a tag to compare

April 01, 2025 Release Notes - 0.2.9

Updates

  1. Identity Domains module
    • Group membership updates managed through some means other than via the module can be either ignored or honored. This is enabled by new attribute ignore_external_membership_updates within identity_domain_groups_configuration variable. See it in variables.tf. The attribute behavior is described in Identity Domains module README.md.
    • Removed attribute_sets = ["all"] from oci_identity_domains_group resource block, as it has been observed it prevents tags from being updated. A solution for the less harmful side effect of unsolicited updates during terraform plan is being sought.
    • Added module default freeform tags to groups and dynamic groups.
  2. Policies module
    • Moved permissions in template policies to application administrators for reading Tag namespaces, Compute images, Catalog listings and repositories to the tenancy level, even when an enclosing compartment is deployed.
    • Description of policies updated to "Core Landing Zone policy for...".

Release 0.2.8

25 Mar 18:42
f230857
Compare
Choose a tag to compare

March 25, 2025 Release Notes - 0.2.8

Updates

  1. Identity Domains module
    • Only ACTIVE users are looked up for group membership assignments in identity domains.

Release 0.2.7

13 Jan 14:08
3e2d458
Compare
Choose a tag to compare

January 10, 2025 Release Notes - 0.2.7

Updates

  1. Groups module
    • Only ACTIVE users are looked up for group membership assignments.

Release 0.2.6

09 Dec 19:57
0ed42e6
Compare
Choose a tag to compare

Updates

  1. Identity Domains module
    • Added attribute_sets = ["all"] to oci_identity_domains_group resource block to avoid group memberships being updated when there are no updates to group memberships. Bug oracle/terraform-provider-oci#1933.

Release 0.2.5

01 Nov 18:49
64297a2
Compare
Choose a tag to compare

November 01, 2024 Release Notes - 0.2.5

Updates

  1. Policies module
    • Added IAM policies for OCI Network Firewall and ZPR.
      • OCI Network Firewall granted manage permissions to Network admins.
      • ZPR granted manage permissions to Security admins.

Release 0.2.4

07 Oct 18:59
6a5a73b
Compare
Choose a tag to compare

October 07, 2024 Release Notes - 0.2.4

Updates

  1. Identity Domains module
    • Typo fixed in defined_tags and freeform_tags for dynamic groups.

Release 0.2.3

03 Sep 14:29
a41b383
Compare
Choose a tag to compare

August 27, 2024 Release Notes - 0.2.3

Updates

  1. All modules now require Terraform binary equal or greater than 1.3.0.
  2. cislz-terraform-module tag renamed to ocilz-terraform-module.

Release 0.2.2

25 Jul 13:42
ebf7293
Compare
Choose a tag to compare

July 24, 2024 Release Notes - 0.2.2

New

  1. Identity Domains module
    • Ability to define Identity Domain applications, with support for SAML applications, mobile applications, confidential applications, and the following catalog applications: Oracle Identity Domain, Generic SCIM (Client Credentials), and Oracle Fusion Applications Release 13.

Updates

  1. Auditor policies aligned with documentation.
  2. Aligned README.md structure to Oracle's GitHub organizations requirements.

Release 0.2.1

17 Apr 22:45
f729216
Compare
Choose a tag to compare

April 17, 2024 Release Notes - 0.2.1

Updates

All Modules

  1. Dependency variables are now strongly typed, enhancing usage guidance.

Policies Module

  1. FSS (File System Service) principal names fixed in realms with keys greater than 10.