Version Packages (#301)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
common-fate · Aug 19, 2024 · 8397e6d · 8397e6d
1 parent d3903e9
commit 8397e6d
Show file tree

Hide file tree

Showing 26 changed files with 33 additions and 121 deletions.
diff --git a/.changeset/blue-dots-kick.md b/.changeset/blue-dots-kick.md
diff --git a/.changeset/cool-worms-wonder.md b/.changeset/cool-worms-wonder.md
diff --git a/.changeset/fast-trees-travel.md b/.changeset/fast-trees-travel.md
diff --git a/.changeset/fluffy-timers-dream.md b/.changeset/fluffy-timers-dream.md
diff --git a/.changeset/giant-tables-count.md b/.changeset/giant-tables-count.md
diff --git a/.changeset/gold-cups-camp.md b/.changeset/gold-cups-camp.md
diff --git a/.changeset/good-candles-tie.md b/.changeset/good-candles-tie.md
diff --git a/.changeset/honest-singers-change.md b/.changeset/honest-singers-change.md
diff --git a/.changeset/khaki-mugs-invite.md b/.changeset/khaki-mugs-invite.md
diff --git a/.changeset/large-socks-bow.md b/.changeset/large-socks-bow.md
diff --git a/.changeset/mean-paws-relate.md b/.changeset/mean-paws-relate.md
diff --git a/.changeset/nasty-zebras-scream.md b/.changeset/nasty-zebras-scream.md
diff --git a/.changeset/quiet-lizards-worry.md b/.changeset/quiet-lizards-worry.md
diff --git a/.changeset/quiet-swans-exercise.md b/.changeset/quiet-swans-exercise.md
diff --git a/.changeset/real-eagles-double.md b/.changeset/real-eagles-double.md
diff --git a/.changeset/red-sheep-battle.md b/.changeset/red-sheep-battle.md
diff --git a/.changeset/smart-poets-do.md b/.changeset/smart-poets-do.md
diff --git a/.changeset/soft-humans-count.md b/.changeset/soft-humans-count.md
diff --git a/.changeset/strong-tools-pump.md b/.changeset/strong-tools-pump.md
diff --git a/.changeset/tame-ears-drive.md b/.changeset/tame-ears-drive.md
diff --git a/.changeset/ten-bees-refuse.md b/.changeset/ten-bees-refuse.md
diff --git a/.changeset/tough-spiders-cheat.md b/.changeset/tough-spiders-cheat.md
diff --git a/.changeset/weak-buttons-obey.md b/.changeset/weak-buttons-obey.md
diff --git a/.changeset/wicked-tools-sneeze.md b/.changeset/wicked-tools-sneeze.md
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,37 @@
 # @common-fate/terraform-aws-common-fate-deployment
 
+## 2.4.0
+
+### Minor Changes
+
+- d3903e9: Adds a healthcheck to the centralised monitoring service which reports on service health.
+- d3903e9: Adds the ability for the builtin Administrator role to fetch API Client secrets via the API
+- d3903e9: Extensions are only allowed after 50% of duration had elapsed.
+- 47e7747: Adds cloudwatch alarms for ALB, database and SQS
+- ad678b7: Adds support for inviting an initial set of users to Common Fate when Cognito is used as the login provider. initial_user_emails is a comma seperated list of emails which will be created in Cognito and have an initial invite email sent.
+- d3903e9: Adds tags and tag_keys attributes to AWS::IDC::PermissionSet resources which can be used to restrict access in Cedar policies
+- d012909: Administrative users can now be added to the deployment, these users will be automatically assigned to the administrative role in Common Fate. On an initial deployment, they will also be invited to cognito.
+- d3903e9: Built-in roles can now be requested using the JIT request workflow with access governed by cedar policies. For new deployments, an initial policy is created which permits access to the administrative role. In existing deployments, no default access is create, teams can add the cedar policy to expose this role if required.
+- d3903e9: Add default Cedar policies which prevent users being able to request access to resources when they do not have the required linked identity.
+- d3903e9: Adds built-in roles for managing Common Fate. Initially an Administrator role has been added which is permitted to access OIDC secrets and configure integrations.
+
+### Patch Changes
+
+- d3903e9: The Access::Action::"ForceClose" action will now only be evaluated if the force close option is provided in the API request. This change reduces excess policy authorization noise in the authorization log for authorization results that are never used.
+- d3903e9: Improve observability of Pager Duty sync tasks and add an expiry window of 5 minutes to the PagerDuty token refresh process
+- d012909: Add a validation check for the ALB certificate which waits for it to be issued.
+- d3903e9: Fixes an issue where Target and Role options would not load for some Access Requests in Slack.
+- dded0d1: Expose the API client secrets to the control plane for the administrative API
+- 5e35d44: add environment variables for configuring factory monitoring
+- d3903e9: Fixes an issue which prevented using BatchEnsure to activate an approved request when a duration was provided
+- d3903e9: Fixed an issue causing creating access workflows to fail when extension conditions was not set
+- d3903e9: Fixes an issue causing duration to not be shown on slack messages for access requests
+- d3903e9: Improve the tracing on Ops Genie sync and update retry logic
+- d3903e9: Adds deployment configuration page to the setting tab in the web console. Exposes configuration parameters required to configure a deployment. This page is only available to users assigned the CF::Admin::Action::"Read" action
+- d3903e9: Prevent panic when calling DebugEntitlementsAccess due to concurrent map writes error
+- d3903e9: Update open telemetry middleware to correctly capture panics
+- d3903e9: The AWS resource sync task now correctly handles access denied errors when syncing tags for buckets fails
+
 ## 2.3.3
 
 ### Patch Changes

diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@common-fate/terraform-aws-common-fate-deployment",
-  "version": "2.3.3",
+  "version": "2.4.0",
   "description": "",
   "main": "index.js",
   "keywords": [],