Breaking change
This release raises the Terraform core requirement to >= 1.11, < 2.0. Terraform 1.11 is required for write-only resource arguments, which are used by the new secret value support.
What's Changed
Features
- feat: expose secret and key names in module outputs by @andyleejordan in #307
- feat: document and validate HSM-backed key types (EC-HSM, RSA-HSM) by @andyleejordan in #309
- fix: correct keys/secrets output descriptions and expose key public material attributes by @andyleejordan in #306
- feat: add write-only secret value support by @andyleejordan in #324
Bug Fixes
- chore: run pre-commit to fix mapotf drift blocking all PRs by @andyleejordan in #314
- fix: replace deprecated
metricblock withenabled_metricin azurerm_monitor_diagnostic_setting by @andyleejordan in #319 - fix: use current Key Vault RBAC argument by @andyleejordan in #329
- fix: create management locks for private endpoints by @andyleejordan in #326
- fix: associate ASGs with private endpoints when DNS zone groups are unmanaged by @andyleejordan in #320
Documentation
- docs: add registry usage examples to key/secret submodule docs by @andyleejordan in #308
- docs: clarify key/secret ID outputs and show how to consume a key by @andyleejordan in #310
- docs: drop version pins from submodule usage examples by @andyleejordan in #316
CI and Hygiene
- chore: raise azurerm provider floor to 4.81 by @andyleejordan in #315
- test: add unit coverage for storage_permissions validation by @andyleejordan in #318
New Contributors
- @andyleejordan made their first contribution in #314
Full Changelog: v0.10.2...v0.11.0
Drafted by GPT-5.5.