Breaking Changes
- Rename role_assignments to outbound_role_assignments in every module call; the old argument is no longer accepted. Preserve the existing map keys and values. These remain outbound grants to the created identity at each supplied scope, not grants to other principals on the identity. The resource block remains azurerm_role_assignment.this, so the input rename alone does not require state moves.
- Outbound role assignment description is now applied instead of ignored. AzureRM treats description changes as replacement, so existing non-null descriptions can replace assignments on upgrade. Inspect the plan for resulting access changes. Other role attributes and their existing null defaults remain unchanged.
- enable_telemetry remains true by default. Enabled telemetry creates an empty Incremental Microsoft.Resources/deployments resource at the AzAPI provider subscription, using the existing required real region. Subscription deployment-management permissions are required; resource-group-only permissions may be insufficient. Owner is not specifically required. Configure the intended AzAPI subscription or set enable_telemetry=false. Deployment-history records and plan-timestamp updates are new behavior.
- ModTM and telemetry-only root random requirements are removed. removed blocks with destroy=false request forgetting the old telemetry resources without destruction. Workload addresses are preserved; historical-state migration has not been exercised. Back up state and inspect the upgrade plan, especially outbound assignment descriptions, before applying.
What's Changed
Other Changes
- fix!: rename the managed identity outbound role input by @jaredfholgate in #181
Full Changelog: v0.5.3...v0.6.0