crossplane-contrib/provider-upjet-aws v2.5.0

on GitHub

v2.5.0

This release bumps the underlying TF provider to v6.34.0 and includes new AWS resources, bug fixes, and infrastructure improvements.

⚠️ Breaking changes

• SerialConsoleAccess/ec2
  • spec.forProvider.regionis now a required parameter and this resource is region-aware.
• AccountAssignment/ssoadmin
  • spec.forProvider.targetType is now explicitly required at the MR API. This is technically not a breaking change and no change at the resource behavior, as it was always required to create the resource and was being validated during the external AWS call. The validation is now enforced earlier at the CRD-level, at admission time.

✨ New Resources

Following resources are added with version v1beta1 with both cluster-scoped and namespaced variants.

• Bedrock Agent Core
  • AgentRuntime/bedrockagentcore
  • AgentRuntimeEndpoint/bedrockagentcore
  • APIKeyCredentialProvider/bedrockagentcore
  • Browser/bedrockagentcore
  • CodeInterpreter/bedrockagentcore
  • Gateway/bedrockagentcore
  • GatewayTarget/bedrockagentcore
  • Memory/bedrockagentcore
  • MemoryStrategy/bedrockagentcore
  • Oauth2CredentialProvider/bedrockagentcore
  • TokenVaultCmk/bedrockagentcore
  • WorkloadIdentity/bedrockagentcore
• CloudFront
  • VPCOrigin/cloudfront
• CodeBuild
  • Project/codebuild
  • ReportGroup/codebuild
  • SourceCredential/codebuild
  • Webhook/codebuild
• ECR
  • RepositoryCreationTemplate/ecr
• EMR Containers
  • VirtualCluster/emrcontainers
• Route53 Resolver
  • QueryLogConfig/route53resolver
  • QueryLogConfigAssociation/route53resolver
• Route53 Profiles
  • Association/route53profiles
  • Profile/route53profiles
  • ResourceAssociation/route53profiles
• WAFv2
  • WebACLRuleGroupAssociation/wafv2

Non-Breaking field changes

• CapacityProvider/ecs
  • spec.forProvider.autoScalingGroupProvider becomes optional. Previously required; now supports the new managedInstancesProvider alternative introduced for ECS capacity providers.
• Proxy/rds
  • spec.forProvider.auth becomes optional. A new defaultAuthScheme argument was added, allowing proxy creation without explicitly specifying the auth block.
• Connector/transfer
  • spec.forProvider.url becomes optional. Required for standard connectors but not for the newly supported VPC Lattice connector type.
• WindowsFileSystem/fsx
  • spec.initProvider.selfManagedActiveDirectory.passwordSecretRef becomes optional. Upstream made both password and username optional/computed to support more flexible AD configurations.

🐛 Bug Fixes

• Following resources in apigateway group were operational but had oscillation with external names in different format and fixed. No behavior changes.
  • GatewayResponse/apigateway
  • Integration/apigateway
  • IntegrationResponse/apigateway
  • Method/apigateway
  • MethodResponse/apigateway
  • MethodSettings/apigateway
  • Stage/apigateway
• Fixed conversions for ReplicationGroup/elasticache v1beta2 (cluster-scoped)
• Fixed Cluster/redshift and Cluster.rds resource configurations (cluster-scoped)
• Fixed SerialConsoleAccess.ec2 resource to correctly handle regional behavior

⚙️ Enhancements

Cluster/memorydb: Added reference/selector fields for parameterGroupName, aclName and subnetGroupName parameters

🚧 Infrastructure Updates

• Bumped underlying Terraform provider version to v6.34.0
• Updated Go version to 1.25.8 and golangci-lint for compatibility
• Updated GH action CI workflow dependencies