chore(deps): update terraform (major)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
helm (source)	required_provider	major	2.17.0 -> 3.1.1
kubernetes (source)	required_provider	major	2.38.0 -> 3.0.1
terraform-aws-modules/iam/aws (source)	module	major	5.60.0 -> 6.2.3

---

Release Notes

hashicorp/terraform-provider-helm (helm)

v3.1.1

Compare Source

BUG FIXES:

• resource/helm_release: Fix "inconsistent result after apply" error by moving recomputeMetadata function call [GH-1713]

v3.1.0

Compare Source

FEATURES:

• Add qps field to Helm provider configuration [GH-1668]
• Add resources attribute to manifest experimental feature [GH-1693]
• helm_template: Add set_wo write-only attribute [GH-1703]
• helm_release: Add support for the take_ownership field [GH-1680]

ENHANCEMENT:

• Introduce the timeouts field to the helm_release resource and helm_template data source, enabling configurable operation timeouts for create, read, update, and delete actions. [GH-1702]

BUG FIXES:

• Port missing field upgrade_install [GH-1675]

v3.0.2

Compare Source

This is a patch release that fixes a number of bugs discovered in the v3.x.x release.

BUG FIXES:

• helm_release: Fix description field causing inconsistent plan [GH-1648]
• helm_release: Fix plan error when devel = false is set and version is provided [GH-1656]
• helm_release: Fix postrender being run when binaryPath is nil [GH-1649]
• helm_release: Fix shallow clone bug causing nested sensitive values to be redacted in the k8s API [GH-1644]
• provider: Fix namespace override logic in Kubernetes client initialization [GH-1650]
• provider: Restore support for the KUBE_PROXY_URL environment variable [GH-1655]

v3.0.1

Compare Source

This is a hotfix release.

HOTFIX:

• helm_release: Fix state upgrader code to use correct type for "values" attribute. [GH-1638]

v3.0.0

Compare Source

This release migrates ports the provider project from terraform-plugin-sdk/v2 to terraform-plugin-framework [GH-1379]

Please refer to the migration guide.

BREAKING CHANGES:

• Blocks to Nested Objects: Blocks like kubernetes, registry, and experiments are now represented as nested objects.
• List Syntax for Nested Attributes: Attributes like set, set_list, and set_sensitive in helm_release and helm_template are now lists of nested objects instead of blocks
• The new framework code uses Terraform Plugin Protocol Version 6 which is compatible with Terraform versions 1.0 and above. Users of earlier versions of Terraform can continue to use the Helm provider by pinning their configuration to the 2.x version.

FEATURES:

• Add "literal" as a supported type for the set block [GH-1615]

• helm_release: Add support for ResourceIdentity. [GH-1625]

• helm_release: Add set_wo write-only attribute [GH-1592]

ENHANCEMENT:

• helm_release: Add UpgradeState logic to support migration from SDKv2 to Plugin Framework [GH-1633]
• update helm dependency to v3.17.2 [GH-1608]

BUG FIXES:

• helm_release: Fix namespace behaviour for dependency charts in non-default namespaces [GH-1583]

• change set.value && set_list.value to optional instead of required [GH-1572]

hashicorp/terraform-provider-kubernetes (kubernetes)

v3.0.1

Compare Source

HOTFIX:

• Fix missing ip_mode attribute in kubernetes_service_v1 data source. [GH-2807]

v3.0.0

Compare Source

ENHANCEMENTS:

• • Add support for sidecar containers via restart_policy field in init_container spec [GH-2786]
• Add ip_mode attribute to service status [GH-2784]
• Add support for ValidatingAdmissionPolicy [GH-2794]
• Bump Kubernetes dependencies to v1.33 [GH-2774]

DEPRECATIONS:

• Data Sources

• kubernetes_config_map → use kubernetes_config_map_v1
• kubernetes_namespace → use kubernetes_namespace_v1
• kubernetes_secret → use kubernetes_secret_v1
• kubernetes_service → use kubernetes_service_v1
• kubernetes_pod → use kubernetes_pod_v1
• kubernetes_service_account → use kubernetes_service_account_v1
• kubernetes_persistent_volume_claim → use kubernetes_persistent_volume_claim_v1
• kubernetes_storage_class → use kubernetes_storage_class_v1
• kubernetes_ingress → use kubernetes_ingress_v1

Resources

• kubernetes_namespace → use kubernetes_namespace_v1
• kubernetes_service → use kubernetes_service_v1
• kubernetes_service_account → use kubernetes_service_account_v1
• kubernetes_default_service_account → use kubernetes_default_service_account_v1
• kubernetes_config_map → use kubernetes_config_map_v1
• kubernetes_secret → use kubernetes_secret_v1
• kubernetes_pod → use kubernetes_pod_v1
• kubernetes_endpoints → use kubernetes_endpoints_v1
• kubernetes_limit_range → use kubernetes_limit_range_v1
• kubernetes_persistent_volume → use kubernetes_persistent_volume_v1
• kubernetes_persistent_volume_claim → use kubernetes_persistent_volume_claim_v1
• kubernetes_replication_controller → use kubernetes_replication_controller_v1
• kubernetes_resource_quota → use kubernetes_resource_quota_v1
• kubernetes_api_service → use kubernetes_api_service_v1
• kubernetes_deployment → use kubernetes_deployment_v1
• kubernetes_daemonset → use kubernetes_daemon_set_v1
• kubernetes_stateful_set → use kubernetes_stateful_set_v1
• kubernetes_job → use kubernetes_job_v1
• kubernetes_cron_job → use kubernetes_cron_job_v1
• kubernetes_horizontal_pod_autoscaler → use kubernetes_horizontal_pod_autoscaler_v1 or kubernetes_horizontal_pod_autoscaler_v2
• kubernetes_certificate_signing_request → use kubernetes_certificate_signing_request_v1
• kubernetes_role → use kubernetes_role_v1
• kubernetes_role_binding → use kubernetes_role_binding_v1
• kubernetes_cluster_role → use kubernetes_cluster_role_v1
• kubernetes_cluster_role_binding → use kubernetes_cluster_role_binding_v1
• kubernetes_ingress → use kubernetes_ingress_v1
• kubernetes_ingress_class → use kubernetes_ingress_class_v1
• kubernetes_network_policy → use kubernetes_network_policy_v1
• kubernetes_pod_disruption_budget → use kubernetes_pod_disruption_budget_v1
• kubernetes_pod_security_policy → removed upstream; use Pod Security Admission instead
• kubernetes_priority_class → use kubernetes_priority_class_v1
• kubernetes_validating_webhook_configuration → use kubernetes_validating_webhook_configuration_v1
• kubernetes_mutating_webhook_configuration → use kubernetes_mutating_webhook_configuration_v1
• kubernetes_storage_class → use kubernetes_storage_class_v1
• kubernetes_csi_driver → use kubernetes_csi_driver_v1 [GH-2770]

BUG FIXES:

• Environment variables should not override configuration when using kubernetes_manifest. [GH-2788]
• resource/kubernetes_daemon_set_v1: fix an issue with the provider not waiting for rollout with wait_for_rollout = true. [GH-2789]

terraform-aws-modules/terraform-aws-iam (terraform-aws-modules/iam/aws)

v6.2.3

Compare Source

Bug Fixes

• Use the aws_service_principal data source to retrieve the correct service principal for IRSA policies (#​628) (673fb44)

v6.2.2

Compare Source

Bug Fixes

• Update CI workflow versions to latest (#​626) (45cc1f8)

v6.2.1

Compare Source

Bug Fixes

• Correct iam-group variable name mis-spelling (#​610) (cf4e77b)

v6.2.0

Compare Source

Features

• Implement user inline policy for iam-user (#​607) (1c2dfd7)

v6.1.2

Compare Source

Bug Fixes

• Modify BitBucket provider URL extraction to be more robust when none or multiple URLs are provided (#​605) (e3e724d)

v6.1.1

Compare Source

Bug Fixes

• Remove any secretsmanager:* permissions if no secret ARNs are provided to IRSA external-secrets permissions (#​599) (d610954)

v6.1.0

Compare Source

Features

• Add default IRSA policy name, fix incorrect policy attachment for iam-user (#​594) (f111832)

v6.0.1

Compare Source

Bug Fixes

• Remove broken IRSA migrations.tf; add default IRSA policy descriptions for backwards compat (#​592) (e56f84d)

v6.0.0

Compare Source

⚠ BREAKING CHANGES

• Upgrade AWS provider and min required Terraform version to 6.0 and 1.5.7 respectively (#​585)

Features

• Upgrade AWS provider and min required Terraform version to 6.0 and 1.5.7 respectively (#​585) (31b31d7)

---

Configuration

📅 Schedule: Branch creation - Between day 7 and 14 of the month ( * * 7-14 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for eks-workshop ready!

Name	Link
🔨 Latest commit	e5c1957
🔍 Latest deploy log	https://app.netlify.com/projects/eks-workshop/deploys/6937b38311c7d20008a00538
😎 Deploy Preview	https://deploy-preview-1580--eks-workshop.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.