diff --git a/CHANGELOG.md b/CHANGELOG.md
index 760f7b5e..aab52873 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
# Changelog
+## [7.6.0](https://github.com/nullplatform/tofu-modules/compare/v7.5.0...v7.6.0) (2026-09-08)
+
+
+### Features
+
+* **agent:** select the worker ingress stack with worker_ingress instead of three template paths ([#576](https://github.com/nullplatform/tofu-modules/issues/576)) ([1579cb5](https://github.com/nullplatform/tofu-modules/commit/1579cb593842619f76fc48bcd6e2a04e82e449ac))
+
## [7.5.0](https://github.com/nullplatform/tofu-modules/compare/v7.4.2...v7.5.0) (2026-09-08)
diff --git a/VERSIONS.md b/VERSIONS.md
index 8ac06b09..c2f1b57e 100644
--- a/VERSIONS.md
+++ b/VERSIONS.md
@@ -14,11 +14,11 @@ a specific release, so an upgrade is something someone decides.
## What to pin
-Verified 2026-09-07.
+Verified 2026-09-08.
| Component | Current | Variable | Module |
| --- | --- | --- | --- |
-| `nullplatform-base` chart | `2.44.5` | `nullplatform_base_helm_version` | `nullplatform/base` |
+| `nullplatform-base` chart | `2.44.6` | `nullplatform_base_helm_version` | `nullplatform/base` |
| `nullplatform-agent` chart | `3.0.0` | `nullplatform_agent_helm_version` | `nullplatform/agent` |
| `cert-manager` chart | `v1.21.1` | `cert_manager_version` | `infrastructure/commons/cert_manager` |
| `prometheus` chart | `29.27.2` | `prometheus_version` | `infrastructure/commons/prometheus` |
@@ -39,7 +39,7 @@ at deploy time, so what you run may not match the table: `cert_manager_version`,
```hcl
module "base" {
- nullplatform_base_helm_version = "2.44.5"
+ nullplatform_base_helm_version = "2.44.6"
logging_controller_image_tag = "1.6.1"
gateway_api_crd_ref = "v1.5.1"
}
diff --git a/infrastructure/aws/acm/README.md b/infrastructure/aws/acm/README.md
index cde97692..f34ad59f 100644
--- a/infrastructure/aws/acm/README.md
+++ b/infrastructure/aws/acm/README.md
@@ -18,7 +18,7 @@ The module creates an aws_acm_certificate resource with DNS validation, which is
```hcl
module "acm" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/acm?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/acm?ref=v7.6.0"
domain_name = "your-domain-name"
zone_id = "your-zone-id"
diff --git a/infrastructure/aws/aws_load_balancer_controller/README.md b/infrastructure/aws/aws_load_balancer_controller/README.md
index 066a8411..e9a207ff 100644
--- a/infrastructure/aws/aws_load_balancer_controller/README.md
+++ b/infrastructure/aws/aws_load_balancer_controller/README.md
@@ -18,7 +18,7 @@ This module creates a helm_release resource to deploy the AWS Load Balancer Cont
```hcl
module "aws_load_balancer_controller" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/aws_load_balancer_controller?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/aws_load_balancer_controller?ref=v7.6.0"
cluster_name = "your-cluster-name"
vpc_id = "your-vpc-id"
diff --git a/infrastructure/aws/backend/README.md b/infrastructure/aws/backend/README.md
index 5bb45baf..762b8869 100644
--- a/infrastructure/aws/backend/README.md
+++ b/infrastructure/aws/backend/README.md
@@ -20,7 +20,7 @@ This module creates an S3 bucket with versioning and server-side encryption enab
```hcl
module "backend" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/backend?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/backend?ref=v7.6.0"
}
```
diff --git a/infrastructure/aws/dns/README.md b/infrastructure/aws/dns/README.md
index 782ab564..ed77849e 100644
--- a/infrastructure/aws/dns/README.md
+++ b/infrastructure/aws/dns/README.md
@@ -21,7 +21,7 @@ The module conditionally creates an aws_route53_zone resource for a public hoste
```hcl
module "dns" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/dns?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/dns?ref=v7.6.0"
domain_name = "your-domain-name"
vpc_id = "your-vpc-id"
diff --git a/infrastructure/aws/eks/README.md b/infrastructure/aws/eks/README.md
index d32a93c5..19a67c84 100644
--- a/infrastructure/aws/eks/README.md
+++ b/infrastructure/aws/eks/README.md
@@ -22,7 +22,7 @@ The module wraps terraform-aws-modules/eks to create the EKS cluster (aws_eks_cl
```hcl
module "eks" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/eks?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/eks?ref=v7.6.0"
aws_subnets_private_ids = "your-aws-subnets-private-ids"
aws_vpc_vpc_id = "your-aws-vpc-vpc-id"
diff --git a/infrastructure/aws/iam/agent/README.md b/infrastructure/aws/iam/agent/README.md
index 979084b3..6fdbafb6 100644
--- a/infrastructure/aws/iam/agent/README.md
+++ b/infrastructure/aws/iam/agent/README.md
@@ -21,7 +21,7 @@ The module uses the terraform-aws-modules/iam//modules/iam-role-for-service-acco
```hcl
module "agent" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/iam/agent?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/iam/agent?ref=v7.6.0"
agent_namespace = "your-agent-namespace"
aws_iam_openid_connect_provider_arn = "your-aws-iam-openid-connect-provider-arn"
diff --git a/infrastructure/aws/iam/aws_load_balancer_controller_iam/README.md b/infrastructure/aws/iam/aws_load_balancer_controller_iam/README.md
index 1fa43288..15a31507 100644
--- a/infrastructure/aws/iam/aws_load_balancer_controller_iam/README.md
+++ b/infrastructure/aws/iam/aws_load_balancer_controller_iam/README.md
@@ -19,7 +19,7 @@ This module creates an IAM role for the AWS Load Balancer Controller using the t
```hcl
module "aws_load_balancer_controller_iam" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/iam/aws_load_balancer_controller_iam?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/iam/aws_load_balancer_controller_iam?ref=v7.6.0"
aws_iam_openid_connect_provider_arn = "your-aws-iam-openid-connect-provider-arn"
cluster_name = "your-cluster-name"
diff --git a/infrastructure/aws/iam/cert_manager/README.md b/infrastructure/aws/iam/cert_manager/README.md
index 09b21b28..f14c3c99 100644
--- a/infrastructure/aws/iam/cert_manager/README.md
+++ b/infrastructure/aws/iam/cert_manager/README.md
@@ -20,7 +20,7 @@ An aws_iam_policy resource is always created granting route53:GetChange, route53
```hcl
module "cert_manager" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/iam/cert_manager?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/iam/cert_manager?ref=v7.6.0"
cluster_name = "your-cluster-name"
}
diff --git a/infrastructure/aws/iam/ci-build-workflow-user/README.md b/infrastructure/aws/iam/ci-build-workflow-user/README.md
index fc4cb922..dc10927e 100644
--- a/infrastructure/aws/iam/ci-build-workflow-user/README.md
+++ b/infrastructure/aws/iam/ci-build-workflow-user/README.md
@@ -21,7 +21,7 @@ The module creates an aws_iam_user named with the cluster_name prefix and genera
```hcl
module "ci-build-workflow-user" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/iam/ci-build-workflow-user?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/iam/ci-build-workflow-user?ref=v7.6.0"
cluster_name = "your-cluster-name"
}
diff --git a/infrastructure/aws/iam/cloudwatch/README.md b/infrastructure/aws/iam/cloudwatch/README.md
index 0aa13a4e..4a2f343e 100644
--- a/infrastructure/aws/iam/cloudwatch/README.md
+++ b/infrastructure/aws/iam/cloudwatch/README.md
@@ -20,7 +20,7 @@ The module creates an aws_iam_policy granting CloudWatch Logs and Metrics write
```hcl
module "cloudwatch" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/iam/cloudwatch?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/iam/cloudwatch?ref=v7.6.0"
cluster_name = "your-cluster-name"
}
diff --git a/infrastructure/aws/iam/ecr/README.md b/infrastructure/aws/iam/ecr/README.md
index e7d2c7c2..beddd9e6 100644
--- a/infrastructure/aws/iam/ecr/README.md
+++ b/infrastructure/aws/iam/ecr/README.md
@@ -20,7 +20,7 @@ The module creates an aws_iam_role named nullplatform-{cluster_name}-application
```hcl
module "ecr" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/iam/ecr?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/iam/ecr?ref=v7.6.0"
build_workflow_group_name = "your-build-workflow-group-name"
cluster_name = "your-cluster-name"
diff --git a/infrastructure/aws/iam/external_dns/README.md b/infrastructure/aws/iam/external_dns/README.md
index 391de7e8..82147dfa 100644
--- a/infrastructure/aws/iam/external_dns/README.md
+++ b/infrastructure/aws/iam/external_dns/README.md
@@ -20,7 +20,7 @@ An aws_iam_policy resource named nullplatform_external_dns_policy is always crea
```hcl
module "external_dns" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/iam/external_dns?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/iam/external_dns?ref=v7.6.0"
cluster_name = "your-cluster-name"
}
diff --git a/infrastructure/aws/iam/s3/README.md b/infrastructure/aws/iam/s3/README.md
index f5f232d5..e715f691 100644
--- a/infrastructure/aws/iam/s3/README.md
+++ b/infrastructure/aws/iam/s3/README.md
@@ -18,7 +18,7 @@ The module creates an aws_iam_policy resource that allows s3:PutObject and s3:Ge
```hcl
module "s3" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/iam/s3?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/iam/s3?ref=v7.6.0"
bucket = "your-bucket"
build_workflow_group_name = "your-build-workflow-group-name"
diff --git a/infrastructure/aws/ingress/README.md b/infrastructure/aws/ingress/README.md
index 7509290f..58c4d06b 100644
--- a/infrastructure/aws/ingress/README.md
+++ b/infrastructure/aws/ingress/README.md
@@ -22,7 +22,7 @@ The module creates up to two kubernetes_ingress_v1 resources — one for an inte
```hcl
module "ingress" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/ingress?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/ingress?ref=v7.6.0"
certificate_arn = "your-certificate-arn"
}
diff --git a/infrastructure/aws/security/README.md b/infrastructure/aws/security/README.md
index 0b026fe6..64df9242 100644
--- a/infrastructure/aws/security/README.md
+++ b/infrastructure/aws/security/README.md
@@ -22,7 +22,7 @@ The module uses data sources (aws_eks_cluster, aws_vpc) to automatically derive
```hcl
module "security" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/security?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/security?ref=v7.6.0"
cluster_name = "your-cluster-name"
}
diff --git a/infrastructure/aws/vpc/README.md b/infrastructure/aws/vpc/README.md
index 31cf01e9..4fef5e3a 100644
--- a/infrastructure/aws/vpc/README.md
+++ b/infrastructure/aws/vpc/README.md
@@ -21,7 +21,7 @@ The module wraps the terraform-aws-modules/vpc/aws community module to provision
```hcl
module "vpc" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/vpc?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/aws/vpc?ref=v7.6.0"
account = "your-account"
organization = "your-organization"
diff --git a/infrastructure/azure/acr/README.md b/infrastructure/azure/acr/README.md
index 0308b514..2f5c24f2 100644
--- a/infrastructure/azure/acr/README.md
+++ b/infrastructure/azure/acr/README.md
@@ -18,7 +18,7 @@ The module uses the azurerm_container_registry resource to create the container
```hcl
module "acr" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/azure/acr?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/azure/acr?ref=v7.6.0"
containerregistry_name = "your-containerregistry-name"
location = "your-location"
diff --git a/infrastructure/azure/aks/README.md b/infrastructure/azure/aks/README.md
index 246639e7..8dcce77a 100644
--- a/infrastructure/azure/aks/README.md
+++ b/infrastructure/azure/aks/README.md
@@ -22,7 +22,7 @@ The module wraps the Azure/aks/azurerm community module (version 11.0.0) and wir
```hcl
module "aks" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/azure/aks?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/azure/aks?ref=v7.6.0"
cluster_name = "your-cluster-name"
location = "your-location"
diff --git a/infrastructure/azure/aks_route_table/README.md b/infrastructure/azure/aks_route_table/README.md
index 441e0633..3ed7295e 100644
--- a/infrastructure/azure/aks_route_table/README.md
+++ b/infrastructure/azure/aks_route_table/README.md
@@ -19,7 +19,7 @@ The module uses an azurerm_resources data source to discover the AKS-managed rou
```hcl
module "aks_route_table" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/azure/aks_route_table?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/azure/aks_route_table?ref=v7.6.0"
node_resource_group = "your-node-resource-group"
subnet_id = "your-subnet-id"
diff --git a/infrastructure/azure/dns/README.md b/infrastructure/azure/dns/README.md
index d3b4cbc5..b9a9748c 100644
--- a/infrastructure/azure/dns/README.md
+++ b/infrastructure/azure/dns/README.md
@@ -18,7 +18,7 @@ This module creates an azurerm_dns_zone resource and configures it with the prov
```hcl
module "dns" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/azure/dns?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/azure/dns?ref=v7.6.0"
domain_name = "your-domain-name"
resource_group_name = "your-resource-group-name"
diff --git a/infrastructure/azure/iam/README.md b/infrastructure/azure/iam/README.md
index 1f326a2d..7cd7c235 100644
--- a/infrastructure/azure/iam/README.md
+++ b/infrastructure/azure/iam/README.md
@@ -21,7 +21,7 @@ The module creates an azurerm_user_assigned_identity resource in the specified r
```hcl
module "iam" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/azure/iam?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/azure/iam?ref=v7.6.0"
location = "your-location"
name = "your-name"
diff --git a/infrastructure/azure/private_dns/README.md b/infrastructure/azure/private_dns/README.md
index 5441d161..bd4e2fce 100644
--- a/infrastructure/azure/private_dns/README.md
+++ b/infrastructure/azure/private_dns/README.md
@@ -18,7 +18,7 @@ This module creates an azurerm_private_dns_zone resource and optionally multiple
```hcl
module "private_dns" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/azure/private_dns?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/azure/private_dns?ref=v7.6.0"
domain_name = "your-domain-name"
resource_group_name = "your-resource-group-name"
diff --git a/infrastructure/azure/resource_group/README.md b/infrastructure/azure/resource_group/README.md
index deec15c8..d590ab31 100644
--- a/infrastructure/azure/resource_group/README.md
+++ b/infrastructure/azure/resource_group/README.md
@@ -18,7 +18,7 @@ This module creates an azurerm_resource_group resource and outputs its name and
```hcl
module "resource_group" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/azure/resource_group?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/azure/resource_group?ref=v7.6.0"
location = "your-location"
resource_group_name = "your-resource-group-name"
diff --git a/infrastructure/azure/security/README.md b/infrastructure/azure/security/README.md
index 188a8e2d..afec5dcc 100644
--- a/infrastructure/azure/security/README.md
+++ b/infrastructure/azure/security/README.md
@@ -21,7 +21,7 @@ The module uses azurerm_kubernetes_cluster and azurerm_virtual_network data sour
```hcl
module "security" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/azure/security?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/azure/security?ref=v7.6.0"
cluster_name = "your-cluster-name"
resource_group_name = "your-resource-group-name"
diff --git a/infrastructure/azure/vnet/README.md b/infrastructure/azure/vnet/README.md
index 51517f14..3f6129aa 100644
--- a/infrastructure/azure/vnet/README.md
+++ b/infrastructure/azure/vnet/README.md
@@ -18,7 +18,7 @@ This module creates an Azure virtual network using the azurerm provider and conf
```hcl
module "vnet" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/azure/vnet?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/azure/vnet?ref=v7.6.0"
address_space = "your-address-space"
location = "your-location"
diff --git a/infrastructure/commons/cert_manager/README.md b/infrastructure/commons/cert_manager/README.md
index 43da08bf..3c49f99e 100644
--- a/infrastructure/commons/cert_manager/README.md
+++ b/infrastructure/commons/cert_manager/README.md
@@ -22,7 +22,7 @@ Two core helm_release resources are created: cert-manager from charts.jetstack.i
```hcl
module "cert_manager" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/cert_manager?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/cert_manager?ref=v7.6.0"
account_slug = "your-account-slug"
cert_manager_version = "your-cert-manager-version"
@@ -36,7 +36,7 @@ module "cert_manager" {
```hcl
module "cert_manager" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/cert_manager?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/cert_manager?ref=v7.6.0"
account_slug = "your-account-slug"
cert_manager_version = "your-cert-manager-version"
@@ -52,7 +52,7 @@ module "cert_manager" {
```hcl
module "cert_manager" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/cert_manager?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/cert_manager?ref=v7.6.0"
account_slug = "your-account-slug"
azure_client_id = "your-azure-client-id" # Required when cloud_provider = "azure"
@@ -71,7 +71,7 @@ module "cert_manager" {
```hcl
module "cert_manager" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/cert_manager?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/cert_manager?ref=v7.6.0"
account_slug = "your-account-slug"
cert_manager_version = "your-cert-manager-version"
@@ -87,7 +87,7 @@ module "cert_manager" {
```hcl
module "cert_manager" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/cert_manager?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/cert_manager?ref=v7.6.0"
account_slug = "your-account-slug"
aws_region = "your-aws-region" # Required when cloud_provider = "aws"
@@ -103,7 +103,7 @@ module "cert_manager" {
```hcl
module "cert_manager" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/cert_manager?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/cert_manager?ref=v7.6.0"
account_slug = "your-account-slug"
cert_manager_version = "your-cert-manager-version"
@@ -120,7 +120,7 @@ module "cert_manager" {
```hcl
module "cert_manager" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/cert_manager?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/cert_manager?ref=v7.6.0"
account_slug = "your-account-slug"
cert_manager_version = "fixed semver string"
diff --git a/infrastructure/commons/external_dns/README.md b/infrastructure/commons/external_dns/README.md
index 6028d0cf..cf5a2405 100644
--- a/infrastructure/commons/external_dns/README.md
+++ b/infrastructure/commons/external_dns/README.md
@@ -22,7 +22,7 @@ The module creates an optional kubernetes_namespace_v1 resource when create_name
```hcl
module "external_dns" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/external_dns?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/external_dns?ref=v7.6.0"
dns_provider_name = "your-dns-provider-name"
domain_filters = "your-domain-filters"
@@ -33,7 +33,7 @@ module "external_dns" {
```hcl
module "external_dns" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/external_dns?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/external_dns?ref=v7.6.0"
cloudflare_token = "your-cloudflare-token" # Required when dns_provider_name = "cloudflare"
dns_provider_name = "cloudflare"
@@ -45,7 +45,7 @@ module "external_dns" {
```hcl
module "external_dns" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/external_dns?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/external_dns?ref=v7.6.0"
aws_iam_role_arn = "your-aws-iam-role-arn" # Required when dns_provider_name = "aws"
aws_identity_mode = "your-aws-identity-mode" # Required when dns_provider_name = "aws"
@@ -61,7 +61,7 @@ module "external_dns" {
```hcl
module "external_dns" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/external_dns?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/external_dns?ref=v7.6.0"
dns_provider_name = "oci"
domain_filters = "your-domain-filters"
@@ -77,7 +77,7 @@ module "external_dns" {
```hcl
module "external_dns" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/external_dns?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/external_dns?ref=v7.6.0"
azure_client_id = "your-azure-client-id" # Required when dns_provider_name = "azure"
azure_client_secret = "your-azure-client-secret" # Required when dns_provider_name = "azure"
@@ -95,7 +95,7 @@ module "external_dns" {
```hcl
module "external_dns" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/external_dns?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/external_dns?ref=v7.6.0"
azure_client_id = "your-azure-client-id" # Required when dns_provider_name = "azure-private-dns"
azure_client_secret = "your-azure-client-secret" # Required when dns_provider_name = "azure-private-dns"
@@ -113,7 +113,7 @@ module "external_dns" {
```hcl
module "external_dns" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/external_dns?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/external_dns?ref=v7.6.0"
dns_provider_name = "google"
domain_filters = "your-domain-filters"
diff --git a/infrastructure/commons/istio/README.md b/infrastructure/commons/istio/README.md
index f80c2779..f75fd1f0 100644
--- a/infrastructure/commons/istio/README.md
+++ b/infrastructure/commons/istio/README.md
@@ -21,7 +21,7 @@ The module creates two helm_release resources: istio-base (which installs the Is
```hcl
module "istio" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/istio?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/istio?ref=v7.6.0"
}
```
diff --git a/infrastructure/commons/prometheus/README.md b/infrastructure/commons/prometheus/README.md
index fe3f29d1..efdab007 100644
--- a/infrastructure/commons/prometheus/README.md
+++ b/infrastructure/commons/prometheus/README.md
@@ -20,7 +20,7 @@ The module renders a YAML values file via templatefile() in locals.tf, injecting
```hcl
module "prometheus" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/prometheus?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/prometheus?ref=v7.6.0"
prometheus_version = "your-prometheus-version"
}
@@ -30,7 +30,7 @@ module "prometheus" {
```hcl
module "prometheus" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/prometheus?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/prometheus?ref=v7.6.0"
prometheus_version = "latest"
}
@@ -40,7 +40,7 @@ module "prometheus" {
```hcl
module "prometheus" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/prometheus?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/prometheus?ref=v7.6.0"
prometheus_version = "main"
}
@@ -50,7 +50,7 @@ module "prometheus" {
```hcl
module "prometheus" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/prometheus?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/commons/prometheus?ref=v7.6.0"
prometheus_version = "master"
}
diff --git a/infrastructure/gcp/artifact-registry/README.md b/infrastructure/gcp/artifact-registry/README.md
index e1166e13..ad735c4b 100644
--- a/infrastructure/gcp/artifact-registry/README.md
+++ b/infrastructure/gcp/artifact-registry/README.md
@@ -21,7 +21,7 @@ The module provisions a google_artifact_registry_repository resource configured
```hcl
module "artifact-registry" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/gcp/artifact-registry?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/gcp/artifact-registry?ref=v7.6.0"
location = "your-location"
project_id = "your-project-id"
diff --git a/infrastructure/gcp/backend/README.md b/infrastructure/gcp/backend/README.md
index 9e237469..44cb56d6 100644
--- a/infrastructure/gcp/backend/README.md
+++ b/infrastructure/gcp/backend/README.md
@@ -22,7 +22,7 @@ The module creates a primary google_storage_bucket (tf_state) with a random_id s
```hcl
module "backend" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/gcp/backend?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/gcp/backend?ref=v7.6.0"
project_id = "your-project-id"
}
diff --git a/infrastructure/gcp/cloud-dns/README.md b/infrastructure/gcp/cloud-dns/README.md
index 83185de7..af42c8bb 100644
--- a/infrastructure/gcp/cloud-dns/README.md
+++ b/infrastructure/gcp/cloud-dns/README.md
@@ -21,7 +21,7 @@ The module creates a single google_dns_managed_zone resource in the specified GC
```hcl
module "cloud-dns" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/gcp/cloud-dns?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/gcp/cloud-dns?ref=v7.6.0"
domain_name = "your-domain-name"
project_id = "your-project-id"
diff --git a/infrastructure/gcp/cloud-nat/README.md b/infrastructure/gcp/cloud-nat/README.md
index 266b8971..35804f21 100644
--- a/infrastructure/gcp/cloud-nat/README.md
+++ b/infrastructure/gcp/cloud-nat/README.md
@@ -19,7 +19,7 @@ This module creates a google_compute_router resource in a specified region and n
```hcl
module "cloud-nat" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/gcp/cloud-nat?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/gcp/cloud-nat?ref=v7.6.0"
nat_name = "your-nat-name"
network_id = "your-network-id"
diff --git a/infrastructure/gcp/gke/README.md b/infrastructure/gcp/gke/README.md
index 2857730e..63fe3877 100644
--- a/infrastructure/gcp/gke/README.md
+++ b/infrastructure/gcp/gke/README.md
@@ -22,7 +22,7 @@ The module conditionally creates either a `terraform-google-modules/kubernetes-e
```hcl
module "gke" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/gcp/gke?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/gcp/gke?ref=v7.6.0"
cluster_name = "your-cluster-name"
ip_range_pods = "your-ip-range-pods"
diff --git a/infrastructure/gcp/iam/README.md b/infrastructure/gcp/iam/README.md
index e6471638..da1c867f 100644
--- a/infrastructure/gcp/iam/README.md
+++ b/infrastructure/gcp/iam/README.md
@@ -19,7 +19,7 @@ The module creates google_service_account resources for each service account spe
```hcl
module "iam" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/gcp/iam?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/gcp/iam?ref=v7.6.0"
project_id = "your-project-id"
}
diff --git a/infrastructure/gcp/security/README.md b/infrastructure/gcp/security/README.md
index 1ae5084a..81458083 100644
--- a/infrastructure/gcp/security/README.md
+++ b/infrastructure/gcp/security/README.md
@@ -22,7 +22,7 @@ The module uses data.google_container_cluster to derive the VPC network name and
```hcl
module "security" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/gcp/security?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/gcp/security?ref=v7.6.0"
cluster_name = "your-cluster-name"
gcp_project_id = "your-gcp-project-id"
diff --git a/infrastructure/gcp/vpc/README.md b/infrastructure/gcp/vpc/README.md
index 49ea957d..384e4613 100644
--- a/infrastructure/gcp/vpc/README.md
+++ b/infrastructure/gcp/vpc/README.md
@@ -20,7 +20,7 @@ The module invokes the terraform-google-modules/network/google module to create
```hcl
module "vpc" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/gcp/vpc?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/gcp/vpc?ref=v7.6.0"
network_name = "your-network-name"
project_id = "your-project-id"
diff --git a/infrastructure/oci/backend/README.md b/infrastructure/oci/backend/README.md
index 3751bc67..1098c726 100644
--- a/infrastructure/oci/backend/README.md
+++ b/infrastructure/oci/backend/README.md
@@ -18,7 +18,7 @@ The module creates an oci_objectstorage_bucket resource, which is configured wit
```hcl
module "backend" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/oci/backend?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/oci/backend?ref=v7.6.0"
compartment_id = "your-compartment-id"
namespace = "your-namespace"
diff --git a/infrastructure/oci/dns/README.md b/infrastructure/oci/dns/README.md
index ec25a798..95650ee4 100644
--- a/infrastructure/oci/dns/README.md
+++ b/infrastructure/oci/dns/README.md
@@ -18,7 +18,7 @@ This module creates oci_dns_zone resources for each DNS zone defined in the dns_
```hcl
module "dns" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/oci/dns?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/oci/dns?ref=v7.6.0"
compartment_id = "your-compartment-id"
}
diff --git a/infrastructure/oci/dynamic_groups/README.md b/infrastructure/oci/dynamic_groups/README.md
index 932dd4ce..4f9367fb 100644
--- a/infrastructure/oci/dynamic_groups/README.md
+++ b/infrastructure/oci/dynamic_groups/README.md
@@ -19,7 +19,7 @@ This module creates an OCI dynamic group and an OCI identity policy, connecting
```hcl
module "dynamic_groups" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/oci/dynamic_groups?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/oci/dynamic_groups?ref=v7.6.0"
cluster_id = "your-cluster-id"
compartment_id = "your-compartment-id"
diff --git a/infrastructure/oci/oke/README.md b/infrastructure/oci/oke/README.md
index a3c838d0..33650b72 100644
--- a/infrastructure/oci/oke/README.md
+++ b/infrastructure/oci/oke/README.md
@@ -21,7 +21,7 @@ The module instantiates the oracle-terraform-modules/oke/oci module to create an
```hcl
module "oke" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/oci/oke?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/oci/oke?ref=v7.6.0"
api_endpoint_subnet_id = "your-api-endpoint-subnet-id"
cluster_name = "your-cluster-name"
diff --git a/infrastructure/oci/vcn/README.md b/infrastructure/oci/vcn/README.md
index d79dec51..890c194e 100644
--- a/infrastructure/oci/vcn/README.md
+++ b/infrastructure/oci/vcn/README.md
@@ -19,7 +19,7 @@ The module instantiates oci_core_subnet resources for public and private subnets
```hcl
module "vcn" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/oci/vcn?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//infrastructure/oci/vcn?ref=v7.6.0"
}
```
diff --git a/nullplatform/account/README.md b/nullplatform/account/README.md
index fb15ec43..e0974571 100644
--- a/nullplatform/account/README.md
+++ b/nullplatform/account/README.md
@@ -19,7 +19,7 @@ The module iterates over the `nullplatform_accounts` input map using `for_each`
```hcl
module "account" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/account?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/account?ref=v7.6.0"
nullplatform_accounts = "your-nullplatform-accounts"
}
diff --git a/nullplatform/agent/README.md b/nullplatform/agent/README.md
index bcebe07b..2709158e 100644
--- a/nullplatform/agent/README.md
+++ b/nullplatform/agent/README.md
@@ -2,27 +2,27 @@
## Description
-Deploys the nullplatform agent to a Kubernetes cluster via a Helm chart, configuring cloud-provider-specific identity, worker orchestration, and traffic manager settings
+Deploys the nullplatform agent to a Kubernetes cluster via a Helm chart, configuring it for a specific cloud provider with worker orchestration, ingress templates, and DNS settings
## Architecture
-The module renders a YAML values file via templatefile() from locally computed locals, then provisions a single helm_release resource named 'agent' targeting the nullplatform-agent chart from the official Helm repository. A terraform_data resource tracks the api_key to force helm_release replacement when credentials rotate, while a second terraform_data resource enforces cross-variable preconditions (e.g. aws_iam_role_arn for AWS, azure_* vars for Azure) before the release is applied. Cloud-provider-specific environment variables, worker patches, and ServiceAccount bindings are merged into the chart values, with extra_envs taking final precedence over all computed defaults.
+A single helm_release resource named 'agent' deploys the nullplatform-agent chart from the nullplatform Helm repository, with all chart values rendered via templatefile() into a single YAML document defined in locals. Two terraform_data resources handle API key change detection (replace_triggered_by) and cross-variable precondition validation for cloud-provider-specific required inputs. Cloud-provider-specific environment variables (AWS IAM role ARN, Azure client credentials) and worker orchestration patches are merged into the chart values, with per-package pod patches injected as worker.patches entries that set serviceAccountName and memory limits for each orchestrated package.
## Features
-- Deploys nullplatform-agent helm_release with atomic rollback, cleanup-on-fail, and 10-release history cap
-- Renders cloud-provider-specific Helm values for AWS (IAM role ARN injection), Azure (client credentials and resource group), GCP, and OCI
-- Configures worker orchestrator patches to set ServiceAccount, memory limits, and environment variables per worker-orchestrated package
-- Enforces pinned versioning for both the Helm chart and traffic manager image tag, rejecting empty or moving references like 'latest'
-- Injects TRAFFIC_CONTAINER_IMAGE into worker env by combining agent_traffic_manager_repository and agent_traffic_manager_tag locals
-- Supports namespace auto-creation via create_namespace and merges user-supplied extra_envs over all computed defaults
-- Triggers full helm_release replacement via terraform_data when the api_key value changes
+- Deploys nullplatform agent via helm_release with atomic rollback, cleanup-on-fail, and capped history of 10 revisions
+- Generates cloud-provider-specific Helm values for AWS (IAM role ARN), Azure (client credentials, subscription, resource group), GCP, and OCI using templatefile()
+- Configures worker orchestration patches per package slug to assign a shared Kubernetes ServiceAccount and memory limits to worker pods
+- Selects between ALB and Istio Gateway API ingress template paths for the containers scope worker based on worker_ingress variable
+- Enforces pinned versions for both the Helm chart and traffic manager image tag via validation rules that reject empty, latest, main, and master references
+- Replaces the Helm release automatically when api_key changes using terraform_data replace_triggered_by lifecycle
+- Merges extra_envs into all agent and worker environment variable maps, allowing caller overrides without losing module-computed defaults
## Basic Usage
```hcl
module "agent" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/agent?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/agent?ref=v7.6.0"
agent_traffic_manager_tag = "your-agent-traffic-manager-tag"
api_key = "your-api-key"
@@ -37,7 +37,7 @@ module "agent" {
```hcl
module "agent" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/agent?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/agent?ref=v7.6.0"
agent_traffic_manager_tag = "your-agent-traffic-manager-tag"
api_key = "your-api-key"
@@ -53,7 +53,7 @@ module "agent" {
```hcl
module "agent" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/agent?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/agent?ref=v7.6.0"
agent_traffic_manager_tag = "your-agent-traffic-manager-tag"
api_key = "your-api-key"
@@ -68,7 +68,7 @@ module "agent" {
```hcl
module "agent" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/agent?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/agent?ref=v7.6.0"
agent_traffic_manager_tag = "your-agent-traffic-manager-tag"
api_key = "your-api-key"
@@ -89,7 +89,7 @@ module "agent" {
```hcl
module "agent" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/agent?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/agent?ref=v7.6.0"
agent_traffic_manager_tag = "your-agent-traffic-manager-tag"
api_key = "your-api-key"
@@ -104,13 +104,13 @@ module "agent" {
```hcl
module "agent" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/agent?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/agent?ref=v7.6.0"
agent_traffic_manager_tag = "your-agent-traffic-manager-tag"
api_key = "your-api-key"
cloud_provider = "your-cloud-provider"
image_tag = "your-image-tag"
- nullplatform_agent_helm_version = "fixed semver (e.g. 2.37.0)"
+ nullplatform_agent_helm_version = "nullplatform_agent_helm_version"
tags_selectors = "your-tags-selectors"
}
```
@@ -119,9 +119,9 @@ module "agent" {
```hcl
module "agent" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/agent?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/agent?ref=v7.6.0"
- agent_traffic_manager_tag = "fixed semver (e.g. 1.8.0)"
+ agent_traffic_manager_tag = "agent_traffic_manager_tag"
api_key = "your-api-key"
cloud_provider = "your-cloud-provider"
image_tag = "your-image-tag"
@@ -176,7 +176,7 @@ resource "example_resource" "this" {
| [azure\_resource\_group](#input\_azure\_resource\_group) | Azure resource group name | `string` | `null` | no |
| [azure\_subscription\_id](#input\_azure\_subscription\_id) | Azure subscription ID | `string` | `null` | no |
| [azure\_tenant\_id](#input\_azure\_tenant\_id) | Azure tenant ID | `string` | `null` | no |
-| [blue\_green\_ingress\_path](#input\_blue\_green\_ingress\_path) | Specifies the ingress path used for blue-green deployments to route traffic to the new version. Required when extra\_envs.INGRESS\_TYPE is 'istio' — the k8s scope's default template is AWS ALB Ingress and won't route traffic correctly through Istio, so it must be pointed at an Istio HTTPRoute template instead. | `string` | `""` | no |
+| [blue\_green\_ingress\_path](#input\_blue\_green\_ingress\_path) | Path, inside the worker image, of the ingress/route template used to shift traffic during a blue-green deployment. Empty (default) uses the template worker\_ingress selects; set it only to point at a custom template. | `string` | `""` | no |
| [cloud\_provider](#input\_cloud\_provider) | Cloud provider to use ('aws', 'gcp', 'azure', or 'oci') | `string` | n/a | yes |
| [create\_namespace](#input\_create\_namespace) | Create the namespace if it does not exist. Leave true unless another module already owns it: nullplatform/base declares the same namespace with Helm ownership metadata, so with no ordering edge between the two whichever applies second fails. | `bool` | `true` | no |
| [dns\_type](#input\_dns\_type) | Type of DNS Provider, ej: azure, route53, or external\_dns | `string` | `""` | no |
@@ -186,7 +186,7 @@ resource "example_resource" "this" {
| [image\_repository](#input\_image\_repository) | Container image repository for the agent. Defaults to the official nullplatform image. | `string` | `""` | no |
| [image\_tag](#input\_image\_tag) | Image tag for the agent container image | `string` | n/a | yes |
| [init\_scripts](#input\_init\_scripts) | List of initialization scripts to execute during agent startup | `list(string)` | `[]` | no |
-| [initial\_ingress\_path](#input\_initial\_ingress\_path) | Defines the initial ingress path used when deploying the application for the first time. Required when extra\_envs.INGRESS\_TYPE is 'istio' — the k8s scope's default template is AWS ALB Ingress and won't route traffic correctly through Istio, so it must be pointed at an Istio HTTPRoute template instead. | `string` | `""` | no |
+| [initial\_ingress\_path](#input\_initial\_ingress\_path) | Path, inside the worker image, of the ingress/route template used on a scope's first deployment. Empty (default) uses the template worker\_ingress selects; set it only to point at a custom template. | `string` | `""` | no |
| [namespace](#input\_namespace) | Kubernetes namespace where the nullplatform agent will run | `string` | `"nullplatform-tools"` | no |
| [nullplatform\_agent\_helm\_version](#input\_nullplatform\_agent\_helm\_version) | No default: every install pins this deliberately — see VERSIONS.md. Version of the nullplatform agent Helm chart to deploy | `string` | n/a | yes |
| [private\_gateway\_name](#input\_private\_gateway\_name) | Name of the private/internal gateway used for routing | `string` | `"gateway-private"` | no |
@@ -194,10 +194,11 @@ resource "example_resource" "this" {
| [public\_gateway\_name](#input\_public\_gateway\_name) | Name of the public gateway used for routing | `string` | `"gateway-public"` | no |
| [release\_name](#input\_release\_name) | Override for the Helm release name. Defaults to nullplatform-agent | `string` | `"nullplatform-agent"` | no |
| [service\_account\_name](#input\_service\_account\_name) | Override for the Kubernetes ServiceAccount name created by the Helm chart | `string` | `"nullplatform-agent"` | no |
-| [service\_template](#input\_service\_template) | Specifies the name or reference of the scope service template to be used for deployment. Required when extra\_envs.INGRESS\_TYPE is 'istio' — the k8s scope's default template is AWS ALB Ingress and won't route traffic correctly through Istio, so it must be pointed at an Istio-compatible template instead. | `string` | `""` | no |
+| [service\_template](#input\_service\_template) | Path, inside the worker image, of the Service template the k8s scope renders. Empty (default) uses the template worker\_ingress selects; set it only to point at a custom template. | `string` | `""` | no |
| [tags\_selectors](#input\_tags\_selectors) | Map of tags used to select and filter channels and agents | `map(string)` | n/a | yes |
| [use\_account\_slug](#input\_use\_account\_slug) | Flag to determine whether to use the account slug in resource naming | `string` | `""` | no |
| [worker](#input\_worker) | Extra worker-orchestration config, merged on top of the module's own computed
worker block: backend ("kubernetes" by default), allowedRegistries
(["public.ecr.aws/nullplatform/*"] by default, so the platform's own scope
images keep working), and a patch for the worker container (2Gi memory
limit, the deploy/DNS env vars below, and a serviceAccountName that always
mirrors service\_account\_name). allowedRegistries and patches set here are
concatenated with (not replacing) the module defaults — add your own
registries or an extra patch rather than having to repeat the defaults;
set backend here to override it outright. Anything else — security, idleTTL
(reap idle workers), the legacy defaults/rules/pins — passes through as-is.
See the nullplatform-agent chart values (>= 2.37.0) for the full shape.
null = nothing extra.
Example:
worker = {
allowedRegistries = ["123456789012.dkr.ecr.us-east-1.amazonaws.com/your-org/*"]
patches = [{ target = { package = "my-pkg" }, merge = { spec = { serviceAccountName = "np-agent-sa" } } }]
idleTTL = "30m"
} | `any` | `null` | no |
+| [worker\_ingress](#input\_worker\_ingress) | Ingress stack the containers worker deploys scopes with: "alb" keeps the k8s scope's own templates (AWS Load Balancer Controller Ingress), "istio" points it at the Gateway API templates baked in the scopes/containers image. service\_template, initial\_ingress\_path and blue\_green\_ingress\_path override the derived paths when set. | `string` | `"alb"` | no |
| [worker\_memory\_limit](#input\_worker\_memory\_limit) | Memory limit for a worker-orchestrated package's pod (packages in var.worker\_orchestrated\_packages). The chart's own default is small enough to OOM mid-tofu-apply for packages that run real IaC tooling. | `string` | `"2Gi"` | no |
| [worker\_orchestrated\_packages](#input\_worker\_orchestrated\_packages) | Package slugs whose worker-orchestrator (package-exec) pods should run
under var.service\_account\_name (the same IRSA identity as the agent
itself) and var.worker\_memory\_limit, via a per-package worker-container
patch. Add a package's slug here whenever its worker needs to assume an
AWS role, or needs more memory than the chart's own default (e.g. to run
tofu/terraform); a worker for a package not listed here falls back to the
namespace's default ServiceAccount and the chart's own memory default.
This is separate from the "containers" scope's own k8s-deployment env
vars (DNS\_TYPE, DOMAIN, etc.), which remain specific to that package
regardless of what's listed here. | `list(string)` | [
"containers"
]
| no |
@@ -205,16 +206,16 @@ resource "example_resource" "this" {
diff --git a/nullplatform/api_key/README.md b/nullplatform/api_key/README.md
index 2bd5319b..61cefee6 100644
--- a/nullplatform/api_key/README.md
+++ b/nullplatform/api_key/README.md
@@ -21,7 +21,7 @@ The module defines a single nullplatform_api_key resource whose name, grants, an
```hcl
module "api_key" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/api_key?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/api_key?ref=v7.6.0"
type = "your-type"
}
@@ -31,7 +31,7 @@ module "api_key" {
```hcl
module "api_key" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/api_key?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/api_key?ref=v7.6.0"
nrn = "your-nrn" # Required when type = "agent"
type = "agent"
@@ -42,7 +42,7 @@ module "api_key" {
```hcl
module "api_key" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/api_key?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/api_key?ref=v7.6.0"
nrn = "your-nrn" # Required when type = "base"
type = "base"
@@ -53,7 +53,7 @@ module "api_key" {
```hcl
module "api_key" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/api_key?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/api_key?ref=v7.6.0"
nrn = "your-nrn" # Required when type = "scope_notification"
specification_slug = "your-specification-slug" # Required when type = "scope_notification"
@@ -65,7 +65,7 @@ module "api_key" {
```hcl
module "api_key" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/api_key?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/api_key?ref=v7.6.0"
nrn = "your-nrn" # Required when type = "service_notification"
specification_slug = "your-specification-slug" # Required when type = "service_notification"
@@ -77,7 +77,7 @@ module "api_key" {
```hcl
module "api_key" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/api_key?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/api_key?ref=v7.6.0"
custom_name = "your-custom-name" # Required when type = "custom"
custom_role_slugs = "your-custom-role-slugs" # Required when type = "custom"
diff --git a/nullplatform/asset/docker_server/README.md b/nullplatform/asset/docker_server/README.md
index df79fc02..d575e44d 100644
--- a/nullplatform/asset/docker_server/README.md
+++ b/nullplatform/asset/docker_server/README.md
@@ -20,7 +20,7 @@ This module creates a single nullplatform_provider_config resource of type docke
```hcl
module "docker_server" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/asset/docker_server?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/asset/docker_server?ref=v7.6.0"
login_server = "your-login-server"
nrn = "your-nrn"
diff --git a/nullplatform/asset/ecr/README.md b/nullplatform/asset/ecr/README.md
index 55a70470..60b2cb3d 100644
--- a/nullplatform/asset/ecr/README.md
+++ b/nullplatform/asset/ecr/README.md
@@ -21,7 +21,7 @@ The module reads the current AWS region via the aws_region data source and combi
```hcl
module "ecr" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/asset/ecr?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/asset/ecr?ref=v7.6.0"
application_role_arn = "your-application-role-arn"
build_workflow_access_key_id = "your-build-workflow-access-key-id"
diff --git a/nullplatform/asset/s3/README.md b/nullplatform/asset/s3/README.md
index 723225ff..957201a5 100644
--- a/nullplatform/asset/s3/README.md
+++ b/nullplatform/asset/s3/README.md
@@ -19,7 +19,7 @@ The module creates a single nullplatform_provider_config resource of type s3-con
```hcl
module "s3" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/asset/s3?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/asset/s3?ref=v7.6.0"
bucket_name = "your-bucket-name"
nrn = "your-nrn"
diff --git a/nullplatform/base/README.md b/nullplatform/base/README.md
index 95bb38c7..80360427 100644
--- a/nullplatform/base/README.md
+++ b/nullplatform/base/README.md
@@ -22,7 +22,7 @@ The module creates two kubernetes_namespace_v1 resources (nullplatform-tools and
```hcl
module "base" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/base?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/base?ref=v7.6.0"
k8s_provider = "your-k8s-provider"
logging_controller_image_tag = "your-logging-controller-image-tag"
@@ -34,7 +34,7 @@ module "base" {
```hcl
module "base" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/base?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/base?ref=v7.6.0"
k8s_provider = "eks"
logging_controller_image_tag = "your-logging-controller-image-tag"
@@ -46,7 +46,7 @@ module "base" {
```hcl
module "base" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/base?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/base?ref=v7.6.0"
k8s_provider = "gke"
logging_controller_image_tag = "your-logging-controller-image-tag"
@@ -58,7 +58,7 @@ module "base" {
```hcl
module "base" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/base?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/base?ref=v7.6.0"
k8s_provider = "aks"
logging_controller_image_tag = "your-logging-controller-image-tag"
@@ -70,7 +70,7 @@ module "base" {
```hcl
module "base" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/base?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/base?ref=v7.6.0"
k8s_provider = "oke"
logging_controller_image_tag = "your-logging-controller-image-tag"
@@ -82,7 +82,7 @@ module "base" {
```hcl
module "base" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/base?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/base?ref=v7.6.0"
k8s_provider = "aro"
logging_controller_image_tag = "your-logging-controller-image-tag"
diff --git a/nullplatform/cloud/aws/cloud/README.md b/nullplatform/cloud/aws/cloud/README.md
index 518504cf..cc0b3e11 100644
--- a/nullplatform/cloud/aws/cloud/README.md
+++ b/nullplatform/cloud/aws/cloud/README.md
@@ -21,7 +21,7 @@ The module uses data sources aws_caller_identity and aws_region to dynamically r
```hcl
module "cloud" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/cloud/aws/cloud?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/cloud/aws/cloud?ref=v7.6.0"
domain_name = "your-domain-name"
hosted_private_zone_id = "your-hosted-private-zone-id"
diff --git a/nullplatform/cloud/aws/vpc/README.md b/nullplatform/cloud/aws/vpc/README.md
index 695c1d96..1520dcca 100644
--- a/nullplatform/cloud/aws/vpc/README.md
+++ b/nullplatform/cloud/aws/vpc/README.md
@@ -20,7 +20,7 @@ The module creates a single nullplatform_provider_config resource of type aws-ne
```hcl
module "vpc" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/cloud/aws/vpc?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/cloud/aws/vpc?ref=v7.6.0"
nrn = "your-nrn"
vpc_id = "your-vpc-id"
diff --git a/nullplatform/cloud/azure/cloud/README.md b/nullplatform/cloud/azure/cloud/README.md
index 493322f0..23a38a8b 100644
--- a/nullplatform/cloud/azure/cloud/README.md
+++ b/nullplatform/cloud/azure/cloud/README.md
@@ -22,7 +22,7 @@ The module creates a single nullplatform_provider_config resource of type 'azure
```hcl
module "cloud" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/cloud/azure/cloud?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/cloud/azure/cloud?ref=v7.6.0"
azure_resource_group_name = "your-azure-resource-group-name"
nrn = "your-nrn"
diff --git a/nullplatform/cloud/gcp/cloud/README.md b/nullplatform/cloud/gcp/cloud/README.md
index ee13ae53..4c2ece1b 100644
--- a/nullplatform/cloud/gcp/cloud/README.md
+++ b/nullplatform/cloud/gcp/cloud/README.md
@@ -19,7 +19,7 @@ The module creates a single nullplatform_provider_config resource of type 'googl
```hcl
module "cloud" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/cloud/gcp/cloud?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/cloud/gcp/cloud?ref=v7.6.0"
domain_name = "your-domain-name"
location = "your-location"
diff --git a/nullplatform/cloud/oci/cloud/README.md b/nullplatform/cloud/oci/cloud/README.md
index df4c520f..fbad1064 100644
--- a/nullplatform/cloud/oci/cloud/README.md
+++ b/nullplatform/cloud/oci/cloud/README.md
@@ -19,7 +19,7 @@ The module creates a single nullplatform_provider_config resource of type 'oci-c
```hcl
module "cloud" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/cloud/oci/cloud?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/cloud/oci/cloud?ref=v7.6.0"
account_id = "your-account-id"
account_name = "your-account-name"
diff --git a/nullplatform/code_repository/README.md b/nullplatform/code_repository/README.md
index ebf2ab73..3df7e6c5 100644
--- a/nullplatform/code_repository/README.md
+++ b/nullplatform/code_repository/README.md
@@ -22,7 +22,7 @@ The module uses local boolean flags (is_gitlab, is_github, is_azure, is_bitbucke
```hcl
module "code_repository" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/code_repository?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/code_repository?ref=v7.6.0"
git_provider = "your-git-provider"
nrn = "your-nrn"
@@ -33,7 +33,7 @@ module "code_repository" {
```hcl
module "code_repository" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/code_repository?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/code_repository?ref=v7.6.0"
git_provider = "github"
github_installation_id = "your-github-installation-id" # Required when git_provider = "github"
@@ -46,7 +46,7 @@ module "code_repository" {
```hcl
module "code_repository" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/code_repository?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/code_repository?ref=v7.6.0"
git_provider = "gitlab"
gitlab_access_token = "your-gitlab-access-token" # Required when git_provider = "gitlab"
@@ -62,7 +62,7 @@ module "code_repository" {
```hcl
module "code_repository" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/code_repository?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/code_repository?ref=v7.6.0"
azure_access_token = "your-azure-access-token" # Required when git_provider = "azure"
azure_agent_pool = "your-azure-agent-pool" # Required when git_provider = "azure"
@@ -76,7 +76,7 @@ module "code_repository" {
```hcl
module "code_repository" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/code_repository?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/code_repository?ref=v7.6.0"
bitbucket_collaborators = "your-bitbucket-collaborators" # Required when git_provider = "bitbucket"
bitbucket_installation_url = "your-bitbucket-installation-url" # Required when git_provider = "bitbucket"
diff --git a/nullplatform/container_orchestration/aks/README.md b/nullplatform/container_orchestration/aks/README.md
index 85901aea..2de9a13e 100644
--- a/nullplatform/container_orchestration/aks/README.md
+++ b/nullplatform/container_orchestration/aks/README.md
@@ -22,7 +22,7 @@ The module constructs a set of structured locals that merge optional and require
```hcl
module "aks" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/aks?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/aks?ref=v7.6.0"
cluster_name = "your-cluster-name"
nrn = "your-nrn"
@@ -36,7 +36,7 @@ module "aks" {
```hcl
module "aks" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/aks?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/aks?ref=v7.6.0"
cluster_name = "your-cluster-name"
nrn = "your-nrn"
@@ -50,7 +50,7 @@ module "aks" {
```hcl
module "aks" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/aks?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/aks?ref=v7.6.0"
cluster_name = "your-cluster-name"
nrn = "your-nrn"
@@ -64,7 +64,7 @@ module "aks" {
```hcl
module "aks" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/aks?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/aks?ref=v7.6.0"
cluster_name = "your-cluster-name"
nrn = "your-nrn"
diff --git a/nullplatform/container_orchestration/eks/README.md b/nullplatform/container_orchestration/eks/README.md
index fb101664..eba7daa1 100644
--- a/nullplatform/container_orchestration/eks/README.md
+++ b/nullplatform/container_orchestration/eks/README.md
@@ -22,7 +22,7 @@ The module constructs a structured attributes map from input variables using Ter
```hcl
module "eks" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/eks?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/eks?ref=v7.6.0"
cluster_name = "your-cluster-name"
nrn = "your-nrn"
@@ -34,7 +34,7 @@ module "eks" {
```hcl
module "eks" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/eks?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/eks?ref=v7.6.0"
cluster_name = "your-cluster-name"
nrn = "your-nrn"
@@ -46,7 +46,7 @@ module "eks" {
```hcl
module "eks" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/eks?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/eks?ref=v7.6.0"
cluster_name = "your-cluster-name"
nrn = "your-nrn"
@@ -58,7 +58,7 @@ module "eks" {
```hcl
module "eks" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/eks?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/eks?ref=v7.6.0"
cluster_name = "your-cluster-name"
nrn = "your-nrn"
diff --git a/nullplatform/container_orchestration/gke/README.md b/nullplatform/container_orchestration/gke/README.md
index daf0d39b..097c817a 100644
--- a/nullplatform/container_orchestration/gke/README.md
+++ b/nullplatform/container_orchestration/gke/README.md
@@ -22,7 +22,7 @@ The module constructs a set of local values by merging optional inputs into a st
```hcl
module "gke" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/gke?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/gke?ref=v7.6.0"
cluster_name = "your-cluster-name"
location = "your-location"
@@ -36,7 +36,7 @@ module "gke" {
```hcl
module "gke" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/gke?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/gke?ref=v7.6.0"
cluster_name = "your-cluster-name"
location = "your-location"
@@ -50,7 +50,7 @@ module "gke" {
```hcl
module "gke" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/gke?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/gke?ref=v7.6.0"
cluster_name = "your-cluster-name"
location = "your-location"
@@ -64,7 +64,7 @@ module "gke" {
```hcl
module "gke" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/gke?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/gke?ref=v7.6.0"
cluster_name = "your-cluster-name"
location = "your-location"
diff --git a/nullplatform/container_orchestration/oke/README.md b/nullplatform/container_orchestration/oke/README.md
index 0eba36eb..10b80375 100644
--- a/nullplatform/container_orchestration/oke/README.md
+++ b/nullplatform/container_orchestration/oke/README.md
@@ -19,7 +19,7 @@ Creates a single nullplatform_provider_config resource of type 'oke' that stores
```hcl
module "oke" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/oke?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/container_orchestration/oke?ref=v7.6.0"
cluster_name = "your-cluster-name"
nrn = "your-nrn"
diff --git a/nullplatform/dimension/README.md b/nullplatform/dimension/README.md
index 20699f9f..894e2504 100644
--- a/nullplatform/dimension/README.md
+++ b/nullplatform/dimension/README.md
@@ -19,7 +19,7 @@ The module creates a nullplatform_dimension resource using the provided name, or
```hcl
module "dimension" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/dimension?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/dimension?ref=v7.6.0"
name = "your-name"
nrn = "your-nrn"
diff --git a/nullplatform/dimension_value/README.md b/nullplatform/dimension_value/README.md
index 3e269078..eba8a66b 100644
--- a/nullplatform/dimension_value/README.md
+++ b/nullplatform/dimension_value/README.md
@@ -19,7 +19,7 @@ The module uses a terraform_data resource to enforce mutual-exclusivity and pres
```hcl
module "dimension_value" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/dimension_value?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/dimension_value?ref=v7.6.0"
dimension_id = "your-dimension-id"
name = "your-name"
diff --git a/nullplatform/identity-access-control/README.md b/nullplatform/identity-access-control/README.md
index bedcc6ce..fa7fac1e 100644
--- a/nullplatform/identity-access-control/README.md
+++ b/nullplatform/identity-access-control/README.md
@@ -20,7 +20,7 @@ The module creates a single nullplatform_provider_config resource named identity
```hcl
module "identity-access-control" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/identity-access-control?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/identity-access-control?ref=v7.6.0"
attributes = "your-attributes"
nrn = "your-nrn"
diff --git a/nullplatform/metrics/README.md b/nullplatform/metrics/README.md
index 9a4997b6..f00d133d 100644
--- a/nullplatform/metrics/README.md
+++ b/nullplatform/metrics/README.md
@@ -21,7 +21,7 @@ The module creates a single nullplatform_provider_config resource of type 'prome
```hcl
module "metrics" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/metrics?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/metrics?ref=v7.6.0"
nrn = "your-nrn"
}
diff --git a/nullplatform/packaged_service/README.md b/nullplatform/packaged_service/README.md
index a6e5ea27..8e1ea833 100644
--- a/nullplatform/packaged_service/README.md
+++ b/nullplatform/packaged_service/README.md
@@ -22,7 +22,7 @@ The module accepts a flat `components` list and partitions it into spec componen
```hcl
module "packaged_service" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/packaged_service?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/packaged_service?ref=v7.6.0"
components = "your-components"
nrn = "your-nrn"
diff --git a/nullplatform/parameter_storage_configuration/README.md b/nullplatform/parameter_storage_configuration/README.md
index fc02cf34..9ea2ad5d 100644
--- a/nullplatform/parameter_storage_configuration/README.md
+++ b/nullplatform/parameter_storage_configuration/README.md
@@ -21,7 +21,7 @@ The module creates a single nullplatform_provider_config resource named paramete
```hcl
module "parameter_storage_configuration" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/parameter_storage_configuration?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/parameter_storage_configuration?ref=v7.6.0"
nrn = "your-nrn"
type = "your-type"
@@ -32,7 +32,7 @@ module "parameter_storage_configuration" {
```hcl
module "parameter_storage_configuration" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/parameter_storage_configuration?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/parameter_storage_configuration?ref=v7.6.0"
nrn = "your-nrn"
type = "aws-secrets-manager"
@@ -43,7 +43,7 @@ module "parameter_storage_configuration" {
```hcl
module "parameter_storage_configuration" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/parameter_storage_configuration?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/parameter_storage_configuration?ref=v7.6.0"
nrn = "your-nrn"
tier = "your-tier" # Required when type = "aws-parameter-store"
diff --git a/nullplatform/parameter_storage_definition/README.md b/nullplatform/parameter_storage_definition/README.md
index b4033e1e..5b7f6745 100644
--- a/nullplatform/parameter_storage_definition/README.md
+++ b/nullplatform/parameter_storage_definition/README.md
@@ -20,7 +20,7 @@ A data.http resource fetches the raw specification template from a configurable
```hcl
module "parameter_storage_definition" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/parameter_storage_definition?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/parameter_storage_definition?ref=v7.6.0"
np_api_key = "your-np-api-key"
nrn = "your-nrn"
diff --git a/nullplatform/parameter_storage_definition_agent_association/README.md b/nullplatform/parameter_storage_definition_agent_association/README.md
index d51dbeee..381ae26d 100644
--- a/nullplatform/parameter_storage_definition_agent_association/README.md
+++ b/nullplatform/parameter_storage_definition_agent_association/README.md
@@ -21,7 +21,7 @@ The module creates a terraform_data resource to track API key changes and a null
```hcl
module "parameter_storage_definition_agent_association" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/parameter_storage_definition_agent_association?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/parameter_storage_definition_agent_association?ref=v7.6.0"
api_key = "your-api-key"
nrn = "your-nrn"
diff --git a/nullplatform/scope_configuration/README.md b/nullplatform/scope_configuration/README.md
index 7c682e71..1c05f4c4 100644
--- a/nullplatform/scope_configuration/README.md
+++ b/nullplatform/scope_configuration/README.md
@@ -21,7 +21,7 @@ The module creates a single nullplatform_provider_config resource, wiring the nr
```hcl
module "scope_configuration" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/scope_configuration?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/scope_configuration?ref=v7.6.0"
nrn = "your-nrn"
type = "your-type"
@@ -32,7 +32,7 @@ module "scope_configuration" {
```hcl
module "scope_configuration" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/scope_configuration?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/scope_configuration?ref=v7.6.0"
aws_hosted_public_zone_id = "your-aws-hosted-public-zone-id" # Required when type = "static-files"
aws_region = "your-aws-region" # Required when type = "static-files"
@@ -47,7 +47,7 @@ module "scope_configuration" {
```hcl
module "scope_configuration" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/scope_configuration?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/scope_configuration?ref=v7.6.0"
lambda_placeholder_image_uri = "your-lambda-placeholder-image-uri" # Required when type = "aws-lambda"
lambda_tofu_state_bucket = "your-lambda-tofu-state-bucket" # Required when type = "aws-lambda"
diff --git a/nullplatform/scope_definition/README.md b/nullplatform/scope_definition/README.md
index 7162e439..03d05600 100644
--- a/nullplatform/scope_definition/README.md
+++ b/nullplatform/scope_definition/README.md
@@ -22,7 +22,7 @@ The module fetches remote JSON templates via `data.http` resources and processes
```hcl
module "scope_definition" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/scope_definition?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/scope_definition?ref=v7.6.0"
np_api_key = "your-np-api-key"
nrn = "your-nrn"
diff --git a/nullplatform/scope_definition_agent_association/README.md b/nullplatform/scope_definition_agent_association/README.md
index 3cfb61d6..fd012998 100644
--- a/nullplatform/scope_definition_agent_association/README.md
+++ b/nullplatform/scope_definition_agent_association/README.md
@@ -22,7 +22,7 @@ The module fetches a notification channel JSON template via the `http` data sour
```hcl
module "scope_definition_agent_association" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/scope_definition_agent_association?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/scope_definition_agent_association?ref=v7.6.0"
api_key = "your-api-key"
nrn = "your-nrn"
diff --git a/nullplatform/service_definition/README.md b/nullplatform/service_definition/README.md
index cf91f3bf..8905358d 100644
--- a/nullplatform/service_definition/README.md
+++ b/nullplatform/service_definition/README.md
@@ -22,7 +22,7 @@ The module uses `data.http` resources to fetch JSON template files from GitHub,
```hcl
module "service_definition" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/service_definition?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/service_definition?ref=v7.6.0"
nrn = "your-nrn"
repository_branch = "your-repository-branch"
@@ -35,7 +35,7 @@ module "service_definition" {
```hcl
module "service_definition" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/service_definition?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/service_definition?ref=v7.6.0"
nrn = "your-nrn"
repository_branch = "v1.4.0"
diff --git a/nullplatform/service_definition_agent_association/README.md b/nullplatform/service_definition_agent_association/README.md
index 76b72d43..65d731c7 100644
--- a/nullplatform/service_definition_agent_association/README.md
+++ b/nullplatform/service_definition_agent_association/README.md
@@ -22,7 +22,7 @@ The module creates a `terraform_data` resource to track API key changes and trig
```hcl
module "service_definition_agent_association" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/service_definition_agent_association?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/service_definition_agent_association?ref=v7.6.0"
api_key = "your-api-key"
tags_selectors = "your-tags-selectors"
diff --git a/nullplatform/users/README.md b/nullplatform/users/README.md
index 05a2c6d7..8c007c09 100644
--- a/nullplatform/users/README.md
+++ b/nullplatform/users/README.md
@@ -21,7 +21,7 @@ The module iterates over a map of user definitions using `nullplatform_user` res
```hcl
module "users" {
- source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/users?ref=v7.5.0"
+ source = "git::https://github.com/nullplatform/tofu-modules.git//nullplatform/users?ref=v7.6.0"
nullplatform_users = "your-nullplatform-users"
}