Hyperswitch-CDK v0.7.0

What's Changed

• feat: enhance proxy architecture with centralized security groups and AL2023 upgrade by @itsharshvb in #215
• chore: Add access token authentication and hash context configuration for keymanager by @itsharshvb in #216
• fix: implement dynamic version fetching for Loki stack components by @itsharshvb in #218
• chore : Update Helm chart references, certificate naming for encryption service by @itsharshvb in #220
• chore: upgrade Hyperswitch components to latest versions hs-stack:v0.2.12 by @itsharshvb in #221

Compatibility
This version of the Hyperswitch CDK is compatible with the following versions of other components:

Hyperswitch App: v1.116.0
Control Center: v1.37.3
Web Client: : v0.125.0
Card Vault: v0.6.5
Key Manager: v0.1.10

New Contributors

• @itsharshvb made their first contribution in #215

Full Changelog: v0.6.1...v0.7.0

Hyperswitch-CDK v0.6.0

What's Changed

• feat: Updating CDK to stable version 0.6.0 with latest build by @Pradesh-S in #212

Compatibility

This version of the Hyperswitch CDK is compatible with the following versions of other components:

• Hyperswitch App: v1.114.0
• Control Center: v1.37.1
• Web Client: v0.121.2
• Card Vault: v0.6.5
• Key Manager: v0.1.7

Full Changelog: v0.5.0...v0.6.0

Hyperswitch-CDK v0.5.0

What's Changed

Chroes

• chore: Version update for hyperswitch-app, control center by @Pradesh-S in #206

Features

• feat(aws): add migration_runner and db schema files by @prasunna09 in #197
• feat(migrations): Adding migration files from version v1.111.0 to v1.113.0 by @Pradesh-S in #202

Fixes

• fix(aws): remove hs bucket support in free tier by @prasunna09 in #198
• fix: installer breaking on region input by @dracarys18 in #201
• fix(rds): update the aurora Postgres version and fix ebs csi helm chart by @prasunna09 in #203
• Fixing single click by @inventvenkat in #205
• fix(version-update): Deployment Fixes for Free-tier Setup by @Pradesh-S in #210
• fix(version-update): Deployment Fixes for Production Setup by @Pradesh-S in #211
• fix(rds): update Aurora Postgres version from 13.7 to 14.11 in card-vault components by @GeovannyGil in #204

Compatibility

This version of the Hyperswitch CDK is compatible with the following versions of other components:

• App server Version: v1.113.0
• Control Center: v1.36.1
• Web Client: v0.109.2
• WooCommerce Plugin Version: v1.6.1
• Card Vault Version: v0.4.0
• Key Manager: v0.1.7

New Contributors

• @Pradesh-S made their first contribution in #202
• @GeovannyGil made their first contribution in #204

Full Changelog: v0.4.0...v0.5.0

v0.4.0

What's Changed

• fix(eks): Update security groups of grafana lb by @prasunna09 in #193
• chore: Update version for hs-app, control center helm chart by @prasunna09 in #195

Full Changelog: v0.3.0...v0.4.0

v0.3.0

What's Changed

• fix: remove all the objects in the versioned bucket by @nitesh-balla in #70
• fix(installation): delete cdk iam role if it already exists by @nitesh-balla in #72
• refactor(rds): remove public access to rds by @nitesh-balla in #73
• feat: free tier setup for evaluators by @inventvenkat in #64
• refactor(rds): enable rds storage encryption by @nitesh-balla in #74
• refactor(scripts): enhance bash script user experience by @nitesh-balla in #78
• refactor(scripts): enhance installation scripts by @nitesh-balla in #79
• fix(rds): restrict RDS inbound access by removing open IP rule by @nitesh-balla in #81
• refactor(rds): Implement PostgreSQL instance for RDS free tier eligibility by @nitesh-balla in #83
• fix(scripts): prompt user for master encryption key by @nitesh-balla in #92
• chore(tags): add tags for AWS constructs that are being created by CDK by @NishantJoshi00 in #93
• chore: fix tags config by @NishantJoshi00 in #102
• feat: transfer docker images from public registries to aws private ECR by @nitesh-balla in #103
• chore(jumps): remove public access to internal and external jumps by @nitesh-balla in #95
• refactor: restrict public read access to db migration s3 bucket by @nitesh-balla in #108
• refactor: add guide to create AES 256 master encryption key by @nitesh-balla in #110
• refactor: use images from AWS Private ECR instead of public registries. by @nitesh-balla in #107
• refactor: update single click installation script to support free tier installation by @nitesh-balla in #111
• fix: docker image usage minor fix by @nitesh-balla in #113
• refactor: delete load balancers and uninstall cdk using uninstall.sh by @nitesh-balla in #116
• feat: add ami start and record lambda by @dracarys18 in #112
• refactor: force uninstall while running bash uninstall.sh by @nitesh-balla in #117
• refactor: remove eks private repository changes by @nitesh-balla in #118
• Create LICENSE by @nitesh-balla in #119
• refactor: decouple image builder from hyperswitch installation by @nitesh-balla in #121
• feat: support single click installation on aws stack interface for production ready setup by @nitesh-balla in #122
• chore: update latest hyperswitch stable versions by @jagan-jaya in #123
• fix: paramter store not getting deleted on stack delete by @jagan-jaya in #125
• fix: card vault using kms encrypted values of different key by @jagan-jaya in #126
• fix: check for currect rust binary by @pplanel in #124
• fix: minor fixes in buildspec.yml and uninstall.sh files by @nitesh-balla in #129
• refactor: use images from AWS Private ECR instead of public registries by @prasunna09 in #130
• feat: add vpc creation to the EC2 stack by @nitesh-balla in #132
• feat: add support ssm access to external jump server by @prasunna09 in #131
• feat: add support to create required subnets by @prasunna09 in #133
• feat: use private s3 sdk assets via cloudfront for hyperloader by @nitesh-balla in #135
• feat: create aws single click cloudformation template for workshop by @nitesh-balla in #138
• fix: add proper path to the nvm dependency by @nitesh-balla in #140
• feat: Add support to create required node groups for production by @prasunna09 in #136
• fix: provide vpc subnet group to lambda function by @nitesh-balla in #141
• fix: use appropriate subnet group for migration runner by @nitesh-balla in #142
• refactor: format workshop scripts by @nitesh-balla in #143
• fix: pull cdk from a particular commit for seamless free-tier deployment by @nitesh-balla in #144
• refactor: pull workshop script from a commit by @nitesh-balla in #145
• refactor: use single node group role for all the node groups by @nitesh-balla in #146
• refactor: pull the workshop files from a stable git tag by @nitesh-balla in #147
• chore: add server side encryption and TLS to s3 buckets by @nitesh-balla in #98
• fix: update router version in user data to v1.107.0 by @nitesh-balla in #150
• refactor: pull schema from v1.107.0 by @nitesh-balla in #152
• fix: update cors in free tier envs to allow wildcard origin by @nitesh-balla in #153
• refactor: allign db options with prod db configuration by @prasunna09 in #160
• feat: add support to push audit logs to cloudwatch by @prasunna09 in #158
• feat: add support to push application logs to s3 bucket by @prasunna09 in #139
• refactor(standalone): allow sed in-place insertion for envs and restrict rds public access by @nitesh-balla in #162
• refactor: update demo app to 1.0.12 by @nitesh-balla in #163
• feat: add istiod, istio base and istio ingressgateway helm charts to cdk by @nitesh-balla in #155
• refactor: add istio gateway, virtual service and destination rule for traffic control by @nitesh-balla in #164
• fix(buildspec): update bitnami/metric-server tag version by @prasunna09 in #165
• feat: add support to push logs to opensearch by @prasunna09 in #154
• refactor: add resources to the expected node group by @prasunna09 in #169
• feat: support envoy proxy and squid proxy by @nitesh-balla in #166
• fix: Update install.sh script by @prasunna09 in #171
• feat: Add support to push Loki logs to s3 bucket by @prasunna09 in #170
• fix: Add role to loki service account by @prasunna09 in #172
• feat: Add WAF to external lb and create s3 bucket for server access logging by @prasunna09 in #174
• fix: make session token optional by @nitesh-balla in #175
• chore: add sqlx envs for analytics in dashboard by @nitesh-balla in #183
• fix: push Grafana sidecar to ecr and create Grafana ingress for logs in Loki ns by @prasunna09 in #176
• feat: add keymanager to cdk by @dracarys18 in #186
• fix: remove public access with a dummy IP by @nitesh-balla in #187
• Revert "fix: remove public access with a dummy IP (#187)" by @nitesh-balla in #188
• refactor: replace 0.0.0.0/0 with dummy ip by @nitesh-balla in #189
• refactor: update packages to reduce vulnerabilities by @nitesh-balla in #190
• fix: add error handling while reading key manager secret files by @nitesh-balla in #191
• fix: create a new sg for sdk-app communication to break circular dependency by @nitesh-balla in #192

New Contributors

• @pplanel made their first contribution in #124

Full Changelog: v0.2.0...v0.3.0

Hyperswitch CDK v0.2.0

Features

• Remove lamda dependency for db migration
• use card-vault of helm charts to maintain it inside k8s
• add payouts feature in control-center

Hyperswitch CDK v0.1.0

Basic Production Ready Script for Hyperswitch Services.
This includes the following features:

• AWS KMS (Key Management Service Provisioned by Amazon)
• Image Builder
• Utility Deployment Script with assertions and appropriate prompts