v1.2.0

Notes

• Firewall High Availability: the hub-and-spoke-firewall flavor can now deploy an active/passive OPNsense pair with CARP, a second appliance in a separate availability zone and a shared LAN virtual IP that replaces the primary's address as the next hop for corporate landing zones, so a node failure never touches the routes (#55)
• Organization-Wide Audit Logs: a Telemetry Link streams audit events into a Telemetry Router, which forwards them to a Logs instance for querying and archives them to object storage with optional WORM protection, retention defaults to 180 days (#53)
• Deployment Verification Before Release: publishing a release now plans, applies and destroys a full landing zone against a test organization first (#71)
• Stricter Pull Request Gates: formatting, linting, module validation and configuration tests run on every pull request (#60, #52)

What's Changed

• chore(deps): bump the terraform-providers group across 9 directories with 2 updates by @dependabot[bot] in #52
• Export org wide audit logs to a Logs instance and S3 archive by @mahauber in #53
• docs: update/fix license file date and company name by @lweberru in #58
• feat(connectivity): add active/passive CARP support for firewall high… by @mahauber in #55
• ci: strengthen pull request quality gates by @lweberru in #60
• Update Terraform configurations and module documentation by @mahauber in #70
• feat: add verification workflow and enhance validation processes by @mahauber in #71
• fix: update variable precedence in deployment workflow and add overri… by @mahauber in #73
• fix: validate STACKIT_SERVICE_ACCOUNT_KEY format and update key path … by @mahauber in #74
• fix: add FOLDER_PREFIX to separate cycle's folder tree in verificatio… by @mahauber in #75
• fix: enforce folder name length limit for rm_folders in variables.tf by @mahauber in #76
• fix: remove unused variables and enhance configuration rendering in v… by @mahauber in #77

Full Changelog: v1.1.0...v1.2.0