dependabot[bot] 70167651ae build(deps): Bump hashicorp/google from 5.2.0 to 5.7.0 in /terraform/environments/staging (#2770)
Bumps
[hashicorp/google](https://github.com/hashicorp/terraform-provider-google)
from 5.2.0 to 5.7.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/hashicorp/terraform-provider-google/releases">hashicorp/google's
releases</a>.</em></p>
<blockquote>
<h2>v5.7.0</h2>
<p>DEPRECATIONS:</p>
<ul>
<li>gkehub: deprecated <code>config_management.binauthz</code> in
<code>google_gke_hub_feature_membership</code> (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16536">#16536</a>)</li>
</ul>
<p>IMPROVEMENTS:</p>
<ul>
<li>bigtable: added <code>standard_isolation</code> and
<code>standard_isolation.priority</code> fields to
<code>google_bigtable_app_profile</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16485">#16485</a>)</li>
<li>cloudrunv2: promoted <code>custom_audiences</code> field to GA on
<code>google_cloud_run_v2_service</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16510">#16510</a>)</li>
<li>compute: promoted <code>labels</code> field to GA on
<code>google_compute_vpn_tunnel</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16508">#16508</a>)</li>
<li>containerattached: added <code>proxy_config</code> field to
<code>google_container_attached_cluster</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16524">#16524</a>)</li>
<li>gkehub: added <code>membership_location</code> field to
<code>google_gke_hub_feature_membership</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16536">#16536</a>)</li>
<li>logging: made the change to aqcuire and update the
<code>google_logging_project_sink</code> resource that already exists at
the desired location. These logging buckets cannot be removed so
deleting this resource will remove the bucket config from your terraform
state but will leave the logging bucket unchanged. (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16513">#16513</a>)</li>
<li>memcache: added <code>MEMCACHE_1_6_15</code> as a possible value for
<code>memcache_version</code> in <code>google_memcache_instance</code>
resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16531">#16531</a>)</li>
<li>monitoring: added error message to delete Alert Policies first on
400 response when deleting
<code>google_monitoring_uptime_check_config</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16535">#16535</a>)</li>
<li>spanner: added <code>autoscaling_config</code> field to
<code>google_spanner_instance</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16473">#16473</a>)</li>
<li>workflows: promoted <code>user_env_vars</code> field to GA on
<code>google_workflows_workflow</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16477">#16477</a>)</li>
</ul>
<p>BUG FIXES:</p>
<ul>
<li>compute: changed <code>external_ipv6_prefix</code> field to not be
output only in <code>google_compute_subnetwork</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16480">#16480</a>)</li>
<li>compute: fixed issue where <code>google_compute_attached_disk</code>
would produce an error for certain zone configs (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16484">#16484</a>)</li>
<li>edgecontainer: fixed update method of
<code>google_edgecontainer_cluster</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16490">#16490</a>)</li>
<li>provider: fixed an issue where universe domains would not overwrite
API endpoints (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16521">#16521</a>)</li>
<li>resourcemanager: made
<code>data_source_google_project_service</code> no longer return an
error when the service is not enabled (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16525">#16525</a>)</li>
<li>sql: <code>ssl_mode</code> field is not stored in terraform state if
it has never been used in <code>google_sql_database_instance</code>
resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16486">#16486</a>)</li>
</ul>
<p>NOTES:</p>
<ul>
<li>dataproc: backfilled <code>terraform_labels</code> field for
resource <code>google_dataproc_workflow_template</code>, so resource
recreation won't happen during provider upgrade from <code>4.x</code> to
<code>5.7</code> (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16517">#16517</a>)</li>
<li>
<ul>
<li>provider: backfilled <code>terraform_labels</code> field for some
immutable resources, so resource recreation won't happen during provider
upgrade from <code>4.X</code> to <code>5.7</code> (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16518">#16518</a>)</li>
</ul>
</li>
</ul>
<h2>v5.6.0</h2>
<p>FEATURES:</p>
<ul>
<li><strong>New Resource:</strong>
<code>google_integration_connectors_connection</code> (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16468">#16468</a>)</li>
</ul>
<p>IMPROVEMENTS:</p>
<ul>
<li>assuredworkloads: added <code>enable_sovereign_controls</code>,
<code>partner</code>, <code>partner_permissions</code>,
<code>violation_notifications_enabled</code>, and several other
output-only fields to <code>google_assured_workloads_workloads</code>
(<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16433">#16433</a>)</li>
<li>composer: added <code>storage_config</code> to
<code>google_composer_environment</code> (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16455">#16455</a>)</li>
<li>container: added <code>fleet</code> field to
<code>google_container_cluster</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16466">#16466</a>)</li>
<li>containeraws: added <code>admin_groups</code> to
<code>google_container_aws_cluster</code> (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16433">#16433</a>)</li>
<li>containerazure: added <code>admin_groups</code> to
<code>google_container_azure_cluster</code> (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16433">#16433</a>)</li>
<li>dataproc: added support for <code>instance_flexibility_policy</code>
in <code>google_dataproc_cluster</code> (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16417">#16417</a>)</li>
<li>dialogflowcx: added <code>is_default_start_flow</code> field to
<code>google_dialogflow_cx_flow</code> resource to allow management of
default flow resources via Terraform (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16441">#16441</a>)</li>
<li>dialogflowcx: added <code>is_default_welcome_intent</code> and
<code>is_default_negative_intent</code> fields to
<code>google_dialogflow_cx_intent</code> resource to allow management of
default intent resources via Terraform (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16441">#16441</a>)</li>
<li>gkehub: added <code>fleet_default_member_config</code> field to
<code>google_gke_hub_feature</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16457">#16457</a>)</li>
<li>gkehub: added <code>metrics_gcp_service_account_email</code> to
<code>google_gke_hub_feature_membership</code> (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16433">#16433</a>)</li>
<li>logging: added <code>index_configs</code> field to
<code>logging_bucket_config</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16437">#16437</a>)</li>
<li>logging: added <code>index_configs</code> field to
<code>logging_project_bucket_config</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16437">#16437</a>)</li>
<li>monitoring: added <code>pings_count</code>,
<code>user_labels</code>, and <code>custom_content_type</code> fields to
<code>google_monitoring_uptime_check_config</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16420">#16420</a>)</li>
<li>spanner: added <code>autoscaling_config</code> field to
<code>google_spanner_instance</code> (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16473">#16473</a>)</li>
<li>sql: added <code>ssl_mode</code> field to
<code>google_sql_database_instance</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16394">#16394</a>)</li>
<li>vertexai: added <code>private_service_connect_config</code> to
<code>google_vertex_ai_index_endpoint</code> (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16471">#16471</a>)</li>
<li>workstations: added <code>domain_config</code> field to resource
<code>google_workstations_workstation_cluster</code> (beta) (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16464">#16464</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/hashicorp/terraform-provider-google/blob/main/CHANGELOG.md">hashicorp/google's
changelog</a>.</em></p>
<blockquote>
<h2>5.7.0 (Nov 20, 2023)</h2>
<p>DEPRECATIONS:</p>
<ul>
<li>gkehub: deprecated <code>config_management.binauthz</code> in
<code>google_gke_hub_feature_membership</code> (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16536">#16536</a>)</li>
</ul>
<p>IMPROVEMENTS:</p>
<ul>
<li>bigtable: added <code>standard_isolation</code> and
<code>standard_isolation.priority</code> fields to
<code>google_bigtable_app_profile</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16485">#16485</a>)</li>
<li>cloudrunv2: promoted <code>custom_audiences</code> field to GA on
<code>google_cloud_run_v2_service</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16510">#16510</a>)</li>
<li>compute: promoted <code>labels</code> field to GA on
<code>google_compute_vpn_tunnel</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16508">#16508</a>)</li>
<li>containerattached: added <code>proxy_config</code> field to
<code>google_container_attached_cluster</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16524">#16524</a>)</li>
<li>gkehub: added <code>membership_location</code> field to
<code>google_gke_hub_feature_membership</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16536">#16536</a>)</li>
<li>logging: made the change to aqcuire and update the
<code>google_logging_project_sink</code> resource that already exists at
the desired location. These logging buckets cannot be removed so
deleting this resource will remove the bucket config from your terraform
state but will leave the logging bucket unchanged. (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16513">#16513</a>)</li>
<li>memcache: added <code>MEMCACHE_1_6_15</code> as a possible value for
<code>memcache_version</code> in <code>google_memcache_instance</code>
resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16531">#16531</a>)</li>
<li>monitoring: added error message to delete Alert Policies first on
400 response when deleting
<code>google_monitoring_uptime_check_config</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16535">#16535</a>)</li>
<li>spanner: added <code>autoscaling_config</code> field to
<code>google_spanner_instance</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16473">#16473</a>)</li>
<li>workflows: promoted <code>user_env_vars</code> field to GA on
<code>google_workflows_workflow</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16477">#16477</a>)</li>
</ul>
<p>BUG FIXES:</p>
<ul>
<li>compute: changed <code>external_ipv6_prefix</code> field to not be
output only in <code>google_compute_subnetwork</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16480">#16480</a>)</li>
<li>compute: fixed issue where <code>google_compute_attached_disk</code>
would produce an error for certain zone configs (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16484">#16484</a>)</li>
<li>edgecontainer: fixed update method of
<code>google_edgecontainer_cluster</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16490">#16490</a>)</li>
<li>provider: fixed an issue where universe domains would not overwrite
API endpoints (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16521">#16521</a>)</li>
<li>resourcemanager: made
<code>data_source_google_project_service</code> no longer return an
error when the service is not enabled (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16525">#16525</a>)</li>
<li>sql: <code>ssl_mode</code> field is not stored in terraform state if
it has never been used in <code>google_sql_database_instance</code>
resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16486">#16486</a>)</li>
</ul>
<p>NOTES:</p>
<ul>
<li>dataproc: backfilled <code>terraform_labels</code> field for
resource <code>google_dataproc_workflow_template</code>, so resource
recreation won't happen during provider upgrade from <code>4.x</code> to
<code>5.7</code> (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16517">#16517</a>)</li>
<li>
<ul>
<li>provider: backfilled <code>terraform_labels</code> field for some
immutable resources, so resource recreation won't happen during provider
upgrade from <code>4.X</code> to <code>5.7</code> (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16518">#16518</a>)</li>
</ul>
</li>
</ul>
<h2>5.6.0 (Nov 13, 2023)</h2>
<p>FEATURES:</p>
<ul>
<li><strong>New Resource:</strong>
<code>google_integration_connectors_connection</code> (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16468">#16468</a>)</li>
</ul>
<p>IMPROVEMENTS:</p>
<ul>
<li>assuredworkloads: added <code>enable_sovereign_controls</code>,
<code>partner</code>, <code>partner_permissions</code>,
<code>violation_notifications_enabled</code>, and several other
output-only fields to <code>google_assured_workloads_workloads</code>
(<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16433">#16433</a>)</li>
<li>composer: added <code>storage_config</code> to
<code>google_composer_environment</code> (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16455">#16455</a>)</li>
<li>container: added <code>fleet</code> field to
<code>google_container_cluster</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16466">#16466</a>)</li>
<li>containeraws: added <code>admin_groups</code> to
<code>google_container_aws_cluster</code> (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16433">#16433</a>)</li>
<li>containerazure: added <code>admin_groups</code> to
<code>google_container_azure_cluster</code> (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16433">#16433</a>)</li>
<li>dataproc: added support for <code>instance_flexibility_policy</code>
in <code>google_dataproc_cluster</code> (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16417">#16417</a>)</li>
<li>dialogflowcx: added <code>is_default_start_flow</code> field to
<code>google_dialogflow_cx_flow</code> resource to allow management of
default flow resources via Terraform (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16441">#16441</a>)</li>
<li>dialogflowcx: added <code>is_default_welcome_intent</code> and
<code>is_default_negative_intent</code> fields to
<code>google_dialogflow_cx_intent</code> resource to allow management of
default intent resources via Terraform (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16441">#16441</a>)</li>
<li>
<ul>
<li>gkehub: added <code>fleet_default_member_config</code> field to
<code>google_gke_hub_feature</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16457">#16457</a>)</li>
</ul>
</li>
<li>gkehub: added <code>metrics_gcp_service_account_email</code> to
<code>google_gke_hub_feature_membership</code> (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16433">#16433</a>)</li>
<li>logging: added <code>index_configs</code> field to
<code>logging_bucket_config</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16437">#16437</a>)</li>
<li>logging: added <code>index_configs</code> field to
<code>logging_project_bucket_config</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16437">#16437</a>)</li>
<li>monitoring: added <code>pings_count</code>,
<code>user_labels</code>, and <code>custom_content_type</code> fields to
<code>google_monitoring_uptime_check_config</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16420">#16420</a>)</li>
<li>spanner: added <code>autoscaling_config</code> field to
<code>google_spanner_instance</code> (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16473">#16473</a>)</li>
<li>sql: added <code>ssl_mode</code> field to
<code>google_sql_database_instance</code> resource (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/pull/16394">#16394</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d6e26a7978"><code>d6e26a7</code></a>
Update CHANGELOG.md (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/issues/16554">#16554</a>)</li>
<li><a
href="951dd43dd4"><code>951dd43</code></a>
Upgrade DCL version to 1.57.0 (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/issues/9466">#9466</a>)
(<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/issues/16536">#16536</a>)</li>
<li><a
href="9e293c467f"><code>9e293c4</code></a>
UptimeCheckConfig custom delete for 400s (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/issues/9429">#9429</a>)
(<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/issues/16535">#16535</a>)</li>
<li><a
href="241ee7e916"><code>241ee7e</code></a>
TeamCity : Skip <code>google_project</code> sweeper in Beta projects (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/issues/8756">#8756</a>)
(<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/issues/16534">#16534</a>)</li>
<li><a
href="15557f4ee4"><code>15557f4</code></a>
Fix dataproc tests to use sweepable names (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/issues/9469">#9469</a>)
(<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/issues/16532">#16532</a>)</li>
<li><a
href="d20571fefa"><code>d20571f</code></a>
Add memcached-1.6.15 to the list of allowed memcache versions (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/issues/9375">#9375</a>)
(<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/issues/16531">#16531</a>)</li>
<li><a
href="2413e08875"><code>2413e08</code></a>
Fix google_dataform_repository acc tests to have dynamic generated names
(<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/issues/94">#94</a>...</li>
<li><a
href="d7b77a84d5"><code>d7b77a8</code></a>
dlp_job_trigger: clarify how to use multiple actions with example (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/issues/9458">#9458</a>)
(<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/issues/1">#1</a>...</li>
<li><a
href="473488f5d1"><code>473488f</code></a>
Update doc links for lifecycle meta argument (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/issues/9461">#9461</a>)
(<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/issues/16526">#16526</a>)</li>
<li><a
href="25ee7b50f6"><code>25ee7b5</code></a>
Revert project service data source to pre-5.0.0 (<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/issues/9464">#9464</a>)
(<a
href="https://redirect.github.com/hashicorp/terraform-provider-google/issues/16525">#16525</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/hashicorp/terraform-provider-google/compare/v5.2.0...v5.7.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=hashicorp/google&package-manager=terraform&previous-version=5.2.0&new-version=5.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-04 19:02:50 -05:00
2023-12-04 13:56:31 -05:00
2023-10-19 19:20:51 -06:00

firezone logo

A modern alternative to legacy VPNs.


firezone Discourse firezone Coverage Status GitHub commit activity GitHub closed issues Cloudsmith follow on Twitter


Note: 🚧 The main branch is undergoing major restructuring in preparation

for the release of Firezone 1.x 🚧.

See the legacy branch to track the latest changes to Firezone 0.7.

Read the 1.0 announcement for more.


Overview

Firezone is an open source platform to securely manage remote access for any-sized organization. Unlike most VPNs, Firezone takes a granular, least-privileged approach to access management with group-based policies that control access to individual applications, entire subnets, and everything in between.

architecture

Features

Firezone is:

  • Fast: Built on WireGuard® to be 3-4 times faster than OpenVPN.
  • Scalable: Deploy two or more gateways for automatic load balancing and failover.
  • Private: Peer-to-peer, end-to-end encrypted tunnels prevent packets from routing through our infrastructure.
  • Secure: Zero attack surface thanks to Firezone's holepunching tech which establishes tunnels on-the-fly at the time of access.
  • Flexible: Authenticate users via email, Google Workspace, or OIDC and sync users and groups automatically.
  • Simple: Deploy gateways and configure access in minutes with a snappy admin UI.

Firezone is not:

  • A tool for creating bi-directional mesh networks
  • A full-featured router or firewall
  • An IPSec or OpenVPN server

Contents of this repository

This is a monorepo containing the full Firezone product, marketing website, and product documentation, organized as follows:

Quickstart

Firezone 1.x is currently accepting early access signups for closed testing. Fill out the early access form to request access and we'll be in touch!

Frequently asked questions (FAQ)

Can I self-host Firezone?

Our license won't stop you from self-hosting the entire Firezone product top to bottom, but we can't commit the resources to make this a smooth experience and therefore don't support self-hosting the control plane at this time.

If you have a business case requiring an on-prem installation of Firezone please get in touch.

If you're feeling especially adventurous and want to self-host Firezone for educational or recreational purposes, you'll want to build and distribute the clients from source to ensure they remain locked to a version compatible with your self-hosted control plane. Unfortunately, the following clients must be distributed through proprietary app stores due to restrictions imposed by Apple and Google:

  • macOS
  • iOS
  • Android / ChromeOS

Because it's impossible to select which client version to install from a particular app store, building and distributing Firezone from source is the only to way self-host Firezone at this time.

Otherwise, if you're hobbyist or developer and are looking to spin it up locally to contribute or experiment with, see CONTRIBUTING.md.

How do I upgrade from 0.7?

Unfortunately, you can't. The good news is Firezone 1.x is much easier to setup and manage than 0.x and so you probably don't need to.

How long will 0.7 be supported until?

Firezone 0.7 is currently end-of-life and will stop receiving updates after January 31st, 2024.

Documentation

Additional documentation on general usage, troubleshooting, and configuration can be found at https://docs.firezone.dev.

Get Help

If you're looking for help installing, configuring, or using Firezone, check our community support options:

  1. Discussion Forums: Ask questions, report bugs, and suggest features.
  2. Public Slack Group: Join live discussions, meet other users, and get to know the contributors.
  3. Open a PR: Contribute a bugfix or make a contribution to Firezone.

Star History

Star History Chart

Developing and Contributing

See CONTRIBUTING.md.

Security

See SECURITY.md.

License

Portions of this software are licensed as follows:

  • All content residing under the "elixir/" directory of this repository, if that directory exists, is licensed under the "Elastic License 2.0" license defined in "elixir/LICENSE".
  • All third party components incorporated into the Firezone Software are licensed under the original license provided by the owner of the applicable component.
  • Content outside of the above mentioned directories or restrictions above is available under the "Apache 2.0 License" license as defined in "LICENSE".

WireGuard® is a registered trademark of Jason A. Donenfeld.

Description
No description provided
Readme Apache-2.0 169 MiB
Languages
Elixir 57.1%
Rust 29.2%
TypeScript 5.9%
Swift 3.3%
Kotlin 1.8%
Other 2.5%