# Panfactum Changelog — edge.24-06-06

> Introduces workload utility submodule for standardized pod specs, disables VPC flow logs by default, improves environment setup with scaffolding script, and fixes several environment and resource-related issues.

## Highlights

- New [`kube_workload_utility`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_workload_utility) submodule for production-hardened Pod specs
- VPC flow logs now disabled by default in [`aws_vpc`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/aws/aws_vpc)
- New `pf-env-scaffold` script for environment bootstrapping setup

## Breaking Changes

- The reloader deployment must be deleted before the next apply of [`kube_reloader`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_reloader). No inputs have changed.
  - Impacts: iac-module `kube_reloader` — Requires redeployment before next apply
- The alpha module `kube_labels` has been removed in favor of the labels provided by [`kube_workload_utility`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_workload_utility).
  - Impacts: iac-module `kube_workload_utility` — Replaces removed kube_labels module
- VPC flow logs in [`aws_vpc`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/aws/aws_vpc) are now disabled by default as they can be fairly expensive. They can be re-enabled
  - Impacts: iac-module `aws_vpc` — VPC flow logs now disabled by default

## Additions

- Added new `pf-env-scaffold` script that takes care of setting up the `PF_ENVIRONMENTS_DIR` in the [bootstrapping guide](https://panfactum.com/docs/edge/guides/bootstrapping/configuring-infrastructure-as-code).
- Added [`kube_workload_utility`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_workload_utility) to make it easier to create uniform, production-hardened Pod specs that take advantage of all Panfactum stack capabilities.
  - Impacts: iac-module `kube_workload_utility` — New submodule for production-hardened Pod specs
- Added [`kube_constants`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_constants) that export static configuration values useful when creating resources on Panfactum clusters.
  - Impacts: iac-module `kube_constants` — New submodule exporting static cluster config values
- [`kube_cert_manager`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_cert_manager) will now automatically delete Certificate secrets if the Certificate is deleted.
  - Impacts: iac-module `kube_cert_manager` — Auto-deletes Certificate secrets on Certificate removal
- [`aws_ses_domain`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/aws/aws_ses_domain) now takes an optional `smtp_allowed_cidrs` input that restricts what IPs can use the generated SMTP credentials.
  - Impacts: iac-module `aws_ses_domain` — New smtp_allowed_cidrs input for IP restrictions
- Terragrunt will now automatically retry on some errors up to three times before exiting with failure.

## Fixes

- `.env` files are now properly loaded into the shell environment and changes will trigger fast reloads instead of full devenv
  - Impacts: configuration `.env` — Proper loading and fast reload on changes
  - Reference (issue-report): [.env files not loaded into shell environment](https://github.com/Panfactum/stack/issues/52)
- Adjusts base resource requests of core infrastructure modules to prevent temporary OOM errors when bootstrapping before VPA takes effect.
- [`kube_authentik`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_authentik) now respects the `log_level` input.
  - Impacts: iac-module `kube_authentik` — Now respects the log_level input

## Related Resources

- [JSON Data](https://panfactum.com/docs/changelog/edge.24-06-06.json): Machine-readable data
- [Channel Release List](https://panfactum.com/docs/changelog/edge.json): All releases in this channel