# Panfactum Changelog — edge.24-06-13

> Adds PgBouncer configuration options, introduces cost-saving opportunities with enhanced_ha_enabled flag, adds OpenCost for Kubernetes cost analysis, and fixes various issues with VPC, Authentik, and pod scheduling.

## Highlights

- New `enhanced_ha_enabled` input to core modules — disable for ~$50/month savings with minor availability tradeoff
- New [`kube_open_cost`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_open_cost) module for Kubernetes cost analysis
- Many new PgBouncer configuration inputs in [`kube_pg_cluster`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_pg_cluster)

## Additions

- Updates [`kube_pg_cluster`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_pg_cluster) with many new variables for configuring PgBouncer. New variables are prefixed with `pgbouncer_`.
  - Impacts: iac-module `kube_pg_cluster` — New PgBouncer configuration variables
- Adds support for `path_prefix` to [`kube_vault_proxy`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_vault_proxy).
  - Impacts: iac-module `kube_vault_proxy` — New path_prefix input support
- Adds new `enhanced_ha_enabled` input to many core modules (default `true`). Setting this to `false` will allow for approximately $50/month in
- Adds a [Spot Data Feed](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-data-feeds.html) to the [`aws_account`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/aws/aws_account) module.
  - Impacts: iac-module `aws_account` — New Spot Data Feed integration
- Adds the [`kube_open_cost`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_open_cost) module for calculating the cost of workloads running on Kubernetes.
  - Impacts: iac-module `kube_open_cost` — New module for Kubernetes cost analysis

## Fixes

- Addressed issue in [`aws_vpc`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/aws/aws_vpc) where NAT nodes wouldn't restart if NAT setup failed with an exit code other than `1`.
  - Impacts: iac-module `aws_vpc` — Fix for NAT node restart on non-1 exit codes
- Increased the memory floor of the Authentik server in [`kube_authentik`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_authentik) to avoid OOM issues.
  - Impacts: iac-module `kube_authentik` — Increased memory floor to prevent OOM errors
- Correctly applies pod labels in [`kube_aws_lb_controller`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_aws_lb_controller).
  - Impacts: iac-module `kube_aws_lb_controller` — Fix for incorrect pod label application
- Removes node preferences defaults from [`kube_workload_utility`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_workload_utility) that were preventing efficient node deprovisioning.
  - Impacts: iac-module `kube_workload_utility` — Remove defaults blocking node deprovisioning
- Fixes incorrect SCIM property mapping in [`authentik_aws_sso`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/authentik/authentik_aws_sso).
  - Impacts: iac-module `authentik_aws_sso` — Fix for incorrect SCIM property mapping

## Related Resources

- [JSON Data](https://panfactum.com/docs/changelog/edge.24-06-13.json): Machine-readable data
- [Channel Release List](https://panfactum.com/docs/changelog/edge.json): All releases in this channel