# Panfactum Changelog — edge.24-07-01

> Graduates BuildKit to beta status, updates ECR repository configuration for better customization, adds Argo Events components, introduces several helpful CLI tools, and improves ARM support across core components.

## Highlights

- [`kube_buildkit`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_buildkit) graduates to Beta status
- ECR repository input format changed to support per-repository configuration
- New [`kube_argo_sensor`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_argo_sensor) and [`kube_argo_event_source`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_argo_event_source) submodules (Alpha)
- All core cluster components now support both amd64 and arm64 nodes

## Breaking Changes

- The input format to [`aws_ecr_repos`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/aws/aws_ecr_repos) has been reformatted to support better per-repository configuration. Terragrunt inputs will need to be updated
  - Impacts: iac-module `aws_ecr_repos` — Input format changed for per-repository config
- EC2 instances in EKS node groups, NAT hosts in [`aws_vpc`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/aws/aws_vpc), KMS replica keys in [`aws_kms_encrypt_key`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/aws/aws_kms_encrypt_key), and pods in [`kube_bastion`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_bastion) will
  - Impacts: iac-module `aws_vpc` — NAT hosts no longer tagged with version/commit hash
  - Impacts: iac-module `aws_kms_encrypt_key` — Replica keys no longer tagged with version/commit hash
  - Impacts: iac-module `kube_bastion` — Pods no longer tagged with version/commit hash

## Additions

- [`kube_buildkit`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_buildkit) has graduated to Beta status and is ready for general consumption. Installation and usage instructions are [here](https://panfactum.com/docs/edge/guides/addons/buildkit/installing).
  - Impacts: iac-module `kube_buildkit` — Graduated to Beta status
- [`aws_ecr_repos`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/aws/aws_ecr_repos) now supports custom image expiration rules and both pull and push permissions.
  - Impacts: iac-module `aws_ecr_repos` — New custom expiration rules and permission options
- [`aws_ecr_public_repos`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/aws/aws_ecr_public_repos) added to support creating public ECR repositories.
  - Impacts: iac-module `aws_ecr_public_repos` — New module for public ECR repositories
- Adds ARM support in [`kube_bastion`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_bastion) and `kube_pvc_autoresizer`. All core cluster components can now run on both amd64 and arm64 nodes.
  - Impacts: iac-module `kube_bastion` — Added arm64 node support
  - Impacts: iac-module `kube_pvc_autoresizer` — Added arm64 node support
- `pf-providers-enable` now ensures `.terraform.lock.hcl` files have all common platform checksums.
- Adds `pf-get-terragrunt-variables` to derive Terragrunt variables for a given directory.
- Adds `pf-tf-delete-locks` for bulk-releasing Tofu state locks.
  - Impacts: cli `iac delete-locks` — New command for bulk-releasing Tofu state locks
- Adds `pf-sops-set-profile` to update all sops-encrypted files in a directory to use the indicated AWS profile for KMS operations.
  - Impacts: cli `wf sops-set-profile` — New command to update sops AWS profile for KMS
- (Alpha) Adds [`kube_argo_sensor`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_argo_sensor) and [`kube_argo_event_source`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_argo_event_source) submodules for deploying core Argo Events components.
  - Impacts: iac-module `kube_argo_sensor` — New Alpha submodule for Argo Events sensors
  - Impacts: iac-module `kube_argo_event_source` — New Alpha submodule for Argo Events sources
- (Alpha) Adds the [`kube_workflow_spec`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_workflow_spec) submodule to help define production-ready Argo Workflows.
  - Impacts: iac-module `wf_spec` — New Alpha submodule for Argo Workflow definitions

## Fixes

- [`kube_aws_ebs_csi`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_aws_ebs_csi) adjusted to ensure PVCs are detached from nodes during node shutdown, preventing delays when moving PVCs between nodes.
  - Impacts: iac-module `kube_aws_ebs_csi` — Fix for PVC detachment during node shutdown
  - Reference (issue-report): [PVC not detached during node shutdown causing delays](https://github.com/Panfactum/stack/issues/50)
- [`kube_core_dns`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_core_dns) no longer accidentally includes the Vault provider.
  - Impacts: iac-module `kube_core_dns` — Removed accidental Vault provider inclusion
  - Reference (issue-report): [kube_core_dns accidentally includes Vault provider](https://github.com/Panfactum/stack/issues/61)

## Related Resources

- [JSON Data](https://panfactum.com/docs/changelog/edge.24-07-01.json): Machine-readable data
- [Channel Release List](https://panfactum.com/docs/changelog/edge.json): All releases in this channel