# Panfactum Changelog — edge.24-12-19

> Introduces SLA Target Levels for cost-to-availability tradeoffs, adds advanced path rewriting capabilities for ingress and CDN modules, improves support for private ECR repositories, and fixes several Redis and environment variable issues.

## Highlights

- New `sla_target` Terragrunt variable replaces `enhanced_ha_enabled` — controls cost-to-availability tradeoff
- Provider version updated: `pf` 0.0.5→0.0.7
- New arbitrary path rewriting support in `kube_ingress`, `kube_aws_cdn`, `aws_cdn`, and `aws_s3_public_website`
- `wf_dockerfile_build` now supports private ECR base images

## Breaking Changes

- Introduces [SLA Target Levels](https://panfactum.com/docs/main/guides/deploying-workloads/high-availability#sla-levels). The `enhanced_ha_enabled` input has been removed from all modules. The previous default behavior (`enhanced_ha_enabled = true`)
- `pf` provider version upgraded from 0.0.5 to 0.0.7. Update this in first-party IaC.

## Additions

- Adds support for arbitrary path rewriting in [`kube_ingress`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_ingress), [`kube_aws_cdn`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_aws_cdn), [`aws_cdn`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/aws/aws_cdn), and [`aws_s3_public_website`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/aws/aws_s3_public_website).
  - Impacts: iac-module `kube_ingress` — Adds support for arbitrary path rewriting rules
  - Impacts: iac-module `kube_aws_cdn` — Adds support for arbitrary path rewriting rules
  - Impacts: iac-module `aws_cdn` — Adds support for arbitrary path rewriting rules
  - Impacts: iac-module `aws_s3_public_website` — Adds support for arbitrary path rewriting rules
- [`wf_dockerfile_build`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/workflow/wf_dockerfile_build) now supports sourcing base images from private ECR repositories.
  - Impacts: iac-module `wf_dockerfile_build` — Supports sourcing base images from private ECR repositories
- Adds `not_found_path` to [`aws_s3_public_website`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/aws/aws_s3_public_website) for specifying the asset to load when no object exists at the requested path.
  - Impacts: iac-module `aws_s3_public_website` — Adds not_found_path input for custom 404 asset handling
- Adds `custom_error_responses` to [`aws_cdn`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/aws/aws_cdn) to overwrite error responses from the upstream origin.
  - Impacts: iac-module `aws_cdn` — Adds custom_error_responses to override upstream error responses

## Fixes

- Addressed conflicting PDB issue with [`kube_redis_sentinel`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_redis_sentinel) that prevented vertical autoscaling from working.
  - Impacts: iac-module `kube_redis_sentinel` — Fixes conflicting PDB that prevented vertical autoscaling
- Standard Panfactum environment variables for Kubernetes workloads are now injected before user-defined environment variables to make them available for use
- Fixed CRD auto-upgrade and incorrect AWS permissions in [`kube_aws_lb_controller`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_aws_lb_controller).
  - Impacts: iac-module `kube_aws_lb_controller` — Fixes CRD auto-upgrade and incorrect AWS permissions

## Upgrade Instructions

## Migrate from `enhanced_ha_enabled` to `sla_target`

This release introduces the concept of [SLA Target Levels](https://panfactum.com/docs/main/guides/deploying-workloads/high-availability#sla-levels).

The `enhanced_ha_enabled` input has been removed from all modules. The previous behavior when
`enhanced_ha_enabled` was `true` (the default) is now equivalent to `sla_target = 3` (the new default).

To set the SLA target, use the new `sla_target` [Terragrunt variable](https://panfactum.com/docs/main/reference/configuration/terragrunt-variables#metadata)
at the environment, region, or module scope.

## Update Provider Versions

This release upgrades the following Terraform provider versions — update these in first-party IaC:

* `pf`: 0.0.5 → 0.0.7

## Related Resources

- [JSON Data](https://panfactum.com/docs/changelog/edge.24-12-19.json): Machine-readable data
- [Channel Release List](https://panfactum.com/docs/changelog/edge.json): All releases in this channel