v5.2.0

Added

• Configure firewall rules in support of private Client and Server #391
• Add Service Account Key to CAI assets in Server config #393
• Add policy_library_repository_branch to GCE module #394
• Add sql instance user and password #399
• Conditional firewall rules #400
• Conditional service networking #401
• Create stale.yml for Stale Bot #402
• Enable uniform bucket-level access #405
• Add Cloud SQL DB User and Password as outputs #407
• Added install-simple tests #408
• Use network project for private IP address in CloudSQL submodule #412
• Allow user to configure Scanner Rules path to GCS or local dir #414
• Update version in README #426
• Removed simple_example #444
• Create CONTRIBUTORS file #454
• Expose Cloud SQL instance IP #483
• CAI - Add k8s.io/Service resource #485
• Ability to configure shielded instance config #488
• Create Governance file #535
• Update stale bot #534
• Support Bring-Your-Own Service Accounts #546
• Automated roles and APIs needed for Forseti on-GKE deployment #498
• Bump google provider version to 3.7 #502
• Update Cloud shell tutorial and other links to point to modulerelease512 [#503]
• Ability to exclude client VM [#504]
• Added functionality to enable/disable role scanner #526
• Input for the Policy Library check of the CV scanner #529
• Update stale.yml #534
• Create GOVERNANCE.md #535

Fixed

• Fix space in Location Rules template #392
• Fix string interpolation warnings #395
• Remove the % character from the Cloud SQL password #417
• Base64 encode CloudSQL username and password for the helm chart secrets #419
• Style fixes #430
• Add spanner.googleapis.com #435
• Update the Bigquery api to the new name #437
• Fix validate error #449
• Increased open files limit to fix OSError: [Errno 24] Too many open files #450
• Sync policy library with gsutil rsync #463
• Fix security reviewer role name #466
• Fix cloudsql password #472
• Add service usage service resource [#473]
• Use internal DNS for client -> server communication #482
• Pin helm provider version to 0.10.* for Helm 2 #495
• Fix GKE example #508
• manage_rules_enabled=false should not prevent Forseti service from starting #512
• Corrected description for blacklist scanner #525