cfn-vpn 1.7.0 → 1.9.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ef9cd59cf1876c3b909d920e68d331e6a6c7985eb6e4a9ad069cc065d7e5e79b
-  data.tar.gz: 3beaf85c7b146bb7df165661b9a0a66268a6372e34865c62b7b9ddc238982a75
+  metadata.gz: ee5ba16bbaada7aa00a5a370873c4c3b1e52e59442c990aa4daf351e04c97466
+  data.tar.gz: 2e7fbc5308f8c387721ff9268e127577e0060d4a3ff6555b2f967ab45b5da995
 SHA512:
-  metadata.gz: f4221735ef37e25221dd6802baace032d1330d980fd0827aa9c2907042b0b6ceb18888d7f431553e4cbc027af96382166a3662d63bd936db250443d3baa6cd4c
-  data.tar.gz: 8ab592bdc27770b1eb61fd4532e6b572c895d94d7e5225d7a5518fc22242975be58a71e31d8465d770b88c95f6992ff8074ff0ce02356b1feb2bb35233b18282
+  metadata.gz: 2c0634cf11ae59796c359fc372a9e5665d97c8c8017f62b2136795eb53435993b9031fe933ea8ba9ba3e7c1d5bd5098dd0c91cd7233c7f26d3d99798b944959b
+  data.tar.gz: 49fce7b9f34f3dcd942588de916073271af6c41f3945b7cb68e999ac1181812ebb1311b360f788960bded3b88c2aef89e620ff94dd4c2b2e8d1d97135d6cf69e

data/Dockerfile

@@ -9,7 +9,7 @@ RUN apt-get update -qq \
 ENV EASYRSA=/usr/share/easy-rsa
 ENV EASYRSA_BATCH=yes
 
-ARG CFNVPN_VERSION="1.7.0"
+ARG CFNVPN_VERSION="1.9.0"
 
 COPY . /src
 

data/docs/modifying.md

@@ -34,7 +34,7 @@ cfn-vpn params [name] --diff-yaml cfnvpn.[name].yaml
 cfn-vpn configuration can be managed through a YAML file using the `modify` command to apply the config changes to the vpn stack. See the [YAML docs](yaml-config.md) for config options.
 
 ```
-cfn-vpn modify [name] --params-yaml cfnvpn.[name].yaml
+cfn-vpn modify [name] --param-yaml cfnvpn.[name].yaml
 ```
 
 a cloudformation changeset is created with the desired changes and approval is asked

data/docs/yaml-config.md

@@ -7,7 +7,7 @@ cfn-vpn configuration can be managed through a YAML file using the `modify` comm
 run the `modify` command and supply the yaml file to apply the changes
 
 ```sh
-cfn-vpn routes [name] --params-yaml cfnvpn.[name].yaml
+cfn-vpn routes [name] --param-yaml cfnvpn.[name].yaml
 ```
 
 ## Dump Current Config to YAML File

data/lib/cfnvpn/actions/modify.rb

@@ -73,7 +73,8 @@ module CfnVpn::Actions
 
       if @options[:param_yaml]
         CfnVpn::Log.logger.debug "Loading config from YAML file #{@options[:param_yaml]}"
-        @config = CfnVpn::Config.get_config_from_yaml_file(@options[:param_yaml])
+        yaml_config = CfnVpn::Config.get_config_from_yaml_file(@options[:param_yaml])
+        @config = @config.merge(yaml_config)
       else
         CfnVpn::Log.logger.debug "Loading config from options"
         @options.each do |key, value|

data/lib/cfnvpn/templates/vpn.rb

@@ -203,7 +203,12 @@ module CfnVpn
 
           elsif route.has_key?(:cidr)
             target_subnets.each do |subnet|
+              # routes are tied to the subnet association: aws deletes them when the
+              # target network is disassociated, so they must be conditioned on the
+              # association to stay in sync with it.
               EC2_ClientVpnRoute(:"#{route[:cidr].resource_safe}VpnRouteTo#{subnet.resource_safe}"[0..255]) {
+                Condition(:EnableSubnetAssociation)
+                DependsOn network_assoc_dependson if network_assoc_dependson.any?
                 Description "cfnvpn static route for #{route[:cidr]}. #{route[:desc]}".strip
                 ClientVpnEndpointId Ref(:ClientVpnEndpoint)
                 DestinationCidrBlock route[:cidr]

data/lib/cfnvpn/version.rb

@@ -1,4 +1,4 @@
 module CfnVpn
-  VERSION = "1.7.0".freeze
+  VERSION = "1.9.0".freeze
   CHANGE_SET_VERSION = VERSION.gsub('.', '-').freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cfn-vpn
 version: !ruby/object:Gem::Version
-  version: 1.7.0
+  version: 1.9.0
 platform: ruby
 authors:
 - Guslington
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-11-10 00:00:00.000000000 Z
+date: 2026-08-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: thor