github-mirrors/terraform-aws-eks
1
0
Fork 0
mirror of https://github.com/ysoftdevs/terraform-aws-eks.git synced 2026-07-21 11:58:40 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,129 Commits 2 Branches 0 Tags
791b9054a12fbf2a3041585feceae52eadeacac4
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Bryant BiggsandGitHub 2a6a57a9bb fix: Correct Auto Mode disable (#3253) 2024-12-20 12:36:19 -06:00
Bryant BiggsandGitHub a07013a1f4 fix: Auto Mode custom tag policy should apply to cluster role, not node role (#3242) 2024-12-14 07:28:52 -06:00
Bryant BiggsandGitHub 012e51c055 fix: Update min provider version to remediate cluster replacement when enabling EKS Auto Mode (#3240) 2024-12-12 14:49:59 -06:00
Bryant BiggsandGitHub ce34f1db3f fix: Avoid trying to attach the node role when Auto Mode nodepools are not specified (#3239) 2024-12-12 07:14:15 -06:00
Bryant BiggsandGitHub e2846be8b1 fix: Create EKS Auto Mode role when Auto Mode is enabled, regardless of built-in node pool use (#3234) 2024-12-08 22:42:11 -06:00
Bryant BiggsandGitHub 3b974d33ad feat: Add support for EKS Auto Mode and EKS Hybrid nodes (#3225) 
* feat: Add support for EKS hybrid nodes

* feat: Add support for EKS Auto Mode

* chore: Update test directory names

* chore: Clean up examples and tests

* fix: Clean up and last minute changes for GA

* chore: Formatting

* chore: Bump min required version for new features

* fix: Corrects from test/validation on existing clusters

* feat: Add policy for custom tags on EKS Auto Mode, validate examples

* chore: Expand on `CAM` acronym

* chore: Update README to match examples
 2024-12-04 09:24:21 -06:00
Bryant BiggsandGitHub 35388bb8c4 fix: Coalesce local resolve_conflicts_on_create_default value to a boolean since default is null (#3221) 2024-11-26 14:35:31 -06:00
Bryant BiggsandGitHub ab2207d509 feat: Improve addon dependency chain and decrease time to provision addons (due to retries) (#3218) 
* feat: Improve addon dependency chain and decrease time to provision addons (due to retries)

* fix: Run pre-commit to clean up docs
 2024-11-26 13:31:42 -06:00
Bryant BiggsandGitHub a224334fc8 feat: Add support for pod identity association on EKS addons (#3203) 2024-11-08 15:56:56 -06:00
Bryant BiggsandGitHub c6da22c78f feat: Add support for creating efa-only network interfaces (#3196) 2024-11-02 08:33:13 -05:00
Bryant BiggsandGitHub 1b0ac83264 feat: Add support for zonal shift (#3195) 2024-11-01 16:50:19 -05:00
Bryant BiggsandGitHub 4abc779c0e docs: Correct doc links following examples/tests re-org (#3187) 2024-10-22 10:08:16 -05:00
Bryant BiggsandGitHub b2a8617794 feat: Add support for newly released AL2023 accelerated AMI types (#3177) 2024-10-12 11:44:24 -05:00
Bryant BiggsandGitHub eb78240617 fix: Update CI workflow versions to latest (#3176) 2024-10-11 18:03:02 +02:00
Bryant BiggsandGitHub 670aa8a79d docs: Correct reference module implementation names to be unique in v20 upgrade guide (#3174) 2024-10-08 09:15:15 -05:00
Bryant BiggsandGitHub 8b90872983 fix: Remove deprecated inline_policy from cluster role (#3163) 2024-09-21 09:45:50 -05:00
Bryant BiggsandGitHub 47ab3eb884 fix: Correct Karpenter EC2 service principal DNS suffix in non-commercial regions (#3157) 2024-09-16 10:36:15 -05:00
Bryant BiggsandGitHub 71d19472f2 chore: Remove outposts example (#3154) 2024-09-13 16:31:42 -05:00
Bryant BiggsandGitHub 72668ac04a feat: Add new output values for OIDC issuer URL and provider that are dual-stack compatible (#3120) 
* feat: Add new output values for OIDC issuer URL and provider that support IPv4/IPv6 dualstack

* chore: Revert addition of `dualstack_oidc_provider`

* fix: Add check for `aws` partition since this is the only partition currently supported

* fix: Revert partition conditional logic
 2024-08-09 17:39:56 -05:00
Bryant BiggsandGitHub e12ab7a5de feat: Add support for upgrade_policy (#3112) 
* feat: Add support for `upgrade_policy`

* chore: Update test and validate
 2024-08-05 09:07:13 -05:00
Bryant BiggsandGitHub 93ffdfc6fa fix: Revert #3058 - fix: Invoke aws_iam_session_context data source only when required (#3092) 
fix: Revert #3058
 2024-07-05 14:36:49 -04:00
Bryant BiggsandGitHub ae3379e924 feat: Add support for ML capacity block reservations with EKS managed node group(s) (#3091) 2024-07-05 11:42:31 -04:00
Bryant BiggsandGitHub 1604c6cdc8 feat: Add support for custom IAM role policy (#3087) 2024-07-02 10:56:19 -04:00
Bryant BiggsandGitHub 7cd3be3fbb docs: Add mkdocs support to render static documentation site on GitHub (#3070) 
* docs: Add `mkdocs` support to render static documentation site on GitHub

* fix: Correct mis-spelled file name
 2024-06-14 09:46:46 -04:00
Bryant BiggsandGitHub 323fb759d7 docs: Move examples that are more like test cases to the new tests/ directory; add better example configurations (#3069) 
* chore: Move examples that are more like test cases to the new `tests/` directory

* chore: Stash

* feat: Add better examples for EKS managed node groups

* chore: Add better examples for self-managed node groups

* chore: Update docs and correct `nodegroup` to `node group`
 2024-06-13 10:51:40 -04:00
Bryant BiggsandGitHub ef657bfcb5 feat: Require users to supply OS via ami_type and not via platform which is unable to distinquish between the number of variants supported today (#3068) 2024-06-13 07:50:26 -04:00
Bryant BiggsandGitHub 1e31929044 fix: Correct syntax for correctly ignoring bootstrap_cluster_creator_admin_permissions and not all of access_config (#3056) 2024-06-04 07:08:47 -04:00
Bryant BiggsandGitHub 00f076ada4 feat: Starting with 1.30, do not use the cluster OIDC issuer URL by default in the identity provider config (#3055) 
fix: Starting with `1.30`, do not use the cluster OIDC issuer URL by default in the identity provider config
 2024-05-31 13:01:16 -04:00
Bryant BiggsandGitHub 74d39187d8 feat: Propagate ami_type to self-managed node group; allow using ami_type only (#3030) 2024-05-08 08:04:19 -04:00
Bryant BiggsandGitHub 84effa0e30 fix: Pass nodeadm user data variables from root module down to nodegroup sub-modules (#2981) 2024-03-20 21:33:00 -04:00
Bryant BiggsandGitHub aeb9f0c990 fix: Ensure the correct service CIDR and IP family is used in the rendered user data (#2963) 
* fix: Ensuring the correct service CIDR and IP family is used in the rendered user data

* chore: Updates from testing and validating

* chore: Fix example destroy instructions

* fix: Only require `cluster_service_cidr` when `create = true`

* chore: Clean up commented out code and add note on check length
 2024-03-12 10:36:19 -04:00
Bryant BiggsandGitHub 29dcca335d fix: Ensure a default ip_family value is provided to guarantee a CNI policy is attached to nodes (#2967) 2024-03-11 11:02:59 -04:00
Bryant BiggsandGitHub 57f5130132 feat: Replace the use of toset() with static keys for node IAM role policy attachment (#2962) 2024-03-10 12:49:41 -04:00
Bryant BiggsandGitHub 393da7ec0e feat: Add support for tracking latest AMI release version on managed nodegroups (#2951) 2024-03-08 22:48:38 -05:00
Bryant BiggsandGitHub dfe41141c2 fix: Update AWS provider version to support AL2023_* AMI types; ensure AL2023 user data receives cluster service CIDR (#2960) 
* fix: Update AWS provider version to support `AL2023_*` AMI types

* fix: Ensure the cluster service CIDR is passed to the AL2023 user data where its required
 2024-03-08 15:25:14 -05:00
Bryant BiggsandGitHub 0ed32d7b29 fix: Use the launch_template_tags on the launch template (#2957) 2024-03-07 14:40:43 -05:00
Bryant BiggsandGitHub d14cc925c4 fix: Update CI workflow versions to remove deprecated runtime warnings (#2956) 2024-03-06 18:30:34 -08:00
Bryant BiggsandGitHub 7c99bb19cd feat: Add support for AL2023 nodeadm user data (#2942) 2024-02-29 19:12:50 -05:00
Bryant BiggsandGitHub 7f472ec660 feat: Add support for enabling EFA resources (#2936) 
* feat: Add support for enabling EFA resources

* feat: Add support for creating placement group and ensuring subnet ID used supports the instance type provided

* chore: Update README and examples

* feat: Update AWS provider MSV to support `maximum_network_cards` attribute

* fix: Update self-managed example after last round of testing; improve EFA support wording
 2024-02-23 09:29:10 -05:00
Bryant BiggsandGitHub f6255c49e4 feat: Add support for addon and identity provider custom tags (#2938) 
feat: Add support for addon and OIDC provider custom tags
 2024-02-21 17:33:59 -05:00
Bryant BiggsandGitHub 0d468bd432 docs: Update output for user data example to capture rendered output (#2940) 
* docs: Update output for user data example to capture renereded output

* fix: Tsk tsk tsk - I forgot to run pre-commit
 2024-02-21 17:32:01 -05:00
Bryant BiggsandGitHub 081c7624a5 fix: Replace Karpenter SQS policy dynamic service princpal DNS suffixes with static amazonaws.com (#2941) 
fix: Replace dynamic service princpal DNS suffixes with static `amazonaws.com`
 2024-02-21 17:30:49 -05:00
Bryant BiggsandGitHub d6d97519d4 docs: Update Karpenter example version; add additional clarification on access entry migration to upgrade guide (#2924) 2024-02-12 16:34:23 -05:00
Bryant BiggsandGitHub 417791374c fix: Correct cluster access entry to create multiple policy associations per access entry (#2892) 2024-02-03 06:47:15 -05:00
Bryant BiggsGitHubAnton Babenko
 		6b40bdbb1d feat!: Replace the use of aws-auth configmap with EKS cluster access entry (#2858) 
* feat: Replace `resolve_conflicts` with `resolve_conflicts_on_create`/`delete`; raise MSV of AWS provider to `v5.0` to support

* fix: Replace dynamic DNS suffix for `sts:AssumeRole` API calls for static suffix

* feat: Add module tag

* feat: Align Karpenter permissions with Karpenter v1beta1/v0.32 permissions from upstream

* refactor: Move `aws-auth` ConfigMap functionality to its own sub-module

* chore: Update examples

* feat: Add state `moved` block for Karpenter Pod Identity role re-name

* fix: Correct variable `create` description

* feat: Add support for cluster access entries

* chore: Bump MSV of Terraform to `1.3`

* fix: Replace defunct kubectl provider with an updated forked equivalent

* chore: Update and validate examples for access entry; clean up provider usage

* docs: Correct double redundant variable descriptions

* feat: Add support for Cloudwatch log group class argument

* fix: Update usage tag placement, fix Karpenter event spelling, add upcoming changes section to upgrade guide

* feat: Update Karpenter module to generalize naming used and align policy with the upstream Karpenter policy

* feat: Add native support for Windows based managed nodegroups similar to AL2 and Bottlerocket

* feat: Update self-managed nodegroup module to use latest features of ASG

* docs: Update and simplify docs

* fix: Correct variable description for AMI types

* fix: Update upgrade guide with changes; rename Karpenter controller resource names to support migrating for users

* docs: Complete upgrade guide docs for migration and changes applied

* Update examples/karpenter/README.md

Co-authored-by: Anton Babenko <anton@antonbabenko.com>

* Update examples/outposts/README.md

Co-authored-by: Anton Babenko <anton@antonbabenko.com>

* Update modules/karpenter/README.md

Co-authored-by: Anton Babenko <anton@antonbabenko.com>

---------

Co-authored-by: Anton Babenko <anton@antonbabenko.com>
 2024-02-02 09:36:25 -05:00
Bryant BiggsandGitHub c36c8dc825 fix: Remove additional conditional on Karpenter instance profile creation to support upgrading (#2812) 2023-11-10 08:59:00 -05:00
Bryant BiggsandGitHub 0732bea85f feat: Update KMS module to avoid calling data sources when create_kms_key = false (#2804) 2023-11-04 08:41:59 -04:00
Bryant BiggsandGitHub f4766e5c27 fix: Karpenter node IAM role policies variable should be a map of strings, not list (#2771) 2023-10-10 11:57:29 -04:00
Bryant BiggsandGitHub e23139ad2d fix: Revert changes to ignore role_last_used (#2629) 2023-05-24 17:54:33 -04:00
Bryant BiggsandGitHub 78027f37e4 feat: Add support for enabling addons before data plane compute is created (#2478) 2023-02-17 07:28:03 -05:00
Bryant BiggsandGitHub 07653b6249 docs: Update documentation for 1.24 changes to containerd, ensure examples are functioning as intended (#2463) 
Resolves undefined
 2023-02-09 13:03:01 -05:00
Bryant BiggsandGitHub 674ab7b7f2 chore: Correct example where a list data type is required (#2387) 2023-01-06 11:03:13 -05:00
Bryant BiggsandGitHub 21e26e9045 chore: Update examples for Fargate high availability (#2378) 2023-01-05 07:53:37 -05:00
Bryant BiggsandGitHub 460e43db77 fix: Use a version for to avoid GitHub API rate limiting on CI workflows (#2376) 2023-01-03 15:20:45 +01:00
Bryant BiggsandGitHub 094ed1d5e4 feat: Allow configuring which tags are passed on launch template tag specifications (#2360) 
Resolves undefined
 2022-12-19 13:50:32 -05:00
Bryant BiggsandGitHub 13a9542dad fix: Correct map name for security group rule 4443/tcp (#2354) 2022-12-18 13:31:45 -05:00
Bryant BiggsandGitHub 5a270b7bf8 feat: Add additional port for metrics-server to recommended rules (#2353) 2022-12-18 12:36:39 -05:00
Bryant BiggsandGitHub 0751a0ca04 feat: Ensure all supported resources are tagged under tag_specifications on launch templates (#2352) 
Resolves undefined
 2022-12-18 12:29:11 -05:00
Bryant BiggsandGitHub 71b8ecaa87 fix: Use IAM session context data source to resolve the identities role when using assumed_role (#2347) 2022-12-17 07:32:04 -05:00
Bryant BiggsandGitHub 3b62f6c316 feat: Add support for addon configuration_values (#2345) 
Resolves undefined
 2022-12-16 14:44:21 -05:00
Bryant BiggsandGitHub ca03fd9ec1 docs: Correct spelling mistakes (#2334) 
Resolves undefined
 2022-12-08 09:35:28 -05:00
Bryant BiggsandGitHub b2e97ca3dc feat!: Add support for Outposts, remove node security group, add support for addon preserve and most_recent configurations (#2250) 
Co-authored-by: Anton Babenko <anton@antonbabenko.com>
Resolves undefined
 2022-12-05 16:26:23 -05:00
Bryant BiggsandGitHub 3fb28b357f fix: Ensure that var.create is tied to all resources correctly (#2308) 2022-11-23 12:43:42 -05:00
Bryant BiggsandGitHub f24de3326d feat: New Karpenter sub-module for easily enabling Karpenter on EKS (#2303) 2022-11-21 13:50:34 -05:00
Bryant BiggsandGitHub 1bc86e19aa chore: Update examples to better demonstrate questions raised through issues (#2294) 
Resolves undefined
 2022-11-08 09:29:42 +01:00
Bryant BiggsandGitHub 364c60d572 fix: Update CI configuration files to use latest version (#2293) 2022-11-07 20:17:59 +01:00
Bryant BiggsandGitHub 28ccecefe2 fix: Disable creation of cluster security group rules that map to node security group when create_node_security_group = false (#2274) 
* fix: Disable creation of cluster security group rules that map to node security group when `create_node_security_group` = `false`

* feat: Update Fargate example to run only Fargate and show disabling of both cluster and node security groups

* fix: Ensure CoreDNS changes are made ahead of install
 2022-10-14 09:16:57 -04:00
Bryant BiggsandGitHub a74e98017b feat: Add output for cluster TLS certificate SHA1 fingerprint and provider tags to cluster primary security group (#2249) 2022-09-29 15:34:20 -04:00
Bryant BiggsGitHubAnton Babenko
 		57bb667f20 docs: Add section to FAQ about conflicting security group tags (#2225) 
Co-authored-by: Anton Babenko <anton@antonbabenko.com>
 2022-09-07 17:52:27 -04:00
Bryant BiggsandGitHub 0a52d690d5 feat: Add output for launch template name, and correct variable type value (#2205) 2022-08-17 12:24:22 +02:00
Bryant BiggsandGitHub d2f162b190 fix: Remove empty "" from node group names output when node group creation is disabled (#2197) 2022-08-09 15:25:11 -04:00
Bryant BiggsandGitHub d990ea8aff fix: Pin TLS provider version to 3.x versions only (#2174) 2022-07-22 08:29:00 -04:00
Bryant BiggsandGitHub c4e6d28fc0 fix: Correct Fargate profiles additional IAM role policies default type to match variable (#2143) 2022-07-05 14:06:25 -04:00
Bryant BiggsandGitHub 2d7701c3b0 fix: Correct variable types to improve dynamic check correctness (#2133) 2022-07-01 07:53:43 -04:00
Bryant BiggsandGitHub bc04cd3a0a fix: Update KMS module version which aligns on module version requirements (#2127) 2022-06-29 07:51:44 -04:00
Bryant BiggsandGitHub 4543ab454b feat: Add support for specifiying NTP address to use private Amazon Time Sync Service (#2125) 2022-06-28 12:16:20 -04:00
Bryant BiggsandGitHub 75acb09ec5 feat: Add support for creating KMS key for cluster secret encryption (#2121) 
* feat: Add support for creating KMS key for cluster secret encryption

* fix: Update naming scheme to include `kms_`
 2022-06-28 10:55:39 -04:00
Bryant BiggsandGitHub 5a5a32ed12 fix: Remove modified_at from ignored changes on EKS addons (#2114) 2022-06-19 08:02:07 -04:00
Bryant BiggsandGitHub ebc91bcd37 feat: Add support for specifying conrol plane subnets separate from those used by node groups (data plane) (#2113) 2022-06-18 17:52:30 -04:00
Bryant BiggsandGitHub 51e418216f fix: Add conditional variable to allow users to opt out of tagging cluster primary security group (#2034) 2022-04-21 17:34:58 +02:00
Bryant BiggsandGitHub c173ba2d62 fix: Add compact() to aws_auth_configmap_yaml for when node groups are set to create = false (#2029) 2022-04-20 18:14:09 +02:00
Bryant BiggsandGitHub b5ae5daa39 fix: Avoid re-naming the primary security group through a Name tag and leave to the EKS service to manage (#2010) 2022-04-12 10:36:03 +02:00
Bryant BiggsandGitHub 69a815c7df docs: Update documentation to reflect latest changes related to aws-auth configmap and upgrading (#2003) 2022-04-10 15:20:38 +02:00
Bryant BiggsandGitHub da3d54cde7 feat: Add support for managing aws-auth configmap using new kubernetes_config_map_v1_data resource (#1999) 2022-04-09 09:15:46 +02:00
Bryant BiggsandGitHub 3ff17205a4 docs: Replace cluster autoscaler/node termination handler example with Karpenter (#1994) 2022-04-07 20:47:22 +02:00
Bryant BiggsandGitHub 6db89f8f20 feat: Add create_before_destroy lifecycle hook to security groups created (#1985) 2022-04-04 16:34:29 +02:00
Bryant BiggsandGitHub 39a7c0c1f0 docs: Fix broken link and correct doc mis-spelling (#1983) 2022-04-03 20:52:49 +02:00
Bryant BiggsandGitHub 262b480c34 docs: Re-organize documentation for easier navigation and support for references in issues/PRs (#1981) 2022-04-03 19:48:06 +02:00
Bryant BiggsandGitHub 523144e1d7 feat: Add support for allowing EFA network interfaces (#1980) 2022-04-03 11:25:42 +02:00
Bryant BiggsandGitHub 381144e3bb fix: Correct capacity_reservation_target within launch templates of both EKS and self managed node groups (#1979) 2022-04-02 20:49:25 +02:00
Bryant BiggsandGitHub 98e137fad9 feat: Add back in CloudWatch log group create deny policy to cluster IAM role (#1974) 2022-03-30 14:34:44 +02:00
Bryant BiggsandGitHub 0269d38fca feat: Update TLS provider and remove unnecessary cloud init version requirements (#1966) 2022-03-25 09:26:16 +01:00
Bryant BiggsandGitHub fd3a3e9a96 fix: Default to cluster version for EKS and self managed node groups when a cluster_version is not specified (#1963) 2022-03-24 15:56:55 +01:00
Bryant BiggsandGitHub 9371a2943b feat: Add tags to EKS created cluster security group to match rest of module tagging scheme (#1957) 2022-03-24 08:05:59 +01:00
Bryant BiggsandGitHub e21db83d8f feat: Allow users to selectively attach the EKS created cluster primary security group to nodes (#1952) 2022-03-23 15:41:39 +01:00
Bryant BiggsandGitHub 8b03b7b85e feat: Add outputs for autoscaling group names created to aid in autoscaling group tagging (#1953) 2022-03-22 22:26:00 +01:00
Bryant BiggsandGitHub a9d2cc8246 feat: Allow users to specify default launch template name in node groups (#1946) 2022-03-18 12:29:17 +01:00
Bryant BiggsandGitHub 5935670503 fix: Compact result of cluster security group to avoid disruptive updates when no security groups are supplied (#1934) 2022-03-15 22:06:15 +01:00
Bryant BiggsandGitHub 2df1572b8a feat: Add variables to allow users to control attributes on cluster_encryption IAM policy (#1928) 2022-03-09 15:13:18 +01:00
Bryant BiggsandGitHub 0fefca76f2 fix: Ensure that cluster encryption policy resources are only relevant when creating the IAM role (#1917) 2022-03-02 22:10:22 +01:00