Commit Graph

571 Commits

Author SHA1 Message Date
Michael Marshall a89e91bf8f feat: Add aws_security_group_rule.cluster_https_worker_ingress to output values (#901) 2020-06-06 10:55:35 +02:00
Daniel Piddock 7de18cd9cd fix: Revert removal of templates provider (#883)
Broke use case of passing in custom template content. Reverts most of the following PRs:
- #865
- #863 
- #854
2020-06-05 10:34:23 +02:00
graywolf-at-work 05cd78593a fix: Ensure kubeconfig ends with \n (#880)
In order to be a text file according to POSIX, file needs to be composed of
text lines. Text line is defined as sequence of characters ending in \n. Sadly,
`~}` did strip everything including the \n, so the kubeconfing did not end
with a new line. Output empty string at the end to make sure of it.
2020-06-02 11:24:39 +02:00
Simon Gurcke 3fefc2a66c feat: Allow communication between pods on workers and pods using the primary cluster security group (optional) (#892)
NOTES: New variable `worker_create_cluster_primary_security_group_rules` to allow communication between pods on workers and pods using the primary cluster security group (Managed Node Groups or Fargate). It defaults to `false` to avoid potential conflicts with existing security group rules users may have implemented.
2020-05-30 22:43:26 +02:00
Brandon McNama 7ffe5fa88f fix: Work around path bug in aws-iam-authenticator (#894)
* fix: Work around path bug in aws-iam-authenticator

`aws-iam-authenticator` has an open issue where it will not recognize
IAM roles that include paths. This change causes the path supplied to
`var.iam_path` to be stripped when generating the `aws-auth` ConfigMap
in order to work around this.

https://github.com/kubernetes-sigs/aws-iam-authenticator/issues/153
https://github.com/aws/containers-roadmap/issues/926
2020-05-30 22:25:50 +02:00
Daniel Piddock c748899d0e cluster_id blocks on wait_for_cluster (#890) 2020-05-29 17:45:24 +02:00
Daniel Piddock 444343553c docs: Update FAQ (#891) 2020-05-29 17:29:08 +02:00
Thierno IB. BARRY d4f3924056 chore: update changelog and prepare release 12.0.0 (#871) 2020-05-09 20:52:42 +02:00
Daniel Piddock bb822a1e56 fix: Fix Launch Templates error with aws 2.61.0 (#875) 2020-05-09 19:58:38 +02:00
Thierno IB. BARRY a4e21e73cd docs: Add notes for Kubernetes 1.16 (#873)
BREAKING CHANGES: The default `cluster_version` is now 1.16. Kubernetes 1.16 includes a number of deprecated API removals, and you need to ensure your applications and add ons are updated, or workloads could fail after the upgrade is complete. For more information on the API removals, see the [Kubernetes blog post](https://kubernetes.io/blog/2019/07/18/api-deprecations-in-1-16/). For action you may need to take before upgrading, see the steps in the [EKS documentation](https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html). Please set explicitly your `cluster_version` to an older EKS version until your workloads are ready for Kubernetes 1.16.
2020-05-08 18:41:21 +02:00
Thierno IB. BARRY 527d4bd3f5 fix: Use splat syntax for cluster name to avoid (known after apply) in managed node groups (#868) 2020-05-07 09:17:05 +02:00
graywolf-at-work 312596f46d feat: Create kubeconfig with non-executable permissions (#864)
* Create kubeconfig with non-executable permissions

Kubeconfig does not really need to be executable, so let's not create it with executable bit set.

* Bump tf version
2020-05-06 21:36:58 +02:00
Scott Crooks 99f59bfcc9 feat: Change EKS default version to 1.16 (#857) 2020-05-06 17:20:28 +02:00
Thierno IB. BARRY 9bfdba9fb8 chore: Move all locals in locals.tf (#865) 2020-05-06 14:00:20 +02:00
Thierno IB. BARRY 4a8c79053a docs: Remove useless template provider in examples (#863) 2020-05-06 12:16:39 +02:00
Daniel Piddock b183b97253 improvement: Remove dependency on external template provider (#854)
* Remove template_file for generating kubeconfig

Push logic from terraform down to the template. Makes the formatting
slightly easier to follow

* Remove template_file for generating userdata

Updates to the eks_cluster now do not trigger recreation of launch
configurations

* Remove template_file for LT userdata

* Remove template dependency
2020-05-06 10:54:14 +02:00
Giuseppe Crinò 25ebaab1cc Fix typo (#859) 2020-05-05 13:22:43 +02:00
Thierno IB. BARRY 7afecf6379 chore: update changelog (#847) 2020-04-23 22:14:15 +02:00
slimm609 9c2a718744 fix: Add vpc_config.cluster_security_group output as primary cluster security group id (#828) 2020-04-23 17:36:51 +02:00
keznikl 36d1b5afa5 fix: Wrap local.configmap_roles.groups with tolist() to avoid panic (#846) 2020-04-23 16:57:58 +02:00
Thierno IB. BARRY fed9c5bf19 chore: update changelog (#845) 2020-04-22 23:39:58 +02:00
Thierno IB. BARRY 058a516b0f chore: Use chore semantic commits instead of skip changelog (#844) 2020-04-22 23:34:24 +02:00
sr-n e41c4aa78a fix: Prevent coalescelist null argument error when destroying worker_group_launch_templates (#842)
Resolves #841
2020-04-22 19:36:03 +02:00
Valeri GOLUBEV 2fd078e7c1 feat: Add support for EC2 principal in assume worker role policy for China (#827)
* Add support for EC2 principal in assume worker role policy for  China AWS

* Remove local partition  according to requested change

Co-authored-by: Valeri GOLUBEV <vgolubev@kyriba.com>
2020-04-11 14:11:22 +02:00
Thierno IB. BARRY eaa4d2c697 skip changelog: Prepare for release 11.0.0 (#819) 2020-03-31 00:53:35 +02:00
Ilya Nemakov c8195c5348 feat: Add instance tag specifications to Launch Template (#822) 2020-03-30 18:27:56 +02:00
Albert Lloveras 4cc5753284 improvement: Use aws_partition to build IAM policy ARNs (#820)
* Use aws_partition to build IAM policy ARNs

* Update broken link to CONTRIBUTING.md in README.md
2020-03-30 16:09:41 +02:00
Jaime Hidalgo García de00694a63 feat: Add support for additional volumes in launch templates and launch configurations (#800)
Co-authored-by: Jaime Hidalgo <jhidalgo@cccis.com>
Co-authored-by: Thierno IB. BARRY <ibrahima.br@gmail.com>
2020-03-24 23:28:59 +01:00
Sam "Bo" Beckwith III 49b0667cd9 fix: Fix destroy failure when talking to EKS endpoint on private network (#815) 2020-03-24 23:19:41 +01:00
Viacheslav Vasilyev de1419b597 feat: Add interpreter option to wait_for_cluster_cmd (#795)
Co-authored-by: Vasilyev, Viacheslav <viacheslav.vasilyev@accenture.com>
Co-authored-by: Thierno IB. BARRY <ibrahima.br@gmail.com>
2020-03-20 21:34:33 +01:00
Thierno IB. BARRY e768c6c103 ci: Restrict sementic PR to validate PR title only (#804) 2020-03-19 21:43:20 +01:00
slimm609 9951c87a86 fix: add ip address when manage_aws_auth is true and public_access is false (#745) 2020-03-19 16:22:22 +01:00
Betajobot 0c23191cd3 skip changelog - Removed some files (#811) 2020-03-18 21:56:21 +01:00
Betajobot a68c355fd8 Merge pull request #810 from terraform-aws-modules/terraform-provider-githubfile-1584563649900463000
[ci skip] Create ".editorconfig".
2020-03-18 21:34:22 +01:00
Betajobot 81372a8e59 Merge pull request #809 from terraform-aws-modules/terraform-provider-githubfile-1584563649900479000
[ci skip] Create "LICENSE".
2020-03-18 21:34:15 +01:00
betajobot b135f920a1 [ci skip] Create ".editorconfig". 2020-03-18 21:34:12 +01:00
betajobot d75e493e27 [ci skip] Create "LICENSE". 2020-03-18 21:34:12 +01:00
Daniel Piddock 0c1ed0e6e9 Improvement: Require kubernetes provider >=1.11.1 (#784)
BREAKING CHANGE: The terraform-aws-eks module now require at least kubernetes `1.11.1`. This may cause terraform to fail to init if users have set version = "1.10" like we had in the examples.
2020-03-18 13:56:51 +01:00
Daniel Piddock 89401f1623 fix: Add node_group direct dependency on eks_cluster (#796)
Setting `manage_aws_auth = false` removes the ordering dependency
between node_group and eks_cluster generating an error on first apply.
This fixes that use case.

Fixes #793
2020-03-18 09:09:32 +01:00
Daniel Piddock 50f5f8b874 fix: Do not recreate cluster when no SG given (#798) 2020-03-18 09:04:17 +01:00
Daniel Piddock 3957a7c02c improvement: Generate aws-auth configmap's roles from Object. No more string concat. (#790)
Do not use string concat to generate a YAML data structure

Co-authored-by: Thierno IB. BARRY <ibrahima.br@gmail.com>
2020-03-18 08:58:19 +01:00
Daniel Piddock e8a1ce17d8 fix: Create false and avoid waiting forever for a non-existent cluster to respond (#789) 2020-03-18 08:54:57 +01:00
Daniel Piddock 2c98a00b21 improvement: Add timeout to default wait_for_cluster_cmd (#791) 2020-03-17 19:06:09 +01:00
Max Williams cd8a825a5a test: remove unused kitchen test related stuff (#787)
Co-authored-by: Thierno IB. BARRY <ibrahima.br@gmail.com>
2020-03-17 16:36:34 +01:00
Thierno IB. BARRY a6583a3371 fix: fix git-chglog template to format changelog Type nicely (#803) 2020-03-17 15:29:59 +01:00
Thierno IB. BARRY 3c064aa2a9 fix: fix git-chglog configuration (#802) 2020-03-17 15:16:57 +01:00
Thierno IB. BARRY 9fb1a20d82 improvement: automate changelog management (#786) 2020-03-17 14:22:22 +01:00
Thierno IB. BARRY ca3d1e1199 New release 10.0.0 (#780)
* prepare 10.0.0 release

* remove unused version file
2020-03-12 13:29:03 +01:00
Dawid Rogaczewski 4c0c4c49a6 change conditional for irsa.tf (#783) 2020-03-12 11:50:41 +01:00
pierresteiner 2a78825ef7 Remove assumption (#779)
* Remove assumption

This is not needed since 8.0.0 right?

* Update CHANGELOG.md

Co-authored-by: Thierno IB. BARRY <ibrahima.br@gmail.com>
2020-03-12 10:34:13 +01:00