Igor Brites
93065fabdf
feat: Default to clusters OIDC issuer URL for aws_eks_identity_provider_config ( #2190 )
...
feat: setting oidc issuer as default option for aws_eks_identity_provider_config
Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com >
2022-08-09 15:06:39 -04:00
Bryant Biggs
d990ea8aff
fix: Pin TLS provider version to 3.x versions only ( #2174 )
2022-07-22 08:29:00 -04:00
Pedro Fragoso
0fd1ab1db9
fix: Bump kms module to 1.0.2 to fix malformed policy document when not specifying key_owners ( #2163 )
2022-07-20 14:05:47 -04:00
Bryant Biggs
bc04cd3a0a
fix: Update KMS module version which aligns on module version requirements ( #2127 )
2022-06-29 07:51:44 -04:00
Bryant Biggs
75acb09ec5
feat: Add support for creating KMS key for cluster secret encryption ( #2121 )
...
* feat: Add support for creating KMS key for cluster secret encryption
* fix: Update naming scheme to include `kms_`
2022-06-28 10:55:39 -04:00
wreulicke
e0f5995a8b
docs: Update link for EKS service role ( #2118 )
2022-06-26 10:15:34 -04:00
Bryant Biggs
5a5a32ed12
fix: Remove modified_at from ignored changes on EKS addons ( #2114 )
2022-06-19 08:02:07 -04:00
Bryant Biggs
ebc91bcd37
feat: Add support for specifying conrol plane subnets separate from those used by node groups (data plane) ( #2113 )
2022-06-18 17:52:30 -04:00
Chris Sng
3feb36927f
feat: Apply distinct() on role arns to ensure no duplicated roles in aws-auth configmap ( #2097 )
2022-06-02 08:12:31 -04:00
Bryant Biggs
51e418216f
fix: Add conditional variable to allow users to opt out of tagging cluster primary security group ( #2034 )
2022-04-21 17:34:58 +02:00
Xin Chen
5da692df67
fix: Correct DNS suffix for OIDC provider ( #2026 )
...
Co-authored-by: Xin Chen <chenxin@konvery.com >
Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com >
2022-04-20 13:44:48 -04:00
Bryant Biggs
b5ae5daa39
fix: Avoid re-naming the primary security group through a Name tag and leave to the EKS service to manage ( #2010 )
2022-04-12 10:36:03 +02:00
Bryant Biggs
da3d54cde7
feat: Add support for managing aws-auth configmap using new kubernetes_config_map_v1_data resource ( #1999 )
2022-04-09 09:15:46 +02:00
Bryant Biggs
6db89f8f20
feat: Add create_before_destroy lifecycle hook to security groups created ( #1985 )
2022-04-04 16:34:29 +02:00
Bryant Biggs
98e137fad9
feat: Add back in CloudWatch log group create deny policy to cluster IAM role ( #1974 )
2022-03-30 14:34:44 +02:00
Bryant Biggs
fd3a3e9a96
fix: Default to cluster version for EKS and self managed node groups when a cluster_version is not specified ( #1963 )
2022-03-24 15:56:55 +01:00
Bryant Biggs
9371a2943b
feat: Add tags to EKS created cluster security group to match rest of module tagging scheme ( #1957 )
2022-03-24 08:05:59 +01:00
Bryant Biggs
5935670503
fix: Compact result of cluster security group to avoid disruptive updates when no security groups are supplied ( #1934 )
2022-03-15 22:06:15 +01:00
Anton Babenko
fad350d5bf
feat: Made it clear that we stand with Ukraine
2022-03-12 11:10:02 +01:00
Bryant Biggs
2df1572b8a
feat: Add variables to allow users to control attributes on cluster_encryption IAM policy ( #1928 )
2022-03-09 15:13:18 +01:00
Bryant Biggs
0fefca76f2
fix: Ensure that cluster encryption policy resources are only relevant when creating the IAM role ( #1917 )
2022-03-02 22:10:22 +01:00
Bryant Biggs
7644952131
feat: Add additional IAM policy to allow cluster role to use KMS key provided for cluster encryption ( #1915 )
2022-03-02 18:29:35 +01:00
Bryant Biggs
9af0c2495a
fix: Add support for overriding DNS suffix for cluster IAM role service principal endpoint ( #1905 )
2022-03-02 18:26:20 +01:00
Bryant Biggs
8de02b9ff4
fix: Update examples to show integration and usage of new IRSA submodule ( #1882 )
2022-02-16 21:23:04 +01:00
Fernando Viana
3fc9f2d69c
feat: Add variable to provide additional OIDC thumbprints ( #1865 )
...
Co-authored-by: Anton Babenko <anton@antonbabenko.com >
2022-02-15 14:42:44 +01:00
Bryant Biggs
2515e0e561
fix: Add node group dependency for EKS addons resource creation ( #1840 )
2022-02-07 21:33:35 +01:00
Vincent Yin
f8fe584d5b
fix: Attributes in timeouts are erroneously reversed ( #1804 )
2022-01-22 08:15:38 +01:00
Bryant Biggs
314192e2eb
feat: Add support for networking ip_family which enables support for IPV6 ( #1759 )
2022-01-14 21:17:03 +01:00
Devin Young
7089c71e64
fix: Remove trailing hyphen from cluster security group and iam role name prefix ( #1745 )
2022-01-06 21:29:15 +01:00
Bryant Biggs
a2c7caac9f
fix: Correct conditional map for cluster security group additional rules ( #1738 )
2022-01-06 12:27:04 +01:00
Bryant Biggs
ee9f0c646a
feat!: Removed support for launch configuration and replace count with for_each ( #1680 )
2022-01-05 13:01:31 +01:00
Christopher Haar
6959b9bae3
fix: Added Deny for CreateLogGroup action in EKS cluster role ( #1594 )
2021-11-02 15:34:12 +01:00
Marco Kilchhofer
46f16d6ae8
feat: Ability to specify cluster update timeout ( #1588 )
2021-09-17 16:45:49 +02:00
Anton Babenko
2bdf7d7dd6
refactor: Refactoring to match the rest of terraform-aws-modules ( #1583 )
2021-09-16 11:35:44 +02:00
Anton Babenko
23a96e8743
Added pre-commit-terraform to update docs ( #217 )
...
* Added pre-commit-terraform to update docs
* Updated .github/PULL_REQUEST_TEMPLATE.md
2018-12-17 09:52:18 +01:00
Andrew Roth
dfec7b1003
Use sed instead of tail for terraform-docs command ( #211 )
2018-12-14 10:02:13 +01:00
Max Williams
6d38ca4ead
Small update after adding with-aggregate-type-defaults option to terraform-docs ( #209 )
2018-12-12 17:07:10 +01:00
Dominik-K
31ec0f7db3
Update documentation for removed configure_kubectl_session ( #171 )
...
* Updated description of `config_output_path` & `write_kubeconfig` variables
There's no `configure_kubectl_session` anymore.
* Readme: Updated to remove `configure_kubectl_session`
There's no `configure_kubectl_session` anymore.
* Changelog updated
2018-10-25 17:46:32 +02:00
Max Williams
88f8509e38
Removing 2 providers from the module ( #168 )
2018-10-17 13:02:57 +02:00
Max Williams
fdd44c8f38
Cosmetic fixes ( #131 )
...
* changing syntax when referring to map keys without lookup function
* Replacing map function with actual maps for easier reading
* replacing map function in example
* replacing map function in workers.tf and readme/main
* update changelog
2018-09-25 12:30:56 +02:00
Max Williams
28f7e9dd41
initial commit
2018-08-27 17:17:32 +02:00
Daniel Piddock
13e1adc419
Remove unnecessary http callout and security rule
...
EKS masters are publicly accessible. You cannot restrict access nor
need to explicitly grant access.
https://github.com/terraform-aws-modules/terraform-aws-eks/pull/69#issuecomment-406123233
2018-08-03 21:52:16 +02:00
Brandon O'Connor
69d7a3ce4a
releasing 1.3.0
2018-07-11 23:47:35 -07:00
ccantoni
b4756a57f7
Updating heptio-authenticator-aws to aws-iam-authenticator since the heptio project was moved and renamed.
2018-07-10 10:40:49 -04:00
Brandon O'Connor
f754fe45ee
releasing v1.2.0 as it tests out
2018-07-01 01:51:07 -07:00
brandoconnor
abe72915f3
releasing 1.1.0
2018-06-25 01:24:58 -07:00
brandoconnor
9d3b5caff4
typo fixed
2018-06-11 16:15:11 -07:00
brandoconnor
c8997a5cf6
this is ready to ship
2018-06-11 15:54:19 -07:00
brandoconnor
210e92d821
documentation updated for clarity
2018-06-11 12:07:46 -07:00
brandoconnor
6bda7ee97d
workers can now be specified as multiple asgs of different flavors. BYO security group now possible for both workers and cluster
2018-06-11 03:34:13 -07:00