Commit Graph

1113 Commits

Author SHA1 Message Date
Daniel Piddock bb822a1e56 fix: Fix Launch Templates error with aws 2.61.0 (#875) 2020-05-09 19:58:38 +02:00
Thierno IB. BARRY a4e21e73cd docs: Add notes for Kubernetes 1.16 (#873)
BREAKING CHANGES: The default `cluster_version` is now 1.16. Kubernetes 1.16 includes a number of deprecated API removals, and you need to ensure your applications and add ons are updated, or workloads could fail after the upgrade is complete. For more information on the API removals, see the [Kubernetes blog post](https://kubernetes.io/blog/2019/07/18/api-deprecations-in-1-16/). For action you may need to take before upgrading, see the steps in the [EKS documentation](https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html). Please set explicitly your `cluster_version` to an older EKS version until your workloads are ready for Kubernetes 1.16.
2020-05-08 18:41:21 +02:00
Thierno IB. BARRY 527d4bd3f5 fix: Use splat syntax for cluster name to avoid (known after apply) in managed node groups (#868) 2020-05-07 09:17:05 +02:00
graywolf-at-work 312596f46d feat: Create kubeconfig with non-executable permissions (#864)
* Create kubeconfig with non-executable permissions

Kubeconfig does not really need to be executable, so let's not create it with executable bit set.

* Bump tf version
2020-05-06 21:36:58 +02:00
Scott Crooks 99f59bfcc9 feat: Change EKS default version to 1.16 (#857) 2020-05-06 17:20:28 +02:00
Thierno IB. BARRY 9bfdba9fb8 chore: Move all locals in locals.tf (#865) 2020-05-06 14:00:20 +02:00
Thierno IB. BARRY 4a8c79053a docs: Remove useless template provider in examples (#863) 2020-05-06 12:16:39 +02:00
Daniel Piddock b183b97253 improvement: Remove dependency on external template provider (#854)
* Remove template_file for generating kubeconfig

Push logic from terraform down to the template. Makes the formatting
slightly easier to follow

* Remove template_file for generating userdata

Updates to the eks_cluster now do not trigger recreation of launch
configurations

* Remove template_file for LT userdata

* Remove template dependency
2020-05-06 10:54:14 +02:00
Giuseppe Crinò 25ebaab1cc Fix typo (#859) 2020-05-05 13:22:43 +02:00
Thierno IB. BARRY 7afecf6379 chore: update changelog (#847) 2020-04-23 22:14:15 +02:00
slimm609 9c2a718744 fix: Add vpc_config.cluster_security_group output as primary cluster security group id (#828) 2020-04-23 17:36:51 +02:00
keznikl 36d1b5afa5 fix: Wrap local.configmap_roles.groups with tolist() to avoid panic (#846) 2020-04-23 16:57:58 +02:00
Thierno IB. BARRY fed9c5bf19 chore: update changelog (#845) 2020-04-22 23:39:58 +02:00
Thierno IB. BARRY 058a516b0f chore: Use chore semantic commits instead of skip changelog (#844) 2020-04-22 23:34:24 +02:00
sr-n e41c4aa78a fix: Prevent coalescelist null argument error when destroying worker_group_launch_templates (#842)
Resolves #841
2020-04-22 19:36:03 +02:00
Valeri GOLUBEV 2fd078e7c1 feat: Add support for EC2 principal in assume worker role policy for China (#827)
* Add support for EC2 principal in assume worker role policy for  China AWS

* Remove local partition  according to requested change

Co-authored-by: Valeri GOLUBEV <vgolubev@kyriba.com>
2020-04-11 14:11:22 +02:00
Thierno IB. BARRY eaa4d2c697 skip changelog: Prepare for release 11.0.0 (#819) 2020-03-31 00:53:35 +02:00
Ilya Nemakov c8195c5348 feat: Add instance tag specifications to Launch Template (#822) 2020-03-30 18:27:56 +02:00
Albert Lloveras 4cc5753284 improvement: Use aws_partition to build IAM policy ARNs (#820)
* Use aws_partition to build IAM policy ARNs

* Update broken link to CONTRIBUTING.md in README.md
2020-03-30 16:09:41 +02:00
Jaime Hidalgo García de00694a63 feat: Add support for additional volumes in launch templates and launch configurations (#800)
Co-authored-by: Jaime Hidalgo <jhidalgo@cccis.com>
Co-authored-by: Thierno IB. BARRY <ibrahima.br@gmail.com>
2020-03-24 23:28:59 +01:00
Sam "Bo" Beckwith III 49b0667cd9 fix: Fix destroy failure when talking to EKS endpoint on private network (#815) 2020-03-24 23:19:41 +01:00
Viacheslav Vasilyev de1419b597 feat: Add interpreter option to wait_for_cluster_cmd (#795)
Co-authored-by: Vasilyev, Viacheslav <viacheslav.vasilyev@accenture.com>
Co-authored-by: Thierno IB. BARRY <ibrahima.br@gmail.com>
2020-03-20 21:34:33 +01:00
Thierno IB. BARRY e768c6c103 ci: Restrict sementic PR to validate PR title only (#804) 2020-03-19 21:43:20 +01:00
slimm609 9951c87a86 fix: add ip address when manage_aws_auth is true and public_access is false (#745) 2020-03-19 16:22:22 +01:00
Betajobot 0c23191cd3 skip changelog - Removed some files (#811) 2020-03-18 21:56:21 +01:00
Betajobot a68c355fd8 Merge pull request #810 from terraform-aws-modules/terraform-provider-githubfile-1584563649900463000
[ci skip] Create ".editorconfig".
2020-03-18 21:34:22 +01:00
Betajobot 81372a8e59 Merge pull request #809 from terraform-aws-modules/terraform-provider-githubfile-1584563649900479000
[ci skip] Create "LICENSE".
2020-03-18 21:34:15 +01:00
betajobot b135f920a1 [ci skip] Create ".editorconfig". 2020-03-18 21:34:12 +01:00
betajobot d75e493e27 [ci skip] Create "LICENSE". 2020-03-18 21:34:12 +01:00
Daniel Piddock 0c1ed0e6e9 Improvement: Require kubernetes provider >=1.11.1 (#784)
BREAKING CHANGE: The terraform-aws-eks module now require at least kubernetes `1.11.1`. This may cause terraform to fail to init if users have set version = "1.10" like we had in the examples.
2020-03-18 13:56:51 +01:00
Daniel Piddock 89401f1623 fix: Add node_group direct dependency on eks_cluster (#796)
Setting `manage_aws_auth = false` removes the ordering dependency
between node_group and eks_cluster generating an error on first apply.
This fixes that use case.

Fixes #793
2020-03-18 09:09:32 +01:00
Daniel Piddock 50f5f8b874 fix: Do not recreate cluster when no SG given (#798) 2020-03-18 09:04:17 +01:00
Daniel Piddock 3957a7c02c improvement: Generate aws-auth configmap's roles from Object. No more string concat. (#790)
Do not use string concat to generate a YAML data structure

Co-authored-by: Thierno IB. BARRY <ibrahima.br@gmail.com>
2020-03-18 08:58:19 +01:00
Daniel Piddock e8a1ce17d8 fix: Create false and avoid waiting forever for a non-existent cluster to respond (#789) 2020-03-18 08:54:57 +01:00
Daniel Piddock 2c98a00b21 improvement: Add timeout to default wait_for_cluster_cmd (#791) 2020-03-17 19:06:09 +01:00
Max Williams cd8a825a5a test: remove unused kitchen test related stuff (#787)
Co-authored-by: Thierno IB. BARRY <ibrahima.br@gmail.com>
2020-03-17 16:36:34 +01:00
Thierno IB. BARRY a6583a3371 fix: fix git-chglog template to format changelog Type nicely (#803) 2020-03-17 15:29:59 +01:00
Thierno IB. BARRY 3c064aa2a9 fix: fix git-chglog configuration (#802) 2020-03-17 15:16:57 +01:00
Thierno IB. BARRY 9fb1a20d82 improvement: automate changelog management (#786) 2020-03-17 14:22:22 +01:00
Thierno IB. BARRY ca3d1e1199 New release 10.0.0 (#780)
* prepare 10.0.0 release

* remove unused version file
2020-03-12 13:29:03 +01:00
Dawid Rogaczewski 4c0c4c49a6 change conditional for irsa.tf (#783) 2020-03-12 11:50:41 +01:00
pierresteiner 2a78825ef7 Remove assumption (#779)
* Remove assumption

This is not needed since 8.0.0 right?

* Update CHANGELOG.md

Co-authored-by: Thierno IB. BARRY <ibrahima.br@gmail.com>
2020-03-12 10:34:13 +01:00
Christian Kemper 2a8e45fe2c defaults lookup before falling back on default ami based on platform (#756)
* defaulting to data lookup if worker_group_defaults have no ami_id entry

* using coalesce instead of lookup and also using local instead of var.

* adding defaults support for specifying windows based amis
2020-03-12 00:34:21 +01:00
Scott Crooks 7dc56e976b EKS 1.15 Support (#776)
* chore(eks): Support EKS 1.15

* docs(changelog): Adding entry to CHANGELOG

* chore(examples): Removing VPC tags from merged PR #772

* docs(changelog): Adding 'breaking' to CHANGELOG entry
2020-03-11 17:06:55 +01:00
Wolodja Wentland 23c005e5ef Add EKS Secret envelope encryption support (#772)
This adds support for configuring EKS clusters that utilise envelope
encryption for Secrets:

- https://aws.amazon.com/about-aws/whats-new/2020/03/amazon-eks-adds-envelope-encryption-for-secrets-with-aws-kms/

- https://aws.amazon.com/blogs/containers/using-eks-encryption-provider-support-for-defense-in-depth/
2020-03-11 12:26:06 +01:00
Thierno IB. BARRY 2715b01e4e fix max_instance_lifetime for workers (#771)
* fix max_instance_lifetime for workers

* update changelog

* update changelog
2020-03-10 22:01:01 +01:00
Arie Lev f465e55721 Add ASG cooldown and health_check_grace_period (#770)
* Add default_cooldown/health_check oprions

* Update CHANGELOG.md

* Update CHANGELOG.md

Co-Authored-By: Thierno IB. BARRY <ibrahima.br@gmail.com>

Co-authored-by: Thierno IB. BARRY <ibrahima.br@gmail.com>
2020-03-10 11:20:11 +01:00
Siddarth Prakash 198294c0b6 Add support for ASG max instance lifetime (#769)
Co-authored-by: Thierno IB. BARRY <ibrahima.br@gmail.com>
2020-03-09 23:31:52 +01:00
Craig Rueda 6784824595 'root_encrypted' -> bool (#766) 2020-03-09 23:25:05 +01:00
Yecheng Fu 8382f2c4e8 use the correct policy arns if the region is in CN (#765) 2020-03-09 16:02:53 +01:00