Commit Graph

186 Commits

Author SHA1 Message Date
Eytan Hanig
ab412fb060 Add the OIDC provider ARN to outputs (#653) 2020-01-03 14:25:09 +01:00
Will Bertelsen
bad9604882 Fix aws-auth config map for managed node groups (#627)
* Fix aws-auth config map for managed node groups

This change adds the IAM role used for each managed node group to the
aws-auth config map. This fixes an issue where managed nodes could not
access the EKS kubernetes API server.

* update changelog

* fix format

* add comment

Co-authored-by: Max Williams <max.williams@deliveryhero.com>
2019-12-20 17:30:40 +01:00
Mukesh Gupta
7c8bcc967b Adding node group iam role arns to outputs (#641) 2019-12-20 16:50:29 +01:00
Ryan Ooi
b7ffc1b591 Control plane security group always whitelist worker security group and revert #186 (#631)
* Updates and revert #186

* update readme

* update changelog

* update changelog
2019-12-20 16:45:01 +01:00
Alaa Qutaish
583c32d286 Add IRSA support (#632) 2019-12-19 16:38:12 +01:00
chewvader
77f947ec91 Cluster oidc issuer url string (#626)
* cluster_oidc_issuer_url to string

change cluster_oidc_issuer_url output to return string

* Update CHANGELOG.md

adding entry to changelog

* Update outputs.tf

Co-Authored-By: Daniel Piddock <33028589+dpiddockcmp@users.noreply.github.com>
2019-12-12 17:44:45 +01:00
Jeff Hastings
11d8ee8631 Fix idempotency with node group remote_access block (#625)
* add kubernetes provider configuration for managed_node_groups example

* use dynamic block for remote_access

* update changelog
2019-12-11 17:50:09 +01:00
Max Williams
7824e8b263 Creating 7.0.1 release (#630) 2019-12-11 17:23:48 +01:00
Daniel Piddock
45a39a098f Minor tweaks to changelog (#629)
* Tweaks to changelog

* Fix examples link

Existing one does not work.
This is a permanent link to maintain the upgrade hints path
2019-12-11 17:08:33 +01:00
Tomislav Tomašić
124ea7c151 Add destroy time flag (#580)
* Add destroy-time flag

* Update changelog

Fix cluster count

* Fix cluster count

* Fix docs

* Fix outputs

* Fix unsupported attribute on cluster_certificate_authority_data output

Co-Authored-By: Daniel Piddock <33028589+dpiddockcmp@users.noreply.github.com>

* Remove unnecessary flatten from cluster_endpoint output

Co-Authored-By: Daniel Piddock <33028589+dpiddockcmp@users.noreply.github.com>

* Improve description of var.enabled

* Fix errors manifesting when used on an existing-cluster

* Update README.md

* Renamed destroy-time flag

* Revert removal of changelog addition entry

* Update flag name in readme

* Update flag variable name

* Update cluster referencing for consistency

* Update flag name to `create_eks`

* Fixed incorrect count-based reference to aws_eks_cluster.this (there's only one)

* Replaced all incorrect aws_eks_cluster.this[count.index] references (there will be just one, so using '[0]').

* Changelog update, explicitly mentioning flag

* Fixed interpolation deprecation warning

* Fixed outputs to support conditional cluster

* Applied create_eks to aws_auth.tf

* Removed unused variable. Updated Changelog. Formatting.

* Fixed references to aws_eks_cluster.this[0] that would raise errors when setting create_eks to false whilst having launch templates or launch configurations configured.

* Readme and example updates.

* Revert "Readme and example updates."

This reverts commit 18a0746355e136010ad54858a1b518406f6a3638.

* Updated readme section of conditionally creation with provider example.

* Added conditions to node_groups.

* Fixed reversed map_roles check

* Update aws_auth.tf

Revert this due to https://github.com/terraform-aws-modules/terraform-aws-eks/pull/611
2019-12-09 10:06:10 +01:00
Daniel Piddock
7c2c4a6aa5 Bump minimum Terraform to 0.12.9 (#617) 2019-12-09 09:59:26 +01:00
Shan K
fb61b48c26 Fix PR merge: #606 (#611)
* Update aws_auth.tf

* aws-auth config map
2019-12-05 16:54:13 +01:00
William Morgan
cf3dcc5c58 Support for EKS Managed Node Groups (#602)
* Finished first cut of managed node groups

* Updated formatting and extra fields.

* Updating Changelog and README

* Fixing formatting

* Fixing docs.

* Updating required Version

* Updating changelog

* Adding example for managed node groups

* Managed IAM Roles for Nodegroups now have correct policies. Tags can now be added to node groups.

* Fixing bug where people could set source_security_group_ids without setting ssh key causing a race condition within the aws provider.

* Adding lifecycle create_before_destroy

* Adding random pet names for create_before_destroy

* Updating per comments.

* Updating required versions of terraform

* Updating per comments.

* Updating vars

* Updating minimum version for terraform

* Change worker_groups_managed_node_groups to node_groups

* Using for_each on the random_pet

* Adding changes recommended by @eytanhanig

* Update node_groups.tf
2019-12-04 18:30:36 +01:00
Max Williams
614d815c3c Misc doc and changelog format changes (#604)
👊
2019-11-28 15:03:26 +01:00
Stijn De Haes
9363662574 Use kubernetes provider to manage aws auth (#355)
This commit changes the way aws auth is managed. Before a local file
was used the generate the template and a null resource to apply it. This
is now switched to the terraform kubernetes provider.
2019-11-28 10:25:13 +01:00
Mary Hayes
b69c8fb759 Run aws-auth Update Commands in Sequence and not Parallel (#592)
* Run aws-auth Update Commands in Sequence and not Parallel

* Update changelog
2019-11-20 13:23:56 +01:00
Joonsung Lee
215dc849e8 Fix broken terraform plan/apply on a cluster < 1.14 (Fix #582) (#600) 2019-11-20 13:19:06 +01:00
Angel Abad
4f3f5b6733 Fix deprecated interpolation-only expression (#594) 2019-11-18 18:16:37 +01:00
Ankit Wal
a43e44f164 Update worker_iam_instance_profile outputs for launch template use (#583)
* Add launch template instance profiles to output

Concat launch template and asg instance profile lists

Signed-off-by: Ankit Wal <ankitwal@gmail.com>

* Update ChangeLog

Added changes made to output in Changelog
Signed-off-by: Ankit Wal <ankitwal@thoughtworks.com>
2019-11-06 17:27:56 +01:00
Daniel Piddock
c0ae644204 Add Action check against minimum versions (#575) 2019-11-04 16:18:19 +01:00
Max Williams
55ff38cc31 Fix changelog for release v7.0.0 (#577)
* New v7.0.0 release

* update version file

* remove one line
2019-10-30 21:22:15 +01:00
Thierno IB. BARRY
0d7ef6ffd6 New release 6.1.0 (#576) 2019-10-30 13:38:51 +01:00
Miguel Ferreira
a8e54ccf73 Use join and splat syntax to access conditional resources (#569) 2019-10-29 13:55:21 +01:00
Scott Stanton
4f552891ff Allow the userdata template to be replaced (#565)
* Allow the userdata template to be replaced

* Address fmt issue

* Rename 'customer_userdata' name to 'userdata_template_file'

* Add support for userdata_template_extra_args

* Add support for userdata_template_extra_args

* fix merge conflicts

* Fix merge problem that dropped the file load
Add `platform` to the template expansion context
Add `userdata_launch_template` to `launch_template_userdata`
2019-10-29 12:12:47 +01:00
Joonsung Lee
2d52e06786 Add Windows support (#555)
* Add Windows support

* Assign eks:kube-proxy-windows group to worker nodes

* Add Instructions for adding Windows Workers at FAQ.md

* Remove unnecessary variables from userdata_windows.tpl

* Update CHANGELOG.md
2019-10-28 14:16:45 +01:00
Arnaud Venturi
c90b33780c Increase minimum terraform version to include yamlencode (#570)
* Increase minimum terraform version to include yamlencode

https://github.com/hashicorp/terraform/blob/master/CHANGELOG.md#0122-june-12-2019

* Update Changelog
2019-10-25 11:14:01 +02:00
Joshua Spence
4369f0271b Allow config_output_path to specify the full path (#549) 2019-10-21 14:55:29 +02:00
Bruno M. Custódio
c81e1d2fa7 Allow for specifying a custom AMI for the worker nodes. (#551)
Signed-off-by: Bruno Miguel Custódio <brunomcustodio@gmail.com>
2019-10-21 13:04:04 +02:00
Jeff Hastings
2e2f2acada change ebs_optimized mapping to list where not supported (#561)
* change ebs_optimized mapping to list where not supported

* update changelog
2019-10-21 12:57:29 +02:00
Thierno IB. BARRY
1be1a02e23 New release 6.0.2 (#553) 2019-10-07 20:53:31 +02:00
Morgan Christiansson
edcbba64ef Add tags to aws_eks_cluster introduced in terraform-provider-aws 2.31.0 (#550)
- https://github.com/terraform-providers/terraform-provider-aws/pull/10307
- https://aws.amazon.com/about-aws/whats-new/2019/09/amazon-eks-supports-cluster-tagging/
2019-10-04 14:48:53 +02:00
Daniel Piddock
813c607e90 Make "dangerous" policy attachments optional (#539) 2019-10-04 14:25:19 +02:00
Wi1dcard
18748a5f38 Update autoscaling.md (#531) 2019-09-27 13:18:31 +02:00
Thierno IB. BARRY
186c88a34b Add option to enable lifecycle hooks creation (#532)
* add option to enable lifecycle hooks creation

* update changelog
2019-09-26 19:40:41 +02:00
Thierno IB. BARRY
07c61b6e26 New release 6.0.1 (#528)
* New release 6.0.1
2019-09-25 11:19:16 +02:00
Tatu Seppä-Lassila
39cb93b1da Use null as default value for target group ARNs (#524)
* Use null as default value for target group ARNs
* Update CHANGELOG

close #499
2019-09-24 11:09:44 +02:00
Roman Voitenko
f79c790153 Gpu workers support (#515)
* added posibility to use Amazon EKS-Optimized AMI with GPU Support for workers

* updated CHANGELOG.md

* added missing var prefix

* updated Changelog to ver 6.x.x
2019-09-23 17:50:01 +02:00
Max Williams
bf8c324761 New Release v6.0.0 (#514)
* New Release v6.0.0

* bump required AWS provider version and regeneration of variables/outputs
2019-09-18 10:01:38 +02:00
russwhelan
2b88e506e3 Add URL for OIDC issuer to allow IAM roles for Pods (#506)
* Add URL for OIDC issuer to allow IAM roles for Pods

* Update Documentation
2019-09-16 11:45:35 +02:00
Tomas Ostasevicius
4f4d9c304d Fix launch template market option expansion (#508)
* Fix launch template market option expansion

* Update changelog
2019-09-16 11:32:39 +02:00
Sergiu Plotnicu
461cf5482e Support for Mixed Instances ASG in worker_groups_launch_template variable (#468)
* Create ASG tags via for - utility from terraform 12

* Updated support for mixed ASG in worker_groups_launch_template variable

* Updated launch_template example to include spot and mixed ASG with worker_groups_launch_template variable

* Removed old config

* Removed workers_launch_template_mixed.tf file, added support for mixed/spot in workers_launch_template variable

* Updated examples/spot_instances/main.tf with Mixed Spot and ondemand instances

* Removed launch_template_mixed from relevant files

* Updated README.md file

* Removed workers_launch_template.tf.bkp

* Fixed case with null on_demand_allocation_strategy and Spot allocation

* Fixed workers_launch_template.tf, covered spot instances via Launch Template
2019-09-13 16:50:59 +02:00
Ivanich
a47f464221 Allow to set user defined workers role name (#496)
* Allow to set user defined workers role name

* Add changelog entry

* Keep single variable for worker role name
2019-09-12 17:45:04 +02:00
Thierno IB. BARRY
4264a5fe6e use default_iam_role_id interpolation for aws_iam_instance_profile (#489) 2019-09-11 18:25:33 +02:00
刘相轩
6c3e4ec510 Update to EKS 1.14 (#498) 2019-09-09 10:46:02 +02:00
Thierno IB. BARRY
d6d0975452 add initial lifecycle hooks for autosacling groups (#466) 2019-08-20 15:45:06 +02:00
Thierno IB. BARRY
d8ed7d0b66 add option to recreate ASG when LT or LC changes (#465) 2019-08-20 15:43:18 +02:00
Nick Fisher
5636447de6 Wrapping kubelet_extra_args in double quotes (#473) (#474) 2019-08-20 15:41:16 +02:00
Daniel Piddock
655a75fbd0 Update cluster_security_group_id doc (#472)
You cannot filter the public cluster endpoint.
2019-08-19 16:34:02 +02:00
Scott Crooks
b335819f0e Adding 'capacity-optimized' docs to locals (#469) 2019-08-19 16:22:11 +02:00
刘相轩
8580b67813 Support map users and roles to multiple groups (#424)
* Support map users and roles to multiple groups

* Simplify code by rename `user_arn` to `userarn`, `role_arn` to `rolearn`

* Next version should be 6.x because PR this is a breaking change.

* Update example variables.tf

* Change indent to 2

* Fix map-aws-auth.yaml maybe invalid yaml.
2019-08-19 16:15:01 +02:00