Commit Graph

488 Commits

Author SHA1 Message Date
Thomas O'Neill
c508d12b69 docs: Mixed spot + on-demand instance documentation (#967)
* Add example for lauch config with mixed lifecycles

* Set what on-demand instance is

* Tweak wording

Co-authored-by: Thomas O'Neill <toneill@new-innov.com>
Co-authored-by: Daniel Piddock <daniel.piddock@teamcmp.com>
2020-08-14 15:58:34 +02:00
Giuseppe Crinò
1c81227044 docs: Describe key_name is about AWS EC2 key pairs (#970) 2020-08-14 15:27:46 +02:00
Jürgen W
f45b5a1d46 fix: random_pet with LT workers under 0.13.0 (#940)
Fix for:
Error: Provider produced inconsistent final plan

When expanding the plan for module.eks.random_pet.workers_launch_template[0]
to include new values learned so far during apply, provider
"registry.terraform.io/hashicorp/random" changed the planned action from
CreateThenDelete to DeleteThenCreate.
2020-08-14 15:23:17 +02:00
Daniel Piddock
415cfca9af ci: fix CI lint job (#973)
Module used by an example does not allow use with 0.13 yet. Lock to
latest version of 0.12. No 0.12 floating tag :(
2020-08-12 16:10:31 +02:00
Daniel Piddock
9ace344c57 docs: Better documentation of cluster_id output blocking (#955)
NOTES: Starting in v12.1.0 the `cluster_id` output depends on the
`wait_for_cluster` null resource. This means that initialisation of the
kubernetes provider will be blocked until the cluster is really ready,
if the module is set to manage the aws_auth ConfigMap and user followed
the typical Usage Example. kubernetes resources in the same plan do not
need to depend on anything explicitly.
2020-08-12 15:22:24 +02:00
Daniel Piddock
3d2f7d28c1 chore: update changelog for release 12.2.0 (#948) 2020-07-13 21:31:56 +02:00
Daniel Piddock
7d86a6c757 docs: Update required IAM permissions list (#936)
NodeGroups, Fargate, EKS tagging, KMS
2020-07-13 21:22:41 +02:00
Daniel Quackenbush
23ad497557 feat: IMDSv2 metadata configuration in Launch Templates (#938)
NOTES: Addition of the IMDSv2 metadata configuration block to Launch Templates will cause a diff to be generated for existing Launch Templates on first Terraform apply. The defaults match existing behaviour.
2020-07-12 18:25:48 +02:00
Michael Potter
b0ebef69b3 fix: Strip user Name tag from asg_tags #946) 2020-07-12 17:40:27 +02:00
Marcus Vaal
db9bb0b482 feat: worker launch templates and configurations depend on security group rules and IAM policies (#933)
In order to ensure proper ordering when running terraform destroy. This will block Terraform from removing up security group rules before the cluster has finished its clean up chores.
2020-07-12 17:14:36 +02:00
Ivan Sukhomlyn
9a0e548dcc feat: Add IAM permissions for ELB svc-linked role creation by EKS cluster (#902)
AmazonEKSClusterPolicy IAM policy doesn't contain all necessary permissions to create ELB service-linked role required during LB provisioning at AWS by K8S Service.

https://github.com/terraform-aws-modules/terraform-aws-eks/issues/900
https://github.com/terraform-aws-modules/terraform-aws-eks/issues/183#issuecomment-435229552
2020-06-28 14:44:36 +02:00
Thierno IB. BARRY
616d30ec67 feat: Add a homemade depends_on for MNG submodule to ensure ordering of resource creation (#867) 2020-06-28 02:31:23 +02:00
Daniel Piddock
1e4a908a95 docs: Improve FAQ on how to deploy from Windows (#927) 2020-06-26 17:40:34 +02:00
Daniel Piddock
60b494049b docs: autoscaler X.Y version must match (#928) 2020-06-26 17:39:49 +02:00
Tim Robinson
c4edc6fbcc fix: Get on_demand_allocation_strategy from local.workers_group_defaults when deciding to use mixed_instances_policy (#908) 2020-06-24 09:31:05 +02:00
Ariel Viñas
348f441221 fix: remove unnecessary conditional in private access security group (#915) 2020-06-10 12:38:56 +02:00
Daniel Piddock
f2c4383719 chore: update changelog for release 12.1.0 (#910) 2020-06-06 11:46:37 +02:00
Michael Marshall
a89e91bf8f feat: Add aws_security_group_rule.cluster_https_worker_ingress to output values (#901) 2020-06-06 10:55:35 +02:00
Daniel Piddock
7de18cd9cd fix: Revert removal of templates provider (#883)
Broke use case of passing in custom template content. Reverts most of the following PRs:
- #865
- #863 
- #854
2020-06-05 10:34:23 +02:00
graywolf-at-work
05cd78593a fix: Ensure kubeconfig ends with \n (#880)
In order to be a text file according to POSIX, file needs to be composed of
text lines. Text line is defined as sequence of characters ending in \n. Sadly,
`~}` did strip everything including the \n, so the kubeconfing did not end
with a new line. Output empty string at the end to make sure of it.
2020-06-02 11:24:39 +02:00
Simon Gurcke
3fefc2a66c feat: Allow communication between pods on workers and pods using the primary cluster security group (optional) (#892)
NOTES: New variable `worker_create_cluster_primary_security_group_rules` to allow communication between pods on workers and pods using the primary cluster security group (Managed Node Groups or Fargate). It defaults to `false` to avoid potential conflicts with existing security group rules users may have implemented.
2020-05-30 22:43:26 +02:00
Brandon McNama
7ffe5fa88f fix: Work around path bug in aws-iam-authenticator (#894)
* fix: Work around path bug in aws-iam-authenticator

`aws-iam-authenticator` has an open issue where it will not recognize
IAM roles that include paths. This change causes the path supplied to
`var.iam_path` to be stripped when generating the `aws-auth` ConfigMap
in order to work around this.

https://github.com/kubernetes-sigs/aws-iam-authenticator/issues/153
https://github.com/aws/containers-roadmap/issues/926
2020-05-30 22:25:50 +02:00
Daniel Piddock
c748899d0e cluster_id blocks on wait_for_cluster (#890) 2020-05-29 17:45:24 +02:00
Daniel Piddock
444343553c docs: Update FAQ (#891) 2020-05-29 17:29:08 +02:00
Thierno IB. BARRY
d4f3924056 chore: update changelog and prepare release 12.0.0 (#871) 2020-05-09 20:52:42 +02:00
Daniel Piddock
bb822a1e56 fix: Fix Launch Templates error with aws 2.61.0 (#875) 2020-05-09 19:58:38 +02:00
Thierno IB. BARRY
a4e21e73cd docs: Add notes for Kubernetes 1.16 (#873)
BREAKING CHANGES: The default `cluster_version` is now 1.16. Kubernetes 1.16 includes a number of deprecated API removals, and you need to ensure your applications and add ons are updated, or workloads could fail after the upgrade is complete. For more information on the API removals, see the [Kubernetes blog post](https://kubernetes.io/blog/2019/07/18/api-deprecations-in-1-16/). For action you may need to take before upgrading, see the steps in the [EKS documentation](https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html). Please set explicitly your `cluster_version` to an older EKS version until your workloads are ready for Kubernetes 1.16.
2020-05-08 18:41:21 +02:00
Thierno IB. BARRY
527d4bd3f5 fix: Use splat syntax for cluster name to avoid (known after apply) in managed node groups (#868) 2020-05-07 09:17:05 +02:00
graywolf-at-work
312596f46d feat: Create kubeconfig with non-executable permissions (#864)
* Create kubeconfig with non-executable permissions

Kubeconfig does not really need to be executable, so let's not create it with executable bit set.

* Bump tf version
2020-05-06 21:36:58 +02:00
Scott Crooks
99f59bfcc9 feat: Change EKS default version to 1.16 (#857) 2020-05-06 17:20:28 +02:00
Thierno IB. BARRY
9bfdba9fb8 chore: Move all locals in locals.tf (#865) 2020-05-06 14:00:20 +02:00
Thierno IB. BARRY
4a8c79053a docs: Remove useless template provider in examples (#863) 2020-05-06 12:16:39 +02:00
Daniel Piddock
b183b97253 improvement: Remove dependency on external template provider (#854)
* Remove template_file for generating kubeconfig

Push logic from terraform down to the template. Makes the formatting
slightly easier to follow

* Remove template_file for generating userdata

Updates to the eks_cluster now do not trigger recreation of launch
configurations

* Remove template_file for LT userdata

* Remove template dependency
2020-05-06 10:54:14 +02:00
Giuseppe Crinò
25ebaab1cc Fix typo (#859) 2020-05-05 13:22:43 +02:00
Thierno IB. BARRY
7afecf6379 chore: update changelog (#847) 2020-04-23 22:14:15 +02:00
slimm609
9c2a718744 fix: Add vpc_config.cluster_security_group output as primary cluster security group id (#828) 2020-04-23 17:36:51 +02:00
keznikl
36d1b5afa5 fix: Wrap local.configmap_roles.groups with tolist() to avoid panic (#846) 2020-04-23 16:57:58 +02:00
Thierno IB. BARRY
fed9c5bf19 chore: update changelog (#845) 2020-04-22 23:39:58 +02:00
Thierno IB. BARRY
058a516b0f chore: Use chore semantic commits instead of skip changelog (#844) 2020-04-22 23:34:24 +02:00
sr-n
e41c4aa78a fix: Prevent coalescelist null argument error when destroying worker_group_launch_templates (#842)
Resolves #841
2020-04-22 19:36:03 +02:00
Valeri GOLUBEV
2fd078e7c1 feat: Add support for EC2 principal in assume worker role policy for China (#827)
* Add support for EC2 principal in assume worker role policy for  China AWS

* Remove local partition  according to requested change

Co-authored-by: Valeri GOLUBEV <vgolubev@kyriba.com>
2020-04-11 14:11:22 +02:00
Thierno IB. BARRY
eaa4d2c697 skip changelog: Prepare for release 11.0.0 (#819) 2020-03-31 00:53:35 +02:00
Ilya Nemakov
c8195c5348 feat: Add instance tag specifications to Launch Template (#822) 2020-03-30 18:27:56 +02:00
Albert Lloveras
4cc5753284 improvement: Use aws_partition to build IAM policy ARNs (#820)
* Use aws_partition to build IAM policy ARNs

* Update broken link to CONTRIBUTING.md in README.md
2020-03-30 16:09:41 +02:00
Jaime Hidalgo García
de00694a63 feat: Add support for additional volumes in launch templates and launch configurations (#800)
Co-authored-by: Jaime Hidalgo <jhidalgo@cccis.com>
Co-authored-by: Thierno IB. BARRY <ibrahima.br@gmail.com>
2020-03-24 23:28:59 +01:00
Sam "Bo" Beckwith III
49b0667cd9 fix: Fix destroy failure when talking to EKS endpoint on private network (#815) 2020-03-24 23:19:41 +01:00
Viacheslav Vasilyev
de1419b597 feat: Add interpreter option to wait_for_cluster_cmd (#795)
Co-authored-by: Vasilyev, Viacheslav <viacheslav.vasilyev@accenture.com>
Co-authored-by: Thierno IB. BARRY <ibrahima.br@gmail.com>
2020-03-20 21:34:33 +01:00
Thierno IB. BARRY
e768c6c103 ci: Restrict sementic PR to validate PR title only (#804) 2020-03-19 21:43:20 +01:00
slimm609
9951c87a86 fix: add ip address when manage_aws_auth is true and public_access is false (#745) 2020-03-19 16:22:22 +01:00
Betajobot
0c23191cd3 skip changelog - Removed some files (#811) 2020-03-18 21:56:21 +01:00