Bryant Biggs
0269d38fca
feat: Update TLS provider and remove unnecessary cloud init version requirements ( #1966 )
2022-03-25 09:26:16 +01:00
Bryant Biggs
fd3a3e9a96
fix: Default to cluster version for EKS and self managed node groups when a cluster_version is not specified ( #1963 )
2022-03-24 15:56:55 +01:00
Bryant Biggs
9371a2943b
feat: Add tags to EKS created cluster security group to match rest of module tagging scheme ( #1957 )
2022-03-24 08:05:59 +01:00
Bryant Biggs
e21db83d8f
feat: Allow users to selectively attach the EKS created cluster primary security group to nodes ( #1952 )
2022-03-23 15:41:39 +01:00
Bryant Biggs
8b03b7b85e
feat: Add outputs for autoscaling group names created to aid in autoscaling group tagging ( #1953 )
2022-03-22 22:26:00 +01:00
Adam Blasko
dd97344d2b
chore: Fixed typo in readme ( #1951 )
2022-03-22 11:25:56 +01:00
Anton Babenko
f5511e4df1
chore: Updated information for users from Russia/Belarus
2022-03-17 14:57:15 +01:00
Bryant Biggs
5935670503
fix: Compact result of cluster security group to avoid disruptive updates when no security groups are supplied ( #1934 )
2022-03-15 22:06:15 +01:00
Anton Babenko
fad350d5bf
feat: Made it clear that we stand with Ukraine
2022-03-12 11:10:02 +01:00
Bryant Biggs
2df1572b8a
feat: Add variables to allow users to control attributes on cluster_encryption IAM policy ( #1928 )
2022-03-09 15:13:18 +01:00
Bryant Biggs
7644952131
feat: Add additional IAM policy to allow cluster role to use KMS key provided for cluster encryption ( #1915 )
2022-03-02 18:29:35 +01:00
Bryant Biggs
9af0c2495a
fix: Add support for overriding DNS suffix for cluster IAM role service principal endpoint ( #1905 )
2022-03-02 18:26:20 +01:00
Bryant Biggs
8de02b9ff4
fix: Update examples to show integration and usage of new IRSA submodule ( #1882 )
2022-02-16 21:23:04 +01:00
Fernando Viana
3fc9f2d69c
feat: Add variable to provide additional OIDC thumbprints ( #1865 )
...
Co-authored-by: Anton Babenko <anton@antonbabenko.com >
2022-02-15 14:42:44 +01:00
Bryant Biggs
d3b68479de
feat: Add additional output for OIDC provider (issuer URL without leading https://) ( #1870 )
2022-02-11 22:26:36 +01:00
Janosch Maier
6a30b73fe4
docs: Update security group additional rules description for sourcing created security groups ( #1860 )
...
Co-authored-by: Anton Babenko <anton@antonbabenko.com >
2022-02-09 13:54:38 +01:00
Bryant Biggs
21c3802dea
feat: enable IRSA by default ( #1849 )
2022-02-06 20:36:34 +01:00
Bryant Biggs
c45adce32e
chore: add example usage of extending cluster and node security group access rules ( #1805 )
2022-01-22 08:17:09 +01:00
Bryant Biggs
314192e2eb
feat: Add support for networking ip_family which enables support for IPV6 ( #1759 )
2022-01-14 21:17:03 +01:00
yutachaos
cf985c2347
chore: Fixed some broken urls in the docs ( #1775 )
2022-01-13 12:28:04 +01:00
Bryant Biggs
f54bd3047b
fix: Correct remote access variable for security groups and add example for additional IAM policies ( #1766 )
...
Co-authored-by: Anton Babenko <anton@antonbabenko.com >
2022-01-11 21:03:20 +01:00
Bryant Biggs
7babe87775
chore: Update documentation related to default EKS node group settings and v18.x security group changes ( #1760 )
2022-01-10 17:57:23 +01:00
Devin Young
7089c71e64
fix: Remove trailing hyphen from cluster security group and iam role name prefix ( #1745 )
2022-01-06 21:29:15 +01:00
Pedro Magalhães
89218279d4
fix: Change variable "node_security_group_additional_rules" from type map(any) to any ( #1747 )
2022-01-06 21:10:10 +01:00
Bryant Biggs
a2c7caac9f
fix: Correct conditional map for cluster security group additional rules ( #1738 )
2022-01-06 12:27:04 +01:00
Bryant Biggs
ee9f0c646a
feat!: Removed support for launch configuration and replace count with for_each ( #1680 )
2022-01-05 13:01:31 +01:00
Bryant Biggs
b876ff9513
fix: update CI/CD process to enable auto-release workflow ( #1698 )
2021-11-22 17:15:50 +01:00
Dawid Rogaczewski
4e54eaac16
chore: update cluster_version description ( #1671 )
2021-11-05 11:12:26 +01:00
Christopher Haar
6959b9bae3
fix: Added Deny for CreateLogGroup action in EKS cluster role ( #1594 )
2021-11-02 15:34:12 +01:00
Vilvaramadurai Samidurai (Vilva)
ed048f3c1a
feat: Added support for client.authentication.k8s.io/v1beta1 ( #1550 )
2021-11-02 11:19:40 +01:00
Dawid Rogaczewski
99d289988d
fix: Rebuild examples ( #1625 )
2021-10-12 15:20:14 +02:00
Gabriel Virga
7371db1a51
docs: Fix broken URL in README ( #1602 )
2021-09-28 09:39:07 +02:00
Marco Kilchhofer
46f16d6ae8
feat: Ability to specify cluster update timeout ( #1588 )
2021-09-17 16:45:49 +02:00
Anton Babenko
2bdf7d7dd6
refactor: Refactoring to match the rest of terraform-aws-modules ( #1583 )
2021-09-16 11:35:44 +02:00
DayneD89
4a7678d372
feat: Added ability to pass different subnets for fargate and the cluster ( #1527 )
2021-09-06 15:15:38 +02:00
Anton Babenko
40e47a4020
fix: Updated required version of AWS provider to 3.56.0 ( #1571 )
2021-09-04 10:46:48 +02:00
Robert Kozak
b7413b3e37
feat: Allow override of timeouts in node_groups ( #1552 )
2021-09-03 17:07:59 +02:00
Anton Babenko
c2490c5148
feat: Ability to tag just EKS cluster ( #1569 )
2021-09-03 16:54:59 +02:00
Junaid Ali
bcea0708e6
feat: Added throughput support for root and EBS disks ( #1445 )
2021-09-02 12:28:13 +02:00
Scott Cabrinha
6fb02c4fc4
feat: Allow users to add more Audiences to OpenID Connect ( #1451 )
2021-08-31 12:27:04 +02:00
Ryan White
3b1229837a
feat: Enable ebs_optimized setting for node_groups ( #1459 )
2021-08-25 15:21:08 +02:00
SNA
686193ed4e
feat: Add var.wait_for_cluster_timeout to allow configuring the wait for cluster timeout ( #1420 )
2021-06-01 23:10:31 +02:00
Thierno IB. BARRY
1d848b56bf
fix: Remove duplicated security group rule for EKS private access endpoint ( #1412 )
...
NOTES: In this bug fix, we remove a duplicated security rule introduced during a merge conflict resolution in [#1274 ](https://github.com/terraform-aws-modules/terraform-aws-eks/pull/1274 )
2021-05-28 21:11:02 +02:00
Marc Haase
796cbead2f
feat: Add ability to use Security Groups as source for private endpoint access ( #1274 )
...
BREAKING CHANGES: The private endpoint security group rule has been renamed to allow the use of CIDR blocks and Security Groups as source. This will delete the `cluster_private_access` Security Group Rule for existing cluster. Please rename by `aws_security_group_rule.cluster_private_access[0]` into `aws_security_group_rule.cluster_private_access_cidrs_source[0]`.
Co-authored-by: Thierno IB. BARRY <ibrahima.br@gmail.com >
2021-05-28 14:56:02 +02:00
Thierno IB. BARRY
d7630ef632
docs: Clarify about the cluster_endpoint_private_access_cidrs usage ( #1400 )
2021-05-28 02:34:52 +02:00
Thierno IB. BARRY
6d7d6f6f5a
feat: Drop random pets from Managed Node Groups ( #1372 )
...
BREAKING CHANGES: We now decided to remove `random_pet` resources in Managed Node Groups (MNG). Those were used to recreate MNG if something change and also simulate the newly added argument `node_group_name_prefix`. But they were causing a lot of troubles. To upgrade the module without recreating your MNG, you will need to explicitly reuse their previous name and set them in your MNG `name` argument. Please see [upgrade docs](https://github.com/terraform-aws-modules/terraform-aws-eks/blob/master/docs/upgrades.md#upgrade-module-to-v1700-for-managed-node-groups ) for more details.
2021-05-28 01:50:16 +02:00
Thierno IB. BARRY
8765362093
feat: Rename config_output_path into kubeconfig_output_path for naming consistency ( #1399 )
...
BREAKING CHANGES: The variable `config_output_path` is renamed into `kubeconfig_output_path` for naming consistency. Please upgrade your configuration accordingly.
NOTES: The kubeconfig file permission is not world and group readable anymore. The default permission is now `600`. This value can be changed with the variable `var.kubeconfig_file_permission`.
2021-05-27 22:59:09 +02:00
Iryna Shustava
4a9fc3af11
feat: Kubeconfig file should not be world or group readable by default ( #1114 )
...
Co-authored-by: Thierno IB. BARRY <ibrahima.br@gmail.com >
2021-05-27 22:29:17 +02:00
Thierno IB. BARRY
7898da2ff7
fix: Bump terraform-provider-http required version to 2.4.1 to avoid TLS Cert Pool issue on Windows ( #1387 )
2021-05-24 21:54:28 +02:00
Thierno IB. BARRY
f024da8276
docs: Update license to Apache 2 License ( #1375 )
2021-05-20 13:08:36 +02:00