Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat!: Replace the use of aws-auth configmap with EKS cluster access entry #2858

Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
26 commits
Select commit Hold shift + click to select a range
51a1625
feat: Replace `resolve_conflicts` with `resolve_conflicts_on_create`/…
bryantbiggs Oct 9, 2023
57378ee
fix: Replace dynamic DNS suffix for `sts:AssumeRole` API calls for st…
bryantbiggs Nov 7, 2023
d238c00
feat: Add module tag
bryantbiggs Nov 7, 2023
ff1447c
feat: Align Karpenter permissions with Karpenter v1beta1/v0.32 permis…
bryantbiggs Nov 9, 2023
f57bcb9
refactor: Move `aws-auth` ConfigMap functionality to its own sub-module
bryantbiggs Nov 11, 2023
f8fc282
chore: Update examples
bryantbiggs Nov 14, 2023
a497463
feat: Add state `moved` block for Karpenter Pod Identity role re-name
bryantbiggs Nov 15, 2023
5eda1f3
Merge branch 'master' of github.com:terraform-aws-modules/terraform-a…
bryantbiggs Dec 19, 2023
e4c6a71
fix: Correct variable `create` description
bryantbiggs Dec 19, 2023
4f3be36
feat: Add support for cluster access entries
bryantbiggs Jan 19, 2024
005885b
chore: Bump MSV of Terraform to `1.3`
bryantbiggs Jan 26, 2024
9f1227d
fix: Replace defunct kubectl provider with an updated forked equivalent
bryantbiggs Jan 26, 2024
8cee96d
chore: Update and validate examples for access entry; clean up provid…
bryantbiggs Jan 26, 2024
570065e
docs: Correct double redundant variable descriptions
bryantbiggs Jan 26, 2024
ee48891
feat: Add support for Cloudwatch log group class argument
bryantbiggs Jan 26, 2024
685e9a1
fix: Update usage tag placement, fix Karpenter event spelling, add up…
bryantbiggs Jan 29, 2024
ef2bef9
feat: Update Karpenter module to generalize naming used and align pol…
bryantbiggs Jan 29, 2024
35685c1
feat: Add native support for Windows based managed nodegroups similar…
bryantbiggs Jan 29, 2024
aeeedd4
feat: Update self-managed nodegroup module to use latest features of ASG
bryantbiggs Jan 29, 2024
09ff91d
docs: Update and simplify docs
bryantbiggs Jan 29, 2024
2e94601
fix: Correct variable description for AMI types
bryantbiggs Jan 29, 2024
79a71dc
fix: Update upgrade guide with changes; rename Karpenter controller r…
bryantbiggs Jan 29, 2024
9cb886e
docs: Complete upgrade guide docs for migration and changes applied
bryantbiggs Jan 30, 2024
42cb888
Update examples/karpenter/README.md
bryantbiggs Feb 2, 2024
22514f8
Update examples/outposts/README.md
bryantbiggs Feb 2, 2024
0db5ca4
Update modules/karpenter/README.md
bryantbiggs Feb 2, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion .pre-commit-config.yaml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
repos:
- repo: https:/antonbabenko/pre-commit-terraform
rev: v1.83.5
rev: v1.86.0
hooks:
- id: terraform_fmt
- id: terraform_validate
Expand All @@ -27,3 +27,4 @@ repos:
hooks:
- id: check-merge-conflict
- id: end-of-file-fixer
- id: trailing-whitespace
165 changes: 18 additions & 147 deletions README.md

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion docs/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,10 +4,10 @@

- [Frequently Asked Questions](https:/terraform-aws-modules/terraform-aws-eks/blob/master/docs/faq.md)
- [Compute Resources](https:/terraform-aws-modules/terraform-aws-eks/blob/master/docs/compute_resources.md)
- [IRSA Integration](https:/terraform-aws-modules/terraform-aws-eks/blob/master/docs/irsa_integration.md)
- [User Data](https:/terraform-aws-modules/terraform-aws-eks/blob/master/docs/user_data.md)
- [Network Connectivity](https:/terraform-aws-modules/terraform-aws-eks/blob/master/docs/network_connectivity.md)
- Upgrade Guides
- [Upgrade to v17.x](https:/terraform-aws-modules/terraform-aws-eks/blob/master/docs/UPGRADE-17.0.md)
- [Upgrade to v18.x](https:/terraform-aws-modules/terraform-aws-eks/blob/master/docs/UPGRADE-18.0.md)
- [Upgrade to v19.x](https:/terraform-aws-modules/terraform-aws-eks/blob/master/docs/UPGRADE-19.0.md)
- [Upgrade to v20.x](https:/terraform-aws-modules/terraform-aws-eks/blob/master/docs/UPGRADE-20.0.md)
2 changes: 1 addition & 1 deletion docs/UPGRADE-18.0.md
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ cluster_security_group_name = $CLUSTER_NAME
cluster_security_group_description = "EKS cluster security group."
```

This configuration assumes that [`create_iam_role`](https:/terraform-aws-modules/terraform-aws-eks#input_create_iam_role) is set to `true`, which is the default value.
This configuration assumes that [`create_iam_role`](https:/terraform-aws-modules/terraform-aws-eks#input_create_iam_role) is set to `true`, which is the default value.

As the location of the Terraform state of the IAM role has been changed from 17.x to 18.x, you'll also have to move the state before running `terraform apply` by calling:

Expand Down
2 changes: 1 addition & 1 deletion docs/UPGRADE-19.0.md
Original file line number Diff line number Diff line change
Expand Up @@ -58,7 +58,7 @@ Please consult the `examples` directory for reference example configurations. If
### Variable and output changes

1. Removed variables:

- `node_security_group_ntp_ipv4_cidr_block` - default security group settings have an egress rule for ALL to `0.0.0.0/0`/`::/0`
- `node_security_group_ntp_ipv6_cidr_block` - default security group settings have an egress rule for ALL to `0.0.0.0/0`/`::/0`
- Self-managed node groups:
Expand Down
262 changes: 262 additions & 0 deletions docs/UPGRADE-20.0.md

Large diffs are not rendered by default.

8 changes: 0 additions & 8 deletions docs/faq.md
Original file line number Diff line number Diff line change
Expand Up @@ -57,14 +57,6 @@ If you require a public endpoint, setting up both (public and private) and restr

The module is configured to ignore this value. Unfortunately, Terraform does not support variables within the `lifecycle` block. The setting is ignored to allow autoscaling via controllers such as cluster autoscaler or Karpenter to work properly and without interference by Terraform. Changing the desired count must be handled outside of Terraform once the node group is created.

### How can I deploy Windows based nodes?

To enable Windows support for your EKS cluster, you will need to apply some configuration manually. See the [Enabling Windows Support (Windows/MacOS/Linux)](https://docs.aws.amazon.com/eks/latest/userguide/windows-support.html#enable-windows-support).

In addition, Windows based nodes require an additional cluster RBAC role (`eks:kube-proxy-windows`).

Note: Windows based node support is limited to a default user data template that is provided due to the lack of Windows support and manual steps required to provision Windows based EKS nodes.

### How do I access compute resource attributes?

Examples of accessing the attributes of the compute resource(s) created by the root module are shown below. Note - the assumption is that your cluster module definition is named `eks` as in `module "eks" { ... }`:
Expand Down
84 changes: 0 additions & 84 deletions docs/irsa_integration.md

This file was deleted.

1 change: 1 addition & 0 deletions docs/user_data.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,7 @@ Users can see the various methods of using and providing user data through the [
- By default, any supplied user data is pre-pended to the user data supplied by the EKS Managed Node Group service
- If users supply an `ami_id`, the service no longers supplies user data to bootstrap nodes; users can enable `enable_bootstrap_user_data` and use the module provided user data template, or provide their own user data template
- `bottlerocket` platform user data must be in TOML format
- `windows` platform user data must be in powershell/PS1 script format
- Self Managed Node Groups
- `linux` platform (default) -> the user data template (bash/shell script) provided by the module is used as the default; users are able to provide their own user data template
- `bottlerocket` platform -> the user data template (TOML file) provided by the module is used as the default; users are able to provide their own user data template
Expand Down
107 changes: 0 additions & 107 deletions examples/complete/README.md

This file was deleted.

Loading
Loading