1
0
mirror of https://github.com/terraform-aws-modules/terraform-aws-eks.git synced 2025-09-09 19:32:58 +08:00
Commit Graph

179 Commits

Author SHA1 Message Date
Bryant Biggs fa1d4221c8 fix: Ensure module created security group is included on any network interfaces created (#3495) 2025-08-25 20:10:47 -05:00
Kamontat Chantrachirathumrong e5cff84283 fix: Ensure module created security group is included on any network interfaces created (#3493)
* fix(module): wrong variable name in eks-managed-node-group

* Update modules/eks-managed-node-group/main.tf

---------

Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2025-08-25 13:21:39 -05:00
Bryant Biggs 3959b65672 fix: Remediate type mismatch for EFA interfaces and ensure correct (local) definition is used (#3491) 2025-08-24 12:59:13 -05:00
Bryant Biggs b40968a503 fix: Correct metadata options loop condition due to variable definition defaults (#3490) 2025-08-24 10:08:35 -05:00
Tiago Vieira 83c9cd187a feat: Add support for deletion protection functionality in the cluster (#3475)
* feat: Add support for deletion protection functionality in the cluster

* fix: Bump version throughout, correct argument/variable name

---------

Co-authored-by: Tiago Vieira <tiago.vieira@sqills.com>
Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2025-08-15 07:23:13 -05:00
Bryant Biggs ca8f37e8ce fix: Allow disabling instance refresh on self-managed node groups (part deux) (#3478) 2025-08-13 10:13:24 -05:00
Bryant Biggs 6a887ad386 fix: Allow disabling instance refresh on self-managed node groups (#3473) 2025-08-07 14:49:54 -05:00
Bryant Biggs 5322bf72fb fix: Allow instance_requirements to be set in self-managed node groups (#3455) 2025-07-30 12:04:27 -05:00
Bryant Biggs 8807e0bb55 fix: Correct variable defaults for ami_id and kubernetes_version (#3437) 2025-07-24 15:28:35 -05:00
Bryant Biggs 416515a0da feat!: Upgrade min AWS provider and Terraform versions to 6.0 and 1.5.7 respectively (#3412)
* feat!: Upgrade min AWS provider and Terraform versions to `6.0` and `1.5.7` respectively

* fix: Remove deprecated arguments in AWS v6.0 provider, upgrade Helm provider to v3.0, bump VPC module to v6.0

* fix: Remove `aws-auth` sub-module

* fix: Remove `platform` and `cluster_service_ipv4_cidr` variables from `user-data` sub-module

* fix: Resolve all marked `todos` that have been accumulated

* fix: Set default `http_put_response_hop_limit` to `1`

* fix: Remove IRSA support from Karpenter sub-module

* fix: Avoid making GET requests from data sources unless absolutely necessary

* feat: Add variable optional attribute definitions

* feat: Bump KMS key module version to latest, add remaining variable attribute definitions

* fix: Remove `cluster_` prefix from variable names to better match the underlying API

* fix: Move all EFA logic to the nodegroup itself

* fix: Remove arguments that do not make sense in EKS

* fix: Updates from plan validation

* fix: Remove more self-managed node group attributes that are commonly not used in EKS clusters

* fix: Remove data plane compute `*_defaults` variables that do not work with variable optional attributes

* fix: Ignore changes to `bootstrap_self_managed_addons` to aid in upgrade

* feat: Add support for `region` argument on relevant resources

* feat: Initial pass on upgrade guide

* fix: Updates from testing and validating EKS managed node group

* fix: Updates from testing and validating self-managed node group

* docs: Ensure addon ussage documented is aligned

* feat: Switch to dualstack OIDC issuer URL

* feat: Allow sourcing over overriding the Karpenter assume role policy

* fix: Use `Bool` instead of `StringEquals` for DenyHTTP queue policy

* fix: Correct use of `nullable` and default value propagation
2025-07-23 15:11:01 -05:00
datty 83b68fda2b fix: Allow for both amazonaws.com.cn and amazonaws.com conditions in PassRole as required for AWS CN (#3422)
* Allow for both amazonaws.com.cn and amazonaws.com conditions as required for AWS CN

* Allow for both amazonaws.com.cn and amazonaws.com conditions as required for AWS CN - set in correct policy

---------

Co-authored-by: Oliver Smith <osmith@netvirta.com>
2025-07-17 09:03:09 -05:00
Michael Strassberger 681a868d62 fix: Restrict AWS provider max version due to v6 provider breaking changes (#3384)
* Add aws version constraint for 6.0.0

* fix: Restrict all AWS providers and Helm providers upper version limit

---------

Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2025-06-18 15:08:51 -05:00
Nick Baker 715d42bf14 feat: Add AL2023 ARM64 NVIDIA variants (#3369) 2025-06-09 17:27:17 -05:00
Bryant Biggs 207d73fbaa feat: Add support for cluster force_update_version (#3345) 2025-04-18 11:29:13 -05:00
Tom Ellis abf76f6014 feat: Default to not changing autoscaling schedule values at the scheduled time (#3322)
fix: aws_autoscaling_schedule values defaulting to 0
2025-03-29 16:51:33 -05:00
Matt Holmes 770ee99d9c feat: Add capacity reservation permissions to Karpenter IAM policy (#3318)
feat: Update AllowScopedEC2InstanceAccessActions policy to include capacity-reservation permission as part of Karpenter version 1.3.0
2025-03-07 07:31:19 -06:00
Eddie Bachle 1bfc10a558 docs: Update description of karpenter node_iam_role_use_name_prefix (#3304) 2025-02-18 19:07:34 -06:00
Kasper Jacobsen edd7ef36dd feat: Add node repair config to managed node group (#3271)
* feat: add var.node_repair_config to eks-managed-node-group

Fixes terraform-aws-modules/terraform-aws-eks#3249

* chore: run terraform-docs

* chore: update examples/eks-managed-node-group

* fix: Correct implementation

---------

Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2025-01-17 11:35:47 -06:00
Anand Capur d876ac4ef1 feat: Add Bottlerocket FIPS image variants (#3275)
fix: Add Bottlerocket FIPS image variants
2025-01-17 10:17:37 -06:00
Bryant Biggs 012e51c055 fix: Update min provider version to remediate cluster replacement when enabling EKS Auto Mode (#3240) 2024-12-12 14:49:59 -06:00
Lawrence Aiello 6168518339 chore: Add TODO to turn off detailed monitoring by default at next breaking change (#3233)
* chore: disable detailed monitoring by default

* docs: change default input value

* chore: add comment to change at next breaking change

* docs: change default back
2024-12-08 17:12:06 -06:00
Bryant Biggs 3b974d33ad feat: Add support for EKS Auto Mode and EKS Hybrid nodes (#3225)
* feat: Add support for EKS hybrid nodes

* feat: Add support for EKS Auto Mode

* chore: Update test directory names

* chore: Clean up examples and tests

* fix: Clean up and last minute changes for GA

* chore: Formatting

* chore: Bump min required version for new features

* fix: Corrects from test/validation on existing clusters

* feat: Add policy for custom tags on EKS Auto Mode, validate examples

* chore: Expand on `CAM` acronym

* chore: Update README to match examples
2024-12-04 09:24:21 -06:00
Bryant Biggs a224334fc8 feat: Add support for pod identity association on EKS addons (#3203) 2024-11-08 15:56:56 -06:00
Bryant Biggs c6da22c78f feat: Add support for creating efa-only network interfaces (#3196) 2024-11-02 08:33:13 -05:00
Bryant Biggs 1b0ac83264 feat: Add support for zonal shift (#3195) 2024-11-01 16:50:19 -05:00
joey100 dea6c44b45 fix: Use dynamic partition data source to determine DNS suffix for Karpenter EC2 pass role permission (#3193)
* fix karpenter iam passrole to ec2 api bug, to support aws cn

* fix: Use dyanmic partition value for DNS suffix

---------

Co-authored-by: Shuiping <shuiping@Shuipings-MacBook-Pro.local>
Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2024-10-26 19:12:25 -05:00
Bryant Biggs 4abc779c0e docs: Correct doc links following examples/tests re-org (#3187) 2024-10-22 10:08:16 -05:00
dtscssap 6974a5e158 feat: Add support for desired_capacity_type (named desired_size_type) on self-managed node group (#3166)
* set desired_capacity_type

* fix: Add variable with `null` type and pass through node group

---------

Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2024-10-12 11:57:19 -05:00
Bryant Biggs b2a8617794 feat: Add support for newly released AL2023 accelerated AMI types (#3177) 2024-10-12 11:44:24 -05:00
Jami Karvanen fef655585b fix: Add primary_ipv6 parameter to self-managed-node-group (#3169)
Add primary_ipv6 parameter to self-managed-node-group
2024-10-03 08:54:52 -05:00
Bryant Biggs 8b90872983 fix: Remove deprecated inline_policy from cluster role (#3163) 2024-09-21 09:45:50 -05:00
Bryant Biggs 47ab3eb884 fix: Correct Karpenter EC2 service principal DNS suffix in non-commercial regions (#3157) 2024-09-16 10:36:15 -05:00
Andy Townsend e317651535 feat: Add support for Karpenter v1 controller IAM role permissions (#3126)
* chore: update controller IAM role permissions to support karpenter v1

* Update versions.tf

* Revert "Update versions.tf"

This reverts commit f0e5c79144.

* fix: Add support for both v1 and prior to v1 controller permission policy

---------

Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2024-08-19 14:31:36 -05:00
Josephuss 75db486530 feat: Enable update in place for node groups with cluster placement group strategy (#3045)
* feat(eks):added subnet az filter for eks nodegroup placement groups

* fix: Correct logice for restricting placement group to AZ

* fix: Ensure node group args are passed from root module

---------

Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2024-08-05 10:13:39 -05:00
Bryant Biggs e12ab7a5de feat: Add support for upgrade_policy (#3112)
* feat: Add support for `upgrade_policy`

* chore: Update test and validate
2024-08-05 09:07:13 -05:00
Ivan Ka 532226e64e feat: Enable support for ignore_failed_scaling_activities (#3104)
* feat(issue-3102): added support for ignore_failed_scaling_activities

Signed-off-by: ivan katliarchuk <ivan.katliarchuk@gmail.com>

* Update node_groups.tf

Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>

* Update modules/self-managed-node-group/variables.tf

Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>

* feat(issue-3102): pre-commit checks sorted

Signed-off-by: ivan katliarchuk <ivan.katliarchuk@gmail.com>

---------

Signed-off-by: ivan katliarchuk <ivan.katliarchuk@gmail.com>
Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2024-07-19 10:19:00 -04:00
Anton Chernev e1bb8b6661 feat: Pass the primary_ipv6 argument to the AWS provider. (#3098)
Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2024-07-15 19:58:23 -04:00
Taehyun Kim af88e7d2f8 feat: Support bootstrap_self_managed_addons (#3099)
Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2024-07-15 19:55:09 -04:00
Bryant Biggs ae3379e924 feat: Add support for ML capacity block reservations with EKS managed node group(s) (#3091) 2024-07-05 11:42:31 -04:00
Bryant Biggs 1604c6cdc8 feat: Add support for custom IAM role policy (#3087) 2024-07-02 10:56:19 -04:00
ksbde f6e071cd99 feat: Deny HTTP on Karpenter SQS policy (#3080) 2024-06-27 07:41:20 -04:00
Bryant Biggs 323fb759d7 docs: Move examples that are more like test cases to the new tests/ directory; add better example configurations (#3069)
* chore: Move examples that are more like test cases to the new `tests/` directory

* chore: Stash

* feat: Add better examples for EKS managed node groups

* chore: Add better examples for self-managed node groups

* chore: Update docs and correct `nodegroup` to `node group`
2024-06-13 10:51:40 -04:00
Bryant Biggs ef657bfcb5 feat: Require users to supply OS via ami_type and not via platform which is unable to distinquish between the number of variants supported today (#3068) 2024-06-13 07:50:26 -04:00
Ramsey McGrath 541dbb29f1 feat: Support additional cluster DNS IPs with Bottlerocket based AMIs (#3051)
* Support adding additional cluster dns ranges to bottlerocket template

* Add example for multiple dns ips

* fmt, and tf docs

* fix: Use a list by default for cluster-dns-ip

---------

Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2024-05-28 14:40:29 -04:00
Christopher Boyd a070d7b2bd feat: Add SourceArn condition to Fargate profile trust policy (#3039)
feat: add `SourceArn` condition to fargate-profile assume_role_policy
2024-05-16 17:58:31 -04:00
Rodrigo Bersa cfcaf27ac7 feat: Add support for Pod Identity assocation on Karpenter sub-module (#3031)
Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2024-05-09 07:57:57 -04:00
Bryant Biggs 74d39187d8 feat: Propagate ami_type to self-managed node group; allow using ami_type only (#3030) 2024-05-08 08:04:19 -04:00
Bryant Biggs 84effa0e30 fix: Pass nodeadm user data variables from root module down to nodegroup sub-modules (#2981) 2024-03-20 21:33:00 -04:00
Bryant Biggs aeb9f0c990 fix: Ensure the correct service CIDR and IP family is used in the rendered user data (#2963)
* fix: Ensuring the correct service CIDR and IP family is used in the rendered user data

* chore: Updates from testing and validating

* chore: Fix example destroy instructions

* fix: Only require `cluster_service_cidr` when `create = true`

* chore: Clean up commented out code and add note on check length
2024-03-12 10:36:19 -04:00
Bryant Biggs 29dcca335d fix: Ensure a default ip_family value is provided to guarantee a CNI policy is attached to nodes (#2967) 2024-03-11 11:02:59 -04:00