1
0
mirror of https://github.com/terraform-aws-modules/terraform-aws-eks.git synced 2025-09-09 19:32:58 +08:00

65 Commits

Author SHA1 Message Date
Bryant Biggs 416515a0da feat!: Upgrade min AWS provider and Terraform versions to 6.0 and 1.5.7 respectively (#3412)
* feat!: Upgrade min AWS provider and Terraform versions to `6.0` and `1.5.7` respectively

* fix: Remove deprecated arguments in AWS v6.0 provider, upgrade Helm provider to v3.0, bump VPC module to v6.0

* fix: Remove `aws-auth` sub-module

* fix: Remove `platform` and `cluster_service_ipv4_cidr` variables from `user-data` sub-module

* fix: Resolve all marked `todos` that have been accumulated

* fix: Set default `http_put_response_hop_limit` to `1`

* fix: Remove IRSA support from Karpenter sub-module

* fix: Avoid making GET requests from data sources unless absolutely necessary

* feat: Add variable optional attribute definitions

* feat: Bump KMS key module version to latest, add remaining variable attribute definitions

* fix: Remove `cluster_` prefix from variable names to better match the underlying API

* fix: Move all EFA logic to the nodegroup itself

* fix: Remove arguments that do not make sense in EKS

* fix: Updates from plan validation

* fix: Remove more self-managed node group attributes that are commonly not used in EKS clusters

* fix: Remove data plane compute `*_defaults` variables that do not work with variable optional attributes

* fix: Ignore changes to `bootstrap_self_managed_addons` to aid in upgrade

* feat: Add support for `region` argument on relevant resources

* feat: Initial pass on upgrade guide

* fix: Updates from testing and validating EKS managed node group

* fix: Updates from testing and validating self-managed node group

* docs: Ensure addon ussage documented is aligned

* feat: Switch to dualstack OIDC issuer URL

* feat: Allow sourcing over overriding the Karpenter assume role policy

* fix: Use `Bool` instead of `StringEquals` for DenyHTTP queue policy

* fix: Correct use of `nullable` and default value propagation
2025-07-23 15:11:01 -05:00
Pin-Yi 7a83b1b3db fix: Ensure additional_cluster_dns_ips is passed through from root module (#3376)
fix: add missing additional_cluster_dns_ips to node_group module
2025-06-09 17:25:06 -05:00
Kasper Jacobsen edd7ef36dd feat: Add node repair config to managed node group (#3271)
* feat: add var.node_repair_config to eks-managed-node-group

Fixes terraform-aws-modules/terraform-aws-eks#3249

* chore: run terraform-docs

* chore: update examples/eks-managed-node-group

* fix: Correct implementation

---------

Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2025-01-17 11:35:47 -06:00
Bryant Biggs ab2207d509 feat: Improve addon dependency chain and decrease time to provision addons (due to retries) (#3218)
* feat: Improve addon dependency chain and decrease time to provision addons (due to retries)

* fix: Run pre-commit to clean up docs
2024-11-26 13:31:42 -06:00
Bryant Biggs c6da22c78f feat: Add support for creating efa-only network interfaces (#3196) 2024-11-02 08:33:13 -05:00
dtscssap 6974a5e158 feat: Add support for desired_capacity_type (named desired_size_type) on self-managed node group (#3166)
* set desired_capacity_type

* fix: Add variable with `null` type and pass through node group

---------

Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2024-10-12 11:57:19 -05:00
Josephuss 75db486530 feat: Enable update in place for node groups with cluster placement group strategy (#3045)
* feat(eks):added subnet az filter for eks nodegroup placement groups

* fix: Correct logice for restricting placement group to AZ

* fix: Ensure node group args are passed from root module

---------

Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2024-08-05 10:13:39 -05:00
Ivan Ka 532226e64e feat: Enable support for ignore_failed_scaling_activities (#3104)
* feat(issue-3102): added support for ignore_failed_scaling_activities

Signed-off-by: ivan katliarchuk <ivan.katliarchuk@gmail.com>

* Update node_groups.tf

Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>

* Update modules/self-managed-node-group/variables.tf

Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>

* feat(issue-3102): pre-commit checks sorted

Signed-off-by: ivan katliarchuk <ivan.katliarchuk@gmail.com>

---------

Signed-off-by: ivan katliarchuk <ivan.katliarchuk@gmail.com>
Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2024-07-19 10:19:00 -04:00
Bryant Biggs 1604c6cdc8 feat: Add support for custom IAM role policy (#3087) 2024-07-02 10:56:19 -04:00
Bryant Biggs ef657bfcb5 feat: Require users to supply OS via ami_type and not via platform which is unable to distinquish between the number of variants supported today (#3068) 2024-06-13 07:50:26 -04:00
Bryant Biggs 74d39187d8 feat: Propagate ami_type to self-managed node group; allow using ami_type only (#3030) 2024-05-08 08:04:19 -04:00
Bryant Biggs 84effa0e30 fix: Pass nodeadm user data variables from root module down to nodegroup sub-modules (#2981) 2024-03-20 21:33:00 -04:00
Bryant Biggs aeb9f0c990 fix: Ensure the correct service CIDR and IP family is used in the rendered user data (#2963)
* fix: Ensuring the correct service CIDR and IP family is used in the rendered user data

* chore: Updates from testing and validating

* chore: Fix example destroy instructions

* fix: Only require `cluster_service_cidr` when `create = true`

* chore: Clean up commented out code and add note on check length
2024-03-12 10:36:19 -04:00
James Masson 30316312f3 feat: Add supprot for creating placement group for managed node group (#2959)
Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2024-03-09 18:34:50 -05:00
Bryant Biggs 393da7ec0e feat: Add support for tracking latest AMI release version on managed nodegroups (#2951) 2024-03-08 22:48:38 -05:00
Bryant Biggs dfe41141c2 fix: Update AWS provider version to support AL2023_* AMI types; ensure AL2023 user data receives cluster service CIDR (#2960)
* fix: Update AWS provider version to support `AL2023_*` AMI types

* fix: Ensure the cluster service CIDR is passed to the AL2023 user data where its required
2024-03-08 15:25:14 -05:00
Bryant Biggs 7f472ec660 feat: Add support for enabling EFA resources (#2936)
* feat: Add support for enabling EFA resources

* feat: Add support for creating placement group and ensuring subnet ID used supports the instance type provided

* chore: Update README and examples

* feat: Update AWS provider MSV to support `maximum_network_cards` attribute

* fix: Update self-managed example after last round of testing; improve EFA support wording
2024-02-23 09:29:10 -05:00
Bryant Biggs 6b40bdbb1d feat!: Replace the use of aws-auth configmap with EKS cluster access entry (#2858)
* feat: Replace `resolve_conflicts` with `resolve_conflicts_on_create`/`delete`; raise MSV of AWS provider to `v5.0` to support

* fix: Replace dynamic DNS suffix for `sts:AssumeRole` API calls for static suffix

* feat: Add module tag

* feat: Align Karpenter permissions with Karpenter v1beta1/v0.32 permissions from upstream

* refactor: Move `aws-auth` ConfigMap functionality to its own sub-module

* chore: Update examples

* feat: Add state `moved` block for Karpenter Pod Identity role re-name

* fix: Correct variable `create` description

* feat: Add support for cluster access entries

* chore: Bump MSV of Terraform to `1.3`

* fix: Replace defunct kubectl provider with an updated forked equivalent

* chore: Update and validate examples for access entry; clean up provider usage

* docs: Correct double redundant variable descriptions

* feat: Add support for Cloudwatch log group class argument

* fix: Update usage tag placement, fix Karpenter event spelling, add upcoming changes section to upgrade guide

* feat: Update Karpenter module to generalize naming used and align policy with the upstream Karpenter policy

* feat: Add native support for Windows based managed nodegroups similar to AL2 and Bottlerocket

* feat: Update self-managed nodegroup module to use latest features of ASG

* docs: Update and simplify docs

* fix: Correct variable description for AMI types

* fix: Update upgrade guide with changes; rename Karpenter controller resource names to support migrating for users

* docs: Complete upgrade guide docs for migration and changes applied

* Update examples/karpenter/README.md

Co-authored-by: Anton Babenko <anton@antonbabenko.com>

* Update examples/outposts/README.md

Co-authored-by: Anton Babenko <anton@antonbabenko.com>

* Update modules/karpenter/README.md

Co-authored-by: Anton Babenko <anton@antonbabenko.com>

---------

Co-authored-by: Anton Babenko <anton@antonbabenko.com>
2024-02-02 09:36:25 -05:00
Le Minh Duc 4a2523cddd feat: Add Autoscaling schedule for EKS managed node group (#2504)
Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2023-03-31 10:46:27 -04:00
Bryant Biggs 78027f37e4 feat: Add support for enabling addons before data plane compute is created (#2478) 2023-02-17 07:28:03 -05:00
Adin Hodovic 059dc0c67c feat: Add prometheus-adapter port 6443 to recommended sec groups (#2399)
Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2023-01-28 08:02:12 -05:00
Pavlos-Petros Tournaris e391a99a7b fix: Drop spot-instances-request from tag_specifications (#2363)
* Drop spot-instances-request from tag_specifications

* fix: Update documentation

Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2022-12-20 13:23:44 -05:00
Alex Swehla df7c57c199 fix: Correct eks_managed_* to self_managed_* for tag_specification argument (#2364)
Fix incorrect variable name on self managed nodes

Self managed nodes were pulling from the eks_managed_node_group_defaults and not self_managed_node_group_defaults for tag_specifications.
2022-12-20 09:36:27 -05:00
Bryant Biggs 094ed1d5e4 feat: Allow configuring which tags are passed on launch template tag specifications (#2360)
Resolves undefined
2022-12-19 13:50:32 -05:00
Bryant Biggs 13a9542dad fix: Correct map name for security group rule 4443/tcp (#2354) 2022-12-18 13:31:45 -05:00
Bryant Biggs 5a270b7bf8 feat: Add additional port for metrics-server to recommended rules (#2353) 2022-12-18 12:36:39 -05:00
Bryant Biggs ca03fd9ec1 docs: Correct spelling mistakes (#2334)
Resolves undefined
2022-12-08 09:35:28 -05:00
Adam Staudt 7bc4a2743f fix: Call to lookup() closed too early, breaks sg rule creation in cluster sg if custom source sg is defined. (#2319)
Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2022-12-06 14:10:29 -05:00
Bryant Biggs b2e97ca3dc feat!: Add support for Outposts, remove node security group, add support for addon preserve and most_recent configurations (#2250)
Co-authored-by: Anton Babenko <anton@antonbabenko.com>
Resolves undefined
2022-12-05 16:26:23 -05:00
Ian Lunam f2d67ffa97 fix: Use partition data source on VPC CNI IPv6 policy (#2161) 2022-07-20 07:01:07 -04:00
Bryant Biggs c4e6d28fc0 fix: Correct Fargate profiles additional IAM role policies default type to match variable (#2143) 2022-07-05 14:06:25 -04:00
Bryant Biggs 2d7701c3b0 fix: Correct variable types to improve dynamic check correctness (#2133) 2022-07-01 07:53:43 -04:00
Bryant Biggs 4543ab454b feat: Add support for specifiying NTP address to use private Amazon Time Sync Service (#2125) 2022-06-28 12:16:20 -04:00
Gabriel Féron 8584dcb2e0 feat: Add autoscaling_group_tags variable to self-managed-node-groups (#2084)
Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
2022-06-02 08:26:49 -04:00
Seth Pollack 58420b92a0 feat: Add create_autoscaling_group option and extra outputs (#2067) 2022-05-12 14:17:49 -04:00
Bryant Biggs 6db89f8f20 feat: Add create_before_destroy lifecycle hook to security groups created (#1985) 2022-04-04 16:34:29 +02:00
Chris McNabb 7a9458af52 feat: Support default_tags in aws_autoscaling_group (#1973) 2022-03-29 09:07:13 +02:00
Bryant Biggs fd3a3e9a96 fix: Default to cluster version for EKS and self managed node groups when a cluster_version is not specified (#1963) 2022-03-24 15:56:55 +01:00
Bryant Biggs e21db83d8f feat: Allow users to selectively attach the EKS created cluster primary security group to nodes (#1952) 2022-03-23 15:41:39 +01:00
Bryant Biggs a9d2cc8246 feat: Allow users to specify default launch template name in node groups (#1946) 2022-03-18 12:29:17 +01:00
Bryant Biggs 74ad4b09b7 fix: Update autoscaling group tags -> tag to support v4 of AWS provider (#1866) 2022-02-15 14:01:52 +01:00
Bryant Biggs c821ba78ca fix: Use existing node security group when one is provided (#1861) 2022-02-09 13:31:47 +01:00
PhilippMT 665f468c1f feat: Allow conditional creation of node groups to be set within node group definitions (#1848) 2022-02-08 10:16:08 +01:00
kahirokunn 9186defcf6 feat: Add launch_template_tags variable for additional launch template tags (#1835) 2022-02-03 15:45:50 +01:00
efaif d6888b5eb6 fix: add missing launch_template_use_name_prefix parameter to the root module (#1818) 2022-01-30 18:15:21 +01:00
Bryant Biggs 4af77f244a fix: Add missing mixed_instances_policy parameter to the root module (#1808) 2022-01-24 21:19:13 +01:00
Bryant Biggs 8e4dfa2be5 fix: Change instance_metadata_tags to default to null/disabled due to tag key pattern conflict (#1788) 2022-01-18 15:03:09 +01:00
Bryant Biggs 85bb1a00b6 feat: Add instance_metadata_tags attribute to launch templates (#1781) 2022-01-14 21:22:58 +01:00
Bryant Biggs 314192e2eb feat: Add support for networking ip_family which enables support for IPV6 (#1759) 2022-01-14 21:17:03 +01:00
Martijn van der Ploeg 62879dd81a fix: Use the prefix_seperator var for node sg prefix (#1751) 2022-01-08 21:37:19 +01:00