Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

terraform-aws-eks tf-0.12 support added #2

Merged
merged 47 commits into from
Jul 5, 2019

Conversation

exequielrafaela
Copy link
Member

PR o'clock

Description

Commits on Jun 19, 2019

Checklist

  • terraform fmt and terraform validate both work from the root and examples/eks_test_fixture directories (look in CI for an example)
  • Tests for the changes have been added and passing (for bug fixes/features)
  • Test results are pasted in this PR (in lieu of CI)
  • I've added my change to CHANGELOG.md (automatically)
  • Any breaking changes are highlighted above

michaelmccord and others added 30 commits March 13, 2019 17:30
Example usage : we want our nodes to be able to update route53 record
for using external-dns.

```hcl
data "template_file" "eks_worker_additional_route53_policy" {
  template = "${file("iam/route53_policy.json.tpl")}"
}

resource "aws_iam_policy" "eks_worker_additional_route53_policy" {
  description = "Allow nodes to update our zone"
  name = "${module.k8s_cluster01_label.id}-additional-route53-policy"
  policy = "${data.template_file.eks_worker_additional_route53_policy.rendered}"
}
```

which defines the policy; then in the EKS module :
```hcl
module "cluster01" {
  cluster_name = "cluster01"
<snip>
  workers_addtional_policies = [
    "${aws_iam_policy.eks_worker_additional_route53_policy.arn}"
  ]
  workers_addtional_policies_count = 1
<snip>
```
* Adding minimum communication

The docs at https://docs.aws.amazon.com/eks/latest/userguide/sec-group-reqs.html specify that port 10250 is needed at a minimum for communication between the control plane, and the worker nodes. If you specify a `worker_sg_ingress_from_port` as something like `30000`, then this minimum communication is never established.

* Adding description to CHANGELOG.md

* Adjusting the naming of the resources

* Ensuring creation is conditional on the value of `worker_sg_ingress_from_port`

* Mistake, should be greater than port 10250
…_extra_args (#320)

* Replacing enable_docker_bridge with a generic option called bootstrap_extra_args

* making breaking change more obvious
* adding IAM instance profiles to outputs

* updating changelog

* updated README
* Update to 1.12

* Update workers_launch_template.tf

* Update local.tf

* Update CHANGELOG.md

* Update workers.tf

* Update workers.tf
* Adding EKS Control Plane logging options

* Added feature addition

* Removing 'optional'

* Adding documentation, and changing variable order

* Using pre-commit instead

* adding IAM instance profiles to outputs, addresses #323 (#329)

* adding IAM instance profiles to outputs

* updating changelog

* updated README
* Fix: remove ENI's on term fixes cluster destroy issues with security group still attached

* Fix: delete ENIs on term to allow sg destroy
Also fixing AWS provider in examples
* Switch to https for the pre-commit repos

Signed-off-by: Andrew Roth <[email protected]>

* Add to changelog

Signed-off-by: Andrew Roth <[email protected]>

* Undo formatting from prettier plugin

Signed-off-by: Andrew Roth <[email protected]>
* Add .prettierignore file

Signed-off-by: Andrew Roth <[email protected]>

* Add to changelog

Signed-off-by: Andrew Roth <[email protected]>

* Add missing trailing newline

Signed-off-by: Andrew Roth <[email protected]>
* Fixes for Launch Templates

* update changelog

* add outputs for 3 LT attributes
* Adding doc about spot instances

* updating LT worker group details

* updating doc
* Adding 2 new outputs: AMI ID and work user-data

* adding separate outputs to include both
* allow specifying custom worker IAM instance profiles

* allow specifying custom cluster IAM role

* add doc

* update changelog

* use data.aws_iam_instance_profile.name
* cleaning up launch template code

* update changelog

* Remove variable worker_group_launch_template_tags

* misc fixes

* fixing and simplifying example
…ed instances policy (#371)

* Adding new mixed type of worker group with instance overrides and mixed instances policy

* moving all count and lifecycle rule parameters to top/bottom

* adding custom IAM parts

* updating doc with new options

* fixes for spot instances
max-rocket-internet and others added 16 commits May 7, 2019 18:22
* adding 3 examples

* removing old example

* updating PR template

* fix this typo

* update after renaming default example

* add missing launch_template_mixed stuff to aws_auth

* fix 2 examples with public subnets

* update changelog for new minor release
* Update EBS optimized instances type

* Update changelog

* Pin terraform version < 0.12
* add additional policies for control plane log setup.

* Fix typos (#379)

* Fix IAM instance profile toggle for mixed launch templates (#381)

* add additional policies for control plane log setup.

* add two actions.
* Adding Worker ASG Option for termination_policies, default set to Default

* Adding setting to launch template and mixed

* Updated a few more things per PR notes

* Change termination_policy default from "Default" to ""
* enable log retention for cloudwatch log groups

* revert version bump

* set default retention to 90 days
* adds tagging to iam role

Signed-off-by: camilo santana <[email protected]>

* emulates name_prefix

Signed-off-by: camilo santana <[email protected]>

* incriment version

Signed-off-by: camilo santana <[email protected]>

* tags iam role

Signed-off-by: camilo santana <[email protected]>

* improve resource name

Signed-off-by: camilo santana <[email protected]>

* removes comments

Signed-off-by: camilo santana <[email protected]>

* reverts erroneous increment to release version

Signed-off-by: camilo santana <[email protected]>

* reverts aws_iam_role.cluster name to orig value

Signed-off-by: camilo santana <[email protected]>

* removes random suffix idea

i was using random_id until i could figure out a datestamp or something here. `name_prefix` does a better job.

Signed-off-by: camilo santana <[email protected]>

* terraform fmt on local.tf

Signed-off-by: camilo santana <[email protected]>
* run terraform upgrade tool

* fix post upgrade TODOs

* use strict typing for variables

* upgrade examples, point them at VPC module tf 0.12 PR

* remove unnecessary `coalesce()` calls

coalesce(lookup(map, key, ""), default) -> lookup(map, key, default)

* Fix autoscaling_enabled broken (#1)

* always set a value for tags, fix coalescelist calls

* always set a value for these tags

* fix tag value

* fix tag value

* default element available

* added default value

* added a general default

without this default - TF is throwing an error when running a destroy

* Fix CI

* Change vpc module back to `terraform-aws-modules/vpc/aws` in example

* Update CHANGELOG.md

* Change type of variable `cluster_log_retention_in_days` to number

* Remove `xx_count` variables

* Actual lists instead of strings with commas

* Remove `xx_count` variable from docs

* Replace element with list indexing

* Change variable `worker_group_tags` to a attribute of worker_group

* Fix workers_launch_template_mixed tags

* Change override_instance_type_x variables to list.

* Update CHANGELOG.md
* New release: now supporting TF 0.12

* updating precommit hook version
* Update to EKS 1.13

* Revert "Pin terraform version < 0.12"

This reverts commit 4c71b12.

* Update providers in examples and format
* add cloudwatch log group access

* update readme for outputs

* update outputs

* fix formatting

* add splat for access to name
@exequielrafaela exequielrafaela requested review from a team July 5, 2019 01:25
@exequielrafaela exequielrafaela merged commit 5a3d85d into binbashar:master Jul 5, 2019
exequielrafaela pushed a commit that referenced this pull request Jan 30, 2020
…erraform-aws-modules#701)

* Configurable local exec command for waiting until cluster is healthy

* readme

* line feeds

* format

* fix readme

* fix readme

* Configurable local exec command for waiting until cluster is healthy (#1)

* Configurable local exec command for waiting until cluster is healthy

* readme

* line feeds

* format

* fix readme

* fix readme

* change log

* Configurable local exec wait 4 cluster op (#2)

* Configurable local exec command for waiting until cluster is healthy

* readme

* line feeds

* format

* fix readme

* fix readme

* change log

* changelog (#3)

* Changelog (#4)

* changelog

* changelog

* simplify wait_for_cluster command

* readme

* no op for manage auth false

* formatting

* docs? not sure

* linter

* specify dependency to wait for cluster more accurately
@github-actions
Copy link

github-actions bot commented Feb 3, 2023

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Feb 3, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.