Releases: terraform-aws-modules/terraform-aws-eks
v12.1.0
FEATURES:
- Add aws_security_group_rule.cluster_https_worker_ingress to output values (#901)
- Allow communication between pods on workers and pods using the primary cluster security group (optional) (#892)
BUG FIXES:
- Revert removal of templates provider (#883)
- Ensure kubeconfig ends with \n (#880)
- Work around path bug in aws-iam-authenticator (#894)
DOCS:
- Update FAQ (#891)
NOTES:
- New variable
worker_create_cluster_primary_security_group_rules
to allow communication between pods on workers and pods using the primary cluster security group (Managed Node Groups or Fargate). It defaults tofalse
to avoid potential conflicts with existing security group rules users may have implemented.
v12.0.0
BUG FIXES:
- Fix Launch Templates error with aws 2.61.0 (#875)
- Use splat syntax for cluster name to avoid
(known after apply)
in managed node groups (#868)
DOCS:
FEATURES:
ENHANCEMENTS:
- Remove dependency on external template provider (#854)
BREAKING CHANGES:
- The default
cluster_version
is now 1.16. Kubernetes 1.16 includes a number of deprecated API removals, and you need to ensure your applications and add ons are updated, or workloads could fail after the upgrade is complete. For more information on the API removals, see the Kubernetes blog post. For action you may need to take before upgrading, see the steps in the EKS documentation. Please set explicitly yourcluster_version
to an older EKS version until your workloads are ready for Kubernetes 1.16.
v11.1.0
BUG FIXES:
- Add
vpc_config.cluster_security_group
output as primary cluster security group id (#828) - Wrap
local.configmap_roles.groups
with tolist() to avoid panic (#846) - Prevent
coalescelist
null argument error when destroying worker_group_launch_templates (#842)
FEATURES:
- Add support for EC2 principal in assume worker role policy for China (#827)
v11.0.0
FEATURES:
- Add instance tag specifications to Launch Template (#822)
- Add support for additional volumes in launch templates and launch configurations (#800)
- Add interpreter option to
wait_for_cluster_cmd
(#795)
ENHANCEMENTS:
- Use
aws_partition
to build IAM policy ARNs (#820) - Generate
aws-auth
configmap's roles from Object. No more string concat. (#790) - Add timeout to default wait_for_cluster_cmd (#791)
- automate changelog management (#786)
BUG FIXES:
- Fix destroy failure when talking to EKS endpoint on private network (#815)
- add ip address when manage_aws_auth is true and public_access is false (#745)
- Add node_group direct dependency on eks_cluster (#796)
- Do not recreate cluster when no SG given (#798)
- Create
false
and avoid waiting forever for a non-existent cluster to respond (#789) - fix git-chglog template to format changelog
Type
nicely (#803) - fix git-chglog configuration (#802)
CI:
- Restrict sementic PR to validate PR title only (#804)
TESTS:
- remove unused kitchen test related stuff (#787)
v10.0.0
BREAKING CHANGES:
- Added support for EKS 1.15 (by @sc250024)
ENHANCEMENTS:
- Ensuring that ami lookup hierarchy is worker_group_launch_templates and worker_groups -> worker_group_defaults -> and finally aws ami lookup (by @ck3mp3r)
- Adding
encrypted
option to worker's root_block_device as read from the worker configurations (by @craig-rueda) - Add support for ASG max instance lifetime (by @sidprak)
- Add
default_cooldown
andhealth_check_grace_period
options to workers ASG (by @ArieLevs) - Add support for envelope encryption of Secrets (by @babilen5)
BUG FIXES:
- Fix issue with terraform plan phase when IRSA was enabled and create_eks switches to false (by @daroga0002)
- Remove obsolete assumption from README (kubectl & aws-iam-authenticator) (by @pierresteiner)
- Fix doc about spot instances, cluster-autoscaler should be scheduled on normal instances instead of spot (by @simowaer)
- Use correct policy arns for CN regions (cn-north-1, cn-northwest-1) (by @cofyc)
- Fix support for ASG max instance lifetime for workers (by @barryib)
NOTES:
From EKS 1.15, the VPC tag kubernetes.io/cluster/<cluster-name>: shared
is no longer required. So we dropped those tags from exemples.
v9.0.0
- Breaking: Removal of autoscaling IAM policy and tags (by @max-rocket-internet)
- Revert #631. Add back manage security group flags. (by @ryanooi)
- Changed timeout for creating EKS (by @confiq)
- Added instructions for how to add Windows nodes (by @ivanguravel)
- [CI] Switch
Validate
github action to use env vars (by @max-rocket-internet) - [CI] Bump pre-commit-terraform version (by @barryib)
- Added example
examples/irsa
for IAM Roles for Service Accounts (by @max-rocket-internet) - Add
iam:{Create,Delete,Get}OpenIDConnectProvider
grants to the list of required IAM permissions indocs/iam-permissions.md
(by @danielelisi) - Add a
name
parameter to be able to manually name EKS Managed Node Groups (by @splieth) - Pinned kubernetes provider version to exactly 1.10.0 across all examples and README.md's (by @andres-de-castro)
- Change variable default
wait_for_cluster_cmd
from curl to wget (by @daroga0002)
v8.2.0
- Include ability to configure custom os-specific command for waiting until kube cluster is healthy (@sanjeevgiri)
- Disable creation of ingress rules if worker nodes security groups are exists (@andjelx)
- [CI] Update pre-commit and re-generate docs to work with terraform-docs >= 0.8.1 (@barryib)
Just a small release
Node groups, IRSA, k8s provider, wow馃敟
馃敟 There's many changes in this release including 2 breaking changes 馃敟
Now we use the Kubernetes Terraform provider for managing the aws-auth
configmap.
Managed Node Groups are now released. Please bear in mind this feature is not only new this module but also EKS. There's still quite a few basic features not supported.
If you have problems and see unexpected plan output then be sure to consult the changelog for this release to see how or why this might be.
This release took way too long to create and we know we must release at a faster pace 馃弾
There's some good discussion about the future of this module in #635
A few bug fixes 馃拝
- Test against minimum versions specified in
versions.tf
(by @dpiddockcmp) - Updated
instance_profile_names
andinstance_profile_arns
outputs to also consider launch template as well as asg (by @ankitwal) - Fix broken terraform plan/apply on a cluster < 1.14 (by @hodduc)
- Updated application of
aws-auth
configmap to createkube_config.yaml
andaws_auth_configmap.yaml
in sequence (and not parallel) tokubectl apply
(by @knittingdev)