Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Automated Update][terraform-aws-eks] v0.69.2 release #2016

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Automated Update][terraform-aws-eks] v0.69.2 release #2016

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 11 additions & 11 deletions .../eks-alb-ingress-controller-iam-policy/eks-alb-ingress-controller-iam-policy.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,28 +9,28 @@ import VersionBadge from '../../../../../src/components/VersionBadge.tsx';
import { HclListItem, HclListItemDescription, HclListItemTypeDetails, HclListItemDefaultValue, HclGeneralListItem } from '../../../../../src/components/HclListItem.tsx';
import { ModuleUsage } from "../../../../../src/components/ModuleUsage";

<VersionBadge repoTitle="Amazon EKS" version="0.69.0" lastModifiedVersion="0.65.5"/>
<VersionBadge repoTitle="Amazon EKS" version="0.69.2" lastModifiedVersion="0.69.2"/>

# ALB Ingress Controller IAM Policy Module

<a href="https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.0/modules/eks-alb-ingress-controller-iam-policy" className="link-button" title="View the source code for this module in GitHub.">View Source</a>
<a href="https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.2/modules/eks-alb-ingress-controller-iam-policy" className="link-button" title="View the source code for this module in GitHub.">View Source</a>

<a href="https://github.com/gruntwork-io/terraform-aws-eks/releases/tag/v0.65.5" className="link-button" title="Release notes for only versions which impacted this module.">Release Notes</a>
<a href="https://github.com/gruntwork-io/terraform-aws-eks/releases/tag/v0.69.2" className="link-button" title="Release notes for only versions which impacted this module.">Release Notes</a>

This Terraform Module defines an [IAM
policy](http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/QuickStartEC2Instance.html#d0e22325) that
defines the minimal set of permissions necessary for the [AWS ALB Ingress
Controller](https://github.com/kubernetes-sigs/aws-alb-ingress-controller). This policy can then be attached to EC2
instances or IAM roles so that the controller deployed has enough permissions to manage an ALB.

See [the eks-alb-ingress-controller module](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.0/modules/eks-alb-ingress-controller) for a module that deploys the Ingress
See [the eks-alb-ingress-controller module](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.2/modules/eks-alb-ingress-controller) for a module that deploys the Ingress
Controller on to your EKS cluster.

## Attaching IAM policy to workers

To allow the ALB Ingress Controller to manage ALBs, it needs IAM permissions to use the AWS API to manage ALBs.
Currently, the way to grant Pods IAM privileges is to use the worker IAM profiles provisioned by [the
eks-cluster-workers module](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.0/modules/eks-cluster-workers/README.md#how-do-you-add-additional-iam-policies).
eks-cluster-workers module](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.2/modules/eks-cluster-workers/README.md#how-do-you-add-additional-iam-policies).

The Terraform templates in this module create an IAM policy that has the required permissions. You then need to use an
[aws_iam_policy_attachment](https://www.terraform.io/docs/providers/aws/r/iam_policy_attachment.html) to attach that
Expand Down Expand Up @@ -64,7 +64,7 @@ resource "aws_iam_role_policy_attachment" "attach_alb_ingress_controller_iam_pol

module "eks_alb_ingress_controller_iam_policy" {

source = "git::[email protected]:gruntwork-io/terraform-aws-eks.git//modules/eks-alb-ingress-controller-iam-policy?ref=v0.69.0"
source = "git::[email protected]:gruntwork-io/terraform-aws-eks.git//modules/eks-alb-ingress-controller-iam-policy?ref=v0.69.2"

# ----------------------------------------------------------------------------------------------------
# REQUIRED VARIABLES
Expand Down Expand Up @@ -103,7 +103,7 @@ module "eks_alb_ingress_controller_iam_policy" {
# ------------------------------------------------------------------------------------------------------

terraform {
source = "git::[email protected]:gruntwork-io/terraform-aws-eks.git//modules/eks-alb-ingress-controller-iam-policy?ref=v0.69.0"
source = "git::[email protected]:gruntwork-io/terraform-aws-eks.git//modules/eks-alb-ingress-controller-iam-policy?ref=v0.69.2"
}

inputs = {
Expand Down Expand Up @@ -210,11 +210,11 @@ The name of the IAM policy created with the permissions for the ALB ingress cont
<!-- ##DOCS-SOURCER-START
{
"originalSources": [
"https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.0/modules/eks-alb-ingress-controller-iam-policy/readme.md",
"https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.0/modules/eks-alb-ingress-controller-iam-policy/variables.tf",
"https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.0/modules/eks-alb-ingress-controller-iam-policy/outputs.tf"
"https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.2/modules/eks-alb-ingress-controller-iam-policy/readme.md",
"https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.2/modules/eks-alb-ingress-controller-iam-policy/variables.tf",
"https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.2/modules/eks-alb-ingress-controller-iam-policy/outputs.tf"
],
"sourcePlugin": "module-catalog-api",
"hash": "4552279a853d64e762837992381bb832"
"hash": "1e8f9c582cf030b62afe0096848cd3cc"
}
##DOCS-SOURCER-END -->
24 changes: 12 additions & 12 deletions ...ules/terraform-aws-eks/eks-alb-ingress-controller/eks-alb-ingress-controller.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,13 +9,13 @@ import VersionBadge from '../../../../../src/components/VersionBadge.tsx';
import { HclListItem, HclListItemDescription, HclListItemTypeDetails, HclListItemDefaultValue, HclGeneralListItem } from '../../../../../src/components/HclListItem.tsx';
import { ModuleUsage } from "../../../../../src/components/ModuleUsage";

<VersionBadge repoTitle="Amazon EKS" version="0.69.0" lastModifiedVersion="0.65.7"/>
<VersionBadge repoTitle="Amazon EKS" version="0.69.2" lastModifiedVersion="0.69.2"/>

# ALB Ingress Controller Module

<a href="https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.0/modules/eks-alb-ingress-controller" className="link-button" title="View the source code for this module in GitHub.">View Source</a>
<a href="https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.2/modules/eks-alb-ingress-controller" className="link-button" title="View the source code for this module in GitHub.">View Source</a>

<a href="https://github.com/gruntwork-io/terraform-aws-eks/releases/tag/v0.65.7" className="link-button" title="Release notes for only versions which impacted this module.">Release Notes</a>
<a href="https://github.com/gruntwork-io/terraform-aws-eks/releases/tag/v0.69.2" className="link-button" title="Release notes for only versions which impacted this module.">Release Notes</a>

This Terraform Module installs and configures the [AWS ALB Ingress
Controller](https://github.com/kubernetes-sigs/aws-alb-ingress-controller) on an EKS cluster, so that you can configure
Expand Down Expand Up @@ -110,7 +110,7 @@ correctly.

You can use the `alb.ingress.kubernetes.io/subnets` annotation on `Ingress` resources to specify which subnets the controller should configure the ALB for.

You can also omit the `alb.ingress.kubernetes.io/subnets` annotation, and the controller will [automatically discover subnets](https://kubernetes-sigs.github.io/aws-alb-ingress-controller/guide/controller/config/#subnet-auto-discovery) based on their tags. This method should work "out of the box", so long as you are using the [`eks-vpc-tags`](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.0/modules/eks-vpc-tags) module to tag your VPC subnets.
You can also omit the `alb.ingress.kubernetes.io/subnets` annotation, and the controller will [automatically discover subnets](https://kubernetes-sigs.github.io/aws-alb-ingress-controller/guide/controller/config/#subnet-auto-discovery) based on their tags. This method should work "out of the box", so long as you are using the [`eks-vpc-tags`](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.2/modules/eks-vpc-tags) module to tag your VPC subnets.

### Security Groups

Expand All @@ -125,7 +125,7 @@ nodes.
### IAM permissions

The container deployed in this module requires IAM permissions to manage ALB resources. See [the
eks-alb-ingress-controller-iam-policy module](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.0/modules/eks-alb-ingress-controller-iam-policy) for more information.
eks-alb-ingress-controller-iam-policy module](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.2/modules/eks-alb-ingress-controller-iam-policy) for more information.

## Using the Ingress Controller

Expand Down Expand Up @@ -200,7 +200,7 @@ nature of the controller in provisioning the ALBs.
The AWS ALB Ingress Controller has first class support for
[external-dns](https://github.com/kubernetes-incubator/external-dns), a third party tool that configures external DNS
providers with domains to route to `Services` and `Ingresses` in Kubernetes. See our [eks-k8s-external-dns
module](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.0/modules/eks-k8s-external-dns) for more information on how to setup the tool.
module](https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.2/modules/eks-k8s-external-dns) for more information on how to setup the tool.

## How do I deploy the Pods to Fargate?

Expand Down Expand Up @@ -234,7 +234,7 @@ instances under the hood, and thus the ALB can not be configured to route by ins

module "eks_alb_ingress_controller" {

source = "git::[email protected]:gruntwork-io/terraform-aws-eks.git//modules/eks-alb-ingress-controller?ref=v0.69.0"
source = "git::[email protected]:gruntwork-io/terraform-aws-eks.git//modules/eks-alb-ingress-controller?ref=v0.69.2"

# ----------------------------------------------------------------------------------------------------
# REQUIRED VARIABLES
Expand Down Expand Up @@ -369,7 +369,7 @@ module "eks_alb_ingress_controller" {
# ------------------------------------------------------------------------------------------------------

terraform {
source = "git::[email protected]:gruntwork-io/terraform-aws-eks.git//modules/eks-alb-ingress-controller?ref=v0.69.0"
source = "git::[email protected]:gruntwork-io/terraform-aws-eks.git//modules/eks-alb-ingress-controller?ref=v0.69.2"
}

inputs = {
Expand Down Expand Up @@ -504,11 +504,11 @@ inputs = {
<!-- ##DOCS-SOURCER-START
{
"originalSources": [
"https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.0/modules/eks-alb-ingress-controller/readme.md",
"https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.0/modules/eks-alb-ingress-controller/variables.tf",
"https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.0/modules/eks-alb-ingress-controller/outputs.tf"
"https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.2/modules/eks-alb-ingress-controller/readme.md",
"https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.2/modules/eks-alb-ingress-controller/variables.tf",
"https://github.com/gruntwork-io/terraform-aws-eks/tree/v0.69.2/modules/eks-alb-ingress-controller/outputs.tf"
],
"sourcePlugin": "module-catalog-api",
"hash": "bea2b33f301b7132ba28052a9fb0b692"
"hash": "37b065cbcf6bb3846cda0517d4f2a93f"
}
##DOCS-SOURCER-END -->
Loading