cluster-api-provider-aws
cluster-api-provider-aws copied to clipboard
Kubernetes Cluster API Provider AWS provides consistent deployment and day 2 operations of "self-managed" and EKS Kubernetes clusters on AWS.
Due to security requirements I need IAM roles to have an attached PermissionsBoundary. I propose to add an optional `permissionsBoundary` field to the bootstrap config that accepts a single PermissionsBoundary...
/kind bug **What steps did you take and what happened:** Network Load Balancers support for security groups was added around Aug 2023 [1]. Some regions, like the secret regions C2S/SC2S,...
/kind feature **Describe the solution you'd like** Currently, CAPI will spread control plane machines across the reported failure domains (i.e. availability zones). It doesn't do this for worker nodes, machines...
/kind bug **What steps did you take and what happened:** When deploying an AWSManagedMachinePool in a multi-tenant setup, the CAPA controller is not able to do the machine pool reconciliation....
/kind feature Is there a declarative way to provision AWS roles and policies? Automation is currently tricky due to imperative commands such as `clusterawsadm bootstrap iam create-cloudformation-stack`. Perhaps [cluster-api-operator](https://github.com/kubernetes-sigs/cluster-api-operator) can...
/kind bug **What steps did you take and what happened:** Running with externally managed infrastructure and trying to setup a shared VPC, the machine controller fails we access denied to...
/kind feature **Describe the solution you'd like** A spec field and controller support to disable/delete the EKS-provided CoreDNS deployment if another DNS provider is to be used/configured, similar to the...
/kind feature **Describe the solution you'd like** [A clear and concise description of what you want to happen.] Only kernel 5.10+ support cilumn ebbf feature. We'd like to use ebpf...
/kind bug **What steps did you take and what happened:** When reconciling Security Group ingress rules, CAPA is comparing sets that are not equivalent. That happens because in [this commit](https://github.com/kubernetes-sigs/cluster-api-provider-aws/commit/42eafcd4ff1e4a294620dddb77b098acc460f4ca...
/kind bug **What steps did you take and what happened:** While managing an EKS cluster using AWSManagedMachinePool, a panic error occurs when trying to delete a taint after adding it....