terraform-aws-eks

terraform-aws-eks copied to clipboard

Cluster Security Group Change Issue

6

## Description It appears I've hit this bug: https://github.com/terraform-aws-modules/terraform-aws-eks/issues/2469 But specifically I am already over the v18/v19 module upgrades. The only change we've made is that our VPC has added...

sidewinder12s

aws configmap

5

hey in my current terraform i am using to manage aws configmap i'm using module with version 19.20 ``` resource "kubectl_manifest" "aws-auth-cm" { yaml_body = true ❌ configmap was deleted(...

Mieszko96

Best Practice to perform Module Upgrades

4

Hey All, Need to clarify few things 1. Can I skip module versions when upgrading a specific modules. 2. Like moving from 17.0.0 to 20.0.0

devops-inthe-east

CoreDNS causing an issue to InsufficientNumberOfReplicas - The add-on is unhealthy because it doesn't have the desired number of replicas.

4

## Description I'm encountering an issue with CoreDNS related to an insufficient number of replicas. The add-on is currently flagged as unhealthy due to the shortfall in the desired number...

eravindar12

Documentation about default for `enable_irsa` is incorrect.

3

## Description enable_irsa is documented as default `false` BUT **Actual** `enable_irsa` is actually default `true` sources for where it states false: - https://registry.terraform.io/modules/terraform-aws-modules/eks/aws/latest/submodules/karpenter?tab=inputs - https://github.com/terraform-aws-modules/terraform-aws-eks/blob/v20.8.4/modules/karpenter/README.md?plain=1#L138 - More info on how...

thehandsomezebra

No way to tackle Karpenter when KMS is mandatory by default

5

## Description In my AWS account, KMS encryption is mandatory for EBS volumes. According to the Karpenter documentation (https://karpenter.sh/docs/troubleshooting/#node-terminates-before-ready-on-failed-encrypted-ebs-volume), when encountering issues with encrypted EBS volumes, an additional policy needs...

zohairraza

## Description I am trying to set the `cluster_encryption_config` to encrypt the cluster secrets conditionally, only in case I supply the KMS key in my variable `kms_key_arn`. The variable is...

sstamatiadis-dlt

eks-managed-node-group requires cluster_service_cidr when use_custom_launch_template = false

1

## Description `eks-managed-node-group` module still requires the variable `cluster_service_cidr` when `use_custom_launch_template = false` is specified, because of the underlying lifecycle `precondition` check in `user_data`: https://github.com/terraform-aws-modules/terraform-aws-eks/blob/master/modules/_user_data/main.tf#L5-L14 This is, sadly, a limitation...

cpboyd

Karpenter controller error: message:ec2 api connectivity check failed,error:NoCredentialProviders: no valid providers in chain.

1

## Description When creating a cluster with karpenter the controller gives the above error. The VPC/Subnets are created separately and we are using private subnets only. - [x] ✋ I...

asark67

The eks sub-module aws-auth reports Unauthorized

4

Using terraform-aws-modules/eks/aws version 20.14.0 and terraform-aws-modules/eks/aws//modules/aws-auth version 20.15.0, with config... ``` module "aeks-aws-auth" { source = "terraform-aws-modules/eks/aws//modules/aws-auth" version = "20.15.0" manage_aws_auth_configmap = true aws_auth_roles = [ { rolearn = data.aws_iam_role.karpenter_instance.arn...

zenbones