terraform-aws-eks-jx
terraform-aws-eks-jx copied to clipboard
jenkins-x
A Terraform module for creating Jenkins X infrastructure on AWS
https://github.com/jenkins-x/terraform-aws-eks-jx/blob/4240b95efe7558de35eb195d4b3ad76fbe9d0f20/modules/cluster/irsa.tf#L280 It seems that the latest versions of cluster autoscaler require these additional actions to be allowed: ec2:DescribeInstanceTypes autoscaling:DescribeInstances
### Summary I am noticing that we are using `iam::aws:policy/AmazonS3FullAccess` for the build-ctlr. These permission see a bit broad. ### Steps to reproduce the behavior Install ### Expected behavior We...
#### Description The main reason for the upgrade is to get a version of vault with good support for short lived service account tokens. https://www.vaultproject.io/docs/auth/kubernetes#kubernetes-1-21
#### Description At times a user will want to configure private Route53 domains. This introduces the capability to set a flag and have terraform create the private Route53 DNS entries....
### Summary Some users will need the private Route53 zone created as well as the public zone.
### Summary When I do a terraform destroy multiple k8s resources are not cleaned up. ### Steps to reproduce the behavior Install JX3 on an existing cluster ### Expected behavior...
### Summary The existing cluster demo builds and new VPC and tries to build a new EKS cluster. ### Steps to reproduce the behavior Run the demo in terraform-aws-eks-jx/examples/existing-cluster ###...
### Summary I am having an issue where the vault instance will not create. The operator is up and running, but when the helm provider tries to create the vault...
### Summary Production usage advice should align as much as possible with the eks best practices for security recommended by AWS: https://aws.github.io/aws-eks-best-practices/
### Summary We should update the eks module version to the latest, and check what are the issues we have. There are quite a few breaking changes (including removal of...