Steve Williams

Investigation: Default Service Accounts

4

## Background Namespaces which were created before k8s 1.24 likely still have legacy default service accounts with legacy token secrets. For example `abundant-namespace-dev`: ``` Active namespace is "abundant-namespace-dev". ❯ k...

## Background Currently, our monitoring module uses a [local-exec block](https://github.com/ministryofjustice/cloud-platform-terraform-monitoring/blob/main/prometheus.tf#L156) to `kubectl apply` our custom prometheus alerts manifest. This has the unfortunate consequence of meaning that updates are not applied...

## Background [PLACEHOLDER] We should look into how we deal with autogenerated tokens which are now considered legacy. For example we use this field in the irsa module: https://github.com/ministryofjustice/cloud-platform-terraform-irsa/blob/main/main.tf#L75 ##...

## Background Our [S3 Module](https://github.com/ministryofjustice/cloud-platform-terraform-s3-bucket) contains outdated information in the README regarding instructions on external account bucket migrations. (Access keys and removed module variables). Possibly rewrite with instructions on achieving...

## Background [PLACEHOLDER] We would like to enable Google Analytics features for our user guide so that we can obtain usage/user feedback Also we should template this up for reuse,...

## Background Following a recent support session with a CP user looking to test the process of restoring an Aurora RDS cluster from a snapshot, it looks like we could...

Update core-dns to the latest version for the upgraded k8s 1.27

4

Check for the latest supported addon version for the upgraded kubernetes version and update the clusters Production Clusters Checklist: - [ ] live-2 - [ ] manager - [ ]...

Update kube-proxy to the latest version for the upgraded k8s 1.27

3

Check for the latest supported addon version for the upgraded kubernetes version and update the clusters Production Clusters Checklist: - [ ] live-2 - [ ] manager - [ ]...

## Background Following k8s 1.24 upgrade and the associated change in service account token creation, we should add some simple guidance on how to use the terraform service account module...

## Issue 2: ### Update vpc-cni from `v1.16.2-eksbuild.1` to the version needed for current k8s version Check for the latest supported addon version for the current kubernetes version and update...