Aws Eks Base Versions Save

What's Changed

• feat: do not use tigera-operator for native network policies by @mglotov in https://github.com/maddevsio/aws-eks-base/pull/341
• fix: set k8s resources for Loki workload by @mglotov in https://github.com/maddevsio/aws-eks-base/pull/342
• fix: change authentication method for cloudwatch datasource by @vitaliimd in https://github.com/maddevsio/aws-eks-base/pull/344
• enh: delete cpu.limits from the limitrange configuration by @mglotov in https://github.com/maddevsio/aws-eks-base/pull/346
• feat: switch from cluster-autoscaler to karpenter by @mglotov in https://github.com/maddevsio/aws-eks-base/pull/349
• doc: update README after adding karpenter by @mglotov in https://github.com/maddevsio/aws-eks-base/pull/350

Full Changelog: https://github.com/maddevsio/aws-eks-base/compare/v9.1.0...v10.0.0

What's Changed

• feat: Upgrade all applications in layer2
• enh: Use default tags on an aws provider level
• enh: upgrade terraform terragrunt providers modules
• enh: updated k8s version, updated dependent resources and small bugfixes
• enh: update terragrunt version to 0.39.1
• fix: Network policy for keda
• fix: Fixed terraform docs resources
• fix: terragrunt deploy cluster issuer
• fix: Fixed bug zone_id value
• fix: Add new network policy to loki namespace
• fix: Change network policy
• fix: correct version terragrunt
• fix: Fixed deprecated issues with bucket encryption, lifecylce, bucket_acl and key algorithm
• chore: Update CHANGELOG

Full Changelog: https://github.com/maddevsio/aws-eks-base/compare/v9.0.0...v9.1.0

What's Changed

• enh: use k8s serviceaccount + irsa for vpc-cni add-on
• feat: CIS benchmark alerts using Eventbridge
• doc: update documentation for used terraform modules
• enh: configure AWS account password policy
• enh: installed Tigera operator
• bug: fix aws-cluster-autoscaler expander priorities configuration
• refactor: change code structure; update code conventions
• enh: use aws-load-balancer-controller in front of ingress-nginx
• doc: disable gitlab clusterwide default access
• fix: update tfsec for layer 1
• fix: fixed deprecated issues with bucket encryption, lifecylce, bucket_acl and key algorithm
• fix: issue #304 layer2-aws terraform plan error
• Issue #294 correct version terragrunt
• Issue #309 update terragrunt version to 0.39.1
• feat: decoupled layers by using terragrunt

What's Changed

• feat: configure cluster endpoint
• enh: change cluster-autoscaler configuration to improve cluster utilization
• enh: update terraform modules, providers
• enh: update used helm-charts to the latest versions
• enh: update eks module
• enh: update k8s cluster to the latest version
• refactor: fix layer*/README.md files content
• refactor: switch from kubernetes-external-secrets to External Secrets Operator
• refactor: switch from aws-managed nodegroups to self-managed
• fix: delete unnecessary istio-sidecar configuration
• bug: fix gitlab-runner configuration
• bug: 262 added crd thanosrulers for prometheus stack operator
• chore: Update CHANGELOG

What's Changed

• fix: add server_side_apply option to kube-prometheus-stack-crd resources
• fix: fix aws-loadbalancer-controller helm chart variables
• enh: Switch from local istio-operator helm chart to official public helm chart
• chore: Update CHANGELOG

What's Changed

• bug: allow external secrets to get secrets from AWS Secrets Manager

What's Changed

• doc: Fixed contributing.md url in README.md
• enh: ELK upgrade to 7.16.2

What's Changed

• enh: moved elasticsearch image to public ECR
• fix: set metrics retention period 14 days for victoriametrics

What's Changed

• refactor: Teamcity helm release
• feat: Introduce possibility to install VictoriaMetrics or Prometheus
• fix: removed this prefix from r53 and acm modules outputs
• doc: Changed License banner, added CI Status badge
• feat: moved bottlerocket to managed node groups

What's Changed

• enh: use basic auth for Grafana by default and feature flag to switch between basic auth, github oauth and gitlab oauth
• refactor: do not use templates/alb-ingress-controller-values.yaml and set necessary values in a .tf file
• refactor: do not use templates/aws-node-termination-handler-values.yaml and set necessary values in the eks-aws-node-termination-handler.tf file
• refactor: do not use templates/external-dns-values.yaml and set necessary values in the eks-external-dns.tf file
• refactor: do not use templates/external-secrets-values.yaml and set necessary values in the eks-external-secrets.tf file
• refactor: do not use templates/prometheus-values.yaml and set necessary values in the eks-kube-prometheus-stack.tf file
• refactor: do not use templates/loki-stack-values.yaml and set necessary values in the eks-loki-stack.tf file
• refactor: do not use templates/cluster-autoscaler-values.yaml and set necessary values in the eks-cluster-autoscaler.tf file
• refactor: do not use templates/gitlab-runner-values.yaml and set necessary values in the eks-gitlab-runner.tf file
• refactor: do not use templates/elk-values.yaml and set necessary values in the eks-elk.tf file
• refactor: do not use templates/nginx-ingress-values.yaml and set necessary values in the eks-ingress-nginx-controller.tf file
• refactor: do not use templates/teamcity-values.yaml and set necessary values in the eks-teamcity.tf file
• refactor: do not use templates/calico-values.yaml and set necessary values in the eks-calico.tf file
• refactor: do not use templates/istio/istio-operator-values.yaml and set necessary values in the eks-istio.tf file
• refactor: refactor: do not use templates/cert-manager-values.yaml and set necessary values in the eks-cert-manager.tf file
• doc: move TFSEC notes from README.md into separate file
• doc: Update documentation related to secrets
• chore: update CHANGELOG.md