4 Commits

Author	SHA1	Message	Date
Malte Poll	66f1333c31	terraform: use single zone loadbalancer frontend on AWS (#1983) ... This change is required to ensure we have not tls handshake errors when connecting to the kubernetes api. Currently, the certificates used by kube-apiserver pods contain a SAN field with the (single) public ip of the loadbalancer. If we would allow multiple loadbalancer frontend ips, we could encounter cases where the certificate is only valid for one public ip, while we try to connect to a different ip. To prevent this, we consciously disable support for the multi-zone loadbalancer frontend on AWS for now. This will be re-enabled in the future.	2023-06-30 16:56:31 +02:00
Malte Poll	f64e44a438	aws: support LBs in multiple zones when retrieving metadata	2023-06-28 18:13:01 +02:00
3u13r	a2c98eb1d5	Correctly deploy the AWS CCM (#1853) ... * aws: stop using the imds api for tags * aws: disable tags in imds api * aws: only tag instances with non-lecagy tag * bootstrapper: always let coredns run before cilium * debugd: make debugd less noisy * fixup fix aws imds test * fixup unsued context * move getting instance id to readInstanceTag	2023-06-13 09:58:39 +02:00
Daniel Weiße	690b50b29d	dev-docs: Go package docs (#958) ... * Remove unused package * Add Go package docs to most packages Signed-off-by: Daniel Weiße <dw@edgeless.systems> Signed-off-by: Fabian Kammel <fk@edgeless.systems> Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com> Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com> Co-authored-by: Fabian Kammel <fk@edgeless.systems>	2023-01-19 15:57:50 +01:00