constellation/internal
Adrian Stobbe a87b7894db
aws: use new LB controller to fix SecurityGroup cleanup on K8s service deletion (#2090)
* add current chart

add current helm chart

* disable service controller for aws ccm

* add new iam roles

* doc AWS internet LB + add to LB test

* pass clusterName to helm for AWS LB

* fix update-aws-lb chart to also include .helmignore

* move chart outside services

* working state

* add subnet tags for AWS subnet discovery

* fix .helmignore load rule with file in subdirectory

* upgrade iam profile

* revert new loader impl since cilium is not correctly loaded

* install chart if not already present during `upgrade apply`

* cleanup PR + fix build + add todos

cleanup PR + add todos

* shared helm pkg for cli install and bootstrapper

* add link to eks docs

* refactor iamMigrationCmd

* delete unused helm.symwallk

* move iammigrate to upgrade pkg

* fixup! delete unused helm.symwallk

* add to upgradecheck

* remove nodeSelector from go code (Otto)

* update iam docs and sort permission + remove duplicate roles

* fix bug in `upgrade check`

* better upgrade check output when svc version upgrade not possible

* pr feedback

* remove force flag in upgrade_test

* use upgrader.GetUpgradeID instead of extra type

* remove todos + fix check

* update doc lb (leo)

* remove bootstrapper helm package

* Update cli/internal/cmd/upgradecheck.go

Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>

* final nits

* add docs for e2e upgrade test setup

* Apply suggestions from code review

Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>

* Update cli/internal/helm/loader.go

Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>

* Update cli/internal/cmd/tfmigrationclient.go

Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>

* fix daniel review

* link to the iam permissions instead of manually updating them (agreed with leo)

* disable iam upgrade in upgrade apply

---------

Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>
Co-authored-by: Malte Poll
2023-07-24 10:30:53 +02:00
..
api Use term "attestation variant" consistently 2023-06-26 08:54:11 +02:00
atls attestation: add awsSEVSNP as new variant (#1900) 2023-06-09 15:41:02 +02:00
attestation image: update measurements and image version (#2124) 2023-07-21 16:20:41 +02:00
cloud bootstrapper: add fallback endpoint and custom endpoint to SAN field (#2108) 2023-07-21 16:43:51 +02:00
compatibility helm: fix upgrade command unintentionally skipping all service upgrades (#1992) 2023-06-30 16:46:05 +02:00
config bootstrapper: add fallback endpoint and custom endpoint to SAN field (#2108) 2023-07-21 16:43:51 +02:00
constants aws: use new LB controller to fix SecurityGroup cleanup on K8s service deletion (#2090) 2023-07-24 10:30:53 +02:00
containerimage cli: use Bazel container images 2023-04-18 15:35:15 +02:00
crypto bazel: add build files for go (#1186) 2023-03-09 15:23:42 +01:00
cryptsetup disk-mapper: set LUKS2 token to allow reusing unintialized state disks (#2083) 2023-07-18 16:20:03 +02:00
deploy/helm aws: use new LB controller to fix SecurityGroup cleanup on K8s service deletion (#2090) 2023-07-24 10:30:53 +02:00
file todo responsibilities and cleanup (#1837) 2023-06-01 12:33:06 +02:00
grpc cdbg: make endpoint deployment failure more transparent (#1883) 2023-06-12 13:45:34 +02:00
imagefetcher attestation: add awsSEVSNP as new variant (#1900) 2023-06-09 15:41:02 +02:00
installer go: remove redefinitions of builtins 2023-03-20 08:41:01 -04:00
kms config: dynamic attestation configuration through S3 backed API (#1808) 2023-05-25 17:43:44 +01:00
kubernetes cli: remove old migrations (#2079) 2023-07-10 14:03:45 +02:00
license license: remove check for Azure.ConfidentialVM (#1602) 2023-04-03 19:19:54 +02:00
logger bazel: add build files for go (#1186) 2023-03-09 15:23:42 +01:00
nodestate bazel: add build files for go (#1186) 2023-03-09 15:23:42 +01:00
osimage ci: replicate Azure images to Southeast Asia (#2099) 2023-07-13 11:26:03 +02:00
retry bazel: add build files for go (#1186) 2023-03-09 15:23:42 +01:00
role terraform: azure node groups (#1955) 2023-06-22 16:53:40 +02:00
semver cli: fail fast when CLI and Constellation versions don't match (#1972) 2023-06-27 18:24:35 +02:00
sigstore config: enable azure snp version fetcher again + minimum age for latest version (#1899) 2023-06-09 12:48:12 +02:00
staticupload helm: fix upgrade command unintentionally skipping all service upgrades (#1992) 2023-06-30 16:46:05 +02:00
versions cli: print supported k8s versions on error (#2121) 2023-07-20 16:09:23 +02:00
watcher attestation: add awsSEVSNP as new variant (#1900) 2023-06-09 15:41:02 +02:00