constellation/cli/internal/terraform
Malte Poll 66f1333c31
terraform: use single zone loadbalancer frontend on AWS (#1983)
This change is required to ensure we have not tls handshake errors when connecting to the kubernetes api.
Currently, the certificates used by kube-apiserver pods contain a SAN field with the (single) public ip of the loadbalancer.
If we would allow multiple loadbalancer frontend ips, we could encounter cases where the certificate is only valid for one public ip,
while we try to connect to a different ip.
To prevent this, we consciously disable support for the multi-zone loadbalancer frontend on AWS for now.
This will be re-enabled in the future.
2023-06-30 16:56:31 +02:00
..
terraform terraform: use single zone loadbalancer frontend on AWS (#1983) 2023-06-30 16:56:31 +02:00
BUILD.bazel terraform: QEMU node groups (#1961) 2023-06-28 14:42:34 +02:00
loader_test.go cli: store upgrade files in versioned folders (#1929) 2023-06-21 09:22:32 +02:00
loader.go cli: store upgrade files in versioned folders (#1929) 2023-06-21 09:22:32 +02:00
logging.go cli: add Terraform log support (#1620) 2023-04-14 14:15:07 +02:00
terraform_test.go cli: manual AWS terraform state transitions 2023-06-28 18:13:01 +02:00
terraform.go cli: manual AWS terraform state transitions 2023-06-28 18:13:01 +02:00
variables_test.go terraform: instance_count => initial_count (#1989) 2023-06-30 10:53:00 +02:00
variables.go terraform: instance_count => initial_count (#1989) 2023-06-30 10:53:00 +02:00