constellation/internal/cloud
Malte Poll 66f1333c31
terraform: use single zone loadbalancer frontend on AWS (#1983)
This change is required to ensure we have not tls handshake errors when connecting to the kubernetes api.
Currently, the certificates used by kube-apiserver pods contain a SAN field with the (single) public ip of the loadbalancer.
If we would allow multiple loadbalancer frontend ips, we could encounter cases where the certificate is only valid for one public ip,
while we try to connect to a different ip.
To prevent this, we consciously disable support for the multi-zone loadbalancer frontend on AWS for now.
This will be re-enabled in the future.
2023-06-30 16:56:31 +02:00
..
aws terraform: use single zone loadbalancer frontend on AWS (#1983) 2023-06-30 16:56:31 +02:00
azure config: drop support for deprecated Azure's service principal authentication (#1906) 2023-06-14 17:50:57 +02:00
azureshared bootstrapper: make Azure auth method configurable on cluster init (#1346) 2023-04-03 15:01:25 +02:00
cloudprovider cli: support StackIT provider on config generate (#1803) 2023-05-30 09:02:50 +02:00
gcp cloud: fix discovery of GCP nodes across multiple zones (#1943) 2023-06-20 12:02:31 +02:00
gcpshared bazel: add build files for go (#1186) 2023-03-09 15:23:42 +01:00
metadata bazel: add build files for go (#1186) 2023-03-09 15:23:42 +01:00
openstack cli: deploy cinder as OpenStack CSI plugin 2023-05-17 15:20:39 +02:00
qemu go: remove unused parameters 2023-03-20 08:41:01 -04:00
BUILD.bazel bazel: add build files for go (#1186) 2023-03-09 15:23:42 +01:00
cloud.go dev-docs: Go package docs (#958) 2023-01-19 15:57:50 +01:00