CHANGELOG.md

Unreleased

• Support for the ENI_CONFIG_LABEL_DEF environment variable #411

Improvements

0.19.3 (Released July 7, 2020)

Improvements

• feat(nodegroup): Support encryption of the root block device for nodes #407
• fix(ex/default-sg): rm Output tag values per string type reqs #404
• nodegroup(asgName): fix asgName definition #401

0.19.2 (Released May 20, 2020)

Improvements

• Cutting new release to include missing generated API docs from v0.19.1

0.19.1 (Released May 19, 2020)

Improvements

• feat(nodegroup): add opt to attach extra security groups #390
• feat(cluster): add encryptionConfigKeyArn opt to encrypt k8s Secrets #389

0.19.0 (Released April 20, 2020)

For a more detailed list of the changes introduced in this release, please visit #381.

• fix(dashboard): disable dashboard from deploying if not set #378
• fix(cluster): use scoped kubeconfig with non-default AWS credentials #367
• Update node & go pulumi deps to 2.0 #375
• fix(aws): rm sync invokes for AWS data source calls #373
• refactor(aws-auth): replace aws-iam-authenticator with aws eks get-token #362
  • Note: for existing clusters, this change will recompute the kubeconfig used, as its auth arguments and settings get updated to work with aws eks get-token. It should not affect cluster access or cause replacements of existing k8s resources.
• feat(nodegroup): use the latest recommended AMIs from the SSM store #366
• feat(cluster): support HTTP(S) proxy for cluster readiness & OIDC config #365
• deps(pulumi): bump node and go pulumi/pulumi to v1.13.1 #361
• feat(cluster): add getKubeconfig method to generate scoped kubeconfigs #356

0.18.24 (Released March 11, 2020)

Improvements

• fix(oidc): Fix issue in OIDC getThumbprint helper function #346

0.18.23 (Released March 5, 2020)

Improvements

• fix(oidc): use thumbprint of the intermediate root CA #342

0.18.22 (Released February 24, 2020)

Improvements

• update(cni): update from v1.5.3 -> v1.6.0 #325
• fix(storageClasses): fix userStorageClass initialization #336
• feat(cluster): allow optional configuration of cluster name #322
• feat(identity): add support to setup OIDC provider #320

0.18.21 (Released February 12, 2020)

Improvements

• Refactor managed nodegroup API and require its role be provided to the cluster #302
• Update pulumi/pulumi and re-enable withUpdate tests #327

0.18.20 (Released February 11, 2020)

Improvements

• Fix js-yaml dependency changes in pulumi/k8s #324

0.18.19 (Released January 27, 2020)

Improvements

• Unblock CI by disabling debug logging, rm unnecessary tests, and fixing broken tests #309
• feat(cluster): Support public access controls #295
• feat(cluster): Add cluster tagging #262
• refactor(vpcCni): set node anti-affinity to not deploy to fargate #291
• build: Upgrade to go1.13.4 #290

0.18.18 (Released December 5, 2019)

Improvements

• feat(nodes): add support for Fargate #283

0.18.17 (Released December 3, 2019)

Improvements

• feat(nodes): add createManagedNodeGroup #280

0.18.16 (Released November 7, 2019)

Improvements

• fix(vpc-cni): allow logLevel & logFile to be set, or defaulted if not #274
• Update pulumi to 1.4.0 #270

0.18.15 (Released October 15, 2019)

Improvements

• refactor(cluster): allow ClusterOptions to accept NodeGroupOptions #259

0.18.14 (Released September 5, 2019)

Improvements

• Add new publicSubnetIds and privateSubnetIds cluster options. Also, update tests to use new awsx.ec2.Vpc API and new subnet options #238
• fix(iam): improve YAML error handling & reporting in IAM ops #231

0.18.13 (Released August 20, 2019)

Improvements

• feat(iam): create eks cluster & resources with iam role provider #205

0.18.12 (Released August 16, 2019)

Improvements

• fix(cni): read CNI YAML outside of the dynamic provider and update to v1.5.3 #223

0.18.11 (Released August 12, 2019)

Improvements

• Revert "fix(cni): modify CNI filepath to store the relative path" #220

0.18.10 (Released August 8, 2019)

Improvements

• Fix and improve migrate-nodegroup test (bump CNI from v1.5.0 -> v1.5.2) #214
• fix(asgName): check 'NodeGroup' CFStack output key exists #213
• chore(cluster): add deprecation for kube-dashboard, customInstanceRolePolicy #202
• feat(storage-classes): export all user created storage classes #172
• update(eks): add example of migrating node groups with zero downtime #195

0.18.9 (Released July 11, 2019)

Improvements

• refactor(secgroup): export createNodeGroupSecurityGroup & consolidate rules #183
• wait for EKS cluster endpoint to be available #193
• fix(cluster): support configuring private and public endpoint access #154
• fix(cluster): support passing additional arguments to /etc/eks/bootstrap.sh and --kubelet-extra-args #181

0.18.8 (Released June 19, 2019)

Improvements

• Default to a node AMI that matches the cluster version #175

• fix(tags): rm ASG tag dupes, and consider tag inheritance for all tags #162

• fix(nodegroup): make VPN-only subnets private #163

• feature(cluster): Allow service role and instance profile to be injected during cluster creation #159

0.18.7 (Released June 12, 2019)

Improvements

• ci(aws-iam-authenticator): use official S3 bucket to install bin #166
• fix(tags): change map types used in all tags to pulumi.Inputs of the map #157
• fix(cluster): expose instanceRoles #155
• tests(cluster): enable test to replace cluster by adding more subnets #150
• update(aws-k8s-cni): move from 1.4.1 -> 1.5.0 #148

0.18.6 (Released June 04, 2019)

Improvements

• fix(cluster): rm dupe default storage class #136
• Expand nodejs SDK tests coverage, and add Kubernetes Smoke Tests for examples & tests #130
• update(aws-k8s-cni): move from 1.3.0 -> 1.4.1 #134
• fix(cluster): export missing instanceRoles in the cluster's CoreData #133

0.18.5 (Released May 09, 2019)

Improvements

• fix(nodeSecurityGroupTags): only expose option through Cluster class #126
• fix(secgroups): do not null out ingress & egress #128
  • Note: This PR reverses the default null values used for the ingress and egress in-line rules of the secgroups, introduced in v0.18.3. The null default was required to move to standalone secgroup rules, but it has introduced issues, and thus is being removed in this PR.
  • Upgrade Path - This is a breaking change unless you do the following steps:
    • If using >= v0.18.3: update using the typical package update path.
    • If using <= v0.18.2:
      1. First, update your cluster from using your current version to v0.18.4.
      2. Next, update your cluster from v0.18.4 to v0.18.5 (or higher) using the typical package update path.

0.18.4 (Released May 02, 2019)

Improvements

• feat(tags): Set default tags & add opts: tags, and other resource tags #122
• feat(control plane logging): Enable control plane logging to cloudwatch. #100.
• fix(ami): only apply AMI smart-default selection on creation #114

0.18.3 (Released April 25, 2019)

Improvements

• fix(secgroups): use standalone secgroup rules instead of in-line rules #109. Note, because we are replacing existing in-line secgroup rules with standalone rules, there may be a brief period of outage where the security group rules are removed before they get added back. This update happens in a matter of seconds (~5 sec), so any interruptions are short-lived.

0.18.2 (Released April 24, 2019)

Improvements

• fix(nodegroup): filter on x86_64 arch for node AMI #112

0.18.1 (Released April 08, 2019)

Improvements

• feat(nodePools): support per-nodegroup IAM instance roles #98

0.18.0 (Released March 30, 2019)

Improvements

• Moves to the new 0.18.0 version of @pulumi/aws. Version 0.18.0 of pulumi-aws is now based on v2.2.0 of the AWS Terraform Provider, which has a variety of breaking changes from the previous version. See documentation in @pulumi/aws repo for more details.

0.17.4 (Released March 29, 2019)

Improvements

• Fix a bug where the regex used to retrieve Worker Node AMIs was not returning correct AMIs when either: specifying the master / control plane version, or relying on smart defaults of the lastest available image. #92

0.17.3 (Released March 28, 2019)

Improvements

• feat(workers): add 'nodeAssociatePublicIpAddress' to toggle public IPs #81
• fix(getAmi): allow setting master version & explicitly filter Linux AMIs #85
  • Fix a bug where the wrong AMI was being returned due to a loosely defined regex.
  • Add support for setting the master / control plane version of the cluster.

0.17.2 (Released March 19, 2019)

Improvements

• Re-cut 0.17.1 as 0.17.2, due to a broken master branch caused by a pushed tag publishing the NPM package before master was able to.

0.17.1 (Released March 19, 2019)

Improvements

• Support for taints on NodeGroups. #63

0.17.0 (Released March 6th, 2019)

Improvements

• Depend on latest version of @pulumi/pulumi to get more precise delete before create semantics #46

0.16.6 (Released January 29th, 2019)

Improvements

• Expose the AutoScalingGroup on NodeGroups. #53
• Fix a bug where desiredCapacity was not being handled correctly. #55

0.16.5 (Released January 21st, 2019)

Improvements

• Support for multiple Worker NodeGroups connected to a single EKS cluster. #39
• Support for Spot instances in NodeGroups. #49
• Support for adding cutom policies to node InstanceRole. #49
• Support for adding labels to each instance in a NodeGroup. #49

0.16.4 (Released December 13th, 2018)

Improvements

• Expose underlying EKS cluster. #31
• Support custom worker node AMI. #34
• Update CNI to 1.3. #37

0.16.3 (Released November 21st, 2018)

Improvements

• Allow configuring the subnets that worker nodes use.
• Improve detection of public vs. private subnets.