CadolesKube
/
typhoon
mirror of https://github.com/puppetmaster/typhoon.git
7
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
1,321 Commits 3 Branches 113 Tags 8.7 MiB
Commit Graph

801 Commits

Author SHA1 Message Date
Dalton Hubble 545bd79624 Update Grafana from v8.0.4 to v8.0.6 
* https://github.com/grafana/grafana/releases/tag/v8.0.6
 2021-07-16 12:02:36 -07:00
Dalton Hubble 66e7354c8a Change AWS default disk type from gp2 to gp3 
* https://aws.amazon.com/about-aws/whats-new/2020/12/introducing-new-amazon-ebs-general-purpose-volumes-gp3/
 2021-07-04 10:43:05 -07:00
Dalton Hubble 3a71b2ccb1 Update Cilium from v1.10.1 to v1.10.2 
* https://github.com/cilium/cilium/releases/tag/v1.10.2
 2021-07-04 10:11:21 -07:00
Dalton Hubble c7e327417b Update Prometheus and Grafana addons 2021-07-04 10:02:44 -07:00
Dalton Hubble 65ddd2419c Add Known Issues with FCOS to CHANGES 2021-06-27 16:51:59 -07:00
Dalton Hubble b0e9b1fa60 Update Prometheus and Grafana addons 
* https://github.com/prometheus/prometheus/releases/tag/v2.28.0
* https://github.com/grafana/grafana/releases/tag/v8.0.3
 2021-06-27 14:46:43 -07:00
Dalton Hubble 485feb82c4 Update CoreDNS from v1.8.0 to v1.8.4 
* https://coredns.io/2021/01/20/coredns-1.8.1-release/
* https://coredns.io/2021/02/23/coredns-1.8.2-release/
* https://coredns.io/2021/02/24/coredns-1.8.3-release/
* https://coredns.io/2021/05/28/coredns-1.8.4-release/
 2021-06-23 23:31:25 -07:00
Dalton Hubble 0b276b6b7e Update Kubernetes from v1.21.1 to v1.21.2 
* https://github.com/kubernetes/kubernetes/releases/tag/v1.21.2
 2021-06-17 16:15:20 -07:00
Dalton Hubble e8513e58bb Add support for Terraform v1.0.0 
* https://github.com/hashicorp/terraform/releases/tag/v1.0.0
 2021-06-17 13:32:56 -07:00
Dalton Hubble 30cfeec6c1 Update nginx-ingress from v0.46.0 to v0.47.0 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v0.47.0
 2021-06-07 10:11:07 -07:00
Dalton Hubble 24e63bd134 Update Prometheus, Grafana, kube-state-metrics addons 2021-06-07 09:40:06 -07:00
Dalton Hubble 996bdd9112 Update Calico from v3.19.0 to v3.19.1 
* https://docs.projectcalico.org/archive/v3.19/release-notes/
 2021-06-02 14:51:15 -07:00
Dalton Hubble 9f0126a410 Fix typo in CHANGES.md 2021-05-25 21:16:53 -07:00
Dalton Hubble 966fd280b0 Update Cilium from v0.10.0-rc1 to v0.10.0 
* https://github.com/cilium/cilium/releases/tag/v1.10.0
 2021-05-24 11:16:51 -07:00
Dalton Hubble e4e074c894 Update Cilium from v1.9.6 to v1.10.0-rc1 
* Add multi-arch container images and arm64 support
* https://github.com/cilium/cilium/releases/tag/v1.10.0-rc1
 2021-05-14 14:24:52 -07:00
Dalton Hubble d51da49925 Update docs for Kubernetes v1.21.1 and Terraform v0.15.x 2021-05-13 11:34:01 -07:00
Dalton Hubble 2076a779a3 Update Kubernetes from v1.21.0 to v1.21.1 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.21.md#v1211
 2021-05-13 11:23:26 -07:00
Dalton Hubble 048094b256 Update etcd from v3.4.15 to v3.4.16 
* https://github.com/etcd-io/etcd/blob/main/CHANGELOG-3.4.md
 2021-05-13 10:53:04 -07:00
Dalton Hubble 75b063c586 Update Prometheus from v2.25.2 to v2.27.0 
* Update Grafana from v7.5.4 to v7.5.6
* https://github.com/prometheus/prometheus/releases/tag/v2.27.0
* https://github.com/grafana/grafana/releases/tag/v7.5.6
 2021-05-12 11:47:07 -07:00
Dalton Hubble bc96443710 Update nginx-ingress from v0.45.0 to v0.46.0 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v0.46.0
 2021-05-05 12:06:20 -07:00
Dalton Hubble 5f87eb3ec9 Update Fedora CoreOS Kubelet for cgroups v2 
* Fedora CoreOS is beginning to switch from cgroups v1 to
cgroups v2 by default, which changes the sysfs hierarchy
* This will be needed when using a Fedora Coreos OS image
that enables cgroups v2 (`next` stream as of this writing)

Rel: https://github.com/coreos/fedora-coreos-tracker/issues/292
 2021-04-26 11:48:58 -07:00
Dalton Hubble b152b9f973 Reduce the default disk_size from 40GB to 30GB 
* We're typically reducing the `disk_size` in real clusters
since the space is under used. The default should be lower.
 2021-04-26 11:43:26 -07:00
Dalton Hubble 9c842395a8 Update Cilium from v1.9.5 to v1.9.6 
* https://github.com/cilium/cilium/releases/tag/v1.9.6
 2021-04-26 10:55:23 -07:00
Dalton Hubble e535ddd15a Update Grafana from v7.5.3 to v7.5.4 
* https://github.com/grafana/grafana/releases/tag/v7.5.4
 2021-04-17 11:38:14 -07:00
Dalton Hubble 5752a8f041 Update kube-state-metrics from v2.0.0-rc.1 to v2.0.0 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v2.0.0
 2021-04-17 11:34:52 -07:00
Dalton Hubble c11e23fc50 Fix minor docs issues and missing changelog links 2021-04-13 09:35:11 -07:00
Dalton Hubble 2eb1ac1b4d Update nginx-ingress from v0.44.0 to v0.45.0 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v0.45.0
 2021-04-12 00:18:47 -07:00
Dalton Hubble cb2721ef7d Update Grafana from v7.5.2 to v7.5.3 
* https://github.com/grafana/grafana/releases/tag/v7.5.3
 2021-04-12 00:17:22 -07:00
Dalton Hubble fc06d28e13 Remove deprecated field on azurerm_lb_backend_address_pool 
* Remove the deprecated `resource_group_name` field from Azure
`azurerm_lb_backend_address_pool` resources
 2021-04-11 23:59:17 -07:00
Dalton Hubble ebd9570ede Update Fedora CoreOS Config version from v1.1.0 to v1.2.0 
* Require [poseidon/ct](https://github.com/poseidon/terraform-provider-ct)
Terraform provider v0.8+
* Require any [snippets](https://typhoon.psdn.io/advanced/customization/#hosts)
customizations to update to v1.2.0

See upgrade [notes](https://typhoon.psdn.io/topics/maintenance/#upgrade-terraform-provider-ct)
 2021-04-11 15:26:54 -07:00
Dalton Hubble 34e8db7aae Update static Pod manifests for Kubernetes v1.21.0 
* https://github.com/poseidon/terraform-render-bootstrap/pull/257
 2021-04-11 15:05:46 -07:00
Dalton Hubble 084e8bea49 Allow custom initial node taints on worker pool nodes 
* Add `node_taints` variable to worker modules to set custom
initial node taints on cloud platforms that support auto-scaling
worker pools of heterogeneous nodes (i.e. AWS, Azure, GCP)
* Worker pools could use custom `node_labels` to allowed workloads
to select among differentiated nodes, while custom `node_taints`
allows a worker pool's nodes to be tainted as special to prevent
scheduling, except by workloads that explicitly tolerate the
taint
* Expose `daemonset_tolerations` in AWS, Azure, and GCP kubernetes
cluster modules, to determine whether `kube-system` components
should tolerate the custom taint (advanced use covered in docs)

Rel: #550, #663
Closes #429
 2021-04-11 15:00:11 -07:00
Dalton Hubble d73621c838 Update Kubernetes from v1.20.5 to v1.21.0 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.21.md#v1210
 2021-04-08 21:44:31 -07:00
Dalton Hubble 1a6481df04 Update Grafana from v7.5.1 to v7.5.2 
* https://github.com/grafana/grafana/releases/tag/v7.5.2
 2021-04-04 18:20:02 -07:00
Dalton Hubble 7372d33af8 Update kube-state-metrics and Grafana 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v2.0.0-rc.1
* https://github.com/grafana/grafana/releases/tag/v7.5.1
 2021-03-28 10:53:52 -07:00
Dalton Hubble 451ec771a8 Update Terraform providers and CHANGES for release 2021-03-23 08:45:57 -07:00
Dalton Hubble 597ca4acce Update CoreDNS from v1.7.0 to v1.8.0 
* https://github.com/poseidon/terraform-render-bootstrap/pull/254
 2021-03-20 16:47:25 -07:00
Dalton Hubble 048f1f514e Update Grafana from v7.4.3 to v7.4.5 
* https://github.com/grafana/grafana/releases/tag/v7.4.5
 2021-03-19 11:51:52 -07:00
Dalton Hubble b825cd9afe Update Prometheus from v2.25.1 to v2.25.2 
* https://github.com/prometheus/prometheus/releases/tag/v2.25.2
 2021-03-19 11:49:38 -07:00
Dalton Hubble 796149d122 Update Kubernetes from v1.20.4 to v1.20.5 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1205
 2021-03-19 11:27:31 -07:00
Dalton Hubble a66bccd590 Update Cilium from v1.9.4 to v1.9.5 
* https://github.com/cilium/cilium/releases/tag/v1.9.5
 2021-03-14 11:48:22 -07:00
Dalton Hubble 30b1edfcc6 Mark bootstrap token as sensitive in plan/apply 
* Mark the bootstrap token as sensitive, which is useful when
Terraform is run in automated CI/CD systems to avoid showing
the token
* https://github.com/poseidon/terraform-render-bootstrap/pull/251
 2021-03-14 11:32:35 -07:00
Dalton Hubble a4afe06b64 Update Calico from v3.17.3 to v3.18.1 
* https://docs.projectcalico.org/archive/v3.18/release-notes/
 2021-03-14 10:35:24 -07:00
Dalton Hubble 4d58be0816 Update Prometheus from v2.25.0 to v2.25.1 
* https://github.com/prometheus/prometheus/releases/tag/v2.25.1
 2021-03-14 09:43:15 -07:00
Dalton Hubble 5bc1cd28c3 Switch kube-state-metrics image from quay to k8s.gcr.io 
* kube-state-metrics is continuing publishing container images
to `k8s.gcr.io` instead of `quay.io`

Rel: https://github.com/kubernetes/kube-state-metrics/issues/1409
 2021-03-11 10:56:18 -08:00
Dalton Hubble 13fbac6c79 Update Grafana from v7.4.2 to v7.4.3 
* https://github.com/grafana/grafana/releases/tag/v7.4.3
 2021-03-05 17:19:54 -08:00
Dalton Hubble a8fa4a9a06 Update node-exporter and kube-state-metrics 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v2.0.0-rc.0
* https://github.com/prometheus/node_exporter/releases/tag/v1.1.2
 2021-03-05 17:13:45 -08:00
Dalton Hubble a5c1a96df1 Update etcd from v3.4.14 to v3.4.15 
* https://github.com/etcd-io/etcd/releases/tag/v3.4.15
 2021-03-05 17:02:57 -08:00
Dalton Hubble 6a091e245e Remove Flatcar Linux Edge `os_image` option 
* Flatcar Linux has not published an Edge channel image since
April 2020 and recently removed mention of the channel from
their documentation https://github.com/kinvolk/Flatcar/pull/345
* Users of Flatcar Linux Edge should move to the stable, beta, or
alpha channel, barring any alternate advice from upstream Flatcar
Linux
 2021-02-20 16:09:54 -08:00
Dalton Hubble ec389295fe Update Grafana from v7.4.0 to v7.4.2 
* https://github.com/grafana/grafana/releases/tag/v7.4.2
 2021-02-19 00:18:39 -08:00
Dalton Hubble 3c807f3478 Update Prometheus from v2.24.1 to v2.25.0 
* https://github.com/prometheus/prometheus/releases/tag/v2.25.0
 2021-02-19 00:16:35 -08:00
Dalton Hubble e76fe80b45 Update Kubernetes from v1.20.3 to v1.20.4 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1204
 2021-02-19 00:02:07 -08:00
Dalton Hubble 32853aaa7b Update Kubernetes from v1.20.2 to v1.20.3 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1203
 2021-02-17 22:29:33 -08:00
Dalton Hubble c32a54db40 Update node-exporter from v1.0.1 to v1.1.1 
* https://github.com/prometheus/node_exporter/releases/tag/v1.1.1
 2021-02-14 14:30:28 -08:00
Dalton Hubble 9671b1c734 Update flannel-cni from v0.4.1 to v0.4.2 
* https://github.com/poseidon/flannel-cni/releases/tag/v0.4.2
 2021-02-14 12:04:59 -08:00
Dalton Hubble 3b933e1ab3 Update Grafana from v7.3.7 to v7.4.0 
* https://github.com/grafana/grafana/releases/tag/v7.4.0
 2021-02-07 21:42:18 -08:00
Dalton Hubble 58d8f6f505 Update Prometheus from v2.24.0 to v2.24.1 
* https://github.com/prometheus/prometheus/releases/tag/v2.24.1
 2021-02-04 22:28:32 -08:00
Dalton Hubble 56853fe222 Update nginx-ingress from v0.43.0 to v0.44.0 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v0.44.0
 2021-02-04 22:19:58 -08:00
Dalton Hubble 18165d8076 Update Calico from v3.17.1 to v3.17.2 
* https://github.com/projectcalico/calico/releases/tag/v3.17.2
 2021-02-04 22:03:51 -08:00
Dalton Hubble 50acf28ce5 Update Cilium from v1.9.3 to v1.9.4 
* https://github.com/cilium/cilium/releases/tag/v1.9.4
 2021-02-03 23:08:22 -08:00
Dalton Hubble ab793eb842 Update Cilium from v1.9.2 to v1.9.3 
* https://github.com/cilium/cilium/releases/tag/v1.9.3
 2021-01-26 17:13:52 -08:00
Dalton Hubble b74c958524 Update Cilium from v1.9.1 to v1.9.2 
* https://github.com/cilium/cilium/releases/tag/v1.9.2
 2021-01-20 22:06:45 -08:00
Dalton Hubble 11c434915f Update Grafana from v7.3.6 to v7.3.7 
* https://github.com/grafana/grafana/releases/tag/v7.3.7
 2021-01-16 10:46:56 -08:00
Dalton Hubble 05f7df9e80 Update Kubernetes from v1.20.1 to v1.20.2 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1202
 2021-01-13 17:46:51 -08:00
Dalton Hubble 4220b9ce18 Add support for Terraform v0.14.4+ 
* Support Terraform v0.13.x and v0.14.4+
 2021-01-12 21:43:12 -08:00
Dalton Hubble 6a6af4aa16 Update Prometheus from v2.24.0-rc.0 to v2.24.0 
* https://github.com/prometheus/prometheus/releases/tag/v2.24.0
 2021-01-12 20:49:18 -08:00
Dalton Hubble 3dcd10f3b8 Update Prometheus v2.23.0 to v2.24.0-rc.0 
* https://github.com/prometheus/prometheus/releases/tag/v2.24.0-rc.0
 2021-01-01 13:49:28 -08:00
Dalton Hubble 22503993b9 Update nginx-ingress from v0.41.2 to v0.43.0 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v0.43.0
* https://github.com/kubernetes/ingress-nginx/issues/6696
 2021-01-01 13:44:45 -08:00
Dalton Hubble cf3aa8885b Update Prometheus rules and Grafana dashboards 
* Update Grafana from v7.3.5 to v7.3.6
 2020-12-19 14:56:42 -08:00
Dalton Hubble ba61a137db Add notice about upstream Fedora CoreOS changes 
* Highlight that short-term, use of Fedora CoreOS will
require non-RSA SSH keys or a workaround snippet
 2020-12-19 14:10:42 -08:00
Dalton Hubble 646bdd78e4 Update Kubernetes from v1.20.0 to v1.20.1 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1201
 2020-12-19 12:56:28 -08:00
Dalton Hubble c163fbbbcd Update docs and README for release 2020-12-12 12:31:35 -08:00
Dalton Hubble dc7be431e0 Remove iSCSI mounts from Kubelet 
* Remove Kubelet `/etc/iscsi` and `iscsiadm` host mounts that
were added on bare-metal, since these no longer work on either
Fedora CoreOS or Flatcar Linux with newer `iscsiadm`
* These special mounts on bare-metal date back to #350 which
added them to provide a way to use iSCSI in Kubernetes v1.10
* Today, storage should be handled by external CSI providers
which handle different storage systems, which doesn't rely
on Kubelet storage utils

Close #907
 2020-12-12 11:41:02 -08:00
Dalton Hubble 86e0f806b3 Revert "Add support for Terraform v0.14.x" 
This reverts commit 968febb050.
 2020-12-11 00:47:57 -08:00
Dalton Hubble 96172ad269 Update Grafana from v7.3.4 to v7.3.5 
* https://github.com/grafana/grafana/releases/tag/v7.3.5
 2020-12-11 00:24:43 -08:00
Dalton Hubble ee9ce3d0ab Update Calico from v3.17.0 to v3.17.1 
* https://github.com/projectcalico/calico/releases/tag/v3.17.1
 2020-12-10 22:48:38 -08:00
Dalton Hubble a8b8a9b454 Update Kubernetes from v1.20.0-rc.0 to v1.20.0 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1200
 2020-12-08 18:28:13 -08:00
Dalton Hubble 968febb050 Add support for Terraform v0.14.x 
* Support Terraform v0.13.x and v0.14.x
 2020-12-07 00:22:38 -08:00
Dalton Hubble bee455f83a Update Cilium from v1.9.0 to v1.9.1 
* https://github.com/cilium/cilium/releases/tag/v1.9.1
 2020-12-04 14:14:18 -08:00
Dalton Hubble 3e89ea1b4a Promote Fedora CoreOS bare-metal to stable 
* Fedora CoreOS is a good choice for use on bare-metal
 2020-12-04 14:02:55 -08:00
Dalton Hubble e77dd6ecd4 Update Kubernetes from v1.19.4 to v1.20.0-rc.0 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1200-rc0
 2020-12-03 16:01:28 -08:00
Dalton Hubble 804dfea0f9 Add kubeconfig's for kube-scheduler and kube-controller-manager 
* Generate TLS client certificates for `kube-scheduler` and
`kube-controller-manager` with `system:kube-scheduler` and
`system:kube-controller-manager` CNs
* Template separate kubeconfigs for kube-scheduler and
kube-controller manager (`scheduler.conf` and
`controller-manager.conf`). Rename admin for clarity
* Before v1.16.0, Typhoon scheduled a self-hosted control
plane, which allowed the steady-state kube-scheduler and
kube-controller-manager to use a scoped ServiceAccount.
With a static pod control plane, separate CN TLS client
certificates are the nearest equiv.
* https://kubernetes.io/docs/setup/best-practices/certificates/
* Remove unused Kubelet certificate, TLS bootstrap is used
instead
 2020-12-01 22:02:15 -08:00
Dalton Hubble 8ba23f364c Add TokenReview and TokenRequestProjection flags 
* Add kube-apiserver flags for TokenReview and TokenRequestProjection
(beta, defaults on) to allow using Service Account Token Volume
Projection to create and mount service account tokens tied to a Pod's
lifecycle

Rel:

* https://github.com/poseidon/terraform-render-bootstrap/pull/231
* https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection
 2020-12-01 20:02:33 -08:00
Dalton Hubble f6025666eb Update etcd from v3.4.12 to v3.4.14 
* https://github.com/etcd-io/etcd/releases/tag/v3.4.14
 2020-11-29 20:04:25 -08:00
Dalton Hubble 85eb502f19 Update Prometheus from v2.23.0-rc.0 to v2.23.0 
* https://github.com/prometheus/prometheus/releases/tag/v2.23.0
 2020-11-29 19:59:27 -08:00
Dalton Hubble fa3184fb9c Relax terraform-provider-ct version constraint 
* Allow terraform-provider-ct versions v0.6+ (e.g. v0.7.1)
Before, only v0.6.x point updates were allowed
* Update terraform-provider-ct to v0.7.1 in docs
* READ the docs before updating terraform-provider-ct,
as changing worker user-data is handled differently
by different cloud platforms
 2020-11-29 19:51:26 -08:00
Dalton Hubble 22565e57e0 Update kube-state-metrics from v2.0.0-alpha.2 to v2.0.0-alpha.3 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v2.0.0-alpha.3
 2020-11-25 14:30:11 -08:00
Dalton Hubble 026e1f3648 Update Grafana from v7.3.3 to v7.3.4 
* https://github.com/grafana/grafana/releases/tag/v7.3.4
 2020-11-25 14:25:15 -08:00
Dalton Hubble ae548ce213 Update Calico from v3.16.5 to v3.17.0 
* Enable Calico MTU auto-detection
* Remove [workaround](https://github.com/poseidon/typhoon/pull/724) to
Calico cni-plugin [issue](https://github.com/projectcalico/cni-plugin/issues/874)

Rel: https://github.com/poseidon/terraform-render-bootstrap/pull/230
 2020-11-25 14:22:58 -08:00
Dalton Hubble e826b49648 Update Matchbox profile to use initramfs and rootfs images 
* Fedora CoreOS stable (after Oct 6) ships separate initramfs
and rootfs images, used as initrd's
* Update profiles to match the Matchbox examples, which have
already switched to the new profile and to remove the unused
kernel args
* Requires Fedora CoreOS version which ships rootfs images
(e.g. stable 32.20200923.3.0 or later)

Rel:

* https://github.com/coreos/fedora-coreos-tracker/issues/390#issuecomment-661986987
* da0df01763 (diff-4541f7b7c174f6ae6270135942c1c65ed9e09ebe81239709f5a9fb34e858ddcf)

Supercedes https://github.com/poseidon/typhoon/pull/888
 2020-11-25 14:13:39 -08:00
Dalton Hubble fa8f68f50e Fix Fedora CoreOS AWS AMI query in non-US regions 
* A `aws_ami` data source will fail a Terraform plan
if no matching AMI is found, even if the AMI is not
used. ARM64 images are only published to a few US
regions, so the `aws_ami` data query could fail when
creating Fedora CoreOS AWS clusters in non-US regions
* Condition `aws_ami` on whether experimental arch
`arm64` is chosen
* Recent regression introduced in v1.19.4
https://github.com/poseidon/typhoon/pull/875

Closes https://github.com/poseidon/typhoon/issues/886
 2020-11-25 11:32:05 -08:00
Dalton Hubble ba8d972c76 Update Prometheus from v2.22.2 to v2.23.0-rc.0 
* https://github.com/prometheus/prometheus/releases/tag/v2.23.0-rc.0
 2020-11-24 10:54:42 -08:00
Dalton Hubble c0347ca0c6 Set kubeconfig and asset_dist as sensitive 
* Mark `kubeconfig` and `asset_dist` as `sensitive` to
prevent the Terraform CLI displaying these values, esp.
for CI systems
* In particular, external tools or tfvars style uses (not
recommended) reportedly display all outputs and are improved
by setting sensitive
* For Terraform v0.14, outputs referencing sensitive fields
must also be annotated as sensitive

Closes https://github.com/poseidon/typhoon/issues/884
 2020-11-23 11:41:55 -08:00
Dalton Hubble 5e4f5de271 Enable Network Load Balancer (NLB) dualstack 
* NLB subnets assigned both IPv4 and IPv6 addresses
* NLB DNS name has both A and AAAA records
* NLB to target node traffic is IPv4 (no change),
no change to security groups needed
* Ingresses exposed through the recommended Nginx
Ingress Controller addon will be accessible via
IPv4 or IPv6. No change is needed to the app's
CNAME to NLB record

Related: https://aws.amazon.com/about-aws/whats-new/2020/11/network-load-balancer-supports-ipv6/
 2020-11-21 14:16:24 -08:00
Dalton Hubble be28495d79 Update Prometheus from v2.22.1 to v2.22.2 
* https://github.com/prometheus/prometheus/releases/tag/v2.22.2
 2020-11-19 21:50:48 -08:00
Dalton Hubble f1356fec24 Update Grafana from v7.3.2 to v7.3.3 
* https://github.com/grafana/grafana/releases/tag/v7.3.3
 2020-11-19 21:49:11 -08:00
Dalton Hubble cc00afa4e1 Add Terraform v0.13 input variable validations 
* Support for migrating from Terraform v0.12.x to v0.13.x
was added in v1.18.8
* Require Terraform v0.13+. Drop support for Terraform v0.12
 2020-11-17 12:02:34 -08:00
Dalton Hubble f5a83667e8 Update Grafana from v7.3.1 to v7.3.2 
* https://github.com/grafana/grafana/releases/tag/v7.3.2
 2020-11-14 13:30:30 -08:00
Dalton Hubble a911367c2e Update nginx-ingress from v0.41.0 to v0.41.2 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v0.41.2
 2020-11-14 13:27:06 -08:00
Dalton Hubble 1b3a0f6ebc Add experimental Fedora CoreOS arm64 support on AWS 
* Add experimental `arch` variable to Fedora CoreOS AWS,
accepting amd64 (default) or arm64 to support native
arm64/aarch64 clusters or mixed/hybrid clusters with
a worker pool of arm64 workers
* Add `daemonset_tolerations` variable to cluster module
(experimental)
* Add `node_taints` variable to workers module
* Requires flannel CNI and experimental Poseidon-built
arm64 Fedora CoreOS AMIs (published to us-east-1, us-east-2,
and us-west-1)

WARN:

* Our AMIs are experimental, may be removed at any time, and
will be removed when Fedora CoreOS publishes official arm64
AMIs. Do NOT use in production

Related:

* https://github.com/poseidon/typhoon/pull/682
 2020-11-14 13:09:24 -08:00