Ciprian Hacman
793086a01a
aws: Skip deleting ASG instances without volumes
2024-01-06 09:31:23 +02:00
justinsb
f79d2da6f6
Thread context through some slower AWS tasks
...
There are still too many context.TODOs here for this to join all the
way up, but we should be able to better understand the slowest tasks.
2023-11-09 08:17:10 -05:00
justinsb
a6b963b127
dump: actually dump the gateway objects
...
I had forgotten to populate the object itself, so it was not appearing
in the raw dump.
2023-10-29 08:13:43 -04:00
justinsb
094b57aa8e
dump: include the various gateways on AWS
...
I think we were leaking egress-only-internet-gateways, it would be
helpful to see their status in the dump.
2023-10-28 16:23:38 -04:00
Ciprian Hacman
1aecb5304d
aws: Filter ENI list by VPC
2023-09-23 05:25:56 +03:00
Ciprian Hacman
8a2f74ce46
aws: Ignore volumes set to delete on instance termination
2023-08-14 18:47:38 +03:00
Peter Rifel
e0c3b8cd36
Rename eventbridge rule in toolbox dump output
...
`eventbridge` itself is too generic given there are many resource types within the eventbridge service
2023-07-30 09:25:40 -05:00
John Gardiner Myers
1e7576c9c5
Upgrade external-dns to v0.13.5
2023-05-30 17:47:59 -07:00
Ciprian Hacman
f7d434ee2c
Refactor ListResources to not require passing the Cluster object
2022-12-05 09:10:58 +02:00
Ciprian Hacman
4868c2bfaf
aws: Skip Route53 cleanup for clusters without DNS
2022-12-02 10:57:37 +02:00
John Gardiner Myers
87925bf0ca
Remove CloudFormation support
2022-11-22 21:02:50 -08:00
John Gardiner Myers
d39ba74bd7
Change the control-plane IG role to "ControlPlane" in v1alpha3 API
2022-11-22 17:05:29 -08:00
Ciprian Hacman
d29812fc6e
Replace fi.Bool/Float*/Int*/StringValue() with fi.ValueOf
2022-11-19 03:45:23 +02:00
Ciprian Hacman
8f79c9bd68
Replace fi.Bool/Float*/Int*/String() with fi.PtrTo()
2022-11-19 03:45:22 +02:00
John Gardiner Myers
71017f0307
Use bastion to dump private instances
2022-11-09 21:34:04 -08:00
John Gardiner Myers
8675336725
Also dump logs from IPv6 nodes
2022-11-05 16:10:53 -07:00
John Gardiner Myers
eb69f8ac60
Remove well known account aliases for unsupported distros
2022-11-01 16:20:27 -07:00
John Gardiner Myers
423a04900f
Fix typo
2022-10-27 11:07:17 -07:00
Ciprian Hacman
85026145a1
Always infer gossip DNS from cluster name
2022-10-02 12:54:37 +03:00
justinsb
90a484f049
AWS IAM Role listing: don't ignore "other" errors
...
If the error was an AWS error, but not one of the recognized ones, we
ignored it.
2022-09-01 07:57:03 -04:00
Ole Markus With
eb003a19b1
Fix bugs and typo in iam resource deletion logic
2022-08-21 20:01:20 +02:00
Ole Markus With
084ecac2bb
Fix no such entity check for iam profiles and roles
2022-08-21 07:29:30 +02:00
Ole Markus With
578e27bb5f
Ignore entities not found when deleting IAM roles and profiles
2022-08-20 18:58:04 +02:00
Ole Markus With
535f597bce
Rely on tags alone when deleting instance profiles
2022-08-20 10:25:49 +02:00
Ole Markus With
e01b233b76
Warn instead of failure if we cannot read IAM role tags
...
Since we now try to get tags for all roles in the account, we may encounter roles we are not allowed to get e.g if there is an SCP or similar with explicit deny.
2022-08-20 09:53:10 +02:00
Ole Markus With
09b604867d
Don't skip roles that don't have cluster name prefix
...
This should plug the IAM roles leak. It probably a leftover from when roles did not have tags and we relied on the name of the role instead.
2022-08-20 09:07:15 +02:00
Peter Rifel
780d9cc2ea
Fix OIDC Provider cleanup
...
A race can occur where an OIDC provider being deleted is in the List results but is not found in the Get request
2022-04-28 20:27:24 -05:00
Ole Markus With
66e6ed0850
Delete ENIs tagged with k8s tags
2021-12-22 21:45:01 +01:00
Ciprian Hacman
ea7df00719
Run hack/update-gofmt.sh
2021-12-01 22:39:50 +02:00
John Gardiner Myers
b2e9d809b7
Support IPv6 private topology
2021-11-16 21:38:03 -08:00
angeloskaltsikis
b284537885
Fix that states AWS IAM Instance Profile blocks IAM Role
...
According to [aws-cli docs](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/iam/delete-role.html#examples ),
it is needed to delete any Instance profile that uses a role before deleting
the actual role. This fix adds a "blocks" statement to the IAM Instance Profile,
to declare that it should block the IAM Role deletion.
2021-11-03 18:28:36 +02:00
justinsb
fc04d91bc7
Recognize pending EC2 instances as needed deletion
...
They should be deleted as they will presumably be running shortly.
Also, this function is used from `kops dump cluster` where presumably
instances are more likely to be pending.
2021-09-18 16:10:29 -04:00
Ole Markus With
38f805c5ef
Make external-dns a drop-in for dns-controller
...
Support TXT records
2021-08-27 06:24:47 +02:00
Reilly Brogan
1b59233c8e
Debian 11: Release AMIs use same AWS Owner ID as Buster
2021-08-16 12:06:36 -05:00
Reilly Brogan
850bca8db6
Support Debian 11 Bullseye
2021-08-06 12:52:16 -05:00
John Gardiner Myers
4152667f28
Remove dead code
2021-07-14 20:05:47 -07:00
Ciprian Hacman
7bc629b683
Use DualStack API NLB for IPv6
2021-06-26 19:16:46 +03:00
Kubernetes Prow Robot
95dcaf2766
Merge pull request #11568 from h3poteto/cleanup-iam-8823
...
Cleanup InstanceProfile only that have ownership tags in delete cluster
2021-05-23 12:13:39 -07:00
AkiraFukushima
f37306c89a
Cleanup InstanceProfile only that have ownership tags in delete cluster
2021-05-23 11:13:07 +09:00
John Gardiner Myers
2cf967b2de
Fix deletion of IAM roles and policies
2021-05-21 17:46:15 -07:00
John Gardiner Myers
a41d0e21be
Delete cluster-owned service account roles upon cluster deletion
2021-05-15 12:06:45 -07:00
Jason Haugen
d07b067249
Add NTH queue-processor mode
2021-04-19 15:43:05 -05:00
Ole Markus With
5a8d47d45f
Fix bug with deleting OIDC providers
2021-03-19 20:07:22 +01:00
Bharath Vedartham
0c0767c0c9
Remove support for launch configurations
2021-03-09 09:04:15 +02:00
Peter Rifel
d52fd9f76c
Add tagging support to AWS Instance Profiles and OIDC Providers
2021-02-15 16:48:43 -06:00
Peter Rifel
6e6e072d93
Use AWS SDK const for IAM entities not found
2021-02-15 15:53:59 -06:00
Peter Rifel
c28c4c728d
Cleanup kops-controller Route53 record during cluster deletion
2021-02-03 22:41:49 -06:00
Matthew Wong
7e9392e72c
Treat InvalidDhcpOptionsId.NotFound as already-deleted
2020-12-28 17:27:34 -08:00
Ciprian Hacman
c8de1d3042
Handle cluster cleanup more gracefully
2020-11-12 18:21:04 +02:00
Ciprian Hacman
1d6a51aff9
Address review comments
2020-11-09 21:41:58 +02:00