Peter Rifel
78d8fb6cdd
Revoke security groups via Rule ID
2024-04-13 16:03:32 -04:00
Peter Rifel
8180a600b5
Fix panic
2024-04-13 16:03:31 -04:00
Peter Rifel
dd3d64943f
Migrate remaining EC2 resource types to aws-sdk-go-v2
2024-04-13 16:01:39 -04:00
Peter Rifel
f0c0c29121
Migrate EC2 Networking resource types to aws-sdk-go-v2
2024-04-13 16:01:39 -04:00
Peter Rifel
13df20c702
Migrate route53 to aws-sdk-go-v2
2024-04-01 11:02:40 -05:00
Peter Rifel
d4d39eb0fe
Migrate autoscaling to aws-sdk-go-v2
2024-03-31 23:04:06 -05:00
Peter Rifel
0dcbf23df2
Migrate aws-sdk-go/aws to aws-sdk-go-v2/aws
2024-03-31 16:56:31 -05:00
Peter Rifel
2a1faaa6ef
Consolidate appends
2024-03-31 11:32:22 -05:00
Peter Rifel
b18a00de43
Use wrapper for IAM errors
2024-03-31 11:32:20 -05:00
Peter Rifel
2626a354c5
Migrate ELB to aws-sdk-go-v2
2024-03-31 07:28:28 -05:00
Peter Rifel
7b8bcc46d9
Migrate elbv2 to aws-sdk-go-v2
2024-03-30 13:53:40 -05:00
Peter Rifel
8882bcbafb
Migrate IAM to aws-sdk-go-v2
2024-03-30 10:46:57 -05:00
Peter Rifel
e7a8b65c29
Migrate SQS to aws-sdk-go-v2
2024-03-30 06:53:56 -05:00
Peter Rifel
8191e78838
Update EventBridge to aws-sdk-go-v2
2024-03-29 07:05:36 -05:00
justinsb
2a9343a168
Generate revisions of NLB objects, and introduce cleanup phase
...
This lets us safely make changes to otherwise immutable fields, in
particular for adding security groups to NLBs created without them.
We detect the older versions, and create deletion tasks to remove
them. These tasks can be deferred, and we expect them to be
deferred to a "prune" phase that runs after cluster apply.
Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>
2024-02-17 11:41:15 -05:00
Kubernetes Prow Robot
8f71e68d68
Merge pull request #16339 from justinsb/refactor_targetgroups
...
target group: refactor discovery into awsup
2024-02-14 14:33:00 -08:00
justinsb
eb27e30153
target group: refactor discovery into awsup
...
This sets us up to support multiple generations of target groups,
needed if we want to support adding SecurityGroups to the NLB.
2024-02-14 15:48:50 -05:00
justinsb
d50f1968a9
deletion: tolerate concurrent SQS queue deletion
...
Ignore the not-found error.
2024-02-10 14:29:45 -05:00
justinsb
314e2b954b
Refactor: Move NLB listing function into awsup
...
As pruning becomes more a part of tasks, there is more overlap between
`kops update cluster` and `kops delete cluster`.
2024-01-30 04:43:48 +02:00
justinsb
2fb39dedc8
toolbox dump: output correct type for target groups
...
We were previously outputing them with the load-balancer target value.
2024-01-27 13:22:38 -05:00
Ciprian Hacman
fd86a0cb9d
aws: Ignore InvalidRouteTableID.NotFound errors during cluster deletion
2024-01-15 06:04:30 +02:00
Ciprian Hacman
d71879f023
aws: Terminate ASG instances in batches of 100 instances
2024-01-13 11:01:30 +02:00
Ciprian Hacman
005b693943
Revert "aws: Skip deleting ASG instances without volumes"
2024-01-12 18:07:10 +02:00
Ciprian Hacman
793086a01a
aws: Skip deleting ASG instances without volumes
2024-01-06 09:31:23 +02:00
justinsb
f79d2da6f6
Thread context through some slower AWS tasks
...
There are still too many context.TODOs here for this to join all the
way up, but we should be able to better understand the slowest tasks.
2023-11-09 08:17:10 -05:00
justinsb
cffd473eb0
dump: include AWS route table objects
2023-11-06 07:50:35 -05:00
justinsb
a6b963b127
dump: actually dump the gateway objects
...
I had forgotten to populate the object itself, so it was not appearing
in the raw dump.
2023-10-29 08:13:43 -04:00
justinsb
094b57aa8e
dump: include the various gateways on AWS
...
I think we were leaking egress-only-internet-gateways, it would be
helpful to see their status in the dump.
2023-10-28 16:23:38 -04:00
Ciprian Hacman
1aecb5304d
aws: Filter ENI list by VPC
2023-09-23 05:25:56 +03:00
Peter Rifel
54c99b5ea6
Filter for unattached ENIs, matching the client-side filtering we do afterwards
...
Signed-off-by: Peter Rifel <pgrifel@gmail.com>
2023-09-06 21:38:34 -05:00
Peter Rifel
7ec30b4a98
Paginate DescribeNetworkInterfaces calls
...
This should help with VPCs containing large numbers of ENIs
Signed-off-by: Peter Rifel <pgrifel@gmail.com>
2023-09-06 21:38:25 -05:00
Ciprian Hacman
8a2f74ce46
aws: Ignore volumes set to delete on instance termination
2023-08-14 18:47:38 +03:00
Peter Rifel
e0c3b8cd36
Rename eventbridge rule in toolbox dump output
...
`eventbridge` itself is too generic given there are many resource types within the eventbridge service
2023-07-30 09:25:40 -05:00
John Gardiner Myers
1e7576c9c5
Upgrade external-dns to v0.13.5
2023-05-30 17:47:59 -07:00
John Gardiner Myers
55b46073b7
Don't drain on rebalance recommendations in SQS mode unless configured
2022-12-11 18:21:43 -08:00
Ciprian Hacman
f7d434ee2c
Refactor ListResources to not require passing the Cluster object
2022-12-05 09:10:58 +02:00
Ciprian Hacman
4868c2bfaf
aws: Skip Route53 cleanup for clusters without DNS
2022-12-02 10:57:37 +02:00
John Gardiner Myers
87925bf0ca
Remove CloudFormation support
2022-11-22 21:02:50 -08:00
John Gardiner Myers
d39ba74bd7
Change the control-plane IG role to "ControlPlane" in v1alpha3 API
2022-11-22 17:05:29 -08:00
Ciprian Hacman
d29812fc6e
Replace fi.Bool/Float*/Int*/StringValue() with fi.ValueOf
2022-11-19 03:45:23 +02:00
Ciprian Hacman
8f79c9bd68
Replace fi.Bool/Float*/Int*/String() with fi.PtrTo()
2022-11-19 03:45:22 +02:00
John Gardiner Myers
71017f0307
Use bastion to dump private instances
2022-11-09 21:34:04 -08:00
John Gardiner Myers
8675336725
Also dump logs from IPv6 nodes
2022-11-05 16:10:53 -07:00
John Gardiner Myers
eb69f8ac60
Remove well known account aliases for unsupported distros
2022-11-01 16:20:27 -07:00
John Gardiner Myers
423a04900f
Fix typo
2022-10-27 11:07:17 -07:00
Ciprian Hacman
85026145a1
Always infer gossip DNS from cluster name
2022-10-02 12:54:37 +03:00
justinsb
90a484f049
AWS IAM Role listing: don't ignore "other" errors
...
If the error was an AWS error, but not one of the recognized ones, we
ignored it.
2022-09-01 07:57:03 -04:00
Ole Markus With
eb003a19b1
Fix bugs and typo in iam resource deletion logic
2022-08-21 20:01:20 +02:00
Ole Markus With
084ecac2bb
Fix no such entity check for iam profiles and roles
2022-08-21 07:29:30 +02:00
Ole Markus With
578e27bb5f
Ignore entities not found when deleting IAM roles and profiles
2022-08-20 18:58:04 +02:00