justinsb
2a9343a168
Generate revisions of NLB objects, and introduce cleanup phase
...
This lets us safely make changes to otherwise immutable fields, in
particular for adding security groups to NLBs created without them.
We detect the older versions, and create deletion tasks to remove
them. These tasks can be deferred, and we expect them to be
deferred to a "prune" phase that runs after cluster apply.
Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>
2024-02-17 11:41:15 -05:00
justinsb
bd8cce06ae
refactor: Drop TargetGroups from NetworkLoadBalancer task
...
They are not needed, they were only used for dependency ordering (and
we now have that dependency on the split out listener task)
2024-02-04 18:09:17 -05:00
justinsb
c35c754eff
Refactor: Split out NLB Listener into its own task
...
This allows us to use more of our task machinery, including dependency
analysis. The intent is that we'll be able to support multiple
LoadBalancers and TargetGroups.
2024-02-04 15:52:25 -05:00
Kubernetes Prow Robot
b84ab1e0eb
Merge pull request #16289 from justinsb/nlb_should_set_scheme
...
Tweak: Set Scheme on NLB tasks for public load balancers
2024-01-28 21:13:35 -08:00
justinsb
0b8d3a52cb
Tweak: Set Scheme on NLB tasks for public load balancers
...
This avoids a spurious diff.
2024-01-28 16:19:37 -05:00
justinsb
169c96ba11
refactor: NetworkLoadBalancer Name should match Name tag
...
It was actually the terraform name, and didn't match the tag.
This change should have no externally-visible effect.
2024-01-28 16:19:02 -05:00
John Gardiner Myers
2fbc7cf979
aws: Attach security groups to NLBs
2023-10-06 22:33:31 -07:00
John Gardiner Myers
8cc617afd9
Make NLBs dualstack when they're in IPv6-capable subnets
2023-05-11 14:46:23 -07:00
John Gardiner Myers
7c3e32369a
Refactor Context into separate cloudup and nodeup types
2022-12-17 17:42:46 -08:00
Ciprian Hacman
3a046ded6b
aws: Add support for managing target group attributes
2022-12-07 18:56:14 +02:00
John Gardiner Myers
235aa61594
v1alpha3: move networking fields under networking
2022-12-02 19:19:59 -08:00
John Gardiner Myers
d39ba74bd7
Change the control-plane IG role to "ControlPlane" in v1alpha3 API
2022-11-22 17:05:29 -08:00
Ciprian Hacman
8f79c9bd68
Replace fi.Bool/Float*/Int*/String() with fi.PtrTo()
2022-11-19 03:45:22 +02:00
John Gardiner Myers
66eb76ada5
aws: delete CLBs after migration to NLB
2022-11-05 14:34:57 -07:00
John Gardiner Myers
25b7dc21fa
Create NLB instead of CLB for bastion
2022-10-29 17:00:00 -07:00
Kubernetes Prow Robot
bffc60202c
Merge pull request #13113 from hierynomus/issue-12925
...
Allow PrefixList for sshAccess and kubernetesApiAccess
2022-02-15 07:20:03 -08:00
Jeroen van Erp
255a0322c9
Allow PrefixList for sshAccess and kubernetesApiAccess
...
Signed-off-by: Jeroen van Erp <jeroen@hierynomus.com>
2022-02-15 14:37:28 +01:00
John Gardiner Myers
5385381633
Use IPv6-only subnets for worker nodes in private IPv6 topology
2022-01-06 21:00:00 -08:00
John Gardiner Myers
7e0e97b566
Rename bastionPublicName in v1alpha3 API
2021-12-02 19:34:48 -08:00
Simone Sciarrati
61763d488a
Add option to create an internal load balancer for the bastion
2021-09-18 20:47:55 +02:00
Ole Markus With
aefa906491
Do not set both CIDR and IPv6CIDR on sg rules
2021-07-03 07:57:35 +02:00
Ciprian Hacman
7969f57d07
Address review comments
2021-06-26 21:27:00 +03:00
John Gardiner Myers
7c9e7e9286
Make Lifecycle field non-pointer
2021-06-02 23:02:16 -07:00
Ciprian Hacman
cedbe1f360
Add initial support for configuring IPv6 with AWS
2021-05-19 06:21:07 +03:00
Ciprian Hacman
137fe6c2bb
Move firewall to awsmodel
2021-04-30 14:50:46 +03:00
Ole Markus With
d415fdf1a1
Move bastion model to awsmodel
2021-03-07 22:06:20 +01:00