v2.1.2

What's Changed

• PLAT-6671: STS+OIDC perms for iam bootstrap by @Secretions in #101

Full Changelog: v2.1.1...v2.1.2

v2.1.1

What's Changed

• PLAT-6671: Iam boostrap updates by @Secretions in #93
• Miguelhar.plat 6528 OIDC by @miguelhar in #92
• Miguelhar.plat 6697.hotfix merge by @miguelhar in #96
• PLAT-6617 Use a permanent role to create eks. by @miguelhar in #94
• Update aws v5 deprecated params by @miguelhar in #100
• PLAT-6711: Attach default backup policy by @Secretions in #97
• allow optional ENI prefix delegation by @steved in #99
• DOM-45710 • Enable access to dev-aws-eks-dataplane by @adp312 in #98

New Contributors

• @adp312 made their first contribution in #98

Full Changelog: v2.1.0...v2.1.1

v2.1.0

⚠️ KMS is enabled by default. If you used a version of this module earlier than v2.0.0 and did not specify the kms.enabled property you will need to add the following to your configuration in order to upgrade to this version. Otherwise it will enable KMS and result in recreation of resources and data loss.

 kms = {
    enabled = false
  }

What's Changed

• update required TF version to 1.4 by @steved in #83
• Address new checkov errors; kubernetes version and cloudwatch log group retention by @steved in #88
• support update from refactored network module by @steved in #80
• PLAT-6619: Fix user-provided KMS & don't provision unused EKS KMS key by @Secretions in #84
• Test provided kms key by @miguelhar in #91
• [PLAT-6594] Use t3 instance type by @msingermann-domino in #90
• PLAT-6614 handle kms.enabled by @miguelhar in #87
• PLAT-6697 Add support for gov cloud by @miguelhar in #95

New Contributors

• @msingermann-domino made their first contribution in #90

Full Changelog: v2.0.3...v2.1.0

v2.0.3

What's Changed

• fix support for EKS master roles passed in variables by @steved in #78
• Refactor split submodule scripts by @Secretions in #79

Full Changelog: v2.0.2...v2.0.3

v2.0.2

What's Changed

• Fix S3 provisioning by @Secretions in #75

Full Changelog: v2.0.1...v2.0.2

v1.2.5

Patch release to fix April 2023 changes to S3 bucket provisioning

v2.0.1

What's Changed

• Do calico install at the end by @Secretions in #71
• set IdentitiesOnly=yes when SSHing to bastion by @steved in #72

Full Changelog: v2.0.0...v2.0.1

v2.0.0

What's Changed

• KMS is enabled by default.
• SSM cloudwatch integration by @domino-pablo-rodriguez in #59
• refractor variables by @miguelhar in #60
• Miguelhar.var fix by @miguelhar in #66
• Ci loads vars from terraform.tfvars instead of env var. by @miguelhar in #68
• use a longer duration because aws-cli/setup does not support running on destroy by @steved in #67
• Adds a simple sh to run a tf plan on the examples by @miguelhar in #69
• Add dropped addons, rm defaults from submods by @miguelhar in #70

New Contributors

• @domino-pablo-rodriguez made their first contribution in #59

Full Changelog: v1.4.3...v2.0.0

v1.4.3

What's Changed

• Adjust node security group rules (APIServices) by @fraenkel in #62

Full Changelog: v1.4.2...v1.4.3

v1.4.2

What's Changed

• ignore CKV2_AWS_62, S3 event notifications requirement by @steved in #58
• PLAT-6387 registry defaults to docker.io, set to quay by @miguelhar in #61

Full Changelog: v1.4.1...v1.4.2