chore(deps): update terraform github.com/terraform-aws-modules/terraform-aws-eks to v20 - abandoned #20

Require users to supply OS via ami_type and not via platform which is unable to distinquish between the number of variants supported today (#3068) (ef657bf)

`v20.13.1`

Compare Source

Bug Fixes

Correct syntax for correctly ignoring bootstrap_cluster_creator_admin_permissions and not all of access_config (#3056) (1e31929)

`v20.13.0`

Compare Source

Features

Starting with 1.30, do not use the cluster OIDC issuer URL by default in the identity provider config (#3055) (00f076a)

`v20.12.0`

Compare Source

Features

Support additional cluster DNS IPs with Bottlerocket based AMIs (#3051) (541dbb2)

`v20.11.1`

Compare Source

Bug Fixes

Ignore changes to bootstrap_cluster_creator_admin_permissions which is disabled by default (#3042) (c65d308)

`v20.11.0`

Compare Source

Features

Add SourceArn condition to Fargate profile trust policy (#3039) (a070d7b)

`v20.10.0`

Compare Source

Features

Add support for Pod Identity assocation on Karpenter sub-module (#3031) (cfcaf27)

`v20.9.0`

Compare Source

Features

Propagate ami_type to self-managed node group; allow using ami_type only (#3030) (74d3918)

`v20.8.5`

Compare Source

Bug Fixes

Forces cluster outputs to wait until access entries are complete (#3000) (e2a39c0)

`v20.8.4`

Compare Source

Bug Fixes

Pass nodeadm user data variables from root module down to nodegroup sub-modules (#2981) (84effa0)

`v20.8.3`

Compare Source

Bug Fixes

Ensure the correct service CIDR and IP family is used in the rendered user data (#2963) (aeb9f0c)

`v20.8.2`

Compare Source

Bug Fixes

Ensure a default ip_family value is provided to guarantee a CNI policy is attached to nodes (#2967) (29dcca3)

`v20.8.1`

Compare Source

Bug Fixes

Do not attach policy if Karpenter node role is not created by module (#2964) (3ad19d7)

`v20.8.0`

Compare Source

Features

Replace the use of toset() with static keys for node IAM role policy attachment (#2962) (57f5130)

`v20.7.0`

Compare Source

Features

Add supprot for creating placement group for managed node group (#2959) (3031631)

`v20.6.0`

Compare Source

Features

Add support for tracking latest AMI release version on managed nodegroups (#2951) (393da7e)

`v20.5.3`

Compare Source

Bug Fixes

Update AWS provider version to support AL2023_* AMI types; ensure AL2023 user data receives cluster service CIDR (#2960) (dfe4114)

`v20.5.2`

Compare Source

Bug Fixes

Use the launch_template_tags on the launch template (#2957) (0ed32d7)

`v20.5.1`

Compare Source

Bug Fixes

Update CI workflow versions to remove deprecated runtime warnings (#2956) (d14cc92)

`v20.5.0`

Compare Source

Features

Add support for AL2023 nodeadm user data (#2942) (7c99bb1)

`v20.4.0`

Compare Source

Features

Add support for enabling EFA resources (#2936) (7f472ec)

`v20.3.0`

Compare Source

Features

Add support for addon and identity provider custom tags (#2938) (f6255c4)

`v20.2.2`

Compare Source

20.2.2 (2024-02-21)

Bug Fixes

Replace Karpenter SQS policy dynamic service princpal DNS suffixes with static amazonaws.com (#2941) (081c762)

`v20.2.1`

Compare Source

20.2.1 (2024-02-08)

Bug Fixes

Karpenter enable_spot_termination = false should not result in an error (#2907) (671fc6e)

`v20.2.0`

Compare Source

Features

Allow enable/disable of EKS pod identity for the Karpenter controller (#2902) (cc6919d)

`v20.1.1`

Compare Source

20.1.1 (2024-02-06)

Bug Fixes

Update access entries kubernetes_groups default value to null (#2897) (1e32e6a)

`v20.1.0`

Compare Source

Features

Add output for access_policy_associations (#2904) (0d2a4c2)

`v20.0.1`

Compare Source

20.0.1 (2024-02-03)

Bug Fixes

Correct cluster access entry to create multiple policy associations per access entry (#2892) (4177913)

`v20.0.0`

Compare Source

⚠ BREAKING CHANGES

Replace the use of aws-auth configmap with EKS cluster access entry (#2858)

See the UPGRADE-20.0.md guide for further details on the changes and guidance for upgrading

List of backwards incompatible changes

Minium supported AWS provider version increased to v5.34
Minimum supported Terraform version increased to v1.3 to support Terraform state moved blocks as well as other advanced features
The resolve_conflicts argument within the cluster_addons configuration has been replaced with resolve_conflicts_on_create and resolve_conflicts_on_delete now that resolve_conflicts is deprecated
The default/fallback value for the preserve argument of cluster_addonsis now set to true. This has shown to be useful for users deprovisioning clusters while avoiding the situation where the CNI is deleted too early and causes resources to be left orphaned resulting in conflicts.
The Karpenter sub-module's use of the irsa naming convention has been removed, along with an update to the Karpenter controller IAM policy to align with Karpenter's v1beta1/v0.32 changes. Instead of referring to the role as irsa or pod_identity, its simply just an IAM role used by the Karpenter controller and there is support for use with either IRSA and/or Pod Identity (default) at this time
The aws-auth ConfigMap resources have been moved to a standalone sub-module. This removes the Kubernetes provider requirement from the main module and allows for the aws-auth ConfigMap to be managed independently of the main module. This sub-module will be removed entirely in the next major release.
Support for cluster access management has been added with the default authentication mode set as API_AND_CONFIG_MAP. This is a one way change if applied; if you wish to use CONFIG_MAP, you will need to set authentication_mode = "CONFIG_MAP" explicitly when upgrading.
Karpenter EventBridge rule key spot_interrupt updated to correct mis-spelling (was spot_interupt). This will cause the rule to be replaced

Additional changes

Added

A module tag has been added to the cluster control plane
Support for cluster access entries. The bootstrap_cluster_creator_admin_permissions setting on the control plane has been hardcoded to false since this operation is a one time operation only at cluster creation per the EKS API. Instead, users can enable/disable enable_cluster_creator_admin_permissions at any time to achieve the same functionality. This takes the identity that Terraform is using to make API calls and maps it into a cluster admin via an access entry. For users on existing clusters, you will need to remove the default cluster administrator that was created by EKS prior to the cluster access entry APIs - see the section Removing the default cluster administrator for more details.
Support for specifying the CloudWatch log group class (standard or infrequent access)
Native support for Windows based managed nodegroups similar to AL2 and Bottlerocket
Self-managed nodegroups now support instance_maintenance_policy and have added max_healthy_percentage, scale_in_protected_instances, and standby_instances arguments to the instance_refresh.preferences block

Modified

For sts:AssumeRole permissions by services, the use of dynamically looking up the DNS suffix has been replaced with the static value of amazonaws.com. This does not appear to change by partition and instead requires users to set this manually for non-commercial regions.
The default value for kms_key_enable_default_policy has changed from false to true to align with the default behavior of the aws_kms_key resource
The Karpenter default value for create_instance_profile has changed from true to false to align with the changes in Karpenter v0.32
The Karpenter variable create_instance_profile default value has changed from true to false. Starting with Karpenter v0.32.0, Karpenter accepts an IAM role and creates the EC2 instance profile used by the nodes

Removed

The complete example has been removed due to its redundancy with the other examples
References to the IRSA sub-module in the IAM repository have been removed. Once https://github.com/clowdhaus/terraform-aws-eks-pod-identity has been updated and moved into the organization, the documentation here will be updated to mention the new module.

`v19.21.0`

Compare Source

Features

Add tags for CloudWatch log group only (#2841) (4c5c97b)

`v19.20.0`

Compare Source

Features

Allow OIDC root CA thumbprint to be included/excluded (#2778) (091c680)

`v19.19.1`

Compare Source

19.19.1 (2023-11-10)

Bug Fixes

Remove additional conditional on Karpenter instance profile creation to support upgrading (#2812) (c36c8dc)

`v19.19.0`

Compare Source

Features

Update KMS module to avoid calling data sources when create_kms_key = false (#2804) (0732bea)

`v19.18.0`

Compare Source

Features

Add Karpenter v1beta1 compatibility (#2800) (aec2bab)

`v19.17.4`

Compare Source

19.17.4 (2023-10-30)

Bug Fixes

Updating license_specification result type (#2798) (ba0ebeb)

`v19.17.3`

Compare Source

19.17.3 (2023-10-30)

Bug Fixes

Correct key used on license_configuration_arn (#2796) (bd4bda2)

`v19.17.2`

Compare Source

19.17.2 (2023-10-10)

Bug Fixes

Karpenter node IAM role policies variable should be a map of strings, not list (#2771) (f4766e5)

`v19.17.1`

Compare Source

19.17.1 (2023-10-06)

Bug Fixes

Only include CA thumbprint in OIDC provider list (#2769) (7e5de15), closes #2732 #32847

`v19.17.0`

Compare Source

Features

Add support for allowed_instance_types on self-managed nodegroup ASG (#2757) (feee18d)

`v19.16.0`

Compare Source

Features

Add node_iam_role_arns local variable to check for Windows platform on EKS managed nodegroups (#2477) (adb47f4)

`v19.15.4`

Compare Source

19.15.4 (2023-07-27)

Bug Fixes

Use coalesce when desired default value is not null (#2696) (c86f8d4)

`v19.15.3`

Compare Source

19.15.3 (2023-06-09)

Bug Fixes

Snapshot permissions issue for Karpenter submodule (#2649) (6217d0e)

`v19.15.2`

Compare Source

19.15.2 (2023-05-30)

Bug Fixes

Ensure isra_tag_values can be tried before defaulting to cluster_name on Karpenter module (#2631) (6c56e2a)

`v19.15.1`

Compare Source

19.15.1 (2023-05-24)

Bug Fixes

Revert changes to ignore role_last_used (#2629) (e23139a)

`v19.15.0`

Compare Source

Features

Ignore changes to .aws_iam_role..role_last_used (#2628) (f8ea3d0)

`v19.14.0`

Compare Source

Features

Add irsa_tag_values variable (#2584) (aa3bdf1)

`v19.13.1`

Compare Source

19.13.1 (2023-04-18)

Bug Fixes

SQS queue encryption types selection (#2575) (969c7a7)

`v19.13.0`

Compare Source

Features

Add support for allowed_instance_type (#2552) (54417d2)

`v19.12.0`

Compare Source

Features

Add Autoscaling schedule for EKS managed node group (#2504) (4a2523c)

`v19.11.0`

Compare Source

Features

Add optional list of policy ARNs for attachment to Karpenter IRSA (#2537) (bd387d6)

`v19.10.3`

Compare Source

19.10.3 (2023-03-23)

Bug Fixes

Add aws_eks_addons.before_compute to the cluster_addons output (#2533) (f977d83)

`v19.10.2`

Compare Source

19.10.2 (2023-03-23)

Bug Fixes

Add Name tag for EKS cloudwatch log group (#2500) (e64a490)

`v19.10.1`

Compare Source

19.10.1 (2023-03-17)

Bug Fixes

Return correct status for mng (#2524) (e257daf)

`v19.10.0`

Compare Source

Features

Allow setting custom IRSA policy name for karpenter ([#

Configuration

📅 Schedule: Branch creation - "after 5am on friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

…orm-aws-eks to v20 Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux · 2025-10-31T21:11:15Z

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

red-hat-konflux bot force-pushed the konflux/mintmaker/release-0.9/github.com-terraform-aws-modules-terraform-aws-eks-20.x branch 3 times, most recently from 73fd2ef to 11e2c60 Compare November 2, 2024 14:43

red-hat-konflux bot force-pushed the konflux/mintmaker/release-0.9/github.com-terraform-aws-modules-terraform-aws-eks-20.x branch from 11e2c60 to 7346755 Compare November 8, 2024 22:10

red-hat-konflux bot force-pushed the konflux/mintmaker/release-0.9/github.com-terraform-aws-modules-terraform-aws-eks-20.x branch from 7346755 to b212a0e Compare November 29, 2024 08:09

red-hat-konflux bot force-pushed the konflux/mintmaker/release-0.9/github.com-terraform-aws-modules-terraform-aws-eks-20.x branch from b212a0e to a663031 Compare December 6, 2024 08:18

red-hat-konflux bot force-pushed the konflux/mintmaker/release-0.9/github.com-terraform-aws-modules-terraform-aws-eks-20.x branch from a663031 to 9c8733e Compare December 13, 2024 08:19

red-hat-konflux bot force-pushed the konflux/mintmaker/release-0.9/github.com-terraform-aws-modules-terraform-aws-eks-20.x branch 2 times, most recently from 493c326 to 760887c Compare December 20, 2024 20:48

red-hat-konflux bot force-pushed the konflux/mintmaker/release-0.9/github.com-terraform-aws-modules-terraform-aws-eks-20.x branch from 760887c to aeb3033 Compare December 27, 2024 08:38

red-hat-konflux bot force-pushed the konflux/mintmaker/release-0.9/github.com-terraform-aws-modules-terraform-aws-eks-20.x branch 3 times, most recently from cb47436 to 5620125 Compare January 24, 2025 09:06

red-hat-konflux bot force-pushed the konflux/mintmaker/release-0.9/github.com-terraform-aws-modules-terraform-aws-eks-20.x branch from 5620125 to 58791b9 Compare March 14, 2025 06:15

red-hat-konflux bot force-pushed the konflux/mintmaker/release-0.9/github.com-terraform-aws-modules-terraform-aws-eks-20.x branch from 58791b9 to 7545f4f Compare April 4, 2025 06:22

red-hat-konflux bot force-pushed the konflux/mintmaker/release-0.9/github.com-terraform-aws-modules-terraform-aws-eks-20.x branch from 7545f4f to 00a03c9 Compare April 18, 2025 18:04

red-hat-konflux bot force-pushed the konflux/mintmaker/release-0.9/github.com-terraform-aws-modules-terraform-aws-eks-20.x branch 2 times, most recently from cd72049 to 3c2866f Compare June 20, 2025 05:16

chore(deps): update terraform github.com/terraform-aws-modules/terraf…

4045679

…orm-aws-eks to v20 Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux bot force-pushed the konflux/mintmaker/release-0.9/github.com-terraform-aws-modules-terraform-aws-eks-20.x branch from 3c2866f to 4045679 Compare July 18, 2025 05:34

red-hat-konflux bot changed the title ~~chore(deps): update terraform github.com/terraform-aws-modules/terraform-aws-eks to v20~~ chore(deps): update terraform github.com/terraform-aws-modules/terraform-aws-eks to v20 - abandoned Oct 31, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update terraform github.com/terraform-aws-modules/terraform-aws-eks to v20 - abandoned #20

chore(deps): update terraform github.com/terraform-aws-modules/terraform-aws-eks to v20 - abandoned #20

Uh oh!

red-hat-konflux bot commented Oct 24, 2024 •

edited

Loading

Uh oh!

red-hat-konflux bot commented Oct 31, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

chore(deps): update terraform github.com/terraform-aws-modules/terraform-aws-eks to v20 - abandoned #20

Are you sure you want to change the base?

chore(deps): update terraform github.com/terraform-aws-modules/terraform-aws-eks to v20 - abandoned #20

Uh oh!

Conversation

red-hat-konflux bot commented Oct 24, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Features

Features

Features

Bug Fixes

Features

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Features

Features

Features

Features

Bug Fixes

Features

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Features

Bug Fixes

Features

Features

Features

Features

Features

Bug Fixes

Bug Fixes

Features

Features

Features

Features

Bug Fixes

Features

Features

Bug Fixes

Features

Features

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Features

Features

Bug Fixes

Bug Fixes

Bug Fixes

Features

Features

Features

20.2.2 (2024-02-21)

Bug Fixes

20.2.1 (2024-02-08)

Bug Fixes

Features

red-hat-konflux bot commented Oct 24, 2024 •

edited

Loading