Merge pull request #17 from terraform-modules/docs-133-134

update 1.34, 1.35 and write docs
terraform-modules · Jul 7, 2026 · c21fb09 · c21fb09
2 parents ec94da0 + f365040
commit c21fb09
Show file tree

Hide file tree

Showing 275 changed files with 13,114 additions and 29 deletions.
diff --git a/examples/full-cluster-tf-upgrade/1.32-1.33.diffs b/examples/full-cluster-tf-upgrade/1.32-1.33.diffs
@@ -0,0 +1,217 @@
+diff -Nuar 1.32/charts.yml 1.33/charts.yml
+--- 1.32/charts.yml	2026-06-16 18:02:12.653483154 -0400
++++ 1.33/charts.yml	2026-06-16 18:02:15.808801464 -0400
+@@ -2,13 +2,13 @@
+   documentation: "https://artifacthub.io/packages/helm/cluster-autoscaler/cluster-autoscaler"
+   name: "cluster-autoscaler"
+   repository: "https://kubernetes.github.io/autoscaler"
+-  version: "9.52.1"
++  version: "9.47.0"
+   use_remote: true
+ cert-manager:
+   documetation: "https://artifacthub.io/packages/helm/cert-manager/cert-manager"
+   name: "cert-manager"
+   repository: "https://charts.jetstack.io"
+-  version: "1.19.1"
++  version: "1.19.5"
+   use_remote: true
+ metrics-server:
+ #  documentation: "https://artifacthub.io/packages/helm/bitnami/metrics-server"
+diff -Nuar 1.32/images.yml 1.33/images.yml
+--- 1.32/images.yml	2026-06-16 18:02:12.764494352 -0400
++++ 1.33/images.yml	2026-06-16 18:02:15.813801969 -0400
+@@ -8,7 +8,7 @@
+   source_tag: null
+   enabled: false
+ #  tag: "1.0.6"
+-  tag: "1.8.0"
++  tag: "1.9.0"
+ cluster-autoscaler:
+   documentation: "https://github.com/kubernetes/autoscaler/releases"
+   name: "cluster-autoscaler"
+@@ -18,7 +18,7 @@
+   source_image: "autoscaling/cluster-autoscaler"
+   source_tag: null
+   enabled: true
+-  tag: "v1.34.1"
++  tag: "v1.33.4"
+ cert-manager-controller:
+   documentation: "https://cert-manager.io/docs/releases/"
+   name: "cert-manager-controller"
+@@ -28,7 +28,7 @@
+   source_image: "jetstack/cert-manager-controller"
+   source_tag: null
+   enabled: true
+-  tag: "v1.19.1"
++  tag: "v1.19.5"
+ cert-manager-cainjector:
+   documentation: "https://cert-manager.io/docs/releases/"
+   name: "cert-manager-cainjector"
+@@ -38,7 +38,7 @@
+   source_image: "jetstack/cert-manager-cainjector"
+   source_tag: null
+   enabled: true
+-  tag: "v1.19.1"
++  tag: "v1.19.5"
+ cert-manager-webhook:
+   documentation: "https://cert-manager.io/docs/releases/"
+   name: "cert-manager-webhook"
+@@ -48,7 +48,7 @@
+   source_image: "jetstack/cert-manager-webhook"
+   source_tag: null
+   enabled: true
+-  tag: "v1.19.1"
++  tag: "v1.19.5"
+ cert-manager-ctl:
+   documentation: "https://cert-manager.io/docs/releases/"
+   name: "cert-manager-ctl"
+@@ -59,7 +59,7 @@
+   source_tag: null
+   enabled: false
+ #  tag: "v1.16.2"
+-  tag: "v1.14.7"
++  tag: "v1.19.5"
+ cert-manager-startupapicheck:
+   documentation: "https://cert-manager.io/docs/releases/"
+   name: "cert-manager-startupapicheck"
+@@ -69,7 +69,7 @@
+   source_image: "jetstack/cert-manager-startupapicheck"
+   source_tag: null
+   enabled: true
+-  tag: "v1.19.1"
++  tag: "v1.19.5"
+ metrics-server:
+ #  documentation: "https://hub.docker.com/r/bitnami/metrics-server/tags"
+   name: "metrics-server"
+@@ -93,7 +93,7 @@
+   source_image: "istio/operator"
+   source_tag: null
+   enabled: true
+-  tag: "1.23.6"
++  tag: "1.26.8"
+ istio-pilot:
+   documentation: "https://istio.io/latest/docs/releases/supported-releases"
+   name: "istio/pilot"
+@@ -104,7 +104,7 @@
+   source_tag: null
+   enabled: true
+   #  tag: "1.25.3"
+-  tag: "1.28.0"
++  tag: "1.26.8"
+ istio-proxyv2:
+   documentation: "https://istio.io/latest/docs/releases/supported-releases"
+   name: "istio/proxyv2"
+@@ -115,7 +115,7 @@
+   source_tag: null
+   enabled: true
+   #  tag: "1.25.3"
+-  tag: "1.28.0"
++  tag: "1.26.8"
+ prometheus:
+   documentation: "https://hub.docker.com/r/bitnami/prometheus/tags"
+   name: "prometheus"
+@@ -128,7 +128,7 @@
+   enabled: true
+ #  tag: "3.0.1"
+ #  tag: "v2.54.0"
+-  tag: "v3.8.0"
++  tag: "v3.9.1"
+ prometheus-operator:
+ #  documentation: "https://hub.docker.com/r/bitnami/prometheus-operator/tags"
+   name: "prometheus-operator"
+@@ -143,7 +143,7 @@
+   enabled: true
+ #  tag: "0.79.2"
+ ##  tag: "v0.74.0"
+-  tag: "v0.87.0"
++  tag: "v0.89.0"
+ alertmanager:
+ #  documentation: "https://hub.docker.com/r/bitnami/alertmanager/tags"
+   name: "alertmanager"
+@@ -155,4 +155,4 @@
+   enabled: true
+ #  tag: "0.27.0"
+ ##  tag: "v0.28.0"
+-  tag: "v0.29.0"
++  tag: "v0.31.1"
+diff -Nuar 1.32/main.tf 1.33/main.tf
+--- 1.32/main.tf	2026-06-16 18:02:12.766494554 -0400
++++ 1.33/main.tf	2026-06-16 18:02:15.833803987 -0400
+@@ -97,7 +97,7 @@
+   node_group_name = format("%v%v-nodegroup", local._prefixes["eks"], var.cluster_name)
+   node_role_arn   = module.role_eks-nodegroup.role_arn
+   subnet_ids      = local.subnets
+-  ami_type        = "AL2_x86_64"
++  ami_type        = "AL2023_x86_64_STANDARD"
+   #  instance_types = [var.eks_instance_type]
+   #  disk_size      = var.eks_instance_disk_size
+
+@@ -230,17 +230,17 @@
+     }
+   }
+
+-  user_data = base64encode(local.eks-node-private-userdata)
++  # user_data = base64encode(local.eks-node-private-userdata)
+ }
+
+ #### User data for worker launch
+
+-locals {
+-  eks-node-private-userdata = templatefile(
+-    "${path.module}/templates/node-private-userdata.tmpl", {
+-      endpoint     = aws_eks_cluster.eks_cluster.endpoint
+-      cluster_ca   = aws_eks_cluster.eks_cluster.certificate_authority[0].data
+-      cluster_name = var.cluster_name
+-    }
+-  )
+-}
++# locals {
++#   eks-node-private-userdata = templatefile(
++#     "${path.module}/templates/node-private-userdata.tmpl", {
++#       endpoint     = aws_eks_cluster.eks_cluster.endpoint
++#       cluster_ca   = aws_eks_cluster.eks_cluster.certificate_authority[0].data
++#       cluster_name = var.cluster_name
++#     }
++#   )
++# }
+diff -Nuar 1.32/README.md 1.33/README.md
+--- 1.32/README.md	2026-06-16 18:02:12.637481539 -0400
++++ 1.33/README.md	2026-06-16 18:02:12.786496572 -0400
+@@ -1,6 +1,6 @@
+-# EKS Full Cluster Example 1.32
++# EKS Full Cluster Example 1.33
+
+-This is for deploying an EKS cluster with 1.32.
++This is for deploying an EKS cluster with 1.33.
+
+ ## About
+
+@@ -75,7 +75,7 @@
+
+ ```hcl
+ cluster_name           = "org-project-env"
+-cluster_version        = "1.32"
++cluster_version        = "1.33"
+ region                 = "us-gov-east-1"
+ domain                 = "org-project-env.env.domain.census.gov"
+ contact_email          = "org-project-env-group-mailing-list@census.gov"
+@@ -466,3 +466,7 @@
+
+ - 1.2.0 -- 2025-11-24
+   - update to 1.32
++
++- 2.7.0 -- 2026-04-16
++  - update to 1.33
++  - only addons updated from 1.32.  needs more changes to make it work
+diff -Nuar 1.32/settings.auto.tfvars.example 1.33/settings.auto.tfvars.example
+--- 1.32/settings.auto.tfvars.example	2026-06-16 18:02:12.771495059 -0400
++++ 1.33/settings.auto.tfvars.example	2026-06-16 18:02:12.811499094 -0400
+@@ -3,7 +3,7 @@
+ # domain_name is removed
+
+ cluster_name           = "{org}-{project}-{env}"
+-cluster_version        = "1.32"
++cluster_version        = "1.33"
+ region                 = "us-gov-east-1"	## set to proper region where this will be deployed
+ contact_email          = ""	## enter valid @census.gov email for the customer's group contact list
+ domain		       = "NAME"  ## set to correct domain if using a shared vpc
diff --git a/examples/full-cluster-tf-upgrade/1.33-1.34.diffs b/examples/full-cluster-tf-upgrade/1.33-1.34.diffs
@@ -0,0 +1,178 @@
+diff -Nuar 1.33/charts.yml 1.34/charts.yml
+--- 1.33/charts.yml	2026-06-16 18:02:15.808801464 -0400
++++ 1.34/charts.yml	2026-06-22 13:00:36.851798270 -0400
+@@ -2,13 +2,13 @@
+   documentation: "https://artifacthub.io/packages/helm/cluster-autoscaler/cluster-autoscaler"
+   name: "cluster-autoscaler"
+   repository: "https://kubernetes.github.io/autoscaler"
+-  version: "9.47.0"
++  version: "9.57.0"
+   use_remote: true
+ cert-manager:
+   documetation: "https://artifacthub.io/packages/helm/cert-manager/cert-manager"
+   name: "cert-manager"
+   repository: "https://charts.jetstack.io"
+-  version: "1.19.5"
++  version: "1.20.2"
+   use_remote: true
+ metrics-server:
+ #  documentation: "https://artifacthub.io/packages/helm/bitnami/metrics-server"
+@@ -17,7 +17,7 @@
+ #  repository: "https://charts.bitnami.com/bitnami"
+   repository: "https://kubernetes-sigs.github.io/metrics-server"
+ #  version: "7.2.14"
+-  version: "3.13.0"
++  version: "3.13.1"
+   use_remote: true
+ # new one, does not work yet
+ #  repository: "oci://registry-1.docker.io/bitnamicharts"
+diff -Nuar 1.33/images.yml 1.34/images.yml
+--- 1.33/images.yml	2026-06-16 18:02:15.813801969 -0400
++++ 1.34/images.yml	2026-06-22 13:05:12.706785714 -0400
+@@ -8,7 +8,7 @@
+   source_tag: null
+   enabled: false
+ #  tag: "1.0.6"
+-  tag: "1.9.0"
++  tag: "1.13.0"
+ cluster-autoscaler:
+   documentation: "https://github.com/kubernetes/autoscaler/releases"
+   name: "cluster-autoscaler"
+@@ -18,7 +18,7 @@
+   source_image: "autoscaling/cluster-autoscaler"
+   source_tag: null
+   enabled: true
+-  tag: "v1.33.4"
++  tag: "v1.34.1"
+ cert-manager-controller:
+   documentation: "https://cert-manager.io/docs/releases/"
+   name: "cert-manager-controller"
+@@ -28,7 +28,7 @@
+   source_image: "jetstack/cert-manager-controller"
+   source_tag: null
+   enabled: true
+-  tag: "v1.19.5"
++  tag: "v1.20.2"
+ cert-manager-cainjector:
+   documentation: "https://cert-manager.io/docs/releases/"
+   name: "cert-manager-cainjector"
+@@ -38,7 +38,7 @@
+   source_image: "jetstack/cert-manager-cainjector"
+   source_tag: null
+   enabled: true
+-  tag: "v1.19.5"
++  tag: "v1.20.2"
+ cert-manager-webhook:
+   documentation: "https://cert-manager.io/docs/releases/"
+   name: "cert-manager-webhook"
+@@ -48,7 +48,7 @@
+   source_image: "jetstack/cert-manager-webhook"
+   source_tag: null
+   enabled: true
+-  tag: "v1.19.5"
++  tag: "v1.20.2"
+ cert-manager-ctl:
+   documentation: "https://cert-manager.io/docs/releases/"
+   name: "cert-manager-ctl"
+@@ -59,7 +59,7 @@
+   source_tag: null
+   enabled: false
+ #  tag: "v1.16.2"
+-  tag: "v1.19.5"
++  tag: "v1.14.7"
+ cert-manager-startupapicheck:
+   documentation: "https://cert-manager.io/docs/releases/"
+   name: "cert-manager-startupapicheck"
+@@ -69,7 +69,7 @@
+   source_image: "jetstack/cert-manager-startupapicheck"
+   source_tag: null
+   enabled: true
+-  tag: "v1.19.5"
++  tag: "v1.19.1"
+ metrics-server:
+ #  documentation: "https://hub.docker.com/r/bitnami/metrics-server/tags"
+   name: "metrics-server"
+@@ -83,7 +83,7 @@
+   source_tag: null
+   enabled: true
+ ##  tag: "v0.7.2"
+-  tag: "v0.8.0"
++  tag: "v0.8.1"
+ istio-operator:
+   documentation: "https://istio.io/latest/docs/releases/supported-releases"
+   name: "istio/operator"
+@@ -93,7 +93,7 @@
+   source_image: "istio/operator"
+   source_tag: null
+   enabled: true
+-  tag: "1.26.8"
++  tag: "1.23.6"
+ istio-pilot:
+   documentation: "https://istio.io/latest/docs/releases/supported-releases"
+   name: "istio/pilot"
+@@ -104,7 +104,7 @@
+   source_tag: null
+   enabled: true
+   #  tag: "1.25.3"
+-  tag: "1.26.8"
++  tag: "1.30.1"
+ istio-proxyv2:
+   documentation: "https://istio.io/latest/docs/releases/supported-releases"
+   name: "istio/proxyv2"
+@@ -115,7 +115,7 @@
+   source_tag: null
+   enabled: true
+   #  tag: "1.25.3"
+-  tag: "1.26.8"
++  tag: "1.30.1"
+ prometheus:
+   documentation: "https://hub.docker.com/r/bitnami/prometheus/tags"
+   name: "prometheus"
+@@ -128,7 +128,7 @@
+   enabled: true
+ #  tag: "3.0.1"
+ #  tag: "v2.54.0"
+-  tag: "v3.9.1"
++  tag: "v3.12.0"
+ prometheus-operator:
+ #  documentation: "https://hub.docker.com/r/bitnami/prometheus-operator/tags"
+   name: "prometheus-operator"
+@@ -143,7 +143,7 @@
+   enabled: true
+ #  tag: "0.79.2"
+ ##  tag: "v0.74.0"
+-  tag: "v0.89.0"
++  tag: "v0.91.0"
+ alertmanager:
+ #  documentation: "https://hub.docker.com/r/bitnami/alertmanager/tags"
+   name: "alertmanager"
+@@ -155,4 +155,4 @@
+   enabled: true
+ #  tag: "0.27.0"
+ ##  tag: "v0.28.0"
+-  tag: "v0.31.1"
++  tag: "v0.33.0"
+diff -Nuar 1.33/README.md 1.34/README.md
+--- 1.33/README.md	2026-06-16 18:02:12.786496572 -0400
++++ 1.34/README.md	2026-06-22 13:00:55.030642605 -0400
+@@ -1,6 +1,6 @@
+-# EKS Full Cluster Example 1.33
++# EKS Full Cluster Example 1.34
+
+-This is for deploying an EKS cluster with 1.33.
++This is for deploying an EKS cluster with 1.34.
+
+ ## About
+
+diff -Nuar 1.33/settings.auto.tfvars.example 1.34/settings.auto.tfvars.example
+--- 1.33/settings.auto.tfvars.example	2026-06-16 18:02:12.811499094 -0400
++++ 1.34/settings.auto.tfvars.example	2026-06-22 12:59:33.918413360 -0400
+@@ -3,7 +3,7 @@
+ # domain_name is removed
+
+ cluster_name           = "{org}-{project}-{env}"
+-cluster_version        = "1.33"
++cluster_version        = "1.34"
+ region                 = "us-gov-east-1"	## set to proper region where this will be deployed
+ contact_email          = ""	## enter valid @census.gov email for the customer's group contact list
+ domain		       = "NAME"  ## set to correct domain if using a shared vpc