Code

EKS in AWS Curvenote account#2652

Code

Merged

manics merged 53 commits intojupyterhub:mainjupyterhub/mybinder.org-deploy:mainfrom manics:aws-curvenotemanics/mybinder.org-deploy:aws-curvenoteCopy head branch name to clipboardSep 25, 2023

+1,231

Commits

Commits on Jul 12, 2023

• curvenote-aws: bootstrap and vpc

  manics

  committed
  7e44698

• EKS with permissions boundaries and other workarounds

  manics

  committed
  6518eab

• Use remote state and dynamodb lock

  manics

  committed
  54057f1

• Add serviceaccounts.tf

  manics

  committed
  ece451d

• Update version

  manics

  committed
  de030c8

• Service link role deployed separately, this now works!

  manics

  committed
  408510a

• terraform/aws/curvenote linting/formatting

  manics

  committed
  e061b7c

• Move terraform lint to separate workflow

  manics

  committed
  16cccd9

• Do not gitignore .terraform.lock.hcl

  Show description for 8504574
  manics

  committed
  8504574

• Update README, add OIDC tf that can be run by admin

  manics

  committed
  e964117

• Manually created OIDC IRSA is now indicated with var oidc_created

  manics

  committed
  c872505

• oidc_created=true

  manics

  committed
  72411d6

• Add GitHub OIDC

  Show description for 565ebef
  manics

  committed
  565ebef

• Add GitHub OIDC for manics/mybinder.org-deploy for initial dev

  manics

  committed
  d1feb31

• Add GH workflow to check EKS access

  manics

  committed
  0ccb81f

• GitHub OIDC: fix typo (eks not ecr)

  manics

  committed
  a94c8de

• Ignore .terraform.lock.hcl apart from aws/curvenote

  manics

  committed
  a2b83b6

• Need kubernetes provider to manage EKS auth configmap

  manics

  committed
  b07dd43

• Add hashicorp/kubernetes version, update versions

  manics

  committed
  de4e919

• Add role to allow anyone in AWS account to access EKS as cluster admin

  manics

  committed
  d5236eb

• Add binderhub-eks-access to aws-auth configmap

  manics

  committed
  693bb50

• Parameterise number of nodes, disk size, bottlerocket

  manics

  committed
  2449223

• Update VPC, fix ECR token IAM permissions

  manics

  committed
  b91432b

• Update serviceaccounts

  manics

  committed
  127eb63

• Update curvenote terraform README

  manics

  committed
  f44c97c

• aws-dev GH workflow: include main

  manics

  committed
  2089dac

• Some tfsec fixes

  manics

  committed
  604d592

• Couple more cleanups

  manics

  committed
  ef445dd

• aws-curvenote: allow all AWS roles to manage KMS key

  manics

  committed
  77e9198

• Set kms_key_administrators to avoid changing when deployed by different users/roles

  manics

  committed
  814891d

• aws/curvenote: Comment out outputs

  manics

  committed
  7a98cf2

• Deploy aws/curvenote Terraform

  manics

  committed
  995fa77

• Update aws/curvenote README to explain GH workflow

  manics

  committed
  0978ed5

• rm .github/workflows/aws-dev.yml

  manics

  committed
  5baff90

Commits on Jul 31, 2023

• aws-curvenote: use 2 nodes

  manics

  committed
  c6d21a1

• Add walkthrough of how the terraform GH deployment approval works

  manics

  committed
  19213de

• eks: node size cant be changed by terraform

  manics

  committed
  80bdbe2

Commits on Aug 28, 2023

• Move curvenote terraform to generic binder-eks module

  manics

  committed
  6cb8d3c

• Add outputs to binder-eks module

  manics

  committed
  02cb10f

• aws/curvenote is now just a single file that references the binder-eks module

  manics

  committed
  ea59795

• Use worker_group_1 instead of worker_group-1

  manics

  committed
  55dd529

• binder-eks: uncomment outputs

  manics

  committed
  2d4c439

• Update AWS/EKS readmes

  manics

  committed
  a735a08

• Update pre-commit, cleanup old comments

  manics

  committed
  432f115

• Rename bootstrap state bucket var

  manics

  committed
  aebaa80

Commits on Sep 18, 2023

• terraform-deploy-aws-curvenote.yml: remove extra branch

  manics

  authored
  8c1cfb1

Commits on Sep 22, 2023

• curvenote tfplan: replace gpg with age

  manics

  committed
  d7036e0

• curvenote: Install age in GH workflow

  manics

  committed
  af3d573

• Fix gh trigger paths for terraform-deploy-aws-curvenote.yml

  manics

  committed
  315ad74

• Remove aws_s3_bucket_server_side_encryption_configuration from bootstrap

  manics

  committed
  f48c4f7

• Remove dev OIDC access

  manics

  committed
  55666c1

Commits on Sep 24, 2023

• Output Terraform plan to GH summary

  Show description for 1851b2a
  manics

  committed
  1851b2a

• vpc.tf: Remove old commented azs

  manics

  committed
  c00c237