AWS no longer supports an in-tree cloud-provider in 1.27
Bug #2013090 reported by
Adam Dyess
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
AWS Cloud Provider Charm |
Fix Released
|
High
|
Adam Dyess | ||
AWS Integrator Charm |
Fix Released
|
High
|
Adam Dyess | ||
Charmed Kubernetes Bundles |
Fix Released
|
High
|
Adam Dyess | ||
Kubernetes Control Plane Charm |
Fix Released
|
High
|
Adam Dyess |
Bug Description
As of this PR [0], AWS no longer supports the legacy AWS cloud provider in-tree, and deployment to integrate with AWS components must use the out-of-tree provider [1]. A new charm must be developed to
* deploy and manage that new component
* update any IAM/security policy requirements
* share missing data over relation to enable the deployment
* appropriately configure the worker/
[0]: https:/
[1]: https:/
Changed in charm-aws-integrator: | |
milestone: | none → 1.27 |
assignee: | nobody → Adam Dyess (addyess) |
importance: | Undecided → High |
status: | New → In Progress |
status: | In Progress → New |
status: | New → In Progress |
Changed in charm-aws-cloud-provider: | |
status: | New → In Progress |
importance: | Undecided → High |
assignee: | nobody → Adam Dyess (addyess) |
milestone: | none → 1.27 |
summary: |
- AWS no longer supports an in-tree cloud-provider in 1.26 + AWS no longer supports an in-tree cloud-provider in 1.27 |
Changed in charmed-kubernetes-bundles: | |
status: | In Progress → Fix Committed |
Changed in charm-aws-integrator: | |
status: | In Progress → Fix Committed |
Changed in charm-kubernetes-master: | |
status: | In Progress → Fix Committed |
Changed in charm-aws-cloud-provider: | |
status: | In Progress → Fix Committed |
Changed in charm-aws-cloud-provider: | |
status: | Fix Committed → Fix Released |
Changed in charm-aws-integrator: | |
status: | Fix Committed → Fix Released |
Changed in charmed-kubernetes-bundles: | |
status: | Fix Committed → Fix Released |
Changed in charm-kubernetes-master: | |
status: | Fix Committed → Fix Released |
To post a comment you must log in.
* iam policy adjustments [0]
* aws-integrator needs to add a new iam policy to workers
* aws-integrator needs to add a new iam policy to control-planes
* These policies include duplicates that are already applied, and likely the list needs to be pared down quite a bit to better fit the flow of aws-integrator's request based permissions
* kubernetes- control- plane is ALREADY tagging workers/ control- planes with a cluster-tag
* use the kube-control relation to expose cluster-tag to cloud-provider charm
* update the kube-control relation to expose cluster-cidr to the cloud-provider charm
aws-integrator relation to kubernetes- worker/ control- plane needs to provider= "aws" when not kube_version < (1, 27, 0) override= ${get_node_ name()} in kubernetes_ common. py
* prevent --cloud-
* kubelet needs extra argument --hostname-
[0]: https:/ /cloud- provider- aws.sigs. k8s.io/ prerequisites/