diff --git a/eksctl-configs/eksctl-devtron-arm-confis.yaml b/eksctl-configs/eksctl-devtron-arm-confis.yaml index 1f3c581d..8edff7cd 100644 --- a/eksctl-configs/eksctl-devtron-arm-confis.yaml +++ b/eksctl-configs/eksctl-devtron-arm-confis.yaml @@ -6,7 +6,9 @@ kind: ClusterConfig metadata: name: devtron-cluster region: ap-south-1 - version: "1.30" + version: "1.31" +accessConfig: + authenticationMode: CONFIG_MAP vpc: ## Make sure that this CIDR doesn't overlaps with any other exisiting VPC with which a peering needs to be done. @@ -37,6 +39,7 @@ nodeGroups: - arn:aws:iam::aws:policy/AmazonEKSClusterPolicy - arn:aws:iam::aws:policy/AmazonEKSServicePolicy - arn:aws:iam::xxxxxxxxxxxxx:policy/devtron-cluster-IAM-policy + - arn:aws:iam::aws:policy/AmazonSSMManagedEC2InstanceDefaultPolicy ssh: allow: true publicKeyName: "infra" @@ -82,6 +85,7 @@ nodeGroups: - arn:aws:iam::aws:policy/AmazonEKSClusterPolicy - arn:aws:iam::aws:policy/AmazonEKSServicePolicy - arn:aws:iam::xxxxxxxxxxxxx:policy/devtron-cluster-IAM-policy + - arn:aws:iam::aws:policy/AmazonSSMManagedEC2InstanceDefaultPolicy ssh: allow: true publicKeyName: "infra" diff --git a/eksctl-configs/eksctl-devtron-karpenter-mng.yaml b/eksctl-configs/eksctl-devtron-karpenter-mng.yaml new file mode 100644 index 00000000..728ab7f2 --- /dev/null +++ b/eksctl-configs/eksctl-devtron-karpenter-mng.yaml @@ -0,0 +1,38 @@ +apiVersion: eksctl.io/v1alpha5 +kind: ClusterConfig + +metadata: + name: devtron-cluster + region: ap-south-1 + version: "1.31" +accessConfig: + authenticationMode: CONFIG_MAP +managedNodeGroups: + - name: devtron-managed-ng + privateNetworking: true + desiredCapacity: 1 + minSize: 1 + maxSize: 2 + instanceTypes: ["c6g.large"] + labels: {} + iam: + withAddonPolicies: + autoScaler: true + attachPolicyARNs: + - arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy + - arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy + - arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryFullAccess + - arn:aws:iam::aws:policy/AmazonEKSClusterPolicy + - arn:aws:iam::aws:policy/AmazonEKSServicePolicy + - arn:aws:iam::XXXXXXXXX:policy/devtron-cluster-IAM-policy + - arn:aws:iam::aws:policy/AmazonSSMManagedEC2InstanceDefaultPolicy + ssh: + allow: true + publicKeyName: "infra" + enableSsm: true + volumeSize: 50 + volumeType: gp3 + volumeEncrypted: true + asgSuspendProcesses: ["AZRebalance"] + tags: + Component : devtron diff --git a/eksctl-configs/eksctl-devtron-prod-configs.yaml b/eksctl-configs/eksctl-devtron-prod-configs.yaml index f319034a..702cc75b 100644 --- a/eksctl-configs/eksctl-devtron-prod-configs.yaml +++ b/eksctl-configs/eksctl-devtron-prod-configs.yaml @@ -4,7 +4,10 @@ kind: ClusterConfig metadata: name: devtron-cluster region: ap-south-1 - version: "1.30" + version: "1.31" + +accessConfig: + authenticationMode: CONFIG_MAP vpc: id: "vpc-xxxxxxx" @@ -45,10 +48,13 @@ nodeGroups: - arn:aws:iam::aws:policy/AmazonEKSClusterPolicy - arn:aws:iam::aws:policy/AmazonEKSServicePolicy - arn:aws:iam::xxxxxxxxxxxxx:policy/devtron-cluster-IAM-policy + - arn:aws:iam::aws:policy/AmazonSSMManagedEC2InstanceDefaultPolicy ssh: allow: true publicKeyName: "infra" volumeSize: 50 + volumeType: gp3 + volumeEncrypted: true tags: Component : cicd kubeletExtraConfig: @@ -89,10 +95,13 @@ nodeGroups: - arn:aws:iam::aws:policy/AmazonEKSClusterPolicy - arn:aws:iam::aws:policy/AmazonEKSServicePolicy - arn:aws:iam::xxxxxxxxxxxxx:policy/devtron-cluster-IAM-policy + - arn:aws:iam::aws:policy/AmazonSSMManagedEC2InstanceDefaultPolicy ssh: allow: true publicKeyName: "infra" volumeSize: 100 + volumeType: gp3 + volumeEncrypted: true tags: Component : cicd labels: {purpose: ci} diff --git a/eksctl-configs/eksctl-prod-multi-az-cluster.yaml b/eksctl-configs/eksctl-prod-multi-az-cluster.yaml index 0d60f24c..0bf810bc 100644 --- a/eksctl-configs/eksctl-prod-multi-az-cluster.yaml +++ b/eksctl-configs/eksctl-prod-multi-az-cluster.yaml @@ -4,7 +4,7 @@ kind: ClusterConfig metadata: name: prod-1 region: us-west-2 - version: "1.30" + version: "1.31" vpc: cidr: 172.31.0.0/16 @@ -36,10 +36,13 @@ nodeGroups: - arn:aws:iam::aws:policy/AmazonEKSClusterPolicy - arn:aws:iam::aws:policy/AmazonEKSServicePolicy - arn:aws:iam::XXXXXXXX:policy/devtron-cluster-IAM-policy + - arn:aws:iam::aws:policy/AmazonSSMManagedEC2InstanceDefaultPolicy ssh: allow: true publicKeyName: "devops" volumeSize: 50 + volumeType: gp3 + volumeEncrypted: true tags: Component : prod kubeletExtraConfig: @@ -85,10 +88,13 @@ nodeGroups: - arn:aws:iam::aws:policy/AmazonEKSClusterPolicy - arn:aws:iam::aws:policy/AmazonEKSServicePolicy - arn:aws:iam::XXXXXXXX:policy/devtron-cluster-IAM-policy + - arn:aws:iam::aws:policy/AmazonSSMManagedEC2InstanceDefaultPolicy ssh: allow: true publicKeyName: "devops" volumeSize: 50 + volumeType: gp3 + volumeEncrypted: true tags: Component : prod kubeletExtraConfig: @@ -134,10 +140,13 @@ nodeGroups: - arn:aws:iam::aws:policy/AmazonEKSClusterPolicy - arn:aws:iam::aws:policy/AmazonEKSServicePolicy - arn:aws:iam::XXXXXXXX:policy/devtron-cluster-IAM-policy + - arn:aws:iam::aws:policy/AmazonSSMManagedEC2InstanceDefaultPolicy ssh: allow: true publicKeyName: "devops" volumeSize: 50 + volumeType: gp3 + volumeEncrypted: true tags: Component : prod kubeletExtraConfig: diff --git a/eksctl-configs/ekstl-devtron-configs-create-new-vpc.yaml b/eksctl-configs/ekstl-devtron-configs-create-new-vpc.yaml index aa31cd99..e3a43eeb 100644 --- a/eksctl-configs/ekstl-devtron-configs-create-new-vpc.yaml +++ b/eksctl-configs/ekstl-devtron-configs-create-new-vpc.yaml @@ -4,7 +4,7 @@ kind: ClusterConfig metadata: name: devtron-cluster region: ap-south-1 - version: "1.30" + version: "1.31" vpc: ## Make sure that this CIDR doesn't overlaps with any other exisiting VPC with which a peering needs to be done. @@ -34,10 +34,13 @@ nodeGroups: - arn:aws:iam::aws:policy/AmazonEKSClusterPolicy - arn:aws:iam::aws:policy/AmazonEKSServicePolicy - arn:aws:iam::xxxxxxxxxxxxx:policy/devtron-cluster-IAM-policy + - arn:aws:iam::aws:policy/AmazonSSMManagedEC2InstanceDefaultPolicy ssh: allow: true publicKeyName: "infra" volumeSize: 50 + volumeType: gp3 + volumeEncrypted: true asgSuspendProcesses: ["AZRebalance"] tags: Component : cicd @@ -79,10 +82,13 @@ nodeGroups: - arn:aws:iam::aws:policy/AmazonEKSClusterPolicy - arn:aws:iam::aws:policy/AmazonEKSServicePolicy - arn:aws:iam::xxxxxxxxxxxxx:policy/devtron-cluster-IAM-policy + - arn:aws:iam::aws:policy/AmazonSSMManagedEC2InstanceDefaultPolicy ssh: allow: true publicKeyName: "infra" volumeSize: 100 + volumeType: gp3 + volumeEncrypted: true asgSuspendProcesses: ["AZRebalance"] tags: Component : cicd