edge.24-12-13
Replaces kube_rbac with EKS access entries, consolidates priority classes into kube_policies, upgrades Authentik to 2024.8.2, and fixes Argo Workflows permissions and NATS connection issues.
This Authentik upgrade contains a problem that will result in updates to group names not automatically synchronizing with AWS. If that is a problem, defer upgrading until the issue is resolved.
This release contains a bug that will cause Cilium to crash if deployed via wf_tf_deploy. Please ensure you upgrade to edge.25-01-04 locally before re-enabling CI/CD deployments for the core infrastructure.
Remove kube_rbac
The kube_rbac module has been deprecated and replaced by EKS access entries in aws_eks.
First, upgrade
aws_eks.After the
aws_eksupgrade is complete, destroy any deployments ofkube_rbac.
Remove kube_priority_classes
The kube_priority_classes module has been consolidated into kube_policies.
- Destroy
kube_priority_classesimmediately before upgradingkube_policies.
Update Provider Versions
This release upgrades the following Terraform provider versions — update these in first-party IaC:
pf: 0.0.4 → 0.0.5authentik: 2024.6.1 → 2024.8.4