All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
=======
- add prometheus and prometheus-workspaces endpoints
- fix s3 csi driver addon in
eksmodule - update charts versions in
1.29.yaml - adding override support for charts in the EKS module
=======
=======
- pin external gh actions to hash
- fix eks cluster admin role trust policy & create kubectl role
- update CDK in
eksmodule to 2.166.0
=======
=======
- added support for deploying EKS Cluster (ONLY) in China region.
- added security group ID to network module output
- replace deprecated
auto_delete_imageswithempty_on_delete& bump CDK version inecrmodule - fixed the failing regex error in the eks module when env var SEEDFARMER_PARAMETER_REPLICATED_ECR_IMAGES_METADATA_S3_PATH is not set
- refactored docker images replication module
- fixed
network/basic-cdkmodule integration test failure - fixed
integration/fsx-lustre-on-eksmodule to support EKS clusters with non-public endpoints
=======
=======
- add integration tests for modules
service-catalog/app-registrytesting/integration-testsstorage/opensearch-serverlessstorage/opensearchstorage/fsx-lustredatabase/rdscompute/aws-batch
- added data repository integration for FSX Lustre module
- added partition support for modules
- emr-serverless
- neptune
- fsx-lustre-on-eks
- mwaa
- dockerimage-replication
- app-registry
- ecr
- fsx-lustre
- opensearch-serverless
- opensearch
- adds workflow specific to changes for
requirements-dev.txtso all static checks are run
- fixed
storage/ecrmodule integration test - fixed
fsx lustreintegration module to add filesystem permissions on fly using an input var - fixed the
fsx lustremodule to use the KubectlV29 image to run kubectl commands - update CDK in neptune module due to deprecated neptune version
- update airflow version to 2.8.1
- updated
get-modulesworkflow to only run tests against changed files inmodules/**
=======
=======
- added support for whitelisting custom CIDRs from SSM Parameters, from a static entry list, and auto loads AWS Codebuild IPs for being able to run seedfarmer commands
- added asg rolling update for self managed node groups
- fixed unassigned secrets key in
eksmodule
=======
=======
- added partition support for local zone poc modules
- aws-batch
- eks
- emr-on-eks
- buckets
- added support for
nvidia device pluginfor management of GPUs on EKS clusters - add integration tests for module
storage/efs - added support for adding taints and labels for self managed ngs
- added a custom timeout for Self Managed Nodegroups for successful signalling
- refactored the deployspec of
emr-on-eksmodule and used seedfarmer to add/group metadata of 2 stacks - fixed the readme and app.py of
emr-serverlessmodule - fixed the missing taints and labels for self managed nodegroups of
eksmodule
=======
=======
- feat: Adds Integration Tests Module
- moved module
integration/fsx-lustre-on-eksinto repo from ADDF-Modules repo - added support for AWS LocalZone Public and Private Subnets
- added support for bedrock endpoints
- added support for EKS Self Managed node groups with autoscaling
- added
emr-on-eksmodule and made it generic
- fix:
storage/bucketsCorrect issues with bucket names above character limit - chore: mwaa dags bucket auto delete objects
- set Pillow version to 10.3.0 as per bot recommendation
storage/ecrsetauto_delete_imagestoTruewhen removal policy is DESTROY- refactored
fix.shscript to useruffinstead ofblackandisort - refactored eks module, fixed the breaking nginx ingress and made more least privileged
- fixed
urlib3version as per dependabot alert - bumped seedfarmer version to
4.0.1
=======
=======
- added KMS/AES encryption and image scan on push to
ecrmodule - exporting
kubectl lambda iam role arnfor running kubectl calls from the downstream stacks
- upgraded
vpc-cniversion to1.18.0to support EKS 1.29 version - EKS README.md doc fixes
=======
=======
- added support for AWS CloudWatch Observability Managed Addon
- added support for GPU AMIs using
use_gpu_amiflag - made
mountpoint for s3driver configurable to work with s3 buckets on fly
- update MySQL instance to use T3 instance type
- cleaned up CNI metrics as its no longer used
=======
=======
- added support for Elastic Kubernetes cluster 1.26 version
- added support for Elastic Kubernetes cluster 1.29 version
- made the
storage-capacityconfigurable on thefsx-lustremodule - in
mwaamodule, moving creation of plugins.zip to the deployspec since shutil errors out in python 3.11.6 - fix the CDK nag suppressions in the
rdsmodule - adding removal-policy support for
ecrmodule - added taint support (
eks_node_taints) for node groups - set Pillow version to 10.2.0 as per bot recommendation
=======
=======
- modified
fsx-lustremodule to auto-import data if configured
=======
=======
- added Opensearch serverless module
- updated replication module to avoid docker pull rate limits and resource creation race conditions
- added RDS database module
- added
database-nameandaccessible-from-vpcparameters to RDS module
- removed SageMaker Studio module that moved to MLOps Modules
=======
=======
- added eks node iam role that all eks nodes will assume on start
- added support for S3 CSI driver
- added logic to require IMDSv2 in eks nodes
- regrouped ecr module from
containerstostoragegroup - fixed the execution of workflow logic to remove an additional
/
=======
- added
sagemaker-studiomodule with unit-tests - enforced TLS version 1.2, node-node encryption and encryption at rest on OS module
- added
emr-serverlessmodule with unit-tests - added workflow entries to all IDF modules
- made
requirements.txtfile of MWAA configurable via a user defined entry from module manifest file - added
app-registrymodule for being able to scrape app-specific CloudFormation stacks for AWS Solutions - added
app-insightsintegration with app-registry module to derive additional insights from the associated resources in the resource group - added dynamic stack naming based on Solution Info:
- modules/compute/aws-batch
- modules/compute/emr-serverless
- modules/network/basic-cdk
- modules/orchestration/mwaa
- modules/service-catalog/app-registry
- modules/storage/buckets
- modules/storage/opensearch
- added ability for artifact buckets to write events to event bridge.
- replaced exporting metadata with seedfarmer command
- storage/buckets - added
usedforsecurity=Falseto the sha1 creation of bucket names - applying changes based off security scans and code standards recommendations
data/mwaa/requirements/requirements-emr-serverless.txtupdatedPillow~=9.3.0as per bot- changed the
data/mwaa/requirements/requirements-emr-serverless.txtto support Amazon MWAA 2.6.3 version - added paginatior for CFN list stacks to scrape the stacks starting with
addffor registering the apps to appregistry - updated
Pillow~=10.0.1inmwaa/requirements/requirements*.txtand indata/mwaa/requirements/requirements-emr-serverless.txt - reduced the length of s3 bucket name for docker images replication to fix failures caused due to naming length
- added logic to validate relative paths in
storage/fsx-lustremodule, acceptfsx-versioninput parameter
=======
- adding individual module unit tests, hooked up to workflows
- added EFS and Opensearch modules, refactored them to be agnostic of a project with unit-tests
- added
isolatedsubnets feature to networking module - fixed the way
internet_accessiblebool is referenced - added
manifests/localfor local testing andexamples/manifests/exampleas a guidance for calling the modules usinggit paths - added contributing guidance to
CONTRIBUTING.md - refactored AWS Batch module, to be agnostic of a project with unit-tests
- refactored Amazon MWAA module, to be agnostic of a project with unit-tests
- refactored Fsx-Lustre module, to be agnostic of a project with unit-tests
- refactored Neptune module, to be agnostic of a project with unit-tests
- added module output example for
dummy/blankmodule - added EKS module, refactored it to be agnostic of a project with unit-tests
- added Docker images replication module, refactored it to be agnostic of a project with unit-tests
- refactored L1 cdk implementation of networking -> interface endpoints creation with the L2 mode
- added
version locking to neptune engineto avoid cdk deployment errors - bumped CDK versions to avoid the issue of nodejs12.x deprecation
- removed
jqfrom OS module
- initialization of repo with
modulesptionals/network/basic-cdkandmodules/storage/buckets - adding
modules/dummy/blank