Update AWS EKS to 1.23 along with a bunch of chart upgrades (#541)

* init update to aws eks 1.23

Signed-off-by: David van der Spek <vanderspek.david@gmail.com>

* update helm charts and images + improve vendoring

Signed-off-by: David van der Spek <vanderspek.david@gmail.com>

* small cleanup for calico

Signed-off-by: David van der Spek <vanderspek.david@gmail.com>

* update calico

Signed-off-by: David van der Spek <vanderspek.david@gmail.com>

* add comment to not forget about cleanup

Signed-off-by: David van der Spek <vanderspek.david@gmail.com>

* bump versions

Signed-off-by: David van der Spek <vanderspek.david@gmail.com>

* fix missing calico image and cleanup ebs-csi

Signed-off-by: David van der Spek <vanderspek.david@gmail.com>

* update aws lb iam policy

Signed-off-by: David van der Spek <vanderspek.david@gmail.com>

* update renovate config

Signed-off-by: David van der Spek <vanderspek.david@gmail.com>

---------

Signed-off-by: David van der Spek <vanderspek.david@gmail.com>

.github/workflows/matrix-vendor-and-publish.yml

@@ -133,6 +133,17 @@ jobs:
         sudo make install-binary
         cd ..
     - uses: actions/checkout@v3
+    - name: Configure AWS credentials
+      uses: aws-actions/configure-aws-credentials@v1
+      with:
+        role-to-assume: arn:aws:iam::312272277431:role/github-actions/plural-artifacts-ecr
+        aws-region: us-east-2
+        role-session-name: PluralArtifacts
+    - name: Login to Amazon ECR Public
+      id: login-ecr-public
+      uses: aws-actions/amazon-ecr-login@v1
+      with:
+        registry-type: public
     - uses: google-github-actions/auth@v1
       with:
         workload_identity_provider: 'projects/${{ secrets.GOOGLE_PROJECT_ID }}/locations/global/workloadIdentityPools/github/providers/github'

.github/workflows/matrix-vendor-cron.yml

@@ -85,6 +85,17 @@ jobs:
         sudo make install-binary
         cd ..
     - uses: actions/checkout@v3
+    - name: Configure AWS credentials
+      uses: aws-actions/configure-aws-credentials@v1
+      with:
+        role-to-assume: arn:aws:iam::312272277431:role/github-actions/plural-artifacts-ecr
+        aws-region: us-east-2
+        role-session-name: PluralArtifacts
+    - name: Login to Amazon ECR Public
+      id: login-ecr-public
+      uses: aws-actions/amazon-ecr-login@v1
+      with:
+        registry-type: public
     - uses: google-github-actions/auth@v1
       with:
         workload_identity_provider: 'projects/${{ secrets.GOOGLE_PROJECT_ID }}/locations/global/workloadIdentityPools/github/providers/github'

.github/workflows/vendor-app.yml

@@ -24,6 +24,17 @@ jobs:
         sudo make install-binary
         cd ..
     - uses: actions/checkout@v3
+    - name: Configure AWS credentials
+      uses: aws-actions/configure-aws-credentials@v1
+      with:
+        role-to-assume: arn:aws:iam::312272277431:role/github-actions/plural-artifacts-ecr
+        aws-region: us-east-2
+        role-session-name: PluralArtifacts
+    - name: Login to Amazon ECR Public
+      id: login-ecr-public
+      uses: aws-actions/amazon-ecr-login@v1
+      with:
+        registry-type: public
     - uses: google-github-actions/auth@v1
       with:
         workload_identity_provider: 'projects/${{ secrets.GOOGLE_PROJECT_ID }}/locations/global/workloadIdentityPools/github/providers/github'

airbyte/vendor_images.yaml

@@ -12,4 +12,4 @@ docker.io:
     airbyte/temporal-auto-setup: ^v?[0-9]+\.[0-9]+?\.[0-9]+$
     # temporalio/auto-setup: ^v?1+\.[0-9]+?\.[0-9]+$ # airbyte changed back to their own temporal image due to arm64 support issues
     # the below regex can be used to limit the regex range so that only versions >= v1.25.0 are matched
-    bitnami/kubectl: (?:^v?1\.(?:(?:[^0-1]{1}[0-9]?)?(?:[2-9]{1}[5-9]))+?\.[0-9]+$)|(?:)(?:^v?[2-9]+\.[0-9]+?\.[0-9]+$)
+    bitnami/kubectl: (?:^v?1\.(?:2[5-9]|[3-9][0-9]|[1-9][0-9]{2,})\.[0-9]+$)|(?:)(?:^v?(?:[2-9]|[1-9][0-9]{1,})\.[0-9]+?\.[0-9]+$)

bootstrap/helm/bootstrap/Chart.lock

@@ -13,18 +13,18 @@ dependencies:
   version: 9.21.0
 - name: aws-load-balancer-controller
   repository: https://aws.github.io/eks-charts
-  version: 1.4.6
+  version: 1.4.8
 - name: aws-ebs-csi-driver
   repository: https://kubernetes-sigs.github.io/aws-ebs-csi-driver
-  version: 2.6.2
+  version: 2.17.1
 - name: snapshot-validation-webhook
   repository: https://piraeus.io/helm-charts/
-  version: 1.2.1
+  version: 1.7.1
 - name: snapshot-controller
   repository: https://piraeus.io/helm-charts/
-  version: 1.2.1
+  version: 1.7.2
 - name: tigera-operator
-  repository: https://docs.projectcalico.org/charts
-  version: v3.21.3
-digest: sha256:02eb7c03faeeff0fff9dc0608a1a510279613bd97c12c78d5da1d82c772e0719
-generated: "2022-12-28T12:21:07.207582+01:00"
+  repository: https://docs.tigera.io/calico/charts
+  version: v3.25.0
+digest: sha256:647b4c784f1856bebff40ad9a3d7baca18bceb92530a3b5a7eb4ef19e6938829
+generated: "2023-03-03T15:04:43.051671+01:00"

bootstrap/helm/bootstrap/Chart.yaml

@@ -10,7 +10,7 @@ maintainers:
   email: mguarino46@gmail.com
 - name: David van der Spek
   email: david@plural.sh
-version: 0.8.63
+version: 0.8.64
 dependencies:
 - name: external-dns
   version: 4.11.0
@@ -29,21 +29,21 @@ dependencies:
   repository: https://kubernetes.github.io/autoscaler
 - name: aws-load-balancer-controller
   condition: aws-load-balancer-controller.enabled
-  version: 1.4.6
+  version: 1.4.8
   repository: https://aws.github.io/eks-charts
 - name: aws-ebs-csi-driver
   condition: aws-ebs-csi-driver.enabled
-  version: 2.6.2
+  version: 2.17.1
   repository: https://kubernetes-sigs.github.io/aws-ebs-csi-driver
 - name: snapshot-validation-webhook
   condition: snapshot-validation-webhook.enabled
-  version: 1.2.1
+  version: 1.7.1
   repository: https://piraeus.io/helm-charts/
 - name: snapshot-controller
   condition: snapshot-controller.enabled
-  version: 1.2.1
+  version: 1.7.2
   repository: https://piraeus.io/helm-charts/
 - name: tigera-operator
-  version: v3.21.3
+  version: v3.25.0
   condition: tigera-operator.enabled
-  repository: https://docs.projectcalico.org/charts
+  repository: https://docs.tigera.io/calico/charts