Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: Add support for overriding DNS suffix for cluster IAM role service principal endpoint #1905

Merged

Conversation

bryantbiggs
Copy link
Member

Description

  • Add support for overriding DNS suffix for cluster IAM role service principal endpoint. There appears to be an inconsistency with the EKS endpoint in China that is used by the assume role service principal. The dns_suffix provided by the AWS partition resource is returning the correct amazonaws.com.cn but the endpoint is expecting amazonaws.com. This is a bit of a temporary work around for now to let users deploy the module into China regions until the endpoints are fixed by AWS

Motivation and Context

Breaking Changes

  • No; backwards compatibility is maintained

How Has This Been Tested?

  • I have tested and validated these changes using one or more of the provided examples/* projects

@bryantbiggs bryantbiggs marked this pull request as ready for review March 1, 2022 20:10
@antonbabenko antonbabenko merged commit 9af0c24 into terraform-aws-modules:master Mar 2, 2022
antonbabenko pushed a commit that referenced this pull request Mar 2, 2022
### [18.7.3](v18.7.2...v18.7.3) (2022-03-02)

### Bug Fixes

* Add support for overriding DNS suffix for cluster IAM role service principal endpoint ([#1905](#1905)) ([9af0c24](9af0c24))
@antonbabenko
Copy link
Member

This PR is included in version 18.7.3 🎉

@bryantbiggs bryantbiggs deleted the fix/dns-suffix branch March 2, 2022 17:56
baibailiha added a commit to baibailiha/terraform-aws-eks that referenced this pull request Sep 13, 2022
### [18.7.3](terraform-aws-modules/terraform-aws-eks@v18.7.2...v18.7.3) (2022-03-02)

### Bug Fixes

* Add support for overriding DNS suffix for cluster IAM role service principal endpoint ([#1905](terraform-aws-modules/terraform-aws-eks#1905)) ([42a0d04](terraform-aws-modules/terraform-aws-eks@42a0d04))
@github-actions
Copy link

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Nov 10, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

incorrect eks service principal for AWS China
2 participants