aws-samples / eks-anywhere-addons Goto Github PK

EKS - Blueprints Patterns in Patterns repo to support for 4 versions of EKS Cluster build with EKS Blueprints Pipeline for EKS

Example - https://github.com/aws-samples/cdk-eks-blueprints-patterns/blob/main/lib/multi-account-monitoring/pipeline.ts

We need to add “How to Test” section to the README with commands like

flux create source git addons \
    --url=https://github.com/aws-samples/eks-anywhere-addons \
    --branch=main

 # Wave 0 - Common Core Addons
 flux create kustomization addons-core \
   --source=addons \
   --path="./eks-anywhere-common/Addons/Core" \
   --prune=true \
   --interval=5m 

Is your feature request related to a problem? Please describe.
Enhancing Conformitron to submit Pre Req for MarketPlace via NPM Module

Describe the solution you'd like
Enhancing Conformitron to submit Pre Req for MarketPlace via NPM Module

This is based on Sleek Transformer.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

The Sample test job https://github.com/aws-samples/eks-anywhere-addons/blob/main/eks-anywhere-common/Testers/Sample/testJob.yaml is a Job and should be a CronJob.

• New PR (Ela)
• Close PR (Ela)
• Close PR Completion (Mikhail)
• Feedback Loop (Ela)
  • SSM Parameters for PR # and Namespace for E2E
  • Read namespace from namespace.yml file and write PR# and namespace to SSM if no namespace fail PR
  • New GitHub User for Conformitron
  • Create a hourly cronjob which reads PR # and Namespace. If No PR# end execution. If PR #, Check for any failures in that namespace in SSM and fail the PR via Conformitron User. If not pass the PR via Conformitron user

https://github.com/kuberhealthy/kuberhealthy

External Snapshotter support for Snow

Make it easier for users to find the comprehensive list of partners with solutions that have been validated for EKS-A using Conformitron. Currently, an user needs to navigate under validated partners folders--each representing an EKS-A deploy option--and open .txt files to find a given partner has an EKS-A add on published. An unified 'view' showing partner company name, product/solution (SKU), product version, K8s/eks-a version, date the add on was created/published, and list of compatible eks-a deploy options make it easier for an user to easily/quickly identify partners, products, validated to a given eks-a deploy options.

For example, each row would display something along the lines:

, , , <eks-a/kubernetes version>,bare metal, outpost, snow, vsphere.

A quick start documentation package on basics of Conformitron.

Is your feature request related to a problem? Please describe.
Add partner software version to reporting for Validated Partners report.

Describe the solution you'd like
Add partner software version to reporting for Validated Partners report.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

**Is your feature request related to a problem?
I would like to request the addition of support for the Amazon Elastic Kubernetes Service (EKS) Pod Identity addon in the EKS Anywhere Addons repository. The Amazon EKS Pod Identity addon is a valuable feature that allows applications running on Amazon EKS clusters to securely obtain AWS Identity and Access Management (IAM) credentials. This capability is essential for applications that need to interact with AWS services, such as Amazon S3, DynamoDB, or AWS Secrets Manager, while running within Kubernetes pods.

Describe the solution you'd like
Adding support for the Amazon EKS Pod Identity addon would greatly benefit users who deploy applications on EKS Anywhere clusters. This feature enables applications to assume IAM roles based on annotations assigned to Kubernetes service accounts, providing fine-grained access control to AWS resources. This is particularly valuable in scenarios where applications need to access AWS resources securely without relying on static IAM credentials.

Additional context
Amazon EKS Pod Identity: A New Way for Applications on EKS to Obtain IAM Credentials

Amazon EKS Pod Identity Documentation

Need for a Lab environment with 3 node CP + DP EKSA BM cluster

Describe the bug
Please check this PR for more info on the issue #161

To Reproduce
Steps to reproduce the behavior:

1. Go to '...'
2. Click on '....'
3. Scroll down to '....'
4. See error

Expected behavior
A clear and concise description of what you expected to happen.

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

• OS: [e.g. iOS]
• Browser [e.g. chrome, safari]
• Version [e.g. 22]

Smartphone (please complete the following information):

• Device: [e.g. iPhone6]
• OS: [e.g. iOS8.1]
• Browser [e.g. stock browser, safari]
• Version [e.g. 22]

Additional context
Add any other context about the problem here.

Is your feature request related to a problem? Please describe.
Feedback loop (Observer Bot) not reporting for success and failures to PR

Describe the solution you'd like
The Observer Feedback Bot should perform the following :

• Observer Bot should report success of runs in different environments
• Observer Bot should report failures of runs in different environments
• Environments should always point to developer_branch and can be changed to main in GitRepository only for running validated partners
• Observer Bot should accomodate new addons, existing partner addon version updates

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Lets add BottleRocket for Conformitron for EKS

Is your feature request related to a problem? Please describe.
After latest EKS-A release, vSphere CSI driver is not supported with EKS-A on vSphere. We need to add a GitOps approach to install vSphere CSI driver on vSphere Cluster.

Describe the solution you'd like
After latest EKS-A release, vSphere CSI driver is not supported with EKS-A on vSphere. We need to add a GitOps approach to install vSphere CSI driver on vSphere Cluster.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Functional test job is missing in PR #31 Please use this ticket to submit PR for Functional Test.

Research to understand Trivy, Sysdig, Aquasec, NeuVector capable of preventing malicious activities submitted thru PR:

• Access to other namespaces
• DDOS Attacks
• Anomaly detection
• Runtime security

Is your feature request related to a problem? Please describe.
GitHub Action to statically validate Functional test.

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Create ADOT collectors and associated infrastructure for observability into the feedback loop powered by the Kube-Observer.

@gautambaghel to provide a Functional Test Job for Vault

Ticket will be worked up by Manuel Sysdig.

Describe the bug
GH Action Issue (Failing) for Validated Partners Auto PR.

To Reproduce
Run Validated Partners PR, GH action fails.

Expected behavior
A clear and concise description of what you expected to happen.

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

• OS: [e.g. iOS]
• Browser [e.g. chrome, safari]
• Version [e.g. 22]

Smartphone (please complete the following information):

• Device: [e.g. iPhone6]
• OS: [e.g. iOS8.1]
• Browser [e.g. stock browser, safari]
• Version [e.g. 22]

Additional context
Add any other context about the problem here.