github cloudposse/geodesic 0.143.0
v0.143.0 Security updates, better EKS cluster support

latest releases: 3.0.0, v2, 2.11.3...
3 years ago

🚀 Enhancements

Security updates, better EKS cluster support @Nuru (#687)

what

  • Remove ansible
  • Add AWS_REGION_ABBREVIATION_TYPE to set region abbreviations used in our tools
  • Add AWS_DEFAULT_SHORT_REGION set to $AWS_REGION_ABBREVIATION_TYPE of $AWS_DEFAULT_REGION
  • With that, better support for EKS clusters (set-cluster, eks-update-kubeconfig should not work out-of-the box for most users)
  • Better error handling in set-cluster and eks-update-kubeconfig
  • Add support for region ap-northeast-3 made available 2020-03-01
  • Ensure $KUBECONFIG has mode rw------- before referencing it
  • Updated support for initializing AWS configuration
  • Configure Renovatebot to update Geodesic Dockerfiles
  • Include Alpine patch version and Debian minor version in startup messages
  • Updates:
    • Alpine 3.12.1 -> 3.12.4
    • Debian 10.6 -> 10.8
    • Python (Debian only) 3.8.6 -> 3.8.8
    • Google Cloud SDK 328.0.0 -> 330.0.0

why

  • Installed version of ansible superseded by new 3.x version, but Cloud Posse clients not using it. Closes #684
  • Bring scripted tools in line with atmos and Cloud Posse reference architecture
  • Better support for using Geodesic derivatives as pseudo-bastions inside Kubernetes clusters
  • Keep up-to-date

🐛 Bug Fixes

[renovate] Remove invalid matchPaths @Nuru (#688)

what

  • [renovate] Remove invalid matchPaths from renovate.json

why

  • #687 attempted to get Renovate to keep our Dockerfiles up-to-date by explicitly including them. The attempt not only failed, it broke the configuration, causing all updates to stop.

note

Renovate was already finding our Dockerfiles. It was not updating them because it will not update versions containing variables. As a result, we cannot rely on Renovate to keep the Dockerfiles up-to-date with respect to nearly anything in them, since we use variables for all versions (not just FROM but also Go SDK, helm plugins, etc.).

🧰 Included Tools

Update AWS CLI packages @renovate (#691)

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
awscli ==1.19.17 -> ==1.19.27 age adoption passing confidence
boto3 ==1.17.17 -> ==1.17.27 age adoption passing confidence

Release Notes

boto/boto3

v1.17.27

Compare Source

=======

  • api-change:mediatailor: [botocore] MediaTailor channel assembly is a new manifest-only service that allows you to assemble linear streams using your existing VOD content.
  • api-change:workspaces: [botocore] Adds API support for WorkSpaces bundle management operations.
  • api-change:cur: [botocore] - Added optional billingViewArn field for OSG.

v1.17.26

Compare Source

=======

  • api-change:comprehend: [botocore] Update comprehend client to latest version
  • api-change:wafv2: [botocore] Update wafv2 client to latest version
  • api-change:medialive: [botocore] Update medialive client to latest version
  • api-change:network-firewall: [botocore] Update network-firewall client to latest version

v1.17.25

Compare Source

=======

  • api-change:accessanalyzer: [botocore] Update accessanalyzer client to latest version
  • api-change:ssm: [botocore] Update ssm client to latest version
  • api-change:s3: [botocore] Update s3 client to latest version
  • api-change:backup: [botocore] Update backup client to latest version

v1.17.24

Compare Source

=======

  • api-change:rds: [botocore] Update rds client to latest version
  • api-change:codeguruprofiler: [botocore] Update codeguruprofiler client to latest version
  • api-change:autoscaling: [botocore] Update autoscaling client to latest version
  • api-change:iotwireless: [botocore] Update iotwireless client to latest version
  • api-change:efs: [botocore] Update efs client to latest version

v1.17.23

Compare Source

=======

  • api-change:lambda: [botocore] Update lambda client to latest version
  • api-change:emr: [botocore] Update emr client to latest version
  • api-change:kinesis-video-archived-media: [botocore] Update kinesis-video-archived-media client to latest version
  • api-change:s3: [botocore] Update s3 client to latest version
  • api-change:s3control: [botocore] Update s3control client to latest version
  • api-change:autoscaling: [botocore] Update autoscaling client to latest version

v1.17.22

Compare Source

=======

  • api-change:license-manager: [botocore] Update license-manager client to latest version
  • api-change:network-firewall: [botocore] Update network-firewall client to latest version
  • api-change:ec2: [botocore] Update ec2 client to latest version
  • api-change:athena: [botocore] Update athena client to latest version
  • api-change:medialive: [botocore] Update medialive client to latest version
  • api-change:shield: [botocore] Update shield client to latest version
  • api-change:codepipeline: [botocore] Update codepipeline client to latest version
  • api-change:appflow: [botocore] Update appflow client to latest version

v1.17.21

Compare Source

=======

  • api-change:servicediscovery: [botocore] Update servicediscovery client to latest version
  • api-change:events: [botocore] Update events client to latest version
  • api-change:sagemaker: [botocore] Update sagemaker client to latest version
  • api-change:mwaa: [botocore] Update mwaa client to latest version

v1.17.20

Compare Source

=======

  • api-change:forecast: [botocore] Update forecast client to latest version
  • api-change:secretsmanager: [botocore] Update secretsmanager client to latest version
  • api-change:macie2: [botocore] Update macie2 client to latest version
  • api-change:codebuild: [botocore] Update codebuild client to latest version
  • api-change:es: [botocore] Update es client to latest version
  • api-change:acm: [botocore] Update acm client to latest version
  • api-change:wellarchitected: [botocore] Update wellarchitected client to latest version

v1.17.19

Compare Source

=======

  • api-change:iotwireless: [botocore] Update iotwireless client to latest version
  • api-change:directconnect: [botocore] Update directconnect client to latest version
  • bugfix:S3: [botocore] Fix an issue with XML newline normalization that could result in the DeleteObjects operation incorrectly deleting the wrong keys.
  • api-change:managedblockchain: [botocore] Update managedblockchain client to latest version
  • api-change:events: [botocore] Update events client to latest version
  • api-change:compute-optimizer: [botocore] Update compute-optimizer client to latest version
  • api-change:datasync: [botocore] Update datasync client to latest version

v1.17.18

Compare Source

=======

  • enhancement:DynamoDB: Add a __bytes__ method to the Binary DynamoDB type.
  • api-change:alexaforbusiness: [botocore] Update alexaforbusiness client to latest version
  • api-change:ssm: [botocore] Update ssm client to latest version
  • api-change:codepipeline: [botocore] Update codepipeline client to latest version
  • api-change:eks: [botocore] Update eks client to latest version
Security updates, better EKS cluster support @Nuru (#687)

what

  • Remove ansible
  • Add AWS_REGION_ABBREVIATION_TYPE to set region abbreviations used in our tools
  • Add AWS_DEFAULT_SHORT_REGION set to $AWS_REGION_ABBREVIATION_TYPE of $AWS_DEFAULT_REGION
  • With that, better support for EKS clusters (set-cluster, eks-update-kubeconfig should not work out-of-the box for most users)
  • Better error handling in set-cluster and eks-update-kubeconfig
  • Add support for region ap-northeast-3 made available 2020-03-01
  • Ensure $KUBECONFIG has mode rw------- before referencing it
  • Updated support for initializing AWS configuration
  • Configure Renovatebot to update Geodesic Dockerfiles
  • Include Alpine patch version and Debian minor version in startup messages
  • Updates:
    • Alpine 3.12.1 -> 3.12.4
    • Debian 10.6 -> 10.8
    • Python (Debian only) 3.8.6 -> 3.8.8
    • Google Cloud SDK 328.0.0 -> 330.0.0

why

  • Installed version of ansible superseded by new 3.x version, but Cloud Posse clients not using it. Closes #684
  • Bring scripted tools in line with atmos and Cloud Posse reference architecture
  • Better support for using Geodesic derivatives as pseudo-bastions inside Kubernetes clusters
  • Keep up-to-date
Update dependency PyYAML to v5.4.1 @renovate (#670)

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
PyYAML (source) ==5.3.1 -> ==5.4.1 age adoption passing confidence

Release Notes

yaml/pyyaml

v5.4.1

Compare Source

v5.4

Compare Source

🏗️ Build/Release Maintenance

[renovate] Remove invalid matchPaths @Nuru (#688)

what

  • [renovate] Remove invalid matchPaths from renovate.json

why

  • #687 attempted to get Renovate to keep our Dockerfiles up-to-date by explicitly including them. The attempt not only failed, it broke the configuration, causing all updates to stop.

note

Renovate was already finding our Dockerfiles. It was not updating them because it will not update versions containing variables. As a result, we cannot rely on Renovate to keep the Dockerfiles up-to-date with respect to nearly anything in them, since we use variables for all versions (not just FROM but also Go SDK, helm plugins, etc.).

Security updates, better EKS cluster support @Nuru (#687)

what

  • Remove ansible
  • Add AWS_REGION_ABBREVIATION_TYPE to set region abbreviations used in our tools
  • Add AWS_DEFAULT_SHORT_REGION set to $AWS_REGION_ABBREVIATION_TYPE of $AWS_DEFAULT_REGION
  • With that, better support for EKS clusters (set-cluster, eks-update-kubeconfig should not work out-of-the box for most users)
  • Better error handling in set-cluster and eks-update-kubeconfig
  • Add support for region ap-northeast-3 made available 2020-03-01
  • Ensure $KUBECONFIG has mode rw------- before referencing it
  • Updated support for initializing AWS configuration
  • Configure Renovatebot to update Geodesic Dockerfiles
  • Include Alpine patch version and Debian minor version in startup messages
  • Updates:
    • Alpine 3.12.1 -> 3.12.4
    • Debian 10.6 -> 10.8
    • Python (Debian only) 3.8.6 -> 3.8.8
    • Google Cloud SDK 328.0.0 -> 330.0.0

why

  • Installed version of ansible superseded by new 3.x version, but Cloud Posse clients not using it. Closes #684
  • Bring scripted tools in line with atmos and Cloud Posse reference architecture
  • Better support for using Geodesic derivatives as pseudo-bastions inside Kubernetes clusters
  • Keep up-to-date

Don't miss a new geodesic release

NewReleases is sending notifications on new releases.