Update module sigs.k8s.io/cluster-api-provider-aws/v2 to v2.7.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
sigs.k8s.io/cluster-api-provider-aws/v2	v2.3.1 -> v2.7.1

---

Release Notes

kubernetes-sigs/cluster-api-provider-aws (sigs.k8s.io/cluster-api-provider-aws/v2)

v2.7.1

Compare Source

Release notes for Cluster API Provider AWS (CAPA) v2.7.1

Documentation

Changelog since v2.6.1

NOTE: there is no v2.7.0 release available due to an issue encountered during the release process.

Urgent Upgrade Notes

(No, really, you MUST read this before you upgrade)

• A new community owned AWS account is now being used for publishing AMIs. The old account owner by a company is no longer accessible and the images are being automatically deleted by AWS. Support for ubuntu 18.04 & 20.04 has been dropped and ubuntu 24.04 is now the default OS if no OS is supplied. (#​5133, @​richardcase)
• View the projects policy on publishing AMIs here.
• There is known issue creating clusters with Kubernetes v1.30 or greater when the load balancer is an ELB (which is the default). Its recommended for new clusters that you use an NLB instead, See #​5139 for further details.

Changes by Kind

Support

• Add issue templates for reviewer and maintainer changes (#​5079, @​richardcase)
• Bump CAPI to v1.8.4 (#​5061, @​damdo)
• Switch PodDisruptionBudget in templates to policy/v1 (#​5102, @​AndiDog)
• Templates: align cluster-template.yaml and cluster-template-machinepool.yaml, use external cloud controller and CSI (#​5136, @​AndiDog)
• Update metadata file for v2.7.0 release. (#​5187, @​richardcase)

Feature

• Add NonRootVolumes to AWSMachinePool launch template. (#​4954, @​mnitchev)
• Add ROSA Control plane registry configuration. (#​5132, @​serngawy)
• Change prevenet deletion label to be specific to CAPA. (#​5072, @​richardcase)
• Feat: add support for additionalControlPlaneIngressRules in AWSManagedControlPlane (#​4783, @​fad3t)
• New AMI building workflow that allows a packer vars file to be passed in. (#​5152, @​richardcase)
• New AWSCluster.spec.network.NodePortIngressRuleCidrBlocks parameter which allows to specify IPv4 CIDR blocks for Security group rule "Node Port Services" instead of default 0.0.0.0/. (#​5147, @​krasoffski)
• New workflow to publish CAPA AMIs (#​5138, @​richardcase)
• Support adding custom secondary VPC CIDR blocks in AWSCluster (#​4898, @​AndiDog)
• Support setting maxHealthyPercentage to configure ASG instance refresh (#​5140, @​fiunchinho)

Bug or Regression

• A missing permission needed for using nlbs (#​5154, @​richardcase)
• Check for the LB "active" status instead of trying to resolve the DNS name to validate the LB is ready. (#​5093, @​r4f4)
• Fix duplicated/leaked EIP when using BYO IPv4 on Machines. (#​5039, @​mtulio)
• Fix kustomize issue with e2e tests. (#​5167, @​richardcase)
• Fix: do not attach security groups for Network Load Balancers in secret regions. (#​5030, @​r4f4)
• Mark S3BucketCreated condition ready after successful reconciliation (#​5089, @​AndiDog)
• Updates EKS e2e tests after recent bumping of EKS versions. (#​5185, @​richardcase)

Uncategorized

• Add versionGate Acknowledgement for upgrading ROSA-HCP y-stream versions (#​5166, @​serngawy)
• Fix: Fargate: Standardize cluster name in role names to avoid errors on mismatch between Cluster CR and EKS cluster name (#​5111, @​alam0rt)
• Update Flatcar template to use external CCM. (#​5099, @​ader1990)

The images for this release are:

registry.k8s.io/cluster-api-aws/cluster-api-aws-controller:v2.7.1

Thanks to all our contributors.

v2.7.0

Compare Source

v2.6.1

Compare Source

Release notes for Cluster API Provider AWS (CAPA) v2.6.1

Documentation

Changelog since v2.5.2

| NOTE: there is no v2.6.0 release publicly available due to issue encountered during release.

Changes by Kind

Feature

• Add natgatewayips as source for ingress rules (#​5005, @​alexander-demicev)
• Add separate eks kubeconfig secret keys for the cluster-autoscaler to support refreshing the token automatically, see eks kubeconfig for more info. (#​4648, @​cnmcavoy)
• EBS Volumes and ENIs are now tagged when created as part of EC2 Instance Creation. (#​5057, @​fahlmant)
• Flag to enable private subnet filter for EKS control plane (#​5058, @​jas-nik)
• New AWSCluster.spec.network.vpc.SubnetSchema parameter which allows to change preferred way of subnet division to public and private. (#​4971, @​krasoffski)
• Adding a new API field capacityReservationId to create capacity reserved instances (#​5047, @​athiruma)

Bug or Regression

• Continue reconciliation after filling an empty AWSMachinePool.status.launchTemplateVersion field (#​5048, @​AndiDog)
• Fix comparison of ingress rules during Security Group reconciliation to avoid unnecessary revokes and authorizes. (#​5024, @​r4f4)
• Fix managed subnet tagging with "owned" value for "kubernetes.io/cluster/" tag. (#​5051, @​r4f4)
• Fix registering instances to Load Balancers when instances are still pending. (#​5040, @​r4f4)
• Fixed released binary name template. (#​5055, @​nrb)
• Fixes target group and listeners creation for v2 Load Balancers. (#​5017, @​r4f4)
• Flag to remove the default Helm-managed AWS VPC CNI EKS Addon (#​5009, @​jas-nik)
• Change prevenet deletion label to be specific to CAPA. (#​5072, @​richardcase)

Other

• Move AndiDog to maintainer status. (#​5060, @​richardcase)
• Update the metadata file for v2.6.0 (#​5071, @​richardcase)

The images for this release are:
registry.k8s.io/cluster-api-aws/cluster-api-aws-controller:v2.6.1

Thanks to all our contributors.

v2.6.0

Compare Source

v2.5.2

Compare Source

Release notes for Cluster API Provider AWS (CAPA) v2.5.2

Documentation

Changelog since v2.5.0

NOTE: there is no v2.5.1 release due to issues with the release process.

Changes by Kind

Uncategorized

• Add support for AL2023 AMI types (#​4973, @​k8s-infra-cherrypick-robot)
• Fix ROSAMachinePool changes detection logic (#​5025, @​k8s-infra-cherrypick-robot)
• Fix: check for nil matching subnet when publicIP: true (#​5007, @​k8s-infra-cherrypick-robot)
• Use generate name for CP loadbalancer listeners (#​5006, @​k8s-infra-cherrypick-robot)

The images for this release are: registry.k8s.io/cluster-api-aws/cluster-api-aws-controller:v2.5.2

Thanks to all our contributors.

v2.5.1

Compare Source

v2.5.0

Compare Source

Release notes for Cluster API Provider AWS (CAPA) v2.5.0

Documentation

Changelog since v2.4.2

Changes by Kind

Support

• Bump CAPI to v1.7.0 (#​4897, @​damdo)
• Bump cert-manager to v1.14.4 (#​4935, @​damdo)

API Change

• Action required
  Support deploying network requirements, subnets and carrier gateway, in AWS Wavelength Zones. This introduces new required IAM permissions. If you have an existing stack you will need to update it with clusterawsadm bootstrap iam create-cloudformation-stack (#​4901, @​mtulio)
• Add support to provision subnets on AWS Local Zone infrastructure. (#​4882, @​mtulio)
• Exposing the health check attributes for the target group for the control plane load balancers, allowing customized health checks for API or additional listeners. (#​4849, @​mtulio)
• Fixed a bug where ingress rules specified in the secondary load balancer were not applied to the security group. (#​4866, @​r4f4)

Feature

• Add a new field to S3Bucket, BestEffortDeleteObjects, to allow ignoring AccessDenied errors when deleting S3 objects. (#​4904, @​r4f4)
• Add flags to manager for leaderElection timeouts (#​4845, @​nikParasyr)
• Add support to specify PlacementGroupPartition of placement group in instances. (#​4883, @​chiragkyal)
• ROSA: Support for External OIDC (#​4915, @​muraee)
• Use goreleaser for releasing binary (#​4748, @​kranurag7)

Bug or Regression

• Create aws.Config with a region to be able to work with different AWS partitions (#​4860, @​calvix)
• Fix a bug where the machine controller will keep trying to delete an already deleted s3 object. (#​4879, @​r4f4)
• Fix machines getting a public IP even when user-supplied subnets don't have MapPublicIpOnLaunch. (#​4892, @​r4f4)
• Fix the error handling by deleting the created route table on errors when creating routes. (#​4899, @​mtulio)
• Fixes in the health check probe configuration for API target group on ELBv2. The correct health check path now is set to /readyz when AWSLoadBalancerSpec.HealthCheckProtocol is HTTP or HTTPS. (#​4846, @​mtulio)
• Retry getting and deleting user data from SecretsManager in the bootstrap script in case of request failure. (#​4896, @​alexander-demicev)
• Revert a change where the Target Group's name would use the Load Balancer's name as prefix, possibly causing it to exceed the 32 characters limit (#​4948, @​r4f4)

Other (Cleanup or Flake)

• Bump aws-sdk-go to v1.51 (#​4916, @​stefanmcshane)

The images for this release are: registry.k8s.io/cluster-api-aws/cluster-api-aws-controller:v2.5.0

Thanks to all our contributors.

v2.4.2

Compare Source

Release notes for Cluster API Provider AWS (CAPA) v2.4.2

Documentation

Changelog since v2.4.1

Changes by Kind

Bug or Regression

• Fixes in the health check probe configuration for API target group on ELBv2. The correct health check path now is set to /readyz when AWSLoadBalancerSpec.HealthCheckProtocol is HTTP or HTTPS. (#​4846, @​mtulio)
• Fix a bug where the machine controller will keep trying to delete an already deleted s3 object. (#​4907, @​k8s-infra-cherrypick-robot)
• Fix instance PrivateDNSName when domain-name is set in dhcpOpts (#​4921, @​jparrill)
• Fix machines getting a public IP even when user-supplied subnets don't have MapPublicIpOnLaunch. (#​4908, @​k8s-infra-cherrypick-robot)
• Fix the error handling by deleting the created route table on errors when creating routes. (#​4912, @​k8s-infra-cherrypick-robot)
• Fixed a bug where ingress rules specified in the secondary load balancer were not applied to the security group. (#​4913, @​k8s-infra-cherrypick-robot)
• Retry getting and deleting user data from SecretsManager in the bootstrap script in case of request failure. (#​4911, @​k8s-infra-cherrypick-robot)

The images for this release are:
registry.k8s.io/cluster-api-aws/cluster-api-aws-controller:v2.4.2

Thanks to all our contributors.

v2.4.1

Compare Source

Release notes for Cluster API Provider AWS (CAPA) v2.4.1

Documentation

Changelog since v2.4.0

Changes by Kind

Support

• Add @​damdo as a reviewer (#​4842, @​richardcase)

API Change

• Add additionalTags API field to ROSAMachinePool (#​4869, @​muraee)

Feature

• Add ProvisionShardID API field to ROSAControlPlane (#​4872, @​muraee)
• Add additionalSecurityGroups field to ROSAMachinePool (#​4848, @​muraee)
• Add new field 'auditLogRoleARN' to ROSAControlPlane (#​4857, @​muraee)
• Add new fields to ROSAControlPlane - additionalTags, etcdEncryption, endpointAccess (#​4844, @​muraee)
• Fix typo in awsmachinetemplate_webhook logs (#​4789, @​guettli)
• Ignition, from v3.1, now supports including Proxy or CA bundle data. (#​4750, @​vincepri)
• Reconcile ROSAMachinePool fields (#​4804, @​muraee)
• Reconcile ROSAMachinePool.spec.ProviderIDList (#​4831, @​muraee)

Bug or Regression

• Fix discovered subnets for additional Load Balancers ("SecondaryControlPlaneLoadBalancer") when it is internet-facing. (#​4840, @​mtulio)
• Fix upgrade of managed node groups using custom AMIs (#​4830, @​fad3t)
• Fix: bump rosa deps to fix int overflow on non-64bit arch (#​4836, @​damdo)
• Fixes in the health check probe configuration for API target group on ELBv2. The correct health check path now is set to /readyz when AWSLoadBalancerSpec.HealthCheckProtocol is HTTP or HTTPS. (#​4846, @​mtulio)
• Skip location constraint configuration when creating a bucket on us-east-1. (#​4839, @​mtulio)

The images for this release are: registry.k8s.io/cluster-api-aws/cluster-api-aws-controller:v2.4.1

Thanks to all our contributors.

v2.4.0

Compare Source

Release notes for Cluster API Provider AWS (CAPA) v2.4.0

Documentation

Changelog since v2.3.0

Urgent Upgrade Notes

(No, really, you MUST read this before you upgrade)

• v1beta1 types are not going to be served any longer and will be removed in the next release (#​4757, @​vincepri)

Changes by Kind

Feature

• A new enum value, disabled, is added for the AWSCluster.spec.controlPlaneLoadBalancer.loadBalancerType field, which skips the reconciliation of the load balancer for the given cluster, useful for clusters which are consuming an externally managed Control Plane. (#​4438, @​prometherion)
• Add & Reconcile ROSAMachinePools.spec.version (#​4764, @​muraee)
• Add tests for the re-introduced managed subnet functionality in #​4474 (#​4637, @​AndiDog)
• Added AWSMachine and AWSMachineTemplate fields to control vpc placement for individual instances (#​4541, @​cnmcavoy)
• Adds support for a secondary, internal API server load balancer within clusters. (#​4733, @​nrb)
• Allow to configure garbage collector using clusterawsadm (#​4500, @​Fedosin)
• Enable transit encryption on S3 buckets (#​4676, @​fiunchinho)
• Generate CAPI kubeconfig secret for ROSA clusters (#​4742, @​muraee)
• Ignition: add option to store User Data in plain text (#​4700, @​damdo)
• Introduce basic support for ROSAMachinePools (#​4725, @​muraee)
• Log full ARN in GC error messages (#​4709, @​AndiDog)
• Prevent users setting SpotMarketOptions and MixedInstancesPolicy at the same time (#​4656, @​fiunchinho)
• Reconcile ROSAControlPlane version to trigger upgrades (#​4761, @​muraee)
• Reconcile ROSAControlePlane status (#​4759, @​muraee)
• Remove ingress and egress rules from vpc default security group (#​4707, @​fiunchinho)
• Skip AWSCluster deletion reconciliation once CAPA finalizer is gone (#​4730, @​AndiDog)
• Support setting HostnameType options for subnets and machines (#​4664, @​MaxFedotov)
• Trigger machine pool instance refresh (node rollout) if bootstrap config reference changes (#​4619, @​AndiDog)
• Use go 1.21.5 (#​4710, @​fiunchinho)
• Bump CAPI to v1.6.x (#​4739, @​damdo)

Bug or Regression

• Don't error when ASG is not present while deciding whether or not to refresh ASG instances. (#​4660, @​fiunchinho)
• Fix logging verbosity for machine pool reconciliation (#​4620, @​AndiDog)
• Fix: bump rosa deps to fix int overflow on non-64bit arch (#​4836, @​damdo)
• Make VPC creation idempotent to avoid indefinite creation of new VPCs if storage of the ID fails (#​4723, @​AndiDog)
• Resolved issue where deleted control planes were still registered in the kube-apiserver load balancer, causing potential disruptions. (#​4701, @​tobiasgiese)
• Skip instance refresh attempt if ASG does not yet exist (#​4662, @​fiunchinho)
• Treat the annotation cluster.x-k8s.io/replicas-managed-by on MachinePool CR as described in CAPI documentation and do not set desired replicas on ASG when the annotation is present. (#​4654, @​calvix)
• Update AWSMachine providerID and instanceID earlier to minimize scenarios where tag-based searching is needed (#​4670, @​mjlshen)
• Various changes to the releases process. (#​4813, @​richardcase)
• When using Ignition, the S3 bucket was previously created in us-east-1 regardless of where the cluster was located, new S3 buckets will be created within the same region as the cluster. (#​4732, @​vincepri)

Failing Test

• Add CI script to test docker builds for the controller and clusterawsadm with all architectures. (#​4834, @​richardcase)

Support

• Disable dependency report short term. (#​4825, @​richardcase)
• Move @​AndiDog to reviewer status (#​4687, @​richardcase)
• Update metadata for v2.4.x release series. (#​4833, @​richardcase)

Other (Cleanup or Flake)

• Dependabot configuration update to group updates, (#​4688, @​richardcase)
• Fix some logging and error cases (#​4724, @​AndiDog)
• If you're using S3 buckets for bootstrap data, the following permissions are required on the controller to automatically detect whether an object is still needing to be deleted: s3:GetObject. The following permissions are optional: s3:ListBucket. (#​4667, @​thefirstofthe300)

Uncategorized

• Updated the default clusterctl template to use external cloud-controller-manager (#​4678, @​nrb)
• Use seedling emoji for dependabot pull requests (#​4652, @​kranurag7)
• Wrap the underlying error when the AWSMachinePool reconciler fails to get the infra provider cluster or control plane object (#​4685, @​harveyxia)

The images for this release are: registry.k8s.io/cluster-api-aws/cluster-api-aws-controller:v2.4.0

Thanks to all our contributors.

v2.3.5

Release notes for Cluster API Provider AWS (CAPA) v2.3.5

Documentation

Changelog since v2.3.1

NOTE: there are no v2.3.2-v2.3.4 releases due to issues with the release process.

Changes by Kind

Bug or Regression

• Delete VPC endpoints only if s3 bucket is enabled (#​4805, @​k8s-infra-cherrypick-robot)

Support

• Bump go version to 1.21 (#​4803, @​damdo)
• Various changes to the releases process. (#​4814 #​4819 #​4809, @​richardcase)

The images for this release are: registry.k8s.io/cluster-api-aws/cluster-api-aws-controller:v2.3.5

Thanks to all our contributors.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 45 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.21.1 -> 1.23.2
github.com/aws/aws-sdk-go-v2	v1.24.1 -> v1.30.3
github.com/aws/aws-sdk-go-v2/service/ec2	v1.145.0 -> v1.159.0
google.golang.org/protobuf	v1.32.0 -> v1.34.1
k8s.io/api	v0.29.1 -> v0.30.5
k8s.io/apimachinery	v0.29.1 -> v0.30.5
sigs.k8s.io/cluster-api	v1.6.1 -> v1.8.4
sigs.k8s.io/controller-runtime	v0.17.0 -> v0.18.5
github.com/aws/aws-sdk-go-v2/config	v1.26.6 -> v1.27.11
github.com/aws/aws-sdk-go-v2/credentials	v1.16.16 -> v1.17.11
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	v1.14.11 -> v1.16.1
github.com/aws/aws-sdk-go-v2/internal/configsources	v1.2.10 -> v1.3.15
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	v2.5.10 -> v2.6.15
github.com/aws/aws-sdk-go-v2/internal/ini	v1.7.3 -> v1.8.0
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	v1.10.4 -> v1.11.2
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	v1.10.10 -> v1.11.7
github.com/aws/aws-sdk-go-v2/service/sso	v1.18.7 -> v1.20.5
github.com/aws/aws-sdk-go-v2/service/ssooidc	v1.21.7 -> v1.23.4
github.com/aws/aws-sdk-go-v2/service/sts	v1.26.7 -> v1.28.6
github.com/aws/smithy-go	v1.19.0 -> v1.20.3
github.com/cespare/xxhash/v2	v2.2.0 -> v2.3.0
github.com/emicklei/go-restful/v3	v3.11.2 -> v3.12.1
github.com/evanphx/json-patch/v5	v5.8.1 -> v5.9.0
github.com/fatih/color	v1.16.0 -> v1.17.0
github.com/go-logr/logr	v1.4.1 -> v1.4.2
github.com/golang/protobuf	v1.5.3 -> v1.5.4
github.com/google/gnostic-models	v0.6.8 -> v0.6.9-0.20230804172637-c7be7c783f49
github.com/prometheus/client_golang	v1.18.0 -> v1.19.0
github.com/prometheus/client_model	v0.5.0 -> v0.6.1
github.com/prometheus/common	v0.46.0 -> v0.52.2
github.com/prometheus/procfs	v0.12.0 -> v0.13.0
github.com/spf13/cobra	v1.8.0 -> v1.8.1
go.uber.org/zap	v1.26.0 -> v1.27.0
golang.org/x/crypto	v0.18.0 -> v0.25.0
golang.org/x/mod	v0.14.0 -> v0.17.0
golang.org/x/net	v0.20.0 -> v0.27.0
golang.org/x/oauth2	v0.16.0 -> v0.21.0
golang.org/x/sys	v0.16.0 -> v0.22.0
golang.org/x/term	v0.16.0 -> v0.22.0
golang.org/x/text	v0.14.0 -> v0.16.0
golang.org/x/tools	v0.17.0 -> v0.21.1-0.20240508182429-e35e4ccd0d2d
google.golang.org/genproto/googleapis/rpc	v0.0.0-20240123012728-ef4313101c80 -> v0.0.0-20240314234333-6e1732d8331c
google.golang.org/grpc	v1.61.0 -> v1.62.2
k8s.io/apiextensions-apiserver	v0.29.1 -> v0.30.5
k8s.io/component-base	v0.29.1 -> v0.30.5
k8s.io/kube-openapi	v0.0.0-20240117194847-208609032b15 -> v0.0.0-20240228011516-70dd3763d340