Skip to content

Conversation

leiicamundi
Copy link
Contributor

@leiicamundi leiicamundi commented Mar 11, 2025

This PR is parked and will not be merged.
When 8.7 is released I'll manually re-integrate it properly. Don't merge it

@leiicamundi leiicamundi marked this pull request as draft March 11, 2025 20:17
Langleu added a commit that referenced this pull request Mar 19, 2025
* feat(tf): initial module creation

rough poc, far from modular

* chore(readme): basic setup

* feat(tf): add postgres db module

* fix: use correct inputs from the vpc for postgres

* chore(iam): add cert-manager irsa mapping

* chore(iam): add external-dns irsa mapping

* chore(psql): separate module

* fix(k8s): provider dependency on cluster creation

feat(k8s): add gp3 storage class and annotate old sc

* chore(psql): add default db on creation

* fix(postgres): remove port from postgres endpoint
helm guide relies on the value without port otherwise doesnt work

* chore(tf): switch to m6i nodes with more performance for same price

* chore(tf): restructure project
chore(lint): introduce pre-commit hook for automatic tf docs creation

* chore(README): rework missing descriptions

* chore(misc): add renovate and tool versions

* fix(renovate): adjust config as private cant be extended

* chore(deps): update dependency terraform to v1.6.6

| datasource      | package             | from  | to    |
| --------------- | ------------------- | ----- | ----- |
| github-releases | hashicorp/terraform | 1.6.5 | 1.6.6 |

* chore(deps): update dependency terraform-docs to v0.17.0

| datasource  | package                       | from    | to     |
| ----------- | ----------------------------- | ------- | ------ |
| github-tags | terraform-docs/terraform-docs | v0.16.0 | 0.17.0 |

* chore(deps): update dependency tflint to v0.50.0

| datasource  | package                  | from   | to     |
| ----------- | ------------------------ | ------ | ------ |
| github-tags | terraform-linters/tflint | 0.49.0 | 0.50.0 |

* chore(deps): update pre-commit hook antonbabenko/pre-commit-terraform to v1.86.0

| datasource  | package                           | from    | to      |
| ----------- | --------------------------------- | ------- | ------- |
| github-tags | antonbabenko/pre-commit-terraform | v1.83.6 | v1.86.0 |

* chore(deps): update terraform terraform-aws-modules/iam/aws to v5.33.0

| datasource       | package                       | from   | to     |
| ---------------- | ----------------------------- | ------ | ------ |
| terraform-module | terraform-aws-modules/iam/aws | 5.32.1 | 5.33.0 |

* chore(outputs): add more to use for VPC peering

* chore(deps): update dependency tflint to v0.50.1

| datasource  | package                  | from   | to     |
| ----------- | ------------------------ | ------ | ------ |
| github-tags | terraform-linters/tflint | 0.50.0 | 0.50.1 |

* chore(deps): update dependency tfsec to v1.28.5

| datasource  | package            | from   | to     |
| ----------- | ------------------ | ------ | ------ |
| github-tags | aquasecurity/tfsec | 1.28.4 | 1.28.5 |

* chore(deps): update dependency tflint to v0.50.2

| datasource  | package                  | from   | to     |
| ----------- | ------------------------ | ------ | ------ |
| github-tags | terraform-linters/tflint | 0.50.1 | 0.50.2 |

* chore(deps): update dependency tflint to v0.50.3

| datasource  | package                  | from   | to     |
| ----------- | ------------------------ | ------ | ------ |
| github-tags | terraform-linters/tflint | 0.50.2 | 0.50.3 |

* chore(deps): update dependency pre-commit to v3.6.1

| datasource  | package               | from  | to    |
| ----------- | --------------------- | ----- | ----- |
| github-tags | pre-commit/pre-commit | 3.6.0 | 3.6.1 |

* chore(deps): update pre-commit hook antonbabenko/pre-commit-terraform to v1.86.1

| datasource  | package                           | from    | to      |
| ----------- | --------------------------------- | ------- | ------- |
| github-tags | antonbabenko/pre-commit-terraform | v1.86.0 | v1.86.1 |

* chore(deps): update pre-commit hook antonbabenko/pre-commit-terraform to v1.87.0

| datasource  | package                           | from    | to      |
| ----------- | --------------------------------- | ------- | ------- |
| github-tags | antonbabenko/pre-commit-terraform | v1.86.1 | v1.87.0 |

* chore(deps): update dependency pre-commit to v3.6.2

| datasource  | package               | from  | to    |
| ----------- | --------------------- | ----- | ----- |
| github-tags | pre-commit/pre-commit | 3.6.1 | 3.6.2 |

* chore(deps): update dependency terraform to v1.7.3

| datasource      | package             | from  | to    |
| --------------- | ------------------- | ----- | ----- |
| github-releases | hashicorp/terraform | 1.6.6 | 1.7.3 |

* chore(tf): dependency update

* chore(deps): update dependency terraform to v1.7.4

| datasource      | package             | from  | to    |
| --------------- | ------------------- | ----- | ----- |
| github-releases | hashicorp/terraform | 1.7.3 | 1.7.4 |

* chore(deps): update pre-commit hook antonbabenko/pre-commit-terraform to v1.88.0

| datasource  | package                           | from    | to      |
| ----------- | --------------------------------- | ------- | ------- |
| github-tags | antonbabenko/pre-commit-terraform | v1.87.0 | v1.88.0 |

* chore(deps): update dependency terraform to v1.7.5

| datasource      | package             | from  | to    |
| --------------- | ------------------- | ----- | ----- |
| github-releases | hashicorp/terraform | 1.7.4 | 1.7.5 |

* chore(deps): update pre-commit hook antonbabenko/pre-commit-terraform to v1.88.2

| datasource  | package                           | from    | to      |
| ----------- | --------------------------------- | ------- | ------- |
| github-tags | antonbabenko/pre-commit-terraform | v1.88.0 | v1.88.2 |

* chore(deps): update dependency pre-commit to v3.7.0

| datasource  | package               | from  | to    |
| ----------- | --------------------- | ----- | ----- |
| github-tags | pre-commit/pre-commit | 3.6.2 | 3.7.0 |

* chore(deps): update pre-commit hook antonbabenko/pre-commit-terraform to v1.88.3

| datasource  | package                           | from    | to      |
| ----------- | --------------------------------- | ------- | ------- |
| github-tags | antonbabenko/pre-commit-terraform | v1.88.2 | v1.88.3 |

* chore(deps): update pre-commit hook antonbabenko/pre-commit-terraform to v1.88.4

| datasource  | package                           | from    | to      |
| ----------- | --------------------------------- | ------- | ------- |
| github-tags | antonbabenko/pre-commit-terraform | v1.88.3 | v1.88.4 |

* chore(deps): update pre-commit hook pre-commit/pre-commit-hooks to v4.6.0

| datasource  | package                     | from   | to     |
| ----------- | --------------------------- | ------ | ------ |
| github-tags | pre-commit/pre-commit-hooks | v4.5.0 | v4.6.0 |

* test(modules): implement first tests of this repo (#30)

* chore(deps): update mono-update-renovate

| datasource      | package             | from    | to      |
| --------------- | ------------------- | ------- | ------- |
| github-tags     | aws/aws-cli         | 2.15.20 | 2.15.40 |
| github-releases | hashicorp/terraform | v1.7.5  | v1.8.1  |
| github-releases | hashicorp/terraform | 1.7.5   | 1.8.1   |

* chore(deps): update mono-update-renovate (#37)

| datasource      | package             | from     | to       |
| --------------- | ------------------- | -------- | -------- |
| github-tags     | aws/aws-cli         | 2.15.40  | 2.15.42  |
| github-releases | eksctl-io/eksctl    | v0.175.0 | v0.176.0 |
| github-releases | hashicorp/terraform | v1.8.1   | v1.8.2   |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore: use spot instances in tests (#38)

* chore(renovate): switch to globally maintained config (#40)

* chore(asdf): align tool-versions (#43)

* chore(deps): update module golang.org/x/net to v0.23.0 [security] (#42)

| datasource | package          | from    | to      |
| ---------- | ---------------- | ------- | ------- |
| go         | golang.org/x/net | v0.19.0 | v0.23.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update module github.com/hashicorp/go-getter to v1.7.4 [security] (#41)

| datasource | package                        | from   | to     |
| ---------- | ------------------------------ | ------ | ------ |
| go         | github.com/hashicorp/go-getter | v1.7.1 | v1.7.4 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix(cloud-nuke): wrong arg hours (#44)

* fix(cloud-nuke): wrong arg hours

* doc: fix dev instructions

* chore(renovate): cloud-nuke version

* chore(deps): update dependency eksctl-io/eksctl to v0.177.0 (#50)

| datasource  | package          | from    | to      |
| ----------- | ---------------- | ------- | ------- |
| github-tags | eksctl-io/eksctl | 0.176.0 | 0.177.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(renovate): monoupdate (#56)

* chore: use lychee for link checking

* chore: make sure renovate use a single group

* chore(deps): update github artifact actions to v4 (#35)

| datasource  | package                   | from | to |
| ----------- | ------------------------- | ---- | -- |
| github-tags | actions/download-artifact | v3   | v4 |
| github-tags | actions/upload-artifact   | v3   | v4 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update pre-commit hooks (#54)

| datasource  | package                           | from     | to        |
| ----------- | --------------------------------- | -------- | --------- |
| github-tags | antonbabenko/pre-commit-terraform | v1.88.4  | v1.89.1   |
| github-tags | renovatebot/pre-commit-hooks      | 37.278.0 | 37.368.10 |
| github-tags | rhysd/actionlint                  | v1.6.27  | v1.7.0    |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update pre-commit hooks (#58)

| datasource  | package                           | from      | to       |
| ----------- | --------------------------------- | --------- | -------- |
| github-tags | antonbabenko/pre-commit-terraform | v1.89.1   | v1.90.0  |
| github-tags | renovatebot/pre-commit-hooks      | 37.368.10 | 37.377.8 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update mono-update-renovate (#59)

| datasource      | package                            | from    | to      |
| --------------- | ---------------------------------- | ------- | ------- |
| github-tags     | actions/cache                      | v3      | v4      |
| github-tags     | aws/aws-cli                        | 2.15.42 | 2.15.58 |
| github-tags     | eksctl-io/eksctl                   | 0.177.0 | 0.179.0 |
| github-tags     | golang/go                          | 1.22.2  | 1.22.3  |
| github-tags     | gruntwork-io/cloud-nuke            | v0.35.0 | v0.36.0 |
| github-releases | casey/just                         | 1.25.2  | 1.27.0  |
| github-releases | opentofu/opentofu                  | 1.6.2   | 1.7.1   |
| github-tags     | peter-evans/create-issue-from-file | v4      | v5      |
| github-tags     | pre-commit/pre-commit              | 3.7.0   | 3.7.1   |
| github-releases | hashicorp/terraform                | 1.8.2   | 1.8.4   |
| github-tags     | terraform-linters/tflint           | 0.50.3  | 0.51.1  |
| github-tags     | aquasecurity/tfsec                 | 1.28.5  | 1.28.6  |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix(deps): update go (#55)

| datasource | package                                  | from     | to       |
| ---------- | ---------------------------------------- | -------- | -------- |
| go         | github.com/aws/aws-sdk-go-v2             | v1.26.1  | v1.27.0  |
| go         | github.com/aws/aws-sdk-go-v2/config      | v1.27.9  | v1.27.16 |
| go         | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.154.0 | v1.161.4 |
| go         | github.com/aws/aws-sdk-go-v2/service/eks | v1.41.2  | v1.42.5  |
| go         | github.com/aws/aws-sdk-go-v2/service/iam | v1.31.3  | v1.32.4  |
| go         | github.com/aws/aws-sdk-go-v2/service/kms | v1.30.0  | v1.32.1  |
| go         | github.com/aws/aws-sdk-go-v2/service/rds | v1.76.0  | v1.79.2  |
| go         | github.com/gruntwork-io/terratest        | v0.46.13 | v0.46.15 |
| go         | k8s.io/api                               | v0.29.3  | v0.30.1  |
| go         | k8s.io/apimachinery                      | v0.29.3  | v0.30.1  |
| go         | k8s.io/client-go                         | v0.29.3  | v0.30.1  |
| go         | sigs.k8s.io/aws-iam-authenticator        | v0.6.19  | v0.6.20  |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update pre-commit hooks (#62)

| datasource  | package                      | from     | to       |
| ----------- | ---------------------------- | -------- | -------- |
| github-tags | renovatebot/pre-commit-hooks | 37.377.8 | 37.385.0 |
| github-tags | rhysd/actionlint             | v1.7.0   | v1.7.1   |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix(deps): update go (#63)

| datasource | package                                  | from     | to       |
| ---------- | ---------------------------------------- | -------- | -------- |
| go         | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.161.4 | v1.162.0 |
| go         | github.com/aws/aws-sdk-go-v2/service/rds | v1.79.2  | v1.79.3  |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix: version tf lint (#64)

* fix: artifact merge on v4 (#66)

* chore(deps): update mono-update-renovate (#61)

| datasource      | package                       | from    | to      |
| --------------- | ----------------------------- | ------- | ------- |
| github-tags     | aws/aws-cli                   | 2.15.58 | 2.16.0  |
| github-tags     | eksctl-io/eksctl              | 0.179.0 | 0.181.0 |
| github-releases | gotestyourself/gotestsum      | v1.11.0 | v1.12.0 |
| github-releases | opentofu/opentofu             | 1.7.1   | 1.7.2   |
| github-tags     | terraform-docs/terraform-docs | 0.17.0  | 0.18.0  |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix(cloud-nuke): cleanup not cleaning up resources (#67)

* chore: remove nightly cleanup to use the common one (#69)

* feat: implement notify on failure (#68)

* chore(deps): update mono-update-renovate (#70)

| datasource      | package             | from    | to      |
| --------------- | ------------------- | ------- | ------- |
| github-tags     | aws/aws-cli         | 2.16.0  | 2.16.4  |
| github-tags     | eksctl-io/eksctl    | 0.181.0 | 0.182.0 |
| golang-version  | go                  | 1.22.3  | 1.22.4  |
| github-tags     | golang/go           | 1.22.3  | 1.22.4  |
| github-releases | casey/just          | 1.27.0  | 1.28.0  |
| github-releases | hashicorp/terraform | 1.8.4   | 1.8.5   |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update pre-commit hooks (#72)

| datasource  | package                           | from     | to       |
| ----------- | --------------------------------- | -------- | -------- |
| github-tags | antonbabenko/pre-commit-terraform | v1.90.0  | v1.91.0  |
| github-tags | renovatebot/pre-commit-hooks      | 37.385.0 | 37.399.9 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix(deps): update go (#71)

| datasource | package                                  | from     | to       |
| ---------- | ---------------------------------------- | -------- | -------- |
| go         | github.com/aws/aws-sdk-go-v2             | v1.27.0  | v1.27.2  |
| go         | github.com/aws/aws-sdk-go-v2/config      | v1.27.16 | v1.27.18 |
| go         | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.162.0 | v1.163.1 |
| go         | github.com/aws/aws-sdk-go-v2/service/eks | v1.42.5  | v1.43.1  |
| go         | github.com/aws/aws-sdk-go-v2/service/iam | v1.32.4  | v1.32.6  |
| go         | github.com/aws/aws-sdk-go-v2/service/kms | v1.32.1  | v1.32.3  |
| go         | github.com/aws/aws-sdk-go-v2/service/rds | v1.79.3  | v1.79.6  |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update mono-update-renovate (#73)

| datasource      | package          | from    | to      |
| --------------- | ---------------- | ------- | ------- |
| github-tags     | aws/aws-cli      | 2.16.4  | 2.16.9  |
| github-tags     | eksctl-io/eksctl | 0.182.0 | 0.183.0 |
| github-releases | casey/just       | 1.28.0  | 1.29.1  |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix(deps): update go (#75)

| datasource | package                                  | from     | to       |
| ---------- | ---------------------------------------- | -------- | -------- |
| go         | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.163.1 | v1.164.1 |
| go         | github.com/aws/aws-sdk-go-v2/service/kms | v1.32.3  | v1.33.0  |
| go         | k8s.io/api                               | v0.30.1  | v0.30.2  |
| go         | k8s.io/apimachinery                      | v0.30.1  | v0.30.2  |
| go         | k8s.io/client-go                         | v0.30.1  | v0.30.2  |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v37.409.1 (#74)

| datasource  | package                      | from     | to       |
| ----------- | ---------------------------- | -------- | -------- |
| github-tags | renovatebot/pre-commit-hooks | 37.399.9 | 37.409.1 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update minor-grouped (#76)

* chore(deps): update minor-grouped

| datasource       | package                       | from     | to       |
| ---------------- | ----------------------------- | -------- | -------- |
| github-tags      | renovatebot/pre-commit-hooks  | 37.409.1 | 37.412.2 |
| terraform-module | terraform-aws-modules/iam/aws | 5.34.0   | 5.39.1   |
| terraform-module | terraform-aws-modules/vpc/aws | 5.5.2    | 5.8.1    |

* chore(deps): update module doc

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Leo J. <153937047+leiicamundi@users.noreply.github.com>

* fix(deps): update aws-sdk-go-v2 monorepo (#80)

| datasource | package                                  | from     | to       |
| ---------- | ---------------------------------------- | -------- | -------- |
| go         | github.com/aws/aws-sdk-go-v2             | v1.27.2  | v1.30.0  |
| go         | github.com/aws/aws-sdk-go-v2/config      | v1.27.18 | v1.27.21 |
| go         | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.164.1 | v1.165.1 |
| go         | github.com/aws/aws-sdk-go-v2/service/eks | v1.43.1  | v1.44.1  |
| go         | github.com/aws/aws-sdk-go-v2/service/iam | v1.32.6  | v1.33.1  |
| go         | github.com/aws/aws-sdk-go-v2/service/kms | v1.33.0  | v1.34.1  |
| go         | github.com/aws/aws-sdk-go-v2/service/rds | v1.79.6  | v1.80.1  |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update minor-grouped (#79)

| datasource  | package                           | from     | to       |
| ----------- | --------------------------------- | -------- | -------- |
| github-tags | antonbabenko/pre-commit-terraform | v1.91.0  | v1.92.0  |
| github-tags | aws/aws-cli                       | 2.16.9   | 2.17.0   |
| github-tags | renovatebot/pre-commit-hooks      | 37.412.2 | 37.414.1 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/infraex-common-config digest to 9c9f7cd (#78)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix(deps): update aws-sdk-go-v2 monorepo (#82)

| datasource | package                                  | from     | to       |
| ---------- | ---------------------------------------- | -------- | -------- |
| go         | github.com/aws/aws-sdk-go-v2             | v1.30.0  | v1.30.1  |
| go         | github.com/aws/aws-sdk-go-v2/config      | v1.27.21 | v1.27.23 |
| go         | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.165.1 | v1.167.1 |
| go         | github.com/aws/aws-sdk-go-v2/service/eks | v1.44.1  | v1.45.1  |
| go         | github.com/aws/aws-sdk-go-v2/service/iam | v1.33.1  | v1.34.1  |
| go         | github.com/aws/aws-sdk-go-v2/service/kms | v1.34.1  | v1.35.1  |
| go         | github.com/aws/aws-sdk-go-v2/service/rds | v1.80.1  | v1.81.2  |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update minor-grouped (#83)

* chore(deps): update minor-grouped

| datasource      | package                      | from     | to       |
| --------------- | ---------------------------- | -------- | -------- |
| github-tags     | renovatebot/pre-commit-hooks | 37.414.1 | 37.421.3 |
| github-releases | hashicorp/terraform          | 1.8.5    | 1.9.0    |

* chore(workflow): concurrency is now based on ref rather than actors

* chore(workflow): concurrency ensure that only the latest occurence is used to ci

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Leo J. <153937047+leiicamundi@users.noreply.github.com>

* chore(deps): update patch-grouped (#81)

* chore(deps): update patch-grouped

| datasource  | package                           | from     | to       |
| ----------- | --------------------------------- | -------- | -------- |
| github-tags | aws/aws-cli                       | 2.17.0   | 2.17.5   |
| go          | github.com/gruntwork-io/terratest | v0.46.15 | v0.46.16 |
| go          | sigs.k8s.io/aws-iam-authenticator | v0.6.20  | v0.6.21  |
| github-tags | terraform-linters/tflint          | 0.51.1   | 0.51.2   |

* chore(deps): downgrade tfsec

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Leo J. <153937047+leiicamundi@users.noreply.github.com>

* chore(deps): update terraform terraform-aws-modules/eks/aws to v20 (#77)

* chore(deps): update terraform terraform-aws-modules/eks/aws to v20

| datasource       | package                       | from    | to      |
| ---------------- | ----------------------------- | ------- | ------- |
| terraform-module | terraform-aws-modules/eks/aws | 19.21.0 | 20.15.0 |

* chore(eks-module): upgrade path from v19 to v20

* chore(eks-module): enable access entries

* remove idempotency tests

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Leo J. <153937047+leiicamundi@users.noreply.github.com>

* chore(deps): update patch-grouped (#85)

* chore(deps): update patch-grouped

| datasource      | package                           | from    | to      |
| --------------- | --------------------------------- | ------- | ------- |
| github-tags     | aws/aws-cli                       | 2.17.5  | 2.17.13 |
| github-tags     | golang/go                         | 1.22.4  | 1.22.5  |
| github-releases | opentofu/opentofu                 | 1.7.2   | 1.7.3   |
| go              | sigs.k8s.io/aws-iam-authenticator | v0.6.21 | v0.6.22 |
| github-releases | hashicorp/terraform               | 1.9.0   | 1.9.2   |
| github-tags     | aquasecurity/tfsec                | 1.28.6  | 1.28.10 |

* fix dep on k8s storage

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Leo J. <153937047+leiicamundi@users.noreply.github.com>

* fix(deps): update aws-sdk-go-v2 monorepo (#86)

| datasource | package                                  | from     | to       |
| ---------- | ---------------------------------------- | -------- | -------- |
| go         | github.com/aws/aws-sdk-go-v2             | v1.30.1  | v1.30.3  |
| go         | github.com/aws/aws-sdk-go-v2/config      | v1.27.23 | v1.27.26 |
| go         | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.167.1 | v1.170.0 |
| go         | github.com/aws/aws-sdk-go-v2/service/eks | v1.45.1  | v1.46.2  |
| go         | github.com/aws/aws-sdk-go-v2/service/iam | v1.34.1  | v1.34.3  |
| go         | github.com/aws/aws-sdk-go-v2/service/kms | v1.35.1  | v1.35.3  |
| go         | github.com/aws/aws-sdk-go-v2/service/rds | v1.81.2  | v1.81.4  |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update minor-grouped (#87)

* fix policy

* make sure that eks cluster is created before modifying storage

* chore(deps): update minor-grouped

| datasource       | package                            | from     | to       |
| ---------------- | ---------------------------------- | -------- | -------- |
| github-tags      | compilerla/conventional-pre-commit | v3.2.0   | v3.3.0   |
| github-tags      | eksctl-io/eksctl                   | 0.183.0  | 0.187.0  |
| go               | github.com/gruntwork-io/terratest  | v0.46.16 | v0.47.0  |
| github-releases  | casey/just                         | 1.29.1   | 1.31.0   |
| github-tags      | renovatebot/pre-commit-hooks       | 37.421.3 | 37.432.0 |
| terraform-module | terraform-aws-modules/eks/aws      | 20.15.0  | 20.19.0  |
| terraform-module | terraform-aws-modules/iam/aws      | 5.39.1   | 5.41.0   |
| terraform-module | terraform-aws-modules/vpc/aws      | 5.8.1    | 5.9.0    |
| github-tags      | terraform-linters/tflint           | 0.51.2   | 0.52.0   |
| eks | amazon | 1.28 | 1.30 |
* fix doc

---------

Co-authored-by: Leo J. <153937047+leiicamundi@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix: auth policy from token to eks cli (#88)

* fix(deps): update minor-grouped (#91)

* fix(deps): update minor-grouped

| datasource       | package                                  | from     | to       |
| ---------------- | ---------------------------------------- | -------- | -------- |
| go               | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.170.0 | v1.171.0 |
| github-releases  | casey/just                               | 1.31.0   | 1.32.0   |
| github-tags      | renovatebot/pre-commit-hooks             | 37.432.0 | 37.438.2 |
| terraform-module | terraform-aws-modules/eks/aws            | 20.19.0  | 20.20.0  |

* chore(readme): update tf docs [ci skip]

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Langleu <lars.lange@camunda.com>

* chore(deps): update patch-grouped (#90)

| datasource  | package                                  | from     | to       |
| ----------- | ---------------------------------------- | -------- | -------- |
| github-tags | aws/aws-cli                              | 2.17.13  | 2.17.14  |
| go          | github.com/aws/aws-sdk-go-v2/config      | v1.27.26 | v1.27.27 |
| go          | github.com/aws/aws-sdk-go-v2/service/rds | v1.81.4  | v1.81.5  |
| go          | k8s.io/api                               | v0.30.2  | v0.30.3  |
| go          | k8s.io/apimachinery                      | v0.30.2  | v0.30.3  |
| go          | k8s.io/client-go                         | v0.30.2  | v0.30.3  |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix(deps): update minor-grouped (#93)

| datasource  | package                                  | from     | to       |
| ----------- | ---------------------------------------- | -------- | -------- |
| go          | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.171.0 | v1.173.0 |
| go          | github.com/aws/aws-sdk-go-v2/service/eks | v1.46.2  | v1.47.0  |
| github-tags | pre-commit/pre-commit                    | 3.7.1    | 3.8.0    |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update patch-grouped (#92)

| datasource      | package             | from    | to      |
| --------------- | ------------------- | ------- | ------- |
| github-tags     | aws/aws-cli         | 2.17.14 | 2.17.18 |
| github-releases | hashicorp/terraform | 1.9.2   | 1.9.3   |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v38 (#94)

| datasource  | package                      | from     | to     |
| ----------- | ---------------------------- | -------- | ------ |
| github-tags | renovatebot/pre-commit-hooks | 37.438.2 | 38.8.5 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update patch-grouped (#96)

| datasource  | package                           | from    | to      |
| ----------- | --------------------------------- | ------- | ------- |
| github-tags | antonbabenko/pre-commit-terraform | v1.92.0 | v1.92.1 |
| github-tags | aws/aws-cli                       | 2.17.18 | 2.17.22 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update mono-update-renovate (#95)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update minor-grouped (#97)

* chore(deps): update minor-grouped

| datasource       | package                            | from    | to       |
| ---------------- | ---------------------------------- | ------- | -------- |
| github-tags      | compilerla/conventional-pre-commit | v3.3.0  | v3.4.0   |
| github-tags      | eksctl-io/eksctl                   | 0.187.0 | 0.188.0  |
| github-releases  | casey/just                         | 1.32.0  | 1.34.0   |
| github-releases  | opentofu/opentofu                  | 1.7.3   | 1.8.0    |
| github-tags      | renovatebot/pre-commit-hooks       | 38.8.5  | 38.18.14 |
| terraform-module | terraform-aws-modules/iam/aws      | 5.41.0  | 5.42.0   |
| terraform-module | terraform-aws-modules/vpc/aws      | 5.9.0   | 5.12.0   |

* chore(readme): update tf docs [ci skip]

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Langleu <lars.lange@camunda.com>

* fix(deps): update minor-grouped (#100)

* fix(deps): update minor-grouped

| datasource       | package                                  | from     | to       |
| ---------------- | ---------------------------------------- | -------- | -------- |
| go               | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.173.0 | v1.174.0 |
| go               | github.com/aws/aws-sdk-go-v2/service/rds | v1.81.5  | v1.82.0  |
| github-tags      | renovatebot/pre-commit-hooks             | 38.18.14 | 38.25.0  |
| terraform-module | terraform-aws-modules/eks/aws            | 20.20.0  | 20.23.0  |
| terraform-module | terraform-aws-modules/iam/aws            | 5.42.0   | 5.44.0   |

* chore(readme): update tf docs [ci skip]

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Langleu <lars.lange@camunda.com>

* chore(deps): update patch-grouped (#99)

* chore(deps): update patch-grouped

| datasource       | package                       | from    | to      |
| ---------------- | ----------------------------- | ------- | ------- |
| github-tags      | aws/aws-cli                   | 2.17.22 | 2.17.27 |
| github-tags      | golang/go                     | 1.22.5  | 1.22.6  |
| github-releases  | opentofu/opentofu             | 1.8.0   | 1.8.1   |
| github-releases  | hashicorp/terraform           | 1.9.3   | 1.9.4   |
| terraform-module | terraform-aws-modules/vpc/aws | 5.12.0  | 5.12.1  |

* chore(readme): update tf docs [ci skip]

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Langleu <lars.lange@camunda.com>

* chore(deps): update patch-grouped (#102)

| datasource  | package                                  | from     | to       |
| ----------- | ---------------------------------------- | -------- | -------- |
| github-tags | antonbabenko/pre-commit-terraform        | v1.92.1  | v1.92.2  |
| github-tags | aws/aws-cli                              | 2.17.27  | 2.17.32  |
| go          | github.com/aws/aws-sdk-go-v2             | v1.30.3  | v1.30.4  |
| go          | github.com/aws/aws-sdk-go-v2/config      | v1.27.27 | v1.27.28 |
| go          | github.com/aws/aws-sdk-go-v2/service/kms | v1.35.3  | v1.35.4  |
| go          | github.com/aws/aws-sdk-go-v2/service/rds | v1.82.0  | v1.82.1  |
| go          | github.com/aws/smithy-go                 | v1.20.3  | v1.20.4  |
| go          | sigs.k8s.io/aws-iam-authenticator        | v0.6.22  | v0.6.23  |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix(deps): update minor-grouped (#103)

* fix(deps): update minor-grouped

| datasource       | package                                  | from     | to       |
| ---------------- | ---------------------------------------- | -------- | -------- |
| go               | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.174.0 | v1.175.1 |
| go               | github.com/aws/aws-sdk-go-v2/service/eks | v1.47.0  | v1.48.1  |
| go               | github.com/aws/aws-sdk-go-v2/service/iam | v1.34.3  | v1.35.0  |
| github-tags      | golang/go                                | 1.22.6   | 1.23.0   |
| github-tags      | renovatebot/pre-commit-hooks             | 38.25.0  | 38.39.6  |
| terraform-module | terraform-aws-modules/vpc/aws            | 5.12.1   | 5.13.0   |
| github-tags      | terraform-linters/tflint                 | 0.52.0   | 0.53.0   |

* chore(readme): update tf docs and adjust based on tflint

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Langleu <lars.lange@camunda.com>

* chore(eks/tf): add oidc output to allow additional external irsa mappings (#101)

* test: implement s3 backend state in tests (#89)

* chore(deps): update minor-grouped (#106)

* chore(deps): update minor-grouped

| datasource       | package                                  | from     | to       |
| ---------------- | ---------------------------------------- | -------- | -------- |
| github-tags      | eksctl-io/eksctl                         | 0.188.0  | 0.189.0  |
| go               | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.175.1 | v1.176.0 |
| go               | github.com/aws/aws-sdk-go-v2/service/s3  | v1.58.2  | v1.60.1  |
| github-tags      | renovatebot/pre-commit-hooks             | 38.39.6  | 38.52.3  |
| terraform-module | terraform-aws-modules/eks/aws            | 20.23.0  | 20.24.0  |

* chore(readme): update tf docs [ci skip]

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Langleu <lars.lange@camunda.com>

* chore(deps): update patch-grouped (#105)

| datasource      | package                                  | from     | to       |
| --------------- | ---------------------------------------- | -------- | -------- |
| github-tags     | aws/aws-cli                              | 2.17.32  | 2.17.37  |
| go              | github.com/aws/aws-sdk-go-v2/config      | v1.27.28 | v1.27.30 |
| go              | github.com/aws/aws-sdk-go-v2/service/eks | v1.48.1  | v1.48.2  |
| go              | github.com/aws/aws-sdk-go-v2/service/kms | v1.35.4  | v1.35.5  |
| go              | github.com/aws/aws-sdk-go-v2/service/rds | v1.82.1  | v1.82.2  |
| go              | sigs.k8s.io/aws-iam-authenticator        | v0.6.23  | v0.6.25  |
| github-releases | hashicorp/terraform                      | 1.9.4    | 1.9.5    |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(postgres): update default cert to rds-ca-rsa2048-g1 (#109)

is the default in AWS and expires in 2061

* chore(deps): update patch-grouped (#107)

| datasource  | package                             | from     | to       |
| ----------- | ----------------------------------- | -------- | -------- |
| github-tags | aws/aws-cli                         | 2.17.37  | 2.17.42  |
| go          | github.com/aws/aws-sdk-go-v2/config | v1.27.30 | v1.27.31 |
| go          | github.com/gruntwork-io/terratest   | v0.47.0  | v0.47.1  |
| go          | sigs.k8s.io/aws-iam-authenticator   | v0.6.25  | v0.6.26  |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update minor-grouped (#108)

* chore(deps): update minor-grouped

| datasource      | package                                  | from     | to       |
| --------------- | ---------------------------------------- | -------- | -------- |
| github-tags     | antonbabenko/pre-commit-terraform        | v1.92.2  | v1.94.1  |
| go              | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.176.0 | v1.177.0 |
| go              | github.com/aws/aws-sdk-go-v2/service/s3  | v1.60.1  | v1.61.0  |
| github-releases | casey/just                               | 1.34.0   | 1.35.0   |
| github-tags     | renovatebot/pre-commit-hooks             | 38.52.3  | 38.61.0  |

* chore(readme): update tf docs

---------

Signed-off-by: Leo J. <153937047+leiicamundi@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Langleu <lars.lange@camunda.com>
Co-authored-by: Leo J. <153937047+leiicamundi@users.noreply.github.com>

* chore(deps): update patch-grouped (#110)

| datasource      | package                                  | from     | to       |
| --------------- | ---------------------------------------- | -------- | -------- |
| github-tags     | aws/aws-cli                              | 2.17.42  | 2.17.46  |
| go              | github.com/aws/aws-sdk-go-v2             | v1.30.4  | v1.30.5  |
| go              | github.com/aws/aws-sdk-go-v2/config      | v1.27.31 | v1.27.33 |
| go              | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.177.0 | v1.177.2 |
| go              | github.com/aws/aws-sdk-go-v2/service/eks | v1.48.2  | v1.48.4  |
| go              | github.com/aws/aws-sdk-go-v2/service/iam | v1.35.0  | v1.35.2  |
| go              | github.com/aws/aws-sdk-go-v2/service/kms | v1.35.5  | v1.35.7  |
| go              | github.com/aws/aws-sdk-go-v2/service/rds | v1.82.2  | v1.82.4  |
| go              | github.com/aws/aws-sdk-go-v2/service/s3  | v1.61.0  | v1.61.2  |
| github-tags     | golang/go                                | 1.23.0   | 1.23.1   |
| github-releases | opentofu/opentofu                        | 1.8.1    | 1.8.2    |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update minor-grouped (#111)

| datasource  | package                      | from    | to      |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | eksctl-io/eksctl             | 0.189.0 | 0.190.0 |
| github-tags | renovatebot/pre-commit-hooks | 38.64.1 | 38.72.1 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update minor-grouped (#114)

| datasource  | package                           | from    | to      |
| ----------- | --------------------------------- | ------- | ------- |
| github-tags | antonbabenko/pre-commit-terraform | v1.94.1 | v1.95.0 |
| github-tags | renovatebot/pre-commit-hooks      | 38.72.1 | 38.80.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update patch-grouped (#113)

| datasource  | package                                  | from     | to       |
| ----------- | ---------------------------------------- | -------- | -------- |
| github-tags | aws/aws-cli                              | 2.17.46  | 2.17.51  |
| go          | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.177.2 | v1.177.3 |
| go          | github.com/aws/aws-sdk-go-v2/service/rds | v1.82.4  | v1.82.5  |
| go          | k8s.io/api                               | v0.31.0  | v0.31.1  |
| go          | k8s.io/apimachinery                      | v0.31.0  | v0.31.1  |
| go          | k8s.io/client-go                         | v0.31.0  | v0.31.1  |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* feat: add eks cluster gha (#112)

* chore: update readme (#115)

* chore: use global workflow for lint (#116)

* feat: add autorenovate automerge (#117)

* fix: automerge version (#124)

* chore(deps): update minor-grouped (#125)

| datasource  | package                                  | from     | to       |
| ----------- | ---------------------------------------- | -------- | -------- |
| github-tags | antonbabenko/pre-commit-terraform        | v1.95.0  | v1.96.1  |
| github-tags | camunda/infraex-common-config            | 1.0.1    | 1.2.1    |
| github-tags | camunda/infraex-common-config            | 1.1.0    | 1.2.1    |
| go          | github.com/aws/aws-sdk-go-v2             | v1.30.5  | v1.31.0  |
| go          | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.177.3 | v1.178.0 |
| go          | github.com/aws/aws-sdk-go-v2/service/eks | v1.48.4  | v1.49.0  |
| go          | github.com/aws/aws-sdk-go-v2/service/iam | v1.35.2  | v1.36.0  |
| go          | github.com/aws/aws-sdk-go-v2/service/kms | v1.35.7  | v1.36.0  |
| go          | github.com/aws/aws-sdk-go-v2/service/rds | v1.82.5  | v1.84.0  |
| go          | github.com/aws/aws-sdk-go-v2/service/s3  | v1.61.2  | v1.63.0  |
| go          | github.com/aws/smithy-go                 | v1.20.4  | v1.21.0  |
| github-tags | renovatebot/pre-commit-hooks             | 38.80.0  | 38.93.5  |
| github-tags | terraform-docs/terraform-docs            | 0.18.0   | 0.19.0   |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix: automerge renovate (#126)

* chore(deps): update patch-grouped (#120)

* chore(deps): update patch-grouped

| datasource       | package                                  | from     | to       |
| ---------------- | ---------------------------------------- | -------- | -------- |
| github-tags      | aws/aws-cli                              | 2.17.51  | 2.17.57  |
| github-tags      | camunda/infraex-common-config            | 1.2.1    | 1.2.2    |
| go               | github.com/aws/aws-sdk-go-v2/config      | v1.27.33 | v1.27.37 |
| go               | github.com/aws/aws-sdk-go-v2/service/eks | v1.49.0  | v1.49.1  |
| go               | github.com/aws/aws-sdk-go-v2/service/iam | v1.36.0  | v1.36.1  |
| go               | github.com/aws/aws-sdk-go-v2/service/kms | v1.36.0  | v1.36.1  |
| go               | github.com/aws/aws-sdk-go-v2/service/s3  | v1.63.0  | v1.63.1  |
| github-tags      | rhysd/actionlint                         | v1.7.1   | v1.7.2   |
| go               | sigs.k8s.io/aws-iam-authenticator        | v0.6.26  | v0.6.27  |
| github-releases  | hashicorp/terraform                      | 1.9.5    | 1.9.6    |
| terraform-module | terraform-aws-modules/eks/aws            | 20.24.0  | 20.24.2  |

* chore: update files from pre-commit run

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: infraex-misc[bot] <158277198+infraex-misc[bot]@users.noreply.github.com>

* chore(deps): update patch-grouped (#129)

* chore(deps): update patch-grouped

| datasource       | package                                  | from     | to       |
| ---------------- | ---------------------------------------- | -------- | -------- |
| github-tags      | aws/aws-cli                              | 2.17.57  | 2.17.61  |
| go               | github.com/aws/aws-sdk-go-v2/config      | v1.27.37 | v1.27.39 |
| go               | github.com/aws/aws-sdk-go-v2/service/eks | v1.49.1  | v1.49.3  |
| go               | github.com/aws/aws-sdk-go-v2/service/iam | v1.36.1  | v1.36.3  |
| go               | github.com/aws/aws-sdk-go-v2/service/kms | v1.36.1  | v1.36.3  |
| go               | github.com/aws/aws-sdk-go-v2/service/s3  | v1.63.1  | v1.63.3  |
| terraform-module | terraform-aws-modules/iam/aws            | 5.44.0   | 5.44.1   |

* chore: update files from pre-commit run

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: infraex-misc[bot] <158277198+infraex-misc[bot]@users.noreply.github.com>

* fix: add retry to cleanup (#131)

* chore(deps): update patch-grouped (#130)

* chore(deps): update patch-grouped

| datasource  | package          | from   | to     |
| ----------- | ---------------- | ------ | ------ |
| github-tags | rhysd/actionlint | v1.7.2 | v1.7.3 |

* fix: use official token generation

* rettriger-ci

* rettriger-ci

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Leo J <153937047+leiicamundi@users.noreply.github.com>

* chore(deps): update minor-grouped (#128)

| datasource      | package                                  | from     | to       |
| --------------- | ---------------------------------------- | -------- | -------- |
| github-tags     | eksctl-io/eksctl                         | 0.190.0  | 0.191.0  |
| go              | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.178.0 | v1.179.2 |
| go              | github.com/aws/aws-sdk-go-v2/service/rds | v1.84.0  | v1.85.2  |
| github-releases | casey/just                               | 1.35.0   | 1.36.0   |
| github-tags     | renovatebot/pre-commit-hooks             | 38.93.5  | 38.106.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix: pin renovate version (#132)

* chore(deps): update patch-grouped (#133)

* chore(deps): update patch-grouped

| datasource       | package                             | from     | to       |
| ---------------- | ----------------------------------- | -------- | -------- |
| github-tags      | camunda/infraex-common-config       | 1.2.2    | 1.2.3    |
| go               | github.com/aws/aws-sdk-go-v2/config | v1.27.39 | v1.27.41 |
| go               | github.com/gruntwork-io/terratest   | v0.47.1  | v0.47.2  |
| github-tags      | golang/go                           | 1.23.1   | 1.23.2   |
| github-releases  | opentofu/opentofu                   | 1.8.2    | 1.8.3    |
| github-releases  | hashicorp/terraform                 | 1.9.6    | 1.9.7    |
| terraform-module | terraform-aws-modules/eks/aws       | 20.24.2  | 20.24.3  |
| github-tags      | aquasecurity/tfsec                  | 1.28.10  | 1.28.11  |

* chore: update files from pre-commit run

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: infraex-misc[bot] <158277198+infraex-misc[bot]@users.noreply.github.com>

* chore(deps): update patch-grouped (#135)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to 17e7b3e (#136)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to 2cff27f (#137)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to 49b2940 (#138)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to 5c7a133 (#139)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to 28231dc (#140)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update patch-grouped (#141)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to 219c184 (#143)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to 2d8130b (#144)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to 87aafe0 (#145)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to 33751a1 (#146)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to 564ff13 (#147)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to 8f43caf (#148)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to 14550ec (#149)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to 6353123 (#150)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to d1a3928 (#151)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to de77f5a (#152)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to cc69206 (#153)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to 2254320 (#154)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to 8d3bf72 (#155)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to 26d11a3 (#156)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to 695dbd7 (#157)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to 8576efa (#158)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to 106b259 (#159)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to b31b84c (#160)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to 1c24285 (#161)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module digest to b9fc191 (#162)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update mono-update-renovate (#142)

| datasource  | package                     | from   | to     |
| ----------- | --------------------------- | ------ | ------ |
| github-tags | pre-commit/pre-commit       | 3.8.0  | 4.0.0  |
| github-tags | pre-commit/pre-commit-hooks | v4.6.0 | v5.0.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update minor-grouped (#134)

* chore(deps): update minor-grouped

| datasource       | package                                  | from     | to       |
| ---------------- | ---------------------------------------- | -------- | -------- |
| github-tags      | aws/aws-cli                              | 2.17.61  | 2.18.0   |
| go               | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.179.2 | v1.181.0 |
| go               | github.com/aws/aws-sdk-go-v2/service/eks | v1.49.3  | v1.50.0  |
| go               | github.com/aws/aws-sdk-go-v2/service/iam | v1.36.3  | v1.37.0  |
| go               | github.com/aws/aws-sdk-go-v2/service/kms | v1.36.3  | v1.37.0  |
| go               | github.com/aws/aws-sdk-go-v2/service/rds | v1.85.2  | v1.87.0  |
| go               | github.com/aws/aws-sdk-go-v2/service/s3  | v1.63.3  | v1.65.0  |
| github-tags      | renovatebot/pre-commit-hooks             | 38.106.0 | 38.110.2 |
| terraform-module | terraform-aws-modules/iam/aws            | 5.44.1   | 5.46.0   |

* chore: update files from pre-commit run

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: infraex-misc[bot] <158277198+infraex-misc[bot]@users.noreply.github.com>

* fix: pin actions with tags (#163)

* feat: opensearch (#127)

* fix: opensearch and rds tests (#164)

* chore(deps): update minor-grouped (#168)

* chore(deps): update minor-grouped

| datasource       | package                                         | from     | to       |
| ---------------- | ----------------------------------------------- | -------- | -------- |
| github-tags      | camunda/camunda-tf-eks-module                   | 2.5.1    | 2.6.0    |
| github-tags      | eksctl-io/eksctl                                | 0.191.0  | 0.192.0  |
| go               | github.com/aws/aws-sdk-go-v2/service/ec2        | v1.181.0 | v1.182.0 |
| go               | github.com/aws/aws-sdk-go-v2/service/opensearch | v1.40.2  | v1.41.2  |
| github-tags      | renovatebot/pre-commit-hooks                    | 38.110.2 | 38.119.0 |
| terraform-module | terraform-aws-modules/eks/aws                   | 20.24.3  | 20.26.0  |

* chore: update files from pre-commit run

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: infraex-misc[bot] <158277198+infraex-misc[bot]@users.noreply.github.com>

* chore(deps): update lycheeverse/lychee-action action to v2 (#169)

| datasource  | package                   | from    | to     |
| ----------- | ------------------------- | ------- | ------ |
| github-tags | lycheeverse/lychee-action | v1.10.0 | v2.0.1 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update patch-grouped (#167)

* chore(deps): update patch-grouped

| datasource  | package                                  | from     | to       |
| ----------- | ---------------------------------------- | -------- | -------- |
| github-tags | aws/aws-cli                              | 2.18.0   | 2.18.5   |
| github-tags | camunda/infraex-common-config            | 1.2.3    | 1.2.4    |
| go          | github.com/aws/aws-sdk-go-v2/config      | v1.27.41 | v1.27.43 |
| go          | github.com/aws/aws-sdk-go-v2/service/eks | v1.50.0  | v1.50.2  |
| go          | github.com/aws/aws-sdk-go-v2/service/iam | v1.37.0  | v1.37.2  |
| go          | github.com/aws/aws-sdk-go-v2/service/kms | v1.37.0  | v1.37.2  |
| go          | github.com/aws/aws-sdk-go-v2/service/rds | v1.87.0  | v1.87.2  |
| go          | github.com/aws/aws-sdk-go-v2/service/s3  | v1.65.0  | v1.65.3  |
| go          | github.com/aws/aws-sdk-go-v2/service/sts | v1.32.0  | v1.32.2  |
| github-tags | pre-commit/pre-commit                    | 4.0.0    | 4.0.1    |

* fix: concurrency tests with a prefix

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Leo J <153937047+leiicamundi@users.noreply.github.com>

* chore(deps): update patch-grouped (#170)

| datasource      | package                                  | from    | to      |
| --------------- | ---------------------------------------- | ------- | ------- |
| github-tags     | aws/aws-cli                              | 2.18.5  | 2.18.10 |
| go              | github.com/aws/aws-sdk-go-v2/service/rds | v1.87.2 | v1.87.3 |
| github-tags     | lycheeverse/lychee-action                | v2.0.1  | v2.0.2  |
| github-releases | hashicorp/terraform                      | 1.9.7   | 1.9.8   |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix: pre-commit (#172)

* chore(deps): update minor-grouped (#171)

* chore(deps): update minor-grouped

| datasource       | package                                  | from     | to       |
| ---------------- | ---------------------------------------- | -------- | -------- |
| github-tags      | compilerla/conventional-pre-commit       | v3.4.0   | v3.6.0   |
| github-tags      | eksctl-io/eksctl                         | 0.192.0  | 0.193.0  |
| go               | github.com/aws/aws-sdk-go-v2/config      | v1.27.43 | v1.28.0  |
| go               | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.182.0 | v1.183.0 |
| go               | github.com/aws/aws-sdk-go-v2/service/s3  | v1.65.3  | v1.66.0  |
| github-tags      | renovatebot/pre-commit-hooks             | 38.119.0 | 38.128.6 |
| terraform-module | terraform-aws-modules/vpc/aws            | 5.13.0   | 5.14.0   |

* chore: update files from pre-commit run

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: infraex-misc[bot] <158277198+infraex-misc[bot]@users.noreply.github.com>
Co-authored-by: Leo J. <153937047+leiicamundi@users.noreply.github.com>

* chore(deps): update patch-grouped (#173)

* chore(deps): update patch-grouped

| datasource       | package                                 | from    | to      |
| ---------------- | --------------------------------------- | ------- | ------- |
| github-tags      | aws/aws-cli                             | 2.18.10 | 2.18.15 |
| go               | github.com/aws/aws-sdk-go-v2/service/s3 | v1.66.0 | v1.66.1 |
| go               | k8s.io/api                              | v0.31.1 | v0.31.2 |
| go               | k8s.io/apimachinery                     | v0.31.1 | v0.31.2 |
| go               | k8s.io/client-go                        | v0.31.1 | v0.31.2 |
| github-releases  | opentofu/opentofu                       | 1.8.3   | 1.8.4   |
| terraform-module | terraform-aws-modules/eks/aws           | 20.26.0 | 20.26.1 |

* chore: update files from pre-commit run

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: infraex-misc[bot] <158277198+infraex-misc[bot]@users.noreply.github.com>

* chore(deps): update minor-grouped (#174)

* chore(deps): update minor-grouped

| datasource       | package                                  | from     | to       |
| ---------------- | ---------------------------------------- | -------- | -------- |
| github-tags      | eksctl-io/eksctl                         | 0.193.0  | 0.194.0  |
| go               | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.183.0 | v1.186.0 |
| go               | github.com/aws/aws-sdk-go-v2/service/eks | v1.50.2  | v1.51.0  |
| go               | github.com/aws/aws-sdk-go-v2/service/rds | v1.87.3  | v1.88.0  |
| github-tags      | renovatebot/pre-commit-hooks             | 38.128.6 | 38.132.3 |
| terraform-module | terraform-aws-modules/iam/aws            | 5.46.0   | 5.47.1   |

* chore: update files from pre-commit run

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: infraex-misc[bot] <158277198+infraex-misc[bot]@users.noreply.github.com>

* feat: examples for terraform doc (#166)

* indicates how to retrieve the role arn

* align instances count with number of AZs

* add os fgac

* introduce multi roles

* implement resourceidentifier

* add directions for password strength

* fix: set retry max age to 0 (#176)

The first deletion will reset the age to 0.

Otherwise will omit alerts to Slack.

Signed-off-by: Lars Lange <9141483+Langleu@users.noreply.github.com>

* chore: add cloudwatch export for OS module (#177)

* chore: add cloudwatch export to os module

* fix: remove variable from readme that doesnt exist

* chore(deps): update patch-grouped (#178)

| datasource  | package                                  | from    | to      |
| ----------- | ---------------------------------------- | ------- | ------- |
| github-tags | antonbabenko/pre-commit-terraform        | v1.96.1 | v1.96.2 |
| helm        | camunda-platform                         | 11.0.0  | 11.0.2  |
| github-tags | camunda/infraex-common-config            | 1.2.4   | 1.2.5   |
| go          | github.com/aws/aws-sdk-go-v2             | v1.32.2 | v1.32.3 |
| go          | github.com/aws/aws-sdk-go-v2/config      | v1.28.0 | v1.28.1 |
| go          | github.com/aws/aws-sdk-go-v2/service/eks | v1.51.0 | v1.51.1 |
| go          | github.com/aws/aws-sdk-go-v2/service/iam | v1.37.2 | v1.37.3 |
| go          | github.com/aws/aws-sdk-go-v2/service/kms | v1.37.2 | v1.37.3 |
| go          | github.com/aws/aws-sdk-go-v2/service/s3  | v1.66.1 | v1.66.2 |
| go          | github.com/aws/aws-sdk-go-v2/service/sts | v1.32.2 | v1.32.3 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update camunda/camunda-tf-eks-module action to v3 (#180)

| datasource  | package                       | from  | to    |
| ----------- | ----------------------------- | ----- | ----- |
| github-tags | camunda/camunda-tf-eks-module | 2.6.0 | 3.0.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update minor-grouped (#179)

* chore(deps): update minor-grouped

| datasource       | package                                         | from     | to       |
| ---------------- | ----------------------------------------------- | -------- | -------- |
| endoflife-date   | amazon-eks                                      | 1.30     | 1.31     |
| github-tags      | aws/aws-cli                                     | 2.18.15  | 2.19.1   |
| go               | github.com/aws/aws-sdk-go-v2/service/ec2        | v1.186.0 | v1.187.0 |
| go               | github.com/aws/aws-sdk-go-v2/service/opensearch | v1.41.2  | v1.43.0  |
| go               | github.com/aws/aws-sdk-go-v2/service/rds        | v1.88.0  | v1.89.0  |
| github-tags      | renovatebot/pre-commit-hooks                    | 38.132.3 | 38.142.5 |
| terraform-module | terraform-aws-modules/eks/aws                   | 20.26.1  | 20.28.0  |
| terraform-module | terraform-aws-modules/vpc/aws                   | 5.14.0   | 5.15.0   |

* chore: update files from pre-commit run

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: infraex-misc[bot] <158277198+infraex-misc[bot]@users.noreply.github.com>

* fix: allow specific AZs

This PR address the need of customizing the AZs used by the EKS cluster.
Related to
https://github.com/camunda/team-infrastructure-experience/issues/439

TODO:
- Add tests with only 2 AZs

* Revert "fix: allow specific AZs"

This reverts commit caf305fae9b154d288f52074b1ceb0827310ef0f.

* chore(deps): update patch-grouped (#182)

| datasource      | package                                         | from     | to       |
| --------------- | ----------------------------------------------- | -------- | -------- |
| github-tags     | aws/aws-cli                                     | 2.19.1   | 2.19.4   |
| github-tags     | camunda/camunda-tf-eks-module                   | 3.0.0    | 3.0.1    |
| go              | github.com/aws/aws-sdk-go-v2                    | v1.32.3  | v1.32.4  |
| go              | github.com/aws/aws-sdk-go-v2/config             | v1.28.1  | v1.28.3  |
| go              | github.com/aws/aws-sdk-go-v2/service/ec2        | v1.187.0 | v1.187.1 |
| go              | github.com/aws/aws-sdk-go-v2/service/iam        | v1.37.3  | v1.37.4  |
| go              | github.com/aws/aws-sdk-go-v2/service/kms        | v1.37.3  | v1.37.5  |
| go              | github.com/aws/aws-sdk-go-v2/service/opensearch | v1.43.0  | v1.43.2  |
| go              | github.com/aws/aws-sdk-go-v2/service/rds        | v1.89.0  | v1.89.1  |
| go              | github.com/aws/aws-sdk-go-v2/service/s3         | v1.66.2  | v1.66.3  |
| go              | github.com/aws/aws-sdk-go-v2/service/sts        | v1.32.3  | v1.32.4  |
| github-tags     | golang/go                                       | 1.23.2   | 1.23.3   |
| github-releases | opentofu/opentofu                               | 1.8.4    | 1.8.5    |
| github-tags     | rhysd/actionlint                                | v1.7.3   | v1.7.4   |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v39 (#184)

| datasource  | package                      | from     | to     |
| ----------- | ---------------------------- | -------- | ------ |
| github-tags | renovatebot/pre-commit-hooks | 38.142.5 | 39.9.2 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix(deps): update minor-grouped (#183)

* fix(deps): update minor-grouped

| datasource       | package                                  | from    | to      |
| ---------------- | ---------------------------------------- | ------- | ------- |
| go               | github.com/aws/aws-sdk-go-v2/service/eks | v1.51.1 | v1.52.0 |
| …
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant