Add external DNS for each Ingress

GSA-TTS / datagov-brokerpak-eks

Broker AWS EKS instances using the OSBAPI (eg from cloud.gov)

Other

9 stars 7 forks source link

Add external DNS for each Ingress #40

Closed mogul closed 3 years ago

mogul commented 3 years ago

Addresses https://github.com/GSA/eks-brokerpak/issues/7

Upgrade EKS to 1.19 and make the fixture use the final networking API v1
Add a role with a policy sufficient to edit entries in Route53
Add a service account that can assume that role
Give the service account access to watch all the APIs it needs
Add the external-dns helm chart, and configure it to use that service account
Set ingress_nginx to configure all ingresses to point to the ALB that points to it

mogul commented 3 years ago

Feel free to offer review comments, but I moved it back to draft for now... I want to add a test that emulates the end-to-end test described by the AC on the story before this gets merged.

mogul commented 3 years ago

Also now have a dependency cycle to break that prevents clean destroy... 🙄