gardener-extension-provider-aws

README

Gardener Extension for AWS provider

Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Its main principle is to leverage Kubernetes concepts for all of its tasks.

Recently, most of the vendor specific logic has been developed in-tree. However, the project has grown to a size where it is very hard to extend, maintain, and test. With GEP-1 we have proposed how the architecture can be changed in a way to support external controllers that contain their very own vendor specifics. This way, we can keep Gardener core clean and independent.

This controller implements Gardener's extension contract for the AWS provider.

An example for a ControllerRegistration resource that can be used to register this controller to Gardener can be found here.

Please find more information regarding the extensibility concepts and a detailed proposal here.

Supported Kubernetes versions

This extension controller supports the following Kubernetes versions:

Version	Support	Conformance test results
Kubernetes 1.20	1.20.0+	N/A
Kubernetes 1.19	1.19.0+
Kubernetes 1.18	1.18.0+
Kubernetes 1.17	1.17.0+
Kubernetes 1.16	1.16.0+
Kubernetes 1.15	1.15.0+	[2]
Kubernetes 1.14	1.14.0+, except 1.14.7	[1]
Kubernetes 1.13	1.13.0+	[1]
Kubernetes 1.12	1.12.1+	[1]
Kubernetes 1.11	1.11.0+	[1]
Kubernetes 1.10	1.10.0+	[1]

[1] Version is technically supported but no longer actively tested. Regressions will go unnoticed.
[2] Conformance tests are still executed and validated, unfortunately no longer shown in TestGrid.

Please take a look here to see which versions are supported by Gardener in general.

Compatibility

The following lists known compatibility issues of this extension controller with other Gardener components.

AWS Extension	Gardener	Action	Notes
<= v1.15.0	>v1.10.0	Please update the provider version to > v1.15.0 or disable the feature gate MountHostCADirectories in the Gardenlet.	Applies if feature flag MountHostCADirectories in the Gardenlet is enabled. Shoots with CSI enabled (Kubernetes version >= 1.18) miss a mount to the directory /etc/ssl in the Shoot API Server. This can lead to not trusting external Root CAs when the API Server makes requests via webhooks or OIDC.

---

How to start using or developing this extension controller locally

You can run the controller locally on your machine by executing make start.

Static code checks and tests can be executed by running make verify. We are using Go modules for Golang package dependency management and Ginkgo/Gomega for testing.

Feedback and Support

Feedback and contributions are always welcome. Please report bugs or suggestions as GitHub issues or join our Slack channel #gardener (please invite yourself to the Kubernetes workspace here).

Learn more!

Please find further resources about out project here:

• Our landing page gardener.cloud
• "Gardener, the Kubernetes Botanist" blog on kubernetes.io
• "Gardener Project Update" blog on kubernetes.io
• GEP-1 (Gardener Enhancement Proposal) on extensibility
• GEP-4 (New core.gardener.cloud/v1alpha1 API)
• Extensibility API documentation
• Gardener Extensions Golang library
• Gardener API Reference