Josh Siviour d3ac8c0656 test(eks): in-cluster IRSA pod e2e (AssumeRoleWithWebIdentity) (#535) ...

Add an IRSAPod subtest that applies a real pod wired for IRSA — a projected
ServiceAccount token (aud sts.amazonaws.com) plus the AWS_ROLE_ARN /
AWS_WEB_IDENTITY_TOKEN_FILE / AWS_ENDPOINT_URL_STS / AWS_CA_BUNDLE env the
addon-sync agent injects — and asserts the pod's in-cluster
aws sts get-caller-identity resolves to the assumed IRSA role. This closes the
gap left by IRSAWebIdentity, which only exchanges the token host-side.

Extract registerOIDCRole (shared with IRSAWebIdentity); the pod runs on a
1-node worker nodegroup (the control-plane node is CriticalAddonsOnly-tainted)
and reaches awsgw STS over the worker subnet NAT.

2026-07-15 08:31:09 +10:00

..

bedrock

feat(bedrock): Ochre InvokeModel — per-provider-native body adapters (#522)

2026-07-13 22:34:08 +10:00

cert

feat(eks): multinode control-plane + IMDS/token-webhook CP fixes (426/427/428/495/496) (#459)

2026-07-09 09:43:30 +10:00

ddil

feat(eks): multinode control-plane + IMDS/token-webhook CP fixes (426/427/428/495/496) (#459)

2026-07-09 09:43:30 +10:00

ecr

feat(eks): multinode control-plane + IMDS/token-webhook CP fixes (426/427/428/495/496) (#459)

2026-07-09 09:43:30 +10:00

ecs

fix: free host-netns :80 for ECS bridge/host tasks via cred-endpoint DNAT (#446)

2026-06-30 08:59:52 +10:00

eks

test(eks): in-cluster IRSA pod e2e (AssumeRoleWithWebIdentity) (#535)

2026-07-15 08:31:09 +10:00

gpu

ci: GPU e2e workflow on ci-gpu self-hosted runner (#518)

2026-07-13 21:28:48 +10:00

harness

fix(e2e): fail fast on reaped instance launch + emit APM error on MarkFailed (#531)

2026-07-14 08:29:55 +10:00

iam

fix: update STS e2e assertion for unconditional AccessDenied masking on missing roles

2026-07-09 09:43:31 +10:00

lb

fix(elbv2): reap LBs wedged in provisioning + harden IMDS bootstrap (#496)

2026-07-10 11:34:39 +10:00

manifest-check

chore: use updated yaml package

2026-07-09 09:43:29 +10:00

manifest-lint

feat(eks): expose NVIDIA GPUs to pods (Epic B) — VFIO QMP, worker registration, device-plugin GPU access (#507)

2026-07-12 10:38:36 +10:00

multinode

feat(spx): surface OVN NB/SB Raft roles in get nodes (#493)

2026-07-10 09:48:05 +10:00

natuplink

feat: routed-NAT external mode with two-tier ingress (#475)

2026-07-09 09:43:32 +10:00

reboot

feat: cloud-init EC2 datasource (#411)

2026-06-25 13:48:08 +10:00

select-suites

feat(eks): multinode control-plane + IMDS/token-webhook CP fixes (426/427/428/495/496) (#459)

2026-07-09 09:43:30 +10:00

single

feat(network): harden routed-NAT v1 (VPC cap, e2e gate, docs) (#504)

2026-07-10 22:57:21 +10:00

teardown

feat(eks): multinode control-plane + IMDS/token-webhook CP fixes (426/427/428/495/496) (#459)

2026-07-09 09:43:30 +10:00

.failure-rules.yaml

feat(e2e): Go E2E harness + single-node migration to Ensure*/Discover* + reboot suite (#241)

2026-05-20 21:04:13 +10:00

Makefile

feat(bedrock): Ochre runtime MVP — Converse over self-host + Anthropic-direct (#520)

2026-07-13 21:40:34 +10:00

run-bm-multinode-e2e.sh

feat: cloud-init EC2 datasource (#411)

2026-06-25 13:48:08 +10:00

run-tofu-examples-e2e.sh

feat: cloud-init EC2 datasource (#411)

2026-06-25 13:48:08 +10:00