Josh Siviour 68eeff069e feat: project EKS access policies into Kubernetes RBAC (#1049) ...

AssociateAccessPolicy recorded a policy association but never granted
it in the cluster. Bake static ClusterRoleBindings for the mulga:
groups into the eks-node image, project a principal's cluster-scoped
associated policies onto those groups in the TokenReview webhook, and
reject namespace scope at association time since there is no
namespace-scoped RBAC writer.

2026-09-16 16:45:24 +10:00

..

addons

fix(eks): backoff and terminal state on delete re-drive, CSI volume reclaim reporting, independent e2e subtests (#642)

2026-08-02 08:21:25 +10:00

coredns

fix(eks): NLB name overflow, nodegroup readiness scoping, launch retry, GPU konnectivity toleration (#511)

2026-07-12 12:11:16 +10:00

konnectivity

fix(eks): tolerate the CriticalAddonsOnly taint on konnectivity-agent (#634)

2026-08-02 08:16:00 +10:00

rbac

feat: project EKS access policies into Kubernetes RBAC (#1049)

2026-09-16 16:45:24 +10:00

cloud-init-ec2.cfg

feat(ochre): add the vLLM serving AMI and give the daemon a route to it (#740)

2026-08-06 15:26:05 +10:00

eks-node-role_test.sh

feat(images): mkosi system-image migration — CPU eks-node/ecs-node + GPU variants (#605)

2026-07-30 12:57:43 +10:00

eks-node-role.initd

feat(eks): unify eks-server + eks-agent into one eks-node AMI (#288)

2026-06-04 12:28:56 +10:00

eks-node-role.sh

chore: cleanup code comments

2026-08-04 14:20:19 +10:00

eks-token-webhook.initd

test(eks): EKS control-plane E2E suite (Sprint 6g) (#304)

2026-06-07 20:42:25 +10:00

k3s-agent-prestart_test.sh

feat(images): mkosi system-image migration — CPU eks-node/ecs-node + GPU variants (#605)

2026-07-30 12:57:43 +10:00

k3s-agent-prestart.sh

feat(images): mkosi system-image migration — CPU eks-node/ecs-node + GPU variants (#605)

2026-07-30 12:57:43 +10:00

k3s-agent.initd

feat(images): mkosi system-image migration — CPU eks-node/ecs-node + GPU variants (#605)

2026-07-30 12:57:43 +10:00

k3s-first-boot.initd

feat(eks): unify eks-server + eks-agent into one eks-node AMI (#288)

2026-06-04 12:28:56 +10:00

k3s-first-boot.sh

feat(images): mkosi system-image migration — CPU eks-node/ecs-node + GPU variants (#605)

2026-07-30 12:57:43 +10:00

k3s-prestart_test.sh

feat: project EKS access policies into Kubernetes RBAC (#1049)

2026-09-16 16:45:24 +10:00

k3s-prestart.sh

feat: project EKS access policies into Kubernetes RBAC (#1049)

2026-09-16 16:45:24 +10:00

k3s.initd

feat(images): mkosi system-image migration — CPU eks-node/ecs-node + GPU variants (#605)

2026-07-30 12:57:43 +10:00

konnectivity-server-prestart_test.sh

feat(images): mkosi system-image migration — CPU eks-node/ecs-node + GPU variants (#605)

2026-07-30 12:57:43 +10:00

konnectivity-server-prestart.sh

feat(images): mkosi system-image migration — CPU eks-node/ecs-node + GPU variants (#605)

2026-07-30 12:57:43 +10:00

konnectivity-server.initd

feat(images): mkosi system-image migration — CPU eks-node/ecs-node + GPU variants (#605)

2026-07-30 12:57:43 +10:00

manifest.conf

feat: project EKS access policies into Kubernetes RBAC (#1049)

2026-09-16 16:45:24 +10:00

mulga-ebs-byid.initd

feat: EKS EBS CSI driver (Viperblock) — egress, attach, node discovery, e2e (#402)

2026-06-19 14:43:20 +10:00

mulga-ebs-byid.sh

feat: EKS EBS CSI driver (Viperblock) — egress, attach, node discovery, e2e (#402)

2026-06-19 14:43:20 +10:00

mulga-eks-addon-sync.initd

feat(eks): managed control-plane VPC (Set B) + control-plane lifecycle hardening (#356)

2026-06-12 22:29:24 +10:00

mulga-eks-addon-sync.sh

Remove backed-in creds for eks addon sync - prefer IMDS

2026-07-09 09:43:32 +10:00

mulga-eks-etcd-snapshot_test.sh

feat(eks): control-plane disaster recovery — etcd snapshot + restore-snapshot (#503)

2026-07-10 22:14:58 +10:00

mulga-eks-etcd-snapshot.sh

feat(eks): control-plane disaster recovery — etcd snapshot + restore-snapshot (#503)

2026-07-10 22:14:58 +10:00

mulga-eks-k3s-recovery_test.sh

feat(eks): control-plane disaster recovery — etcd snapshot + restore-snapshot (#503)

2026-07-10 22:14:58 +10:00

mulga-eks-k3s-recovery.initd

feat(eks): HA control-plane recovery + reconciliation, VM restart hardening, viperblock AEAD pin (#480)

2026-07-09 09:43:32 +10:00

mulga-eks-k3s-recovery.sh

feat(eks): control-plane disaster recovery — etcd snapshot + restore-snapshot (#503)

2026-07-10 22:14:58 +10:00

mulga-eks-provider-id.initd

fix(eks): make provider-id.sh the single k3s node-label authority for nodegroup + GPU labels (#539)

2026-07-15 00:39:13 +10:00

mulga-eks-provider-id.sh

fix(eks): make provider-id.sh the single k3s node-label authority for nodegroup + GPU labels (#539)

2026-07-15 00:39:13 +10:00

mulga-eks-state-report_test.sh

fix: make the EKS control plane's disk latency observable, and give it room to run (#1009)

2026-09-07 21:53:41 +10:00

mulga-eks-state-report.initd

feat(eks): 6d nodegroup provisioning + NATS-gated cluster health (#300)

2026-06-06 00:52:18 +10:00

mulga-eks-state-report.sh

fix: make the EKS control plane's disk latency observable, and give it room to run (#1009)

2026-09-07 21:53:41 +10:00

mulga-vpc-mtu_test.sh

feat(images): mkosi system-image migration — CPU eks-node/ecs-node + GPU variants (#605)

2026-07-30 12:57:43 +10:00

mulga-vpc-mtu.initd

feat(eks): multinode control-plane + IMDS/token-webhook CP fixes (426/427/428/495/496) (#459)

2026-07-09 09:43:30 +10:00

mulga-vpc-mtu.sh

feat(images): mkosi system-image migration — CPU eks-node/ecs-node + GPU variants (#605)

2026-07-30 12:57:43 +10:00

setup.sh

feat(images): mkosi system-image migration — CPU eks-node/ecs-node + GPU variants (#605)

2026-07-30 12:57:43 +10:00