Josh Siviour a7241e01f9 feat: run EKS apiserver with anonymous-auth=false (CIS) (#447) ...

Flip the k3s server apiserver to anonymous-auth=false. The only
consumer of the anonymous path was mulga-eks-state-report's /healthz
probe; switch it to an authenticated kubectl get --raw=/healthz through
the node admin kubeconfig (an unauthenticated curl now returns 401).
The NLB target group uses a TCP health check, and the host-side
reconciler rides the authenticated NATS state-report, so neither
depends on the anonymous apiserver path.

2026-06-30 09:21:07 +10:00

..

addons

feat: Containers — internal-ECR pulls, DNS-free registry, EKS hardening + docs (#409)

2026-06-23 15:29:14 +10:00

coredns

fix(eks): managed-CP worker data-plane — apiserver reachability, node-local CoreDNS, SG teardown (#368)

2026-06-16 20:27:21 +10:00

eks-node-role_test.sh

feat(eks): HA control plane — 3-node etcd quorum spread across distinct hosts (#335)

2026-06-10 12:25:47 +10:00

eks-node-role.initd

feat(eks): unify eks-server + eks-agent into one eks-node AMI (#288)

2026-06-04 12:28:56 +10:00

eks-node-role.sh

feat(eks): managed control-plane VPC (Set B) + control-plane lifecycle hardening (#356)

2026-06-12 22:29:24 +10:00

eks-token-webhook.initd

test(eks): EKS control-plane E2E suite (Sprint 6g) (#304)

2026-06-07 20:42:25 +10:00

k3s-agent.initd

feat(eks): aws-load-balancer-controller addon — real ALB Ingress (L7, IRSA) (#376)

2026-06-18 10:53:05 +10:00

k3s-first-boot.initd

feat(eks): unify eks-server + eks-agent into one eks-node AMI (#288)

2026-06-04 12:28:56 +10:00

k3s-first-boot.sh

test(eks): EKS control-plane E2E suite (Sprint 6g) (#304)

2026-06-07 20:42:25 +10:00

k3s.initd

feat: Containers — internal-ECR pulls, DNS-free registry, EKS hardening + docs (#409)

2026-06-23 15:29:14 +10:00

manifest.conf

feat: cloud-init EC2 datasource (#411)

2026-06-25 13:48:08 +10:00

mulga-ebs-byid.initd

feat: EKS EBS CSI driver (Viperblock) — egress, attach, node discovery, e2e (#402)

2026-06-19 14:43:20 +10:00

mulga-ebs-byid.sh

feat: EKS EBS CSI driver (Viperblock) — egress, attach, node discovery, e2e (#402)

2026-06-19 14:43:20 +10:00

mulga-eks-addon-sync.initd

feat(eks): managed control-plane VPC (Set B) + control-plane lifecycle hardening (#356)

2026-06-12 22:29:24 +10:00

mulga-eks-addon-sync.sh

feat: Containers — internal-ECR pulls, DNS-free registry, EKS hardening + docs (#409)

2026-06-23 15:29:14 +10:00

mulga-eks-etcd-snapshot.sh

feat(eks): unify eks-server + eks-agent into one eks-node AMI (#288)

2026-06-04 12:28:56 +10:00

mulga-eks-provider-id.initd

feat: EKS EBS CSI driver (Viperblock) — egress, attach, node discovery, e2e (#402)

2026-06-19 14:43:20 +10:00

mulga-eks-provider-id.sh

feat: EKS EBS CSI driver (Viperblock) — egress, attach, node discovery, e2e (#402)

2026-06-19 14:43:20 +10:00

mulga-eks-state-report.initd

feat(eks): 6d nodegroup provisioning + NATS-gated cluster health (#300)

2026-06-06 00:52:18 +10:00

mulga-eks-state-report.sh

feat: run EKS apiserver with anonymous-auth=false (CIS) (#447)

2026-06-30 09:21:07 +10:00

mulga-mgmt-net.initd

feat: cloud-init EC2 datasource (#411)

2026-06-25 13:48:08 +10:00

mulga-mgmt-net.sh

feat: cloud-init EC2 datasource (#411)

2026-06-25 13:48:08 +10:00

setup.sh

feat: cloud-init EC2 datasource (#411)

2026-06-25 13:48:08 +10:00