Fix: Update modules

terraform/modules/aws-acm/main.tf

@@ -10,7 +10,7 @@ data "aws_acm_certificate" "main" {
 
 module "acm" {
   source  = "terraform-aws-modules/acm/aws"
-  version = "5.0.1"
+  version = "5.1.1"
 
   create_certificate = var.create_acm_certificate
 

terraform/modules/aws-eks/main.tf

@@ -1,7 +1,7 @@
 #tfsec:ignore:aws-vpc-no-public-egress-sgr tfsec:ignore:aws-eks-enable-control-plane-logging tfsec:ignore:aws-eks-encrypt-secrets tfsec:ignore:aws-eks-no-public-cluster-access tfsec:ignore:aws-eks-no-public-cluster-access-to-cidr
 module "eks" {
   source  = "terraform-aws-modules/eks/aws"
-  version = "20.20.0"
+  version = "20.31.6"
 
   cluster_name             = var.name
   cluster_version          = var.eks_cluster_version
@@ -131,7 +131,7 @@ module "eks" {
 
 module "vpc_cni_irsa" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.39.1"
+  version = "5.48.0"
 
   role_name             = "${var.name}-vpc-cni"
   attach_vpc_cni_policy = true
@@ -149,7 +149,7 @@ module "vpc_cni_irsa" {
 
 module "aws_ebs_csi_driver" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.39.1"
+  version = "5.48.0"
 
   role_name             = "${var.name}-aws-ebs-csi-driver"
   attach_ebs_csi_policy = true

terraform/modules/aws-r53/main.tf

@@ -7,7 +7,7 @@ data "aws_route53_zone" "main" {
 
 module "r53_zone" {
   source  = "terraform-aws-modules/route53/aws//modules/zones"
-  version = "2.11.1"
+  version = "4.1.0"
 
   create = var.create_r53_zone
 

terraform/modules/aws-vpc/main.tf

@@ -9,7 +9,7 @@ locals {
 
 module "vpc" {
   source  = "terraform-aws-modules/vpc/aws"
-  version = "5.8.1"
+  version = "5.17.0"
 
   name = var.name
   cidr = var.cidr
@@ -84,7 +84,7 @@ module "vpc" {
 
 module "vpc_gateway_endpoints" {
   source  = "terraform-aws-modules/vpc/aws//modules/vpc-endpoints"
-  version = "5.8.1"
+  version = "5.17.0"
 
   vpc_id = module.vpc.vpc_id
 

terraform/modules/k8s-addons/eks-aws-loadbalancer-controller.tf

@@ -137,6 +137,7 @@ module "aws_iam_aws_loadbalancer_controller" {
           "elasticloadbalancing:DescribeLoadBalancerAttributes",
           "elasticloadbalancing:DescribeListeners",
           "elasticloadbalancing:DescribeListenerCertificates",
+          "elasticloadbalancing:DescribeListenerAttributes",
           "elasticloadbalancing:DescribeSSLPolicies",
           "elasticloadbalancing:DescribeRules",
           "elasticloadbalancing:DescribeTargetGroups",
@@ -437,7 +438,6 @@ resource "kubernetes_ingress_v1" "default" {
   metadata {
     name = "${local.ingress_nginx.name}-controller"
     annotations = {
-      "kubernetes.io/ingress.class"                        = "alb"
       "alb.ingress.kubernetes.io/scheme"                   = "internet-facing"
       "alb.ingress.kubernetes.io/tags"                     = "Environment=${local.env},Name=${local.name},Cluster=${local.eks_cluster_id}"
       "alb.ingress.kubernetes.io/certificate-arn"          = "${local.ssl_certificate_arn}"
@@ -450,6 +450,7 @@ resource "kubernetes_ingress_v1" "default" {
     namespace = module.ingress_nginx_namespace[count.index].name
   }
   spec {
+    ingress_class_name = "alb"
     rule {
       http {
         path {

terraform/modules/k8s-addons/eks-loki-stack.tf

@@ -10,6 +10,9 @@ locals {
   loki_stack_values = <<VALUES
 loki:
   enabled: true
+  image:
+    repository: grafana/loki
+    tag: 2.9.11
   rbac:
     create: true
     pspEnabled: false # Due to psp removed in k8s 1.25 and latest loki-stack chart doesn't maintain new PSP version

terraform/modules/k8s-addons/eks-storageclass.tf

@@ -7,7 +7,7 @@ resource "kubernetes_storage_class" "advanced" {
   allow_volume_expansion = true
   volume_binding_mode    = "WaitForFirstConsumer"
   parameters = {
-    type      = "gp2"
+    type      = "gp3"
     fsType    = "ext4"
     encrypted = "true" # It is set to true for cases when global EBS encryption is disabled.
   }

terraform/modules/k8s-addons/helm-releases.yaml

@@ -3,7 +3,7 @@ releases:
     enabled: true
     chart: aws-load-balancer-controller
     repository: https://aws.github.io/eks-charts
-    chart_version: 1.7.2
+    chart_version: 1.11.0
     namespace: aws-load-balancer-controller
   - id: cert-manager
     enabled: false
@@ -39,7 +39,7 @@ releases:
     enabled: true
     chart: external-secrets
     repository: https://charts.external-secrets.io
-    chart_version: 0.10.0
+    chart_version: 0.11.0
     namespace: external-secrets
   - id: gitlab-runner
     enabled: false
@@ -51,7 +51,7 @@ releases:
     enabled: true
     chart: ingress-nginx
     repository: https://kubernetes.github.io/ingress-nginx
-    chart_version: 4.10.1
+    chart_version: 4.11.3
     namespace: ingress-nginx
   - id: istio
     enabled: false
@@ -75,7 +75,7 @@ releases:
     enabled: true
     chart: kube-prometheus-stack
     repository: https://prometheus-community.github.io/helm-charts
-    chart_version: 61.3.1
+    chart_version: 67.3.1
     namespace: monitoring
   - id: loki-stack
     enabled: true
@@ -87,7 +87,7 @@ releases:
     enabled: true
     chart: reloader
     repository: https://stakater.github.io/stakater-charts
-    chart_version: 1.0.97
+    chart_version: 1.2.0
     namespace: reloader
   - id: victoria-metrics-k8s-stack
     enabled: false

terraform/modules/k8s-karpenter/main.tf

@@ -34,7 +34,7 @@ module "this" {
   count = local.karpenter.enabled ? 1 : 0
 
   source  = "terraform-aws-modules/eks/aws//modules/karpenter"
-  version = "20.17.2"
+  version = "20.31.6"
 
   cluster_name = var.eks_cluster_id
 

terragrunt/ACCOUNT_ID/aws-users-password-policy/terragrunt.hcl

@@ -1,5 +1,5 @@
 include "root" {
-  path   = find_in_parent_folders()
+  path   = find_in_parent_folders("root.hcl")
   expose = true
 }
 

terragrunt/ACCOUNT_ID/us-east-1/demo/common/aws-acm/terragrunt.hcl

@@ -1,5 +1,5 @@
 include "root" {
-  path   = find_in_parent_folders()
+  path   = find_in_parent_folders("root.hcl")
   expose = true
 }