Typhoon Files

What's Changed

• Kubernetes v1.33.2
• Update CoreDNS from v1.12.0 to v1.12.1
• Update Cilium from v1.17.4 to v1.17.5
• Update flannel from v0.26.7 to v0.27.0

AWS

• Add worker_ipv4_address variable to associate public IPv4 addresses to worker instances (default true)
• When IPv6 is all you need, set to false to remove IPv4 access to instances and outbound IPv4 access to the internet
• Relax aws provider version constraint to allow upgrades to v6.x (#1617)

Azure

• Add enable_http_load_balancing variable to reduce load balancer rules count
• Azure charges by load balancer rules (5 included)
• Change Azure VMSS instance update policy (i.e. upgrade policy) from Manual to Rolling
• Set a rolling upgrade policy so that changes to the worker node pool are rolled out gradually. Previously, the VMSS model could change, but instances would not receive it until manually replaced
• Define Azure automatic instance repair using Application Health Extension probes to 10256 (kube-proxy or Cilium equivalent) to match the strategy used on Google Cloud
• Add worker_ephemeral_disk_placement variable to allow workers with NvmeDisk Ephemeral OS disks (docs)
• Requires azurerm provider with NvmeDisk support (#30044)

Google Cloud

• Update Google Cloud load balancer proxies from classic to current (#1604)
• Change apiserver and ingress/gateway service proxies (#1604)
• Google Cloud TCP proxies no longer restrict which frontend ports may be used
• Switch apiserver to listen on 6443 to match other cloud platforms
• Switch ingress port 80 from an HTTP to TCP proxy to match HTTPS handling
• Add a variable enable_http_load_balancing to make ingress/gateway TCP/80 forwarding rules optional. Default to false (#1604)
• Google Cloud charges by forwarding rule, so dropping support for plaintext http traffic can save costs if you're https-only.

Contributions

• Modernize Google Cloud load balancer setups by @dghubble in https://github.com/poseidon/typhoon/pull/1604
• Add enable_http_load_balancing variable to Azure clusters by @dghubble in https://github.com/poseidon/typhoon/pull/1605
• Set Azure VMSS upgrade policy to Rolling by @dghubble in https://github.com/poseidon/typhoon/pull/1609
• Update Kubernetes from v1.33.1 to v1.33.2 by @dghubble in https://github.com/poseidon/typhoon/pull/1612
• azure: Allow workers with NvmeDisk Ephemeral OS disks by @dghubble in https://github.com/poseidon/typhoon/pull/1614
• Standardize load balancer variables before release by @dghubble in https://github.com/poseidon/typhoon/pull/1616
• Relax aws Terraform provider version constraints by @dghubble in https://github.com/poseidon/typhoon/pull/1617
• [aws] Add option for using only IPv6 public addresses by @dghubble in https://github.com/poseidon/typhoon/pull/1618

Dependencies

• Bump docker.io/flannel/flannel image from v0.26.7 to v0.27.0 by @dghubble-renovate[bot] in https://github.com/poseidon/typhoon/pull/1603
• Bump registry.k8s.io/coredns/coredns image from v1.12.1 to v1.12.2 by @dghubble-renovate[bot] in https://github.com/poseidon/typhoon/pull/1606
• Bump quay.io/cilium/cilium image from v1.17.4 to v1.17.5 by @dghubble-renovate[bot] in https://github.com/poseidon/typhoon/pull/1607
• Bump quay.io/cilium/operator-generic image from v1.17.4 to v1.17.5 by @dghubble-renovate[bot] in https://github.com/poseidon/typhoon/pull/1608
• Bump pymdown-extensions from 10.15 to v10.16 by @dghubble-renovate[bot] in https://github.com/poseidon/typhoon/pull/1611
• Bump pygments from 2.19.1 to v2.19.2 by @dghubble-renovate[bot] in https://github.com/poseidon/typhoon/pull/1610
• Bump mkdocs-material from 9.6.14 to v9.6.15 by @dghubble-renovate[bot] in https://github.com/poseidon/typhoon/pull/1615
• Bump docker.io/flannel/flannel image from v0.27.0 to v0.27.1 by @dghubble-renovate[bot] in https://github.com/poseidon/typhoon/pull/1619

Full Changelog: https://github.com/poseidon/typhoon/compare/v1.33.1...v1.33.2