datarockets/infrastructure v0.2.2

nginx-ingress upgraded to 0.10.0 (nginx’ version is 1.21.1)

cert-manager upgraded to 1.4.1

k8s/basic

  • It is possible now to use service_accounts parameter for k8s/basic module in order to configure annotations for service accounts. It is useful for AWS’ managed cluster in order to link service accounts with IAM roles and policies.
  • cert-manager no longer create separate ingresses to server ACME challenge in order to acquire the TLS certificate. nginx-ingress can’t merge different ingresses for the same host without a special setup.