chore(deps): update terraform

Author: renovate[bot]

manifests/.workshop/terraform/base.tf

@@ -4,22 +4,22 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "5.72.0"
+      version = "5.90.0"
     }
     kubernetes = {
       source  = "hashicorp/kubernetes"
-      version = "2.32.0"
+      version = "2.36.0"
     }
     helm = {
       source  = "hashicorp/helm"
-      version = "2.15.0"
+      version = "2.17.0"
     }
     kubectl = {
       source  = "gavinbunney/kubectl"
-      version = "1.14.0"
+      version = "1.19.0"
     }
     local = {
-      version = "2.5.1"
+      version = "2.5.2"
     }
   }
 }

manifests/modules/aiml/chatbot/.workshop/terraform/main.tf

@@ -24,7 +24,7 @@ data "aws_ecrpublic_authorization_token" "token" {
 
 module "eks_blueprints_addons" {
   source  = "aws-ia/eks-blueprints-addons/aws"
-  version = "1.19.0"
+  version = "1.20.0"
 
   enable_aws_load_balancer_controller = true
   aws_load_balancer_controller = {
@@ -71,7 +71,7 @@ resource "aws_eks_addon" "pod_identity" {
 
 module "karpenter" {
   source  = "terraform-aws-modules/eks/aws//modules/karpenter"
-  version = "20.24"
+  version = "20.34"
 
   cluster_name          = var.addon_context.eks_cluster_id
   enable_v1_permissions = true
@@ -104,7 +104,7 @@ resource "helm_release" "karpenter" {
   repository_password = data.aws_ecrpublic_authorization_token.token.password
   chart               = "karpenter"
   # renovate: datasource=github-releases depName=aws/karpenter-provider-aws
-  version = "1.0.2"
+  version = "1.3.1"
   wait    = true
 
   values = [

manifests/modules/aiml/inferentia/.workshop/terraform/main.tf

@@ -31,7 +31,7 @@ resource "aws_eks_addon" "pod_identity" {
 
 module "karpenter" {
   source  = "terraform-aws-modules/eks/aws//modules/karpenter"
-  version = "20.24.0"
+  version = "20.34.0"
 
   cluster_name          = var.addon_context.eks_cluster_id
   enable_v1_permissions = true
@@ -106,7 +106,7 @@ resource "aws_s3_bucket" "inference" {
 
 module "iam_assumable_role_inference" {
   source                        = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
-  version                       = "5.44.0"
+  version                       = "5.53.0"
   create_role                   = true
   role_name                     = "${var.addon_context.eks_cluster_id}-inference"
   provider_url                  = var.addon_context.eks_oidc_issuer_url

manifests/modules/automation/controlplanes/ack/.workshop/terraform/main.tf

@@ -22,7 +22,7 @@ data "aws_ecrpublic_authorization_token" "token" {
 
 module "iam_assumable_role_carts" {
   source                        = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
-  version                       = "5.44.0"
+  version                       = "5.53.0"
   create_role                   = true
   role_name                     = "${var.addon_context.eks_cluster_id}-carts-ack"
   provider_url                  = var.addon_context.eks_oidc_issuer_url
@@ -82,7 +82,7 @@ EOF
 
 module "iam_assumable_role_ack" {
   source                        = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
-  version                       = "5.44.0"
+  version                       = "5.53.0"
   create_role                   = true
   role_name                     = "${var.addon_context.eks_cluster_id}-ack-controller"
   provider_url                  = var.addon_context.eks_oidc_issuer_url
@@ -94,7 +94,7 @@ module "iam_assumable_role_ack" {
 
 module "eks_blueprints_addons" {
   source  = "aws-ia/eks-blueprints-addons/aws"
-  version = "1.19.0"
+  version = "1.20.0"
 
   enable_aws_load_balancer_controller = true
   aws_load_balancer_controller = {

manifests/modules/automation/controlplanes/crossplane/.workshop/terraform/main.tf

@@ -42,7 +42,7 @@ locals {
 
 module "upbound_irsa_aws" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.44.0"
+  version = "5.53.0"
 
   role_name_prefix           = "${var.addon_context.eks_cluster_id}-ddb-upbound-"
   policy_name_prefix         = "${var.addon_context.eks_cluster_id}-ddb-upbound-"
@@ -102,7 +102,7 @@ resource "kubectl_manifest" "upbound_aws_provider_config" {
 
 module "iam_assumable_role_carts" {
   source                        = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
-  version                       = "5.44.0"
+  version                       = "5.53.0"
   create_role                   = true
   role_name                     = "${var.addon_context.eks_cluster_id}-carts-crossplane"
   provider_url                  = var.addon_context.eks_oidc_issuer_url
@@ -137,7 +137,7 @@ EOF
 
 module "eks_blueprints_addons" {
   source  = "aws-ia/eks-blueprints-addons/aws"
-  version = "1.19.0"
+  version = "1.20.0"
 
   enable_aws_load_balancer_controller = true
   aws_load_balancer_controller = {

manifests/modules/automation/gitops/flux/.workshop/terraform/main.tf

@@ -511,7 +511,7 @@ resource "aws_codepipeline" "codepipeline" {
 
 module "iam_assumable_role_ui" {
   source                        = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
-  version                       = "5.44.0"
+  version                       = "5.53.0"
   create_role                   = true
   role_name                     = "${var.addon_context.eks_cluster_id}-ecr-ui"
   provider_url                  = var.addon_context.eks_oidc_issuer_url
@@ -541,7 +541,7 @@ EOF
 
 module "eks_blueprints_addons" {
   source  = "aws-ia/eks-blueprints-addons/aws"
-  version = "1.19.0"
+  version = "1.20.0"
 
   enable_aws_load_balancer_controller = true
   aws_load_balancer_controller = {

manifests/modules/autoscaling/compute/cluster-autoscaler/.workshop/terraform/main.tf

@@ -1,6 +1,6 @@
 module "eks_blueprints_addons" {
   source  = "aws-ia/eks-blueprints-addons/aws"
-  version = "1.19.0"
+  version = "1.20.0"
 
   cluster_name      = var.addon_context.eks_cluster_id
   cluster_endpoint  = var.addon_context.aws_eks_cluster_endpoint

manifests/modules/autoscaling/compute/karpenter/.workshop/terraform/main.tf

@@ -7,7 +7,7 @@ resource "aws_eks_addon" "pod_identity" {
 
 module "karpenter" {
   source  = "terraform-aws-modules/eks/aws//modules/karpenter"
-  version = "20.24.0"
+  version = "20.34.0"
 
   cluster_name                    = var.addon_context.eks_cluster_id
   enable_pod_identity             = true

manifests/modules/autoscaling/workloads/keda/.workshop/terraform/main.tf

@@ -2,7 +2,7 @@ data "aws_partition" "current" {}
 
 module "eks_blueprints_addons" {
   source  = "aws-ia/eks-blueprints-addons/aws"
-  version = "1.19.0"
+  version = "1.20.0"
 
   cluster_name      = var.addon_context.eks_cluster_id
   cluster_endpoint  = var.addon_context.aws_eks_cluster_endpoint
@@ -20,7 +20,7 @@ module "eks_blueprints_addons" {
 
 module "iam_assumable_role_keda" {
   source                        = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
-  version                       = "5.44.0"
+  version                       = "5.53.0"
   create_role                   = true
   role_name                     = "${var.addon_context.eks_cluster_id}-keda"
   provider_url                  = var.addon_context.eks_oidc_issuer_url

manifests/modules/exposing/ingress/.workshop/terraform/main.tf

@@ -1,6 +1,6 @@
 module "eks_blueprints_addons" {
   source  = "aws-ia/eks-blueprints-addons/aws"
-  version = "1.19.0"
+  version = "1.20.0"
 
   cluster_name      = var.addon_context.eks_cluster_id
   cluster_endpoint  = var.addon_context.aws_eks_cluster_endpoint

manifests/modules/exposing/load-balancer/.workshop/terraform/main.tf

@@ -1,6 +1,6 @@
 module "eks_blueprints_addons" {
   source  = "aws-ia/eks-blueprints-addons/aws"
-  version = "1.19.0"
+  version = "1.20.0"
 
   cluster_name      = var.addon_context.eks_cluster_id
   cluster_endpoint  = var.addon_context.aws_eks_cluster_endpoint

manifests/modules/fundamentals/storage/ebs/.workshop/terraform/main.tf

@@ -1,6 +1,6 @@
 module "ebs_csi_driver_irsa" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.44.0"
+  version = "5.53.0"
 
   role_name_prefix   = "${var.addon_context.eks_cluster_id}-ebs-csi-"
   policy_name_prefix = "${var.addon_context.eks_cluster_id}-ebs-csi-"

manifests/modules/fundamentals/storage/efs/.workshop/terraform/main.tf

@@ -1,6 +1,6 @@
 module "efs_csi_driver_irsa" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.44.0"
+  version = "5.53.0"
 
   role_name_prefix   = "${var.addon_context.eks_cluster_id}-efs-csi-"
   policy_name_prefix = "${var.addon_context.eks_cluster_id}-ebs-csi-"

manifests/modules/fundamentals/storage/fsxz/.workshop/terraform/main.tf

@@ -1,7 +1,7 @@
 # Create FSxZ OIDC providers
 module "fsxz_oidc_providers" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.39.1"
+  version = "5.53.0"
 
   # Create prefixes
   role_name_prefix   = "${var.addon_context.eks_cluster_id}-fsxz-csi-"
@@ -130,7 +130,7 @@ resource "aws_security_group_rule" "fsxz_egress" {
 
 module "iam_assumable_role_fsx" {
   source                        = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
-  version                       = "5.44.0"
+  version                       = "5.53.0"
   create_role                   = true
   role_name                     = "${var.addon_context.eks_cluster_id}-fsxz"
   provider_url                  = var.addon_context.eks_oidc_issuer_url

manifests/modules/fundamentals/storage/s3/.workshop/terraform/main.tf

@@ -8,7 +8,7 @@ resource "aws_s3_bucket" "mountpoint_s3" {
 # Create S3 CSI Driver IAM Role and associated policy
 module "mountpoint_s3_csi_driver_irsa" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.39.1"
+  version = "5.53.0"
 
   # Create prefixes
   role_name_prefix   = "${var.addon_context.eks_cluster_id}-s3-csi-"

manifests/modules/networking/network-policies/.workshop/terraform/main.tf

@@ -1,6 +1,6 @@
 module "eks_blueprints_addons" {
   source  = "aws-ia/eks-blueprints-addons/aws"
-  version = "1.19.0"
+  version = "1.20.0"
 
   enable_aws_load_balancer_controller = true
   aws_load_balancer_controller = {

manifests/modules/networking/securitygroups-for-pods/.workshop/terraform/preprovision/main.tf

@@ -19,7 +19,7 @@ data "aws_subnets" "private_sg_rds" {
 
 module "catalog_mysql" {
   source  = "terraform-aws-modules/rds/aws"
-  version = "6.9.0"
+  version = "6.10.0"
 
   identifier = "${var.eks_cluster_id}-catalog"
 
@@ -61,7 +61,7 @@ resource "random_string" "catalog_db_master" {
 
 module "catalog_rds_ingress" {
   source  = "terraform-aws-modules/security-group/aws"
-  version = "5.2.0"
+  version = "5.3.0"
 
   name        = "${var.eks_cluster_id}-catalog-rds"
   description = "Catalog RDS security group"

manifests/modules/networking/vpc-lattice/.workshop/terraform/main.tf

@@ -1,6 +1,6 @@
 module "eks_blueprints_addons" {
   source  = "aws-ia/eks-blueprints-addons/aws"
-  version = "1.19.0"
+  version = "1.20.0"
 
   enable_aws_load_balancer_controller = true
   aws_load_balancer_controller = {
@@ -19,7 +19,7 @@ module "eks_blueprints_addons" {
 
 module "iam_assumable_role_lattice" {
   source                        = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
-  version                       = "5.44.0"
+  version                       = "5.53.0"
   create_role                   = true
   role_name                     = "${var.addon_context.eks_cluster_id}-lattice"
   provider_url                  = var.addon_context.eks_oidc_issuer_url

manifests/modules/observability/container-insights/.workshop/terraform/main.tf

@@ -3,7 +3,7 @@ data "aws_region" "current" {}
 
 module "eks_blueprints_addons" {
   source  = "aws-ia/eks-blueprints-addons/aws"
-  version = "1.19.0"
+  version = "1.20.0"
 
   cluster_name      = var.addon_context.eks_cluster_id
   cluster_endpoint  = var.addon_context.aws_eks_cluster_endpoint
@@ -82,7 +82,7 @@ module "opentelemetry_operator" {
 
 module "iam_assumable_role_adot_ci" {
   source                        = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
-  version                       = "5.44.0"
+  version                       = "5.53.0"
   create_role                   = true
   role_name                     = "${var.addon_context.eks_cluster_id}-adot-collector-ci"
   provider_url                  = var.addon_context.eks_oidc_issuer_url

manifests/modules/observability/kubecost/.workshop/terraform/main.tf

@@ -1,6 +1,6 @@
 module "ebs_csi_driver_irsa" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.44.0"
+  version = "5.53.0"
 
   role_name_prefix   = "${var.addon_context.eks_cluster_id}-ebs-csi-"
   policy_name_prefix = "${var.addon_context.eks_cluster_id}-ebs-csi-"
@@ -19,7 +19,7 @@ module "ebs_csi_driver_irsa" {
 
 module "eks_blueprints_addons" {
   source  = "aws-ia/eks-blueprints-addons/aws"
-  version = "1.19.0"
+  version = "1.20.0"
 
   cluster_name      = var.addon_context.eks_cluster_id
   cluster_endpoint  = var.addon_context.aws_eks_cluster_endpoint

manifests/modules/observability/oss-metrics/.workshop/terraform/main.tf

@@ -2,7 +2,7 @@ data "aws_partition" "current" {}
 
 module "ebs_csi_driver_irsa" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.44.0"
+  version = "5.53.0"
 
   role_name_prefix   = "${var.addon_context.eks_cluster_id}-ebs-csi-"
   policy_name_prefix = "${var.addon_context.eks_cluster_id}-ebs-csi-"
@@ -21,7 +21,7 @@ module "ebs_csi_driver_irsa" {
 
 module "eks_blueprints_addons" {
   source  = "aws-ia/eks-blueprints-addons/aws"
-  version = "1.19.0"
+  version = "1.20.0"
 
   cluster_name      = var.addon_context.eks_cluster_id
   cluster_endpoint  = var.addon_context.aws_eks_cluster_endpoint
@@ -115,7 +115,7 @@ resource "aws_prometheus_workspace" "this" {
 
 module "iam_assumable_role_adot" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
-  version = "5.44.0"
+  version = "5.53.0"
 
   create_role  = true
   role_name    = "${var.addon_context.eks_cluster_id}-adot-collector"

manifests/modules/observability/resiliency/.workshop/terraform/main.tf

@@ -1,6 +1,6 @@
 module "eks_blueprints_addons" {
   source  = "aws-ia/eks-blueprints-addons/aws"
-  version = "1.19.0"
+  version = "1.20.0"
 
   cluster_name      = var.addon_context.eks_cluster_id
   cluster_endpoint  = var.addon_context.aws_eks_cluster_endpoint

manifests/modules/security/eks-pod-identity/.workshop/terraform/main.tf

@@ -4,7 +4,7 @@ data "aws_partition" "current" {}
 
 module "eks_blueprints_addons" {
   source  = "aws-ia/eks-blueprints-addons/aws"
-  version = "1.19.0"
+  version = "1.20.0"
 
   enable_aws_load_balancer_controller = true
   aws_load_balancer_controller = {
@@ -92,7 +92,7 @@ resource "aws_dynamodb_table" "carts" {
 
 module "iam_assumable_role_carts" {
   source                  = "terraform-aws-modules/iam/aws//modules/iam-assumable-role"
-  version                 = "5.44.0"
+  version                 = "5.53.0"
   create_role             = true
   role_requires_mfa       = false
   role_name               = "${var.addon_context.eks_cluster_id}-carts-dynamo"

manifests/modules/security/irsa/.workshop/terraform/main.tf

@@ -4,7 +4,7 @@ data "aws_region" "current" {}
 
 module "eks_blueprints_addons" {
   source  = "aws-ia/eks-blueprints-addons/aws"
-  version = "1.19.0"
+  version = "1.20.0"
 
   enable_aws_load_balancer_controller = true
   aws_load_balancer_controller = {
@@ -92,7 +92,7 @@ resource "aws_dynamodb_table" "carts" {
 
 module "iam_assumable_role_carts" {
   source                        = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
-  version                       = "5.44.0"
+  version                       = "5.53.0"
   create_role                   = true
   role_name                     = "${var.addon_context.eks_cluster_id}-carts-dynamo"
   provider_url                  = var.addon_context.eks_oidc_issuer_url

manifests/modules/security/secrets-manager/.workshop/terraform/main.tf

@@ -42,7 +42,7 @@ module "external_secrets" {
 
 module "secrets_manager_role" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.44.0"
+  version = "5.53.0"
 
   role_name_prefix   = "${var.eks_cluster_id}-secrets-"
   policy_name_prefix = "${var.eks_cluster_id}-secrets-"