test skipper-ingress with eks karpenter ipv6

cluster/cluster.yaml

@@ -87,6 +87,10 @@ Resources:
           FromPort: 9998
           IpProtocol: tcp
           ToPort: 9999
+        - CidrIpv6: {{ if eq .Cluster.ConfigItems.kube_aws_ingress_controller_nlb_enabled "true" }}"::/0"{{else}}"{{.Values.vpc_ipv6_cidr}}"{{end}}
+          FromPort: 9998
+          IpProtocol: tcp
+          ToPort: 9999
 {{- if eq .Cluster.ConfigItems.skipper_ingress_redis_swim_enabled "true" }}
         - CidrIp: "{{.Values.vpc_ipv4_cidr}}"
           FromPort: 9990
@@ -1920,6 +1924,9 @@ Resources:
               - Action: 'ec2:DescribeVpcs'
                 Effect: Allow
                 Resource: '*'
+              - Action: 'ec2:DescribeVpcPeeringConnections'
+                Effect: Allow
+                Resource: '*'
               - Action: 'iam:CreateServiceLinkedRole'
                 Effect: Allow
                 Resource: '*'

cluster/manifests/ingress-controller/01-rbac.yaml

@@ -45,6 +45,15 @@ rules:
   verbs:
   - patch
   - update
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  - pods/status
+  verbs:
+  - get
+  - list
+  - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding

cluster/manifests/ingress-controller/deployment.yaml

@@ -8,7 +8,7 @@ metadata:
   namespace: kube-system
   labels:
     application: kube-ingress-aws-controller
-    version: "{{ $version }}"
+    version: pr-763-9
 spec:
   replicas: 1
   selector:
@@ -18,7 +18,7 @@ spec:
     metadata:
       labels:
         application: kube-ingress-aws-controller
-        version: "{{ $version }}"
+        version: pr-763-9
       annotations:
         kubernetes-log-watcher/scalyr-parser: |
           [{"container": "controller", "parser": "keyValue"}]
@@ -35,9 +35,13 @@ spec:
       serviceAccountName: kube-ingress-aws-controller
       containers:
         - name: controller
-          image: "{{ $image }}"
+          image: 926694233939.dkr.ecr.eu-central-1.amazonaws.com/staging_namespace/teapot/kube-ingress-aws-controller-test-eks:pr-763-9
           args:
-            - --target-access-mode=HostPort
+            - --ip-addr-type=dualstack
+            - --target-group-ip-addr-type=ipv6
+            - --target-access-mode=AWSCNI
+            - --target-cni-namespace=kube-system
+            - --target-cni-pod-labelselector=application=skipper-ingress,component=ingress
             - --stack-termination-protection
             - --ssl-policy={{ .Cluster.ConfigItems.kube_aws_ingress_controller_ssl_policy }}
             - --idle-connection-timeout={{ .Cluster.ConfigItems.kube_aws_ingress_controller_idle_timeout }}

cluster/manifests/skipper/deployment.yaml

@@ -96,20 +96,17 @@ spec:
       serviceAccountName: skipper-ingress
       terminationGracePeriodSeconds: {{ .Cluster.ConfigItems.skipper_termination_grace_period }}
       dnsPolicy: ClusterFirstWithHostNet
-      hostNetwork: true
       containers:
       - name: skipper-ingress
         image: "{{ .image }}"
         terminationMessagePolicy: FallbackToLogsOnError
         ports:
         - name: ingress-port
           containerPort: 9999
-          hostPort: 9999
           protocol: TCP
 {{ if or (eq .Cluster.ConfigItems.nlb_switch "pre") (eq .Cluster.ConfigItems.nlb_switch "exec") }}
         - name: http-redirect
           containerPort: 9998
-          hostPort: 9998
           protocol: TCP
 {{ end }}
         env: