Skip to content

feat(cluster): Add support for controlPlaneEgressMode#228

Open
cxbrowne1207 wants to merge 1 commit into
aws-controllers-k8s:mainfrom
cxbrowne1207:feat/control-plane-egress-mode
Open

feat(cluster): Add support for controlPlaneEgressMode#228
cxbrowne1207 wants to merge 1 commit into
aws-controllers-k8s:mainfrom
cxbrowne1207:feat/control-plane-egress-mode

Conversation

@cxbrowne1207

@cxbrowne1207 cxbrowne1207 commented Jun 22, 2026

Copy link
Copy Markdown

Description of changes:

EKS launched the controlPlaneEgressMode field (announcement), which allows customers to route control plane egress traffic through their VPC (CUSTOMER_ROUTED) instead of AWS managed networking (AWS_MANAGED).

This change adds support for configuring and updating controlPlaneEgressMode via the Cluster custom resource.

For this change, we updated the AWS SDK version to v1.87.0 and regenerated the controller with ack-generate v0.59.1.

Changes:

  • apis/v1alpha1/types.go: ControlPlaneEgressMode field added to VPCConfigRequest and VPCConfigResponse (generated)
  • pkg/resource/cluster/sdk.go: Map field in create, describe, and newVpcConfigRequest helper (generated)
  • pkg/resource/cluster/hook.go: Add updateControlPlaneEgressMode handler in customUpdate with ResourceInUseException requeue
  • config/crd/bases/ + helm/crds/: CRD schema updated with controlPlaneEgressMode field (generated)
  • go.mod: Bump aws-sdk-go-v2/service/eks v1.80.0 → v1.87.0

Usage:

apiVersion: eks.services.k8s.aws/v1alpha1
kind: Cluster
metadata:
  name: my-cluster
spec:
  name: my-cluster
  roleARN: arn:aws:iam::123456789012:role/EKSClusterRole
  resourcesVPCConfig:
    subnetIDs:
      - subnet-abc123
      - subnet-def456
    controlPlaneEgressMode: CUSTOMER_ROUTED

Testing:

  • go build ./...
  • go test ./...
  • E2E: Controller deployed locally, applied Cluster CR with controlPlaneEgressMode: CUSTOMER_ROUTED — cluster reached ACTIVE with correct mode, CR synced successfully.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@ack-prow
ack-prow Bot requested review from gustavodiaz7722 and sapphirew June 22, 2026 17:10
@ack-prow

ack-prow Bot commented Jun 22, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: cxbrowne1207
Once this PR has been reviewed and has the lgtm label, please assign michaelhtm for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@ack-prow

ack-prow Bot commented Jun 22, 2026

Copy link
Copy Markdown

Hi @cxbrowne1207. Thanks for your PR.

I'm waiting for a aws-controllers-k8s member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@ack-prow ack-prow Bot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Jun 22, 2026
@cxbrowne1207
cxbrowne1207 marked this pull request as draft June 22, 2026 17:11
@ack-prow ack-prow Bot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Jun 22, 2026
@cxbrowne1207 cxbrowne1207 changed the title Add support for controlPlaneEgressMode in EKS Cluster resource feat(cluster): Add support for controlPlaneEgressMode Jun 22, 2026
@cxbrowne1207
cxbrowne1207 force-pushed the feat/control-plane-egress-mode branch from 4a9f5e4 to 89ca3a5 Compare June 22, 2026 17:15
Add the ability to configure and update the control plane egress mode
for EKS clusters via the Cluster custom resource. This allows users to
route control plane egress traffic through their VPC (CUSTOMER_ROUTED)
instead of AWS managed networking (AWS_MANAGED).

Changes:
- Add ControlPlaneEgressMode field to VPCConfigRequest and VPCConfigResponse types
- Map field in create, describe, and newVpcConfigRequest paths in sdk.go
- Add updateControlPlaneEgressMode handler in hook.go with ResourceInUseException requeue
- Add field to Cluster CRD schema
- Bump aws-sdk-go-v2/service/eks to v1.87.0

Signed-off-by: Cavaughn Browne <cxbrowne@amazon.com>
@cxbrowne1207
cxbrowne1207 force-pushed the feat/control-plane-egress-mode branch from 89ca3a5 to c9f0a79 Compare June 22, 2026 17:22
@cxbrowne1207
cxbrowne1207 marked this pull request as ready for review June 22, 2026 18:51
@ack-prow ack-prow Bot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Jun 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants