Merge pull request #9726 from zalando-incubator/dev-to-alpha

dev to alpha

Author: demonCoder95

cluster/cluster.yaml

@@ -143,6 +143,19 @@ Resources:
       IpProtocol: tcp
       SourceSecurityGroupId: !Ref EKSWorkerSecurityGroup
       ToPort: 443
+  EKSEFSSecurityGroupIngressFromEKSWorkerSecurityGroup:
+    Properties:
+      FromPort: 2049
+      GroupId: !Ref EKSEFSWorkerSecurityGroup
+      IpProtocol: tcp
+      SourceSecurityGroupId: !Ref EKSWorkerSecurityGroup
+      ToPort: 2049
+    Type: 'AWS::EC2::SecurityGroupIngress'
+  EKSEFSWorkerSecurityGroup:
+    Properties:
+      GroupDescription: EKS worker to EFS sg
+      VpcId: "{{.Cluster.ConfigItems.vpc_id}}"
+    Type: 'AWS::EC2::SecurityGroup'
   EKSCluster:
     Type: AWS::EKS::Cluster
     Properties:

cluster/config-defaults.yaml

@@ -380,7 +380,7 @@ skipper_open_policy_agent_styra_response_header_timeout: "2"
 # Decision logging use event buffer type
 skipper_open_policy_agent_decision_logs_buffer_type_event_enable: "false"
 # Decision logging sets the maximum number of decision log events that can be buffered before being dropped
-skipper_open_policy_agent_decision_logs_buffer_type_event_limit: "1000"
+skipper_open_policy_agent_decision_logs_buffer_type_event_limit: "10000"
 
 #
 # FabricGateway controller config

cluster/manifests/prometheus/statefulset.yaml

@@ -57,7 +57,7 @@ spec:
           mountPath: /prometheus
       containers:
       - name: prometheus
-        image: container-registry.zalando.net/teapot/prometheus:v3.4.1-master-64
+        image: container-registry.zalando.net/teapot/prometheus:v3.4.1-master-67
         args:
         - "--config.file=/prometheus/prometheus.yaml"
         - "--storage.tsdb.path=/prometheus/"

cluster/manifests/skipper/hostname-credentials-controller.yaml

@@ -1,5 +1,5 @@
 # {{ if eq .Cluster.ConfigItems.skipper_oauth2_ui_login "true" }}
-# {{ $image := "container-registry.zalando.net/gwproxy/hostname-credentials-controller:main-27" }}
+# {{ $image := "container-registry.zalando.net/gwproxy/hostname-credentials-controller:main-28" }}
 # {{ $version := index (split $image ":") 1 }}
 apiVersion: v1
 kind: ServiceAccount
@@ -109,7 +109,7 @@ spec:
   jobTemplate:
     spec:
       activeDeadlineSeconds: 30
-      backoffLimit: 1
+      backoffLimit: 0
       template:
         metadata:
           labels: