chore: bump karpenter to v0.27.0

.projenrc.js

@@ -17,7 +17,7 @@ const project = new awscdk.AwsCdkConstructLibrary({
   compat: true,
   stability: 'experimental',
   cdkVersion: '2.67.0',
-  workflowNodeVersion: '^18.13.0',
+  workflowNodeVersion: '^18.14.2',
   autoApproveOptions: {
     allowedUsernames: ['cdk-karpenter-automation'],
     secret: 'GITHUB_TOKEN',
@@ -26,8 +26,18 @@ const project = new awscdk.AwsCdkConstructLibrary({
   autoApproveProjenUpgrades: true,
   projenTokenSecret: 'PROJEN_GITHUB_TOKEN',
   autoApproveUpgrades: true,
-  deps: ['aws-cdk-lib', '@aws-cdk/lambda-layer-kubectl-v23', '@aws-cdk/lambda-layer-kubectl-v24'],
-  devDeps: ['aws-cdk-lib', '@aws-cdk/lambda-layer-kubectl-v23', '@aws-cdk/lambda-layer-kubectl-v24'],
+  deps: [
+    'aws-cdk-lib',
+    '@aws-cdk/lambda-layer-kubectl-v23',
+    '@aws-cdk/lambda-layer-kubectl-v24',
+    '@aws-cdk/lambda-layer-kubectl-v25',
+  ],
+  devDeps: [
+    'aws-cdk-lib',
+    '@aws-cdk/lambda-layer-kubectl-v23',
+    '@aws-cdk/lambda-layer-kubectl-v24',
+    '@aws-cdk/lambda-layer-kubectl-v25',
+  ],
   // deps: [],                /* Runtime dependencies of this module. */
   // devDeps: [],             /* Build dependencies for this module. */
   // packageName: undefined,  /* The "name" in package.json. */

README.md

@@ -8,13 +8,19 @@ More info about Karpenter at: https://karpenter.sh
 
 Karpenter Best Practices: https://aws.github.io/aws-eks-best-practices/karpenter/
 
-Karpenter version: v0.26.1
+Karpenter version: v0.27.0
 
 Notes: 
 - Karpenter no longer supports Kubernetes v1.20, but now supports Kubernetes v1.25. This change is due to the v1 PDB API, which was introduced in K8s v1.20 and subsequent removal of the v1beta1 API in K8s v1.25.
 - Prior to v0.20.0, Karpenter would prioritize certain instance type categories absent of any requirements in the Provisioner. v0.20.0+ removes prioritizing these instance type categories (“m”, “c”, “r”, “a”, “t”, “i”) in code. Bare Metal and GPU instance types are still deprioritized and only used if no other instance types are compatible with the node requirements. This means that, now, you will need to explicitly define the instance types, sizes or categories you want to allow in your Provisioner; otherwise, it is possible that you receive more exotic instance types.
 - As of v0.16.0 changed the default replicas from 1 to 2. See: https://github.com/aws/karpenter/blob/main/website/content/en/v0.16.1/troubleshooting.md
 
+Upgrade Notes: https://karpenter.sh/v0.27.0/upgrade-guide/#released-upgrade-notes
+
+## Docs
+
+[API.md](./API.md)
+
 ## Showcase
 
 ```ts
@@ -42,8 +48,8 @@ const karpenter = new Karpenter(stack, 'karpenter', {
 
 // default provisioner
 karpenter.addProvisioner('default');
-//Note: Default provisioner has no cpu/mem limits, nor will cleanup provisioned resources. Use with caution.
-// see: https://karpenter.sh/v0.26.1/concepts/deprovisioning/
+// Note: Default provisioner has no cpu/mem limits, nor will cleanup provisioned resources. Use with caution!!!
+// see: https://karpenter.sh/v0.27.0/concepts/deprovisioning/
 
 // custom provisoner - kitchen sink
 karpenter.addProvisioner('custom', {
@@ -104,8 +110,4 @@ karpenter.addProvisioner('custom', {
     ],
   },
 });
-```
-
-## Docs
-
-[API.md](./API.md)
+```

src/karpenter.ts

@@ -481,7 +481,7 @@ export class Karpenter extends Construct {
     this.karpenterHelmChart = new HelmChart(this, 'KarpenterHelmChart', {
       chart: 'karpenter',
       createNamespace: true,
-      version: 'v0.26.1',
+      version: 'v0.27.0',
       cluster: this.cluster,
       namespace: 'karpenter',
       release: 'karpenter',
@@ -494,7 +494,7 @@ export class Karpenter extends Construct {
             'eks.amazonaws.com/role-arn': this.karpenterControllerRole.roleArn,
           },
         },
-        // see: https://karpenter.sh/v0.26.1/concepts/settings/
+        // see: https://karpenter.sh/v0.27.0/concepts/settings/
         settings: {
           aws: {
             clusterName: this.cluster.clusterName,
@@ -521,8 +521,8 @@ export class Karpenter extends Construct {
       throw new Error('Parameters consolidation and ttlSecondsAfterEmpty are mutually exclusive.');
     }
 
-    // see: https://karpenter.sh/v0.26.1/concepts/provisioners/
-    // see: https://karpenter.sh/v0.26.1/concepts/node-templates/
+    // see: https://karpenter.sh/v0.27.0/concepts/provisioners/
+    // see: https://karpenter.sh/v0.27.0/concepts/node-templates/
     const awsNodeTemplateId = `${id}-awsNodeTemplate`.toLowerCase();
     const awsNodeTemplate = this.cluster.addManifest(awsNodeTemplateId, {
       apiVersion: 'karpenter.k8s.aws/v1alpha1',
@@ -531,43 +531,43 @@ export class Karpenter extends Construct {
         name: awsNodeTemplateId,
       },
       spec: {
-        // see: https://karpenter.sh/v0.26.1/concepts/node-templates/#specsubnetselector
+        // see: https://karpenter.sh/v0.27.0/concepts/node-templates/#specsubnetselector
         subnetSelector: {
           [`karpenter.sh/discovery/${this.cluster.clusterName}`]: '*',
         },
-        // see: https://karpenter.sh/v0.26.1/concepts/node-templates/#specsecuritygroupselector
+        // see: https://karpenter.sh/v0.27.0/concepts/node-templates/#specsecuritygroupselector
         securityGroupSelector: {
           [`kubernetes.io/cluster/${this.cluster.clusterName}`]: 'owned',
         },
-        // see: https://karpenter.sh/v0.26.1/concepts/node-templates/#specsecuritygroupselector
+        // see: https://karpenter.sh/v0.27.0/concepts/node-templates/#specsecuritygroupselector
         // instanceProfile is created using L1 construct (CfnInstanceProfile), thus we're referencing ref directly
         // TODO: revisit this when L2 InstanceProfile construct is released
         instanceProfile: this.instanceProfile.ref,
-        // see: https://karpenter.sh/v0.26.1/concepts/node-templates/#specamifamily
+        // see: https://karpenter.sh/v0.27.0/concepts/node-templates/#specamifamily
         ...(provisionerSpecs?.provider?.amiFamily && { amiFamily: provisionerSpecs!.provider!.amiFamily! }),
-        // see https://karpenter.sh/v0.26.1/concepts/node-templates/#specamiselector
+        // see https://karpenter.sh/v0.27.0/concepts/node-templates/#specamiselector
         ...(provisionerSpecs?.provider?.amiSelector && { amiSelector: { ...provisionerSpecs!.provider!.amiSelector! } }),
-        // see: https://karpenter.sh/v0.26.1/concepts/node-templates/#spectags
+        // see: https://karpenter.sh/v0.27.0/concepts/node-templates/#spectags
         ...(provisionerSpecs?.provider?.tags && { tags: { ...provisionerSpecs!.provider!.tags! } }),
-        // see: https://karpenter.sh/v0.26.1/concepts/node-templates/#specblockdevicemappings
+        // see: https://karpenter.sh/v0.27.0/concepts/node-templates/#specblockdevicemappings
         ...(provisionerSpecs?.provider?.blockDeviceMappings && { blockDeviceMappings: provisionerSpecs!.provider!.blockDeviceMappings! }),
-        // TODO: add userData https://karpenter.sh/v0.26.1/concepts/node-templates/#specuserdata
-        // TODO: add metadataOptions https://karpenter.sh/v0.26.1/concepts/node-templates/#specmetadataoptions
+        // TODO: add userData https://karpenter.sh/v0.27.0/concepts/node-templates/#specuserdata
+        // TODO: add metadataOptions https://karpenter.sh/v0.27.0/concepts/node-templates/#specmetadataoptions
       },
     });
 
-    // see: https://karpenter.sh/v0.26.1/concepts/provisioners/#specrequirements
+    // see: https://karpenter.sh/v0.27.0/concepts/provisioners/#specrequirements
     const requirements = this.setRequirements(provisionerSpecs?.requirements);
 
-    // see: https://karpenter.sh/v0.26.1/concepts/provisioners/
+    // see: https://karpenter.sh/v0.27.0/concepts/provisioners/
     const provisioner = this.cluster.addManifest(id, {
       apiVersion: 'karpenter.sh/v1alpha5',
       kind: 'Provisioner',
       metadata: {
         name: id.toLowerCase(),
       },
       spec: {
-        // see: https://karpenter.sh/v0.26.1/concepts/provisioners/#speclimitsresources
+        // see: https://karpenter.sh/v0.27.0/concepts/provisioners/#speclimitsresources
         ...(provisionerSpecs?.limits && {
           limits: {
             resources: {
@@ -576,15 +576,15 @@ export class Karpenter extends Construct {
             },
           },
         }),
-        // see: https://karpenter.sh/v0.26.1/concepts/provisioners/#specconsolidation
+        // see: https://karpenter.sh/v0.27.0/concepts/provisioners/#specconsolidation
         ...provisionerSpecs?.consolidation && {
           consolidation: {
             enabled: provisionerSpecs!.consolidation,
           },
         },
         ...(provisionerSpecs?.ttlSecondsAfterEmpty && { ttlSecondsAfterEmpty: provisionerSpecs!.ttlSecondsAfterEmpty!.toSeconds() }),
         ...(provisionerSpecs?.ttlSecondsUntilExpired && { ttlSecondsUntilExpired: provisionerSpecs!.ttlSecondsUntilExpired!.toSeconds() }),
-        // see: https://karpenter.sh/v0.26.1/concepts/provisioners/#specrequirements
+        // see: https://karpenter.sh/v0.27.0/concepts/provisioners/#specrequirements
         requirements: [
           ...requirements,
         ],
@@ -594,7 +594,7 @@ export class Karpenter extends Construct {
         },
         ...(provisionerSpecs?.taints && { taints: provisionerSpecs!.taints! }),
         ...(provisionerSpecs?.startupTaints && { startupTaints: provisionerSpecs!.startupTaints! }),
-        // see: https://karpenter.sh/v0.26.1/concepts/provisioners/#specproviderref
+        // see: https://karpenter.sh/v0.27.0/concepts/provisioners/#specproviderref
         providerRef: {
           name: awsNodeTemplateId,
         },