AWS eks documentation change
Summary
Updated references from 'AWS Add-ons' to 'AWS add-ons' (lowercase) in multiple sections for consistency
Security assessment
The changes are purely cosmetic/textual adjustments to capitalization of 'Add-ons' in documentation links. No security-related content was added or modified. The updates maintain existing security guidance about IAM roles and OIDC providers without changing their meaning.
Diff
diff --git a/eks/latest/userguide/updating-an-add-on.md b/eks/latest/userguide/updating-an-add-on.md index 481db11bb..26689cd6c 100644 --- a//eks/latest/userguide/updating-an-add-on.md +++ b//eks/latest/userguide/updating-an-add-on.md @@ -13 +13 @@ To contribute to this user guide, choose the **Edit this page on GitHub** link t -Amazon EKS doesn’t automatically update an add-on when new versions are released or after you update your cluster to a new Kubernetes minor version. To update an add-on for an existing cluster, you must initiate the update. After you initiate the update, Amazon EKS updates the add-on for you. Before updating an add-on, review the current documentation for the add-on. For a list of available add-ons, see [AWS Add-ons](./workloads-add-ons-available-eks.html). If the add-on requires an IAM role, see the details for the specific add-on in [Available Amazon EKS add-ons from AWS](./workloads-add-ons-available-eks.html) for details about creating the role. +Amazon EKS doesn’t automatically update an add-on when new versions are released or after you update your cluster to a new Kubernetes minor version. To update an add-on for an existing cluster, you must initiate the update. After you initiate the update, Amazon EKS updates the add-on for you. Before updating an add-on, review the current documentation for the add-on. For a list of available add-ons, see [AWS add-ons](./workloads-add-ons-available-eks.html). If the add-on requires an IAM role, see the details for the specific add-on in [Available Amazon EKS add-ons from AWS](./workloads-add-ons-available-eks.html) for details about creating the role. @@ -55 +55 @@ Your output might look different, depending on which add-ons and versions that y - * If you want to update to a version earlier than the latest available version, then replace `latest` with the version number returned in the output of the previous step that you want to use. Some add-ons have recommended versions. For more information, see the documentation for the add-on that you’re updating. For a list of add-ons, see [AWS Add-ons](./workloads-add-ons-available-eks.html).***** If the add-on uses a Kubernetes service account and IAM role, replace `111122223333` with your account ID and `role-name` with the name of an existing IAM role that you’ve created. For instructions on creating the role, see the documentation for the add-on that you’re creating. For a list of add-ons, see [AWS Add-ons](./workloads-add-ons-available-eks.html). Specifying a service account role requires that you have an IAM OpenID Connect (OIDC) provider for your cluster. To determine whether you have one for your cluster, or to create one, see [Create an IAM OIDC provider for your cluster](./enable-iam-roles-for-service-accounts.html). + * If you want to update to a version earlier than the latest available version, then replace `latest` with the version number returned in the output of the previous step that you want to use. Some add-ons have recommended versions. For more information, see the documentation for the add-on that you’re updating. For a list of add-ons, see [AWS add-ons](./workloads-add-ons-available-eks.html).***** If the add-on uses a Kubernetes service account and IAM role, replace `111122223333` with your account ID and `role-name` with the name of an existing IAM role that you’ve created. For instructions on creating the role, see the documentation for the add-on that you’re creating. For a list of add-ons, see [AWS add-ons](./workloads-add-ons-available-eks.html). Specifying a service account role requires that you have an IAM OpenID Connect (OIDC) provider for your cluster. To determine whether you have one for your cluster, or to create one, see [Create an IAM OIDC provider for your cluster](./enable-iam-roles-for-service-accounts.html). @@ -102 +102 @@ For more information about updating add-ons, see [Updating addons](https://eksct - 1. Choose the **Version** that you’d like to use. The add-on might have a recommended version. For more information, see the documentation for the add-on that you’re updating. For a list of add-ons, see [AWS Add-ons](./workloads-add-ons-available-eks.html). + 1. Choose the **Version** that you’d like to use. The add-on might have a recommended version. For more information, see the documentation for the add-on that you’re updating. For a list of add-ons, see [AWS add-ons](./workloads-add-ons-available-eks.html). @@ -118 +118 @@ Retaining the default role name enables EKS to pre-select the role for add-ons i - 2. For add-ons that do not have **Requires subscription** under **Status** and where you want to configure roles using IRSA, see the documentation for the add-on that you’re creating to create an IAM policy and attach it to a role. For a list of add-ons, see [AWS Add-ons](./workloads-add-ons-available-eks.html). Selecting an IAM role requires that you have an IAM OpenID Connect (OIDC) provider for your cluster. To determine whether you have one for your cluster, or to create one, see [Create an IAM OIDC provider for your cluster](./enable-iam-roles-for-service-accounts.html). + 2. For add-ons that do not have **Requires subscription** under **Status** and where you want to configure roles using IRSA, see the documentation for the add-on that you’re creating to create an IAM policy and attach it to a role. For a list of add-ons, see [AWS add-ons](./workloads-add-ons-available-eks.html). Selecting an IAM role requires that you have an IAM OpenID Connect (OIDC) provider for your cluster. To determine whether you have one for your cluster, or to create one, see [Create an IAM OIDC provider for your cluster](./enable-iam-roles-for-service-accounts.html). @@ -122 +122 @@ Retaining the default role name enables EKS to pre-select the role for add-ons i - 4. In **Configuration values** , enter any add-on specific configuration information. For more information, see the documentation for the add-on that you’re updating. For a list of add-ons, see [AWS Add-ons](./workloads-add-ons-available-eks.html)… For **Conflict resolution method** , select one of the options. If you have set custom values for add-on settings, we recommend the **Preserve** option. If you don’t choose this option, Amazon EKS overwrites your values with its default values. If you use this option, then we recommend that you test any field and value changes on a non-production cluster before updating the add-on on your production cluster. If you change this value to overwrite, all settings are changed to Amazon EKS default values. If you’ve set custom values for any settings, they might be overwritten with Amazon EKS default values. If you change this value to none, Amazon EKS doesn’t change the value of any settings, but the update might fail. If the update fails, you receive an error message to help you resolve the conflict. + 4. In **Configuration values** , enter any add-on specific configuration information. For more information, see the documentation for the add-on that you’re updating. For a list of add-ons, see [AWS add-ons](./workloads-add-ons-available-eks.html)… For **Conflict resolution method** , select one of the options. If you have set custom values for add-on settings, we recommend the **Preserve** option. If you don’t choose this option, Amazon EKS overwrites your values with its default values. If you use this option, then we recommend that you test any field and value changes on a non-production cluster before updating the add-on on your production cluster. If you change this value to overwrite, all settings are changed to Amazon EKS default values. If you’ve set custom values for any settings, they might be overwritten with Amazon EKS default values. If you change this value to none, Amazon EKS doesn’t change the value of any settings, but the update might fail. If the update fails, you receive an error message to help you resolve the conflict. @@ -181 +181 @@ The version with `True` in the `Defaultversion` column is the version that the a - * Replace `version-number` with the version returned in the output of the previous step that you want to update to. Some add-ons have recommended versions. For more information, see the documentation for the add-on that you’re updating. For a list of add-ons, see [AWS Add-ons](./workloads-add-ons-available-eks.html).***** If the add-on uses a Kubernetes service account and IAM role, replace `111122223333` with your account ID and `role-name` with the name of an existing IAM role that you’ve created. For instructions on creating the role, see the documentation for the add-on that you’re creating. For a list of add-ons, see [AWS Add-ons](./workloads-add-ons-available-eks.html). Specifying a service account role requires that you have an IAM OpenID Connect (OIDC) provider for your cluster. To determine whether you have one for your cluster, or to create one, see [Create an IAM OIDC provider for your cluster](./enable-iam-roles-for-service-accounts.html). + * Replace `version-number` with the version returned in the output of the previous step that you want to update to. Some add-ons have recommended versions. For more information, see the documentation for the add-on that you’re updating. For a list of add-ons, see [AWS add-ons](./workloads-add-ons-available-eks.html).***** If the add-on uses a Kubernetes service account and IAM role, replace `111122223333` with your account ID and `role-name` with the name of an existing IAM role that you’ve created. For instructions on creating the role, see the documentation for the add-on that you’re creating. For a list of add-ons, see [AWS add-ons](./workloads-add-ons-available-eks.html). Specifying a service account role requires that you have an IAM OpenID Connect (OIDC) provider for your cluster. To determine whether you have one for your cluster, or to create one, see [Create an IAM OIDC provider for your cluster](./enable-iam-roles-for-service-accounts.html).