Prior to this patch, the `pkg/fargate/coredns` package had some bits of
code that accessed/mutated pod annotations assuming that they'll always
be instantiated correctly.

This patch adds utility functions to safely mutate and access fargate
pod annotations.

Signed-off-by: Amine Hilaly <[email protected]>

Safely access/mutate fargate coredns pod annotations

With `[email protected]`, API server requests containing URLs presigned by `sts.PresignClient` fail with an `Unauthorized` error.

`[email protected]` adds an extra header `amz-sdk-request` to the generated request, but this header is not allow-listed by `aws-iam-authenticator` server running on the control plane.
This is likely due to [this change](aws/aws-sdk-go-v2#2438) which reorders the middleware operations to execute `RetryMetricsHeader` before `Signing`.

This changelist removes the `RetryMetricsHeader` middleware from the stack when constructing `sts.PresignClient`.

Fix generating presigned URL for K8s authentication

…r-0.168.0

Add release notes for 0.168.0

Prepare for next development iteration

For some clusters, EKS can return the list of public endpoint CIDRs out of
order, and won't allow updates where the incoming and current sets have set
equality (i.e. regardless of order of CIDR entries). This change restores the
set equality check that was removed in commit
72605fb and adds an additional test case to
cover this case.

…drs-unordered

Handle unordered public endpoint CIDRs from EKS in endpoint updates

Fix outdated links

The IAM condition key StringLike was used incorrectly in the policy and it doesn't work with wildcard (*) in the key itself. Wildcard is only supported in the value of the key. This fixes issue in cases where a volume dynamically provisioned via the older in-tree CSI plugin is being deleted by the new EBS CSI driver, because such volumes don't have the tags used in the policy.

The changes made are inspired from the AWS managed AmazonEBSCSIDriverPolicy.

Update well-known policy for ebsCSIController

…ot-be-evicted

Fix coredns pdb preventing cluster deletion

Add support for EKS 1.29

…otes

Add release notes for 0.169.0

Prepare for next development iteration

Update arm-support.md

…-config-for-v0.33

Expand Karpenter settings.aws block to settings for v0.33.0 and greater

Update stale.yml

…ng-only

Skip draining managed nodegroups when deleting cluster

…pgrade

docs(fargate): eksctl update command is deprecated, use upgrade instead

…after

Update release drafter template

…-type

Add support for Access Entry type

Add release notes for 0.170.0

Prepare for next development iteration

Announce eksctl Support Status Update on eksctl.io

Ubuntu switched to 22.04 (Jammy) based images for EKS >= 1.29 . Add
support for that here.

Add support for Ubuntu 22.04 based EKS images

…otes

Add release notes for 0.171.0

Prepare for next development iteration

Check for empty region before invoking API in AWS SDK

When executing `eksctl get addons` an available update is not shown
if the only change to the version string is the `eksbuild` number, e.g.
`v1.0.0-eksbuild.2` is not shown as an update of `v1.0.0-eksbuild.1`.

The `findNewerVersions` func in `pkg/actions/get.go` had code to
explicitly ignore anything after the patch number. So `v1.1.0-eksbuild.1`
and `v1.1.0-eksbuild.4` were both converted to `1.1.0` and considered
equal. This fix removes the code that explicitly ignores the
`-eksbuild.x` portion of the version and allows the `semver` package
to compare the full version information.

Tests have also been updated to better match the version strings used
by AWS addons.

Fix checks for updated addon versions

Extract common workflow steps to set up build environment

Signed-off-by: Amine Hilaly <[email protected]>

Update go version to 1.21 in actions

Bump dependencies

Update build image manifest, tag file and workflows

Update build image go version to 1.21

Revert removing RetryMetricsHeader in presigned requests

…otes

Add release notes for 0.172.0

Update workflows

Remove slackToken

Prepare for next development iteration

Bump github.com/go-git/go-git/v5 from 5.4.2 to 5.11.0

Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.4.2 to 5.11.0.
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.4.2...v5.11.0)

---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

Bump helm.sh/helm/v3 from 3.14.0 to 3.14.2

Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.14.0 to 3.14.2.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.14.0...v3.14.2)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

Resolve security alerts from Dependabots

Make EKS 1.29 default

…-draft

Automate PR with release notes draft

…o#7603)

* remove inline elb and cloud watch policy eksctl-io#7139

* fixed unit tests for removing extra inline policies

docs: ubuntu 20.04 supported in EKS <= 1.29

This adds a note that ubuntu focal (20.04) is supported up to EKS 1.29

Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.3.3 to 1.3.7.
- [Release notes](https://github.com/cloudflare/circl/releases)
- [Commits](cloudflare/circl@v1.3.3...v1.3.7)

---
updated-dependencies:
- dependency-name: github.com/cloudflare/circl
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…et-ae

Add profile flag support for get and delete access entry

…duration

Increase STS session duration to fix caching credentials with assumed role MFA session

Remove dependabot from contributors