gha: Retrieve eks supported version via aws cli

sayboras · aanm · commit 3ed77e7fb554 · 2025-01-23T14:23:51.000Z
The latest eksctl version didn't provide supported as part of version subcommand anymore. We can just use aws command directly as an alternative approach. ``` $ eksctl version -o json | jq -r '.EKSServerSupportedVersions[]' jq: error (at <stdin>:1): Cannot iterate over null (null) ``` Relates: eksctl-io/eksctl#8144 Signed-off-by: Tam Mach <tam.mach@cilium.io>
diff --git a/.github/workflows/conformance-aws-cni.yaml b/.github/workflows/conformance-aws-cni.yaml
@@ -121,23 +121,26 @@ jobs:
           echo "Generated matrix:"
           cat /tmp/matrix.json
 
-      # We use latest eksctl just to fetch recent supported versions.
-      # We don't use that eksctl to create cluster.
-      # Eksctl has hardcoded list of supported versions in the binary.
-      # This is hack until https://github.com/aws/containers-roadmap/issues/982 is resolved.
-      - name: Install eksctl CLI
+      - name: Set up AWS CLI credentials
+        uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
+        with:
+          role-to-assume: ${{ secrets.AWS_PR_ASSUME_ROLE }}
+          aws-region: us-west-1
+
+      - name: Run aws configure
         run: |
-          curl -LO "https://github.com/eksctl-io/eksctl/releases/latest/download/eksctl_$(uname -s)_amd64.tar.gz"
-          sudo tar xzvfC eksctl_$(uname -s)_amd64.tar.gz /usr/bin
-          rm eksctl_$(uname -s)_amd64.tar.gz
+          aws configure set aws_access_key_id ${{ env.AWS_ACCESS_KEY_ID }}
+          aws configure set aws_secret_access_key ${{ env.AWS_SECRET_ACCESS_KEY }}
+          aws configure set aws_session_token ${{ env.AWS_SESSION_TOKEN }}
+          aws configure set default.region ${{ env.AWS_REGION }}
 
       - name: Filter Matrix
         id: set-matrix
         run: |
           cp /tmp/matrix.json /tmp/result.json
           jq -c '.include[]' /tmp/matrix.json | while read i; do
             VERSION=$(echo $i | jq -r '.version')
-            eksctl version -o json | jq -r '.EKSServerSupportedVersions[]' > /tmp/output
+            aws eks describe-cluster-versions | jq -r '.clusterVersions[].clusterVersion' > /tmp/output
             if grep -q -F $VERSION /tmp/output; then
               echo "Version $VERSION is supported"
             else
diff --git a/.github/workflows/conformance-eks.yaml b/.github/workflows/conformance-eks.yaml
@@ -121,23 +121,26 @@ jobs:
           echo "Generated matrix:"
           cat /tmp/matrix.json
 
-      # We use latest eksctl just to fetch recent supported versions.
-      # We don't use that eksctl to create cluster.
-      # Eksctl has hardcoded list of supported versions in the binary.
-      # This is hack until https://github.com/aws/containers-roadmap/issues/982 is resolved.
-      - name: Install eksctl CLI
+      - name: Set up AWS CLI credentials
+        uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
+        with:
+          role-to-assume: ${{ secrets.AWS_PR_ASSUME_ROLE }}
+          aws-region: us-west-1
+
+      - name: Run aws configure
         run: |
-          curl -LO "https://github.com/eksctl-io/eksctl/releases/latest/download/eksctl_$(uname -s)_amd64.tar.gz"
-          sudo tar xzvfC eksctl_$(uname -s)_amd64.tar.gz /usr/bin
-          rm eksctl_$(uname -s)_amd64.tar.gz
+          aws configure set aws_access_key_id ${{ env.AWS_ACCESS_KEY_ID }}
+          aws configure set aws_secret_access_key ${{ env.AWS_SECRET_ACCESS_KEY }}
+          aws configure set aws_session_token ${{ env.AWS_SESSION_TOKEN }}
+          aws configure set default.region ${{ env.AWS_REGION }}
 
       - name: Filter Matrix
         id: set-matrix
         run: |
           cp /tmp/matrix.json /tmp/result.json
           jq -c '.include[]' /tmp/matrix.json | while read i; do
             VERSION=$(echo $i | jq -r '.version')
-            eksctl version -o json | jq -r '.EKSServerSupportedVersions[]' > /tmp/output
+            aws eks describe-cluster-versions | jq -r '.clusterVersions[].clusterVersion' > /tmp/output
             if grep -q -F $VERSION /tmp/output; then
               echo "Version $VERSION is supported"
             else
