kops: 1.23.1 -> 1.23.2 (#174165)

      <listitem>

        <para>

          <link xlink:href="https://kops.sigs.k8s.io"><literal>kops</literal></link>

          defaults to 1.22.4, which will enable

          defaults to 1.23.2, which will enable

          <link xlink:href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html">Instance

          Metadata Service Version 2</link> and require tokens on new

          clusters with Kubernetes 1.22. This will increase security by

          default, but may break some types of workloads. See the

          <link xlink:href="https://kops.sigs.k8s.io/releases/1.22-notes/">release

          notes</link> for details.

          clusters with Kubernetes >= 1.22. This will increase

          security by default, but may break some types of workloads.

          The default behaviour for

          <literal>spec.kubeDNS.nodeLocalDNS.forwardToKubeDNS</literal>

          has changed from <literal>true</literal> to

          <literal>false</literal>. Cilium now has

          <literal>disable-cnp-status-updates: true</literal> by

          default. Set this to false if you rely on the

          CiliumNetworkPolicy status fields. Support for Kubernetes

          1.17, the Lyft CNI, Weave CNI on Kubernetes >= 1.23, CentOS

          7 and 8, Debian 9, RHEL 7, and Ubuntu 16.05 (Xenial) has been

          removed. See the

          <link xlink:href="https://kops.sigs.k8s.io/releases/1.22-notes/">1.22

          release notes</link> and

          <link xlink:href="https://kops.sigs.k8s.io/releases/1.23-notes/">1.23

          release notes</link> for more details, including other

          significant changes.

        </para>

      </listitem>

      <listitem>

- The new [`postgresqlTestHook`](https://nixos.org/manual/nixpkgs/stable/#sec-postgresqlTestHook) runs a PostgreSQL server for the duration of package checks.

- [`kops`](https://kops.sigs.k8s.io) defaults to 1.22.4, which will enable [Instance Metadata Service Version 2](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html) and require tokens on new clusters with Kubernetes 1.22. This will increase security by default, but may break some types of workloads. See the [release notes](https://kops.sigs.k8s.io/releases/1.22-notes/) for details.

- [`kops`](https://kops.sigs.k8s.io) defaults to 1.23.2, which will enable [Instance Metadata Service Version 2](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html) and require tokens on new clusters with Kubernetes >= 1.22. This will increase security by default, but may break some types of workloads. The default behaviour for `spec.kubeDNS.nodeLocalDNS.forwardToKubeDNS` has changed from `true` to `false`. Cilium now has `disable-cnp-status-updates: true` by default. Set this to false if you rely on the CiliumNetworkPolicy status fields. Support for Kubernetes 1.17, the Lyft CNI, Weave CNI on Kubernetes >= 1.23, CentOS 7 and 8, Debian 9, RHEL 7, and Ubuntu 16.05 (Xenial) has been removed. See the [1.22 release notes](https://kops.sigs.k8s.io/releases/1.22-notes/) and [1.23 release notes](https://kops.sigs.k8s.io/releases/1.23-notes/) for more details, including other significant changes.

- Module authors can use `mkRenamedOptionModuleWith` to automate the deprecation cycle without annoying out-of-tree module authors and their users.

  };

  kops_1_23 = mkKops rec {

    version = "1.23.1";

    sha256 = "sha256-SiseHs5cMj8DR1f6z9PTbtF/h3Bn9riiLWW5KMYwVUg=";

    version = "1.23.2";

    sha256 = "sha256-9GANjGRS9QaJw+CEeMv/f+rEu37QV2YxMvSRSH6+3PM=";

    rev = "v${version}";

  };

}