Skip to content

Releases: aws/amazon-vpc-cni-k8s

v1.21.0

15 Dec 22:13
@jaydeokar jaydeokar
v1.21.0
b58ebdb
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
v1.21.0 Latest
Latest

What's New

  • This release adds support for Cluster Network Policy in AWS Network Policy Agent which allows cluster administrators to define network policies with Layer 3 and 4 network rules at the cluster scope

What's Changed

Full Changelog: v1.20.5...v1.21.0

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.21.0/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.21.0/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.21.0/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/refs/heads/v1.21.0/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:
Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.21.0/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3

amazon-k8s-cni-init:v1.21.0
amazon-k8s-cni:v1.21.0
amazon/aws-network-policy-agent:v1.3.0

Contributors

yash97, jaydeokar, and dependabot
Assets 2
Loading

v1.20.5

09 Dec 17:48
@yash97 yash97
v1.20.5
70c705a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
v1.20.5

What's Changed

  • enabling pod egress traffic test for under mac address policy variation by @yash97 in #3459
  • Bump the aws-dependencies group with 9 updates by @dependabot[bot] in #3465
  • chore: update VPC IP resource limits by @github-actions[bot] in #3476
  • bumping kops tag to v1.34 by @Supreeth095 in #3477
  • feat: add retry logic for netlink dump operations by @dcoppa in #3440
  • chore: update VPC IP resource limits by @github-actions[bot] in #3481
  • Updating network policy agent version by @jaydeokar in #3491
  • Bump actions/dependency-review-action from 4.3.3 to 4.8.1 by @dependabot[bot] in #3485
  • Bump actions/setup-go from 5.5.0 to 6.0.0 by @dependabot[bot] in #3486
  • Gracefully handle v4 (unmanaged) ENIs on IPv6 node by @jupdec in #3489
  • Go bump by @Supreeth095 in #3500
  • chore: update VPC IP resource limits by @github-actions[bot] in #3502
  • nit: Update README to separate ENI Tags from Subnet Tags by @cdirubbio in #3508
  • Merge master to Release 1.20 for v1.20.5 release by @Supreeth095 in #3504
  • Sync Release 1.20 with Master by @jaydeokar in #3510
  • Bumping up containerd version for CVE fix by @jaydeokar in #3512
  • chore: update VPC IP resource limits by @github-actions[bot] in #3514
  • Adding change log and release notes for v1.20.5 by @nakshah87 in #3511
  • Merge master into release-1.20 branch by @yash97 in #3517

New Contributors

Full Changelog: v1.20.4...v1.20.5

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.5/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.5/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.5/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/refs/heads/release-1.20/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:
Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.20.5/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3

amazon-k8s-cni-init:v1.20.5
amazon-k8s-cni:v1.20.5
amazon/aws-network-policy-agent:v1.2.7

Contributors

dcoppa, yash97, and 6 other contributors
Loading

v1.20.4

15 Oct 21:03
@jaydeokar jaydeokar
v1.20.4
db19d13
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
v1.20.4

What's Changed

New Contributors

Full Changelog: v1.20.3...v1.20.4

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.4/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.4/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.4/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.4/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:
Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.20.4/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3

amazon-k8s-cni-init:v1.20.4
amazon-k8s-cni:v1.20.4
amazon/aws-network-policy-agent:v1.2.7

Contributors

dcoppa, jaydeokar, and 2 other contributors
Loading

v1.20.3

29 Sep 17:07
@jaydeokar jaydeokar
v1.20.3
01c4ad5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
v1.20.3

🚨 🚨 🚨 v1.20.2 and v1.20.3 removes the cni plugins which are not required for regular amazon-vpc-cni operations. However this might break Multus, if you are using the plugins which is not bundled with the container 🚨 🚨 🚨

What's Changed

  • chore: update VPC IP resource limits by @github-actions[bot] in #3441
  • chore: update VPC IP resource limits by @github-actions[bot] in #3453
  • Optionally setting up Route table for non zero Network Cards if AMI is already configuring at bootup by @jaydeokar in #3452
  • feat(helm_chart/aws-vpc-cni): add overrideRepository images option by @QuentinBtd in #3435
  • fix: initialize controller-runtime logger by @dcoppa in #3443
  • Chart updates and release notes by @jaydeokar in #3455

New Contributors

Full Changelog: v1.20.2...v1.20.3

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.3/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.3/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.3/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.3/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:
Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.20.3/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3

amazon-k8s-cni-init:v1.20.3
amazon-k8s-cni:v1.20.3
amazon/aws-network-policy-agent:v1.2.6

Contributors

dcoppa, QuentinBtd, and jaydeokar
Loading

v1.20.2

19 Sep 16:15
@Pavani-Panakanti Pavani-Panakanti
v1.20.2
dc68ced
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
v1.20.2

🚨 🚨 🚨 v1.20.2 and v1.20.3 removes the cni plugins which are not required for regular amazon-vpc-cni operations. However this might break Multus, if you are using the plugins which is not bundled with the container 🚨 🚨 🚨

What's Changed

New Contributors

  • @github-actions[bot] made their first contribution in #3419

Full Changelog: v1.20.1...v1.20.2

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.2/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.2/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.2/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.2/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:
Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.20.2/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3

amazon-k8s-cni-init:v1.20.2
amazon-k8s-cni:v1.20.2
amazon/aws-network-policy-agent:v1.2.6

Contributors

yash97, jaydeokar, and 4 other contributors
Loading

v1.20.1

12 Aug 22:17
@yash97 yash97
v1.20.1
d885b3b

Choose a tag to compare

View all tags
v1.20.1

What's Changed

Full Changelog: v1.20.0...v1.20.1

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.1/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.1/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.1/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.1/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.20.0/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3

amazon-k8s-cni-init:v1.20.1
amazon-k8s-cni:v1.20.1
amazon/aws-network-policy-agent:v1.2.4

Contributors

viveksb007, yash97, and 2 other contributors
Loading

v1.20.0

15 Jul 20:14
@jaydeokar jaydeokar
v1.20.0
938d094

Choose a tag to compare

View all tags
v1.20.0

Release Notes

This release introduces multi-NIC support in Amazon VPC-CNI plugin where the plugin can manage all the eligible network cards on the instance and create multi-homed pods based on the annotation.
This feature is currently not supported in us-isof-south-1 and us-isof-east-1 regions

What's Changed

  • Feature - Adding support in CNI for managing multiple network interface card on the instance in #3347,#3349
  • Dependency - Bump helm.sh/helm/v3 from 3.18.1 to 3.18.4 in #3346
  • Dependency - Bump aws-dependencies in #3337
  • Improvement - Build CNI plugins from source in #3343
  • Fix - Fix error when Network policy agent GRPC call fails in #3320
  • Fix - Fix race condition when force deleting pod using a security group for pod feature in #3304
  • Improvement - Add latency metrics for ipamd init in #3301

Full Changelog: v1.19.6...v1.20.0

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.0/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.0/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.0/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.20.0/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.20.0/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3

amazon-k8s-cni-init:v1.20.0
amazon-k8s-cni:v1.20.0
amazon/aws-network-policy-agent:v1.2.3
Loading

v1.19.6

19 Jun 18:14
@yash97 yash97
v1.19.6
fe8968d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
v1.19.6

What's Changed

  • Dependency - Bump k8s.io/apimachinery from 0.32.3 to 0.33.0 by @dependabot in #3279
  • Dependency - Bump golang.org/x/sys from 0.31.0 to 0.32.0 in /test/agent in #3280
  • Fix - fixed integration test script by @viveksb007 in #3282
  • Fix - Adding CVE fixes and remove pinned dependencies by @jaydeokar in #3283
  • Dependency - Updating netlink to v1.3.1 by @jaydeokar in #3286
  • Feature - adding ENABLE_IMDS_ONLY_MODE configuration so ipamd will not interact with EC2 for node init and reconcile by @bhaoz in #3287

Full Changelog: v1.19.5...v1.19.6

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.6/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.6/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.6/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.6/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.19.6/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3

amazon-k8s-cni-init:v1.19.6
amazon-k8s-cni:v1.19.6
amazon/aws-network-policy-agent:v1.2.2

Contributors

viveksb007, jaydeokar, and 2 other contributors
Loading

v1.19.5

06 May 01:23
@jaydeokar jaydeokar
v1.19.5
2c223fb
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
v1.19.5

What's Changed

  • Fix - fixed node init failure when using custom networking and SGPP @oliviassss in #3277
  • Doc and charts update

Full Changelog: v1.19.4...v1.19.5

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.5/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.5/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.5/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.5/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.19.5/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3

amazon-k8s-cni-init:v1.19.5
amazon-k8s-cni:v1.19.5
amazon/aws-network-policy-agent:v1.2.1

Contributors

oliviassss
Loading

v1.19.4

21 Apr 21:30
@oliviassss oliviassss
v1.19.4
5d2e98c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
v1.19.4

🚨 🚨 🚨 v1.19.4 has issue with custom networking, for users with custom networking/security group per pod please stay on v1.19.3 until we release the fix with v1.19.5.🚨 🚨 🚨

Fix is now in v1.19.5 release

Release Notes

From 1.19.4, If you remove the Network Policy Agent container from the aws-node DaemonSet, you must also ensure that NETWORK_POLICY_ENFORCING_MODE environment variable is not set. Setting this value while the NP agent is absent can lead to failures during pod creation. Check https://github.com/aws/amazon-vpc-cni-k8s/tree/master

What's Changed

  • Improvement - Update AWS VPC CNI to SDK V2 Update - master branch by @orsenthil in #3070
  • Fix - Handle EKS Service for the Beta Endpoint by @orsenthil in #3143
  • Manifest - Adding multus v4.1.4 manifest by @jaydeokar in #3154
  • Tests - KOps Integration Test Follow Up by @dshehbaj in #3149
  • Fix - fix(test): add volume mount for docker-func-test target by @omerap12 in #3160
  • Fix - cni-metrics-helper metrics: do type assertion before type casting by @dshehbaj in #3152
  • Improvement - Add CNINode to cache filter by @dims in #3164
  • Fix - remove null creationTimestamp from CRD metadata by @omerap12 in #3163
  • Fix - issue with primary ENI ip lookup when an ENI has both IPv4 and IPv6 Address Assigned by @orsenthil in #3156
  • Improvement - Use awshttp client instead of smithy httpclient by @orsenthil in #3193
  • Fix - retryOnConflict shouldnt' retry on NotFound by @haouc in #3192
  • Improvement - Update awsutils.go by @git4example in #3191
  • Improvement - Add grpc call to fetch networkpolicymode from NP by @Pavani-Panakanti in #3202
  • Improvement - Changes to attach probes at pod start by @haouc in #3206
  • Improvement - adding eni owner tag if cluster name is present by @yash97 #3228
  • Improvement - only cache CNINode when SGP is in use by @oliviassss #3242
  • Improvement - Remove dependency on apiserver for IPAMD startup by @oliviassss #3243
  • Fix - Skip configuring NP related if network_policy_enforcing_mode is not set by @Pavani-Panakanti #3254
  • Doc and charts update

Full Changelog: v1.19.3...v1.19.4

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.4/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.4/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.4/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.4/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.19.4/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3

amazon-k8s-cni-init:v1.19.4
amazon-k8s-cni:v1.19.4
amazon/aws-network-policy-agent:v1.2.1

Contributors

dims, orsenthil, and 8 other contributors
Loading