v1.12.5

v1.12.5

Changes since v1.12.2

• Bug - Handle private IP exceeded error (@jayanthvn )
• Documentation - doc: document AWS_VPC_K8S_CNI_LOGLEVEL for cni-metric-helper helm chart (@csantanapr )
• Documentation - Added cni-metrics-helper docs (@0xquark )
• Improvement - Update golang builder image (@jdn5126 )
• Improvement - Update golang builder image (@jdn5126 )
• Improvement - run make generate-limits (@jdn5126 )
• Improvement - Add M7g, R7g instance (@Issacwww )
• Improvement - Update client-go and k8s packages (@jaydeokar )
• Improvement - Refactor cni-metrics-helper chart for eks charts release (@jdn5126 )
• Improvement - fix: Upgrade to golang.org/x/[email protected] (@ellistarn )

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.5/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.5/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.5/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.5/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.12.5/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2                                                   
amazon-k8s-cni-init:v1.12.5
amazon-k8s-cni:v1.12.5

To manually apply this release for CNI Metrics Helper:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.5/config/master/cni-metrics-helper.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.5/config/master/cni-metrics-helper-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.5/config/master/cni-metrics-helper-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.5/config/master/cni-metrics-helper-cn.yaml

To apply this release using helm for CNI Metrics Helper:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.12.5/charts/cni-metrics-helper/README.md#installing-the-chart

Verify the update for CNI Metrics Helper:

$ kubectl describe deployment cni-metrics-helper -n kube-system | grep Image | cut -d "/" -f 2                                                   
cni-metrics-helper:v1.12.5

v1.12.2

v1.12.2

Changes since v1.12.1

• Bug - Cherry-pick prometheus/client_golang module update to address CVE (@jdn5126)
• Improvement - Minimal base image for cni-metrics-helper minimal base image (@jdn5126 )

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.2/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.2/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.2/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.2/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.12.2/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2                                                   
amazon-k8s-cni-init:v1.12.2
amazon-k8s-cni:v1.12.2

To manually apply this release for CNI Metrics Helper:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.2/config/master/cni-metrics-helper.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.2/config/master/cni-metrics-helper-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.2/config/master/cni-metrics-helper-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.2/config/master/cni-metrics-helper-cn.yaml

Verify the update for CNI Metrics Helper:

$ kubectl describe deployment cni-metrics-helper -n kube-system | grep Image | cut -d "/" -f 2                                                   
cni-metrics-helper:v1.12.2

v1.10.4

v1.10.4

This release updated the dependencies of CNI(CNI binaries/Golang)

Changes since v1.10.3:

• Improvement - Update CNI dependency versions (@orsenthil)

To apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.10.4/config/master/aws-k8s-cni.yaml

v1.10.3

This release addresses the IP leak Issue caused by empty NetNS in certain scenarios along with few other important changes

• Upgrade AWS SDK GO (Thanks @jayanthvn ) #1944
• Fix dependabot high sev issue caused by GoGo protobuf (Thanks @jayanthvn ) #1942
• Fixed empty netns bug (Thanks @cgchinmay ) #1941
• C7g instances support (Thanks @jayanthvn ) #1940
• Enable Prefix Delegation on Bare metal instances (Thanks @achevuru ) #1937

To apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.10.3/config/master/aws-k8s-cni.yaml

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2                                                   
amazon-k8s-cni-init:v1.10.3
amazon-k8s-cni:v1.10.3

v1.12.1

v1.12.1

Changes since v1.12.0:

• Bug - Cleanup pod networking resources when IPAMD is unreachable to prevent rule leaking. (@jdn5126 )
• Bug - Skip add-on installation when an add-on information is not available (@sushrk )
• Bug - Add missing rules when NodePort support is disabled(@antoninbas )
• Bug - Fix logging in publisher package (@jdn5126 )
• Bug - Fix Crypto package vulnerability (@jaydeokar )
• Bug - Fix Crypto package vulnerability (@jaydeokar )
• Cleanup - Merging makefile and go.mod from test directory to root directory (@jerryhe1999 )
• Documentation - Update troubleshooting docs for node operating system (@jdn5126 )
• Feature - Reporting EC2 API calls metrics through CNI metrics helper (@jaydeokar )
• Feature - Added resources block to cni-metrics-helper helm chart (@jcogilvie )
• Feature - CLUSTER_ENDPOINT can now be specified to allow the VPC CNI to initialize before kube-proxy has finished setting up cluster IP routes (@bwagner5)
• Improvement - Move VPC CNI and VPC CNI init images to use EKS minimal base image. (@jdn5126 )
• Improvement - Updating helm chart as per helm v3 standard (@jaydeokar )
• Improvement - Update golang to 1.19.2 (@jayanthvn )
• Testing - Fixes to automation runs (@jdn5126 )
• Testing - Fix environment variable name in update-cni-image script (@sushrk )

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.1/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.1/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.1/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.1/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.12.1/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2                                                   
amazon-k8s-cni-init:v1.12.1
amazon-k8s-cni:v1.12.1

To manually apply this release for CNI Metrics Helper:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.1/config/master/cni-metrics-helper.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.1/config/master/cni-metrics-helper-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.1/config/master/cni-metrics-helper-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.1/config/master/cni-metrics-helper-cn.yaml

Verify the update for CNI Metrics Helper:

$ kubectl describe deployment cni-metrics-helper -n kube-system | grep Image | cut -d "/" -f 2                                                   
cni-metrics-helper:v1.12.1

v1.12.1-rc3 Release

v1.12.1-rc3

Changes since v1.12.1-rc1:

• Bug - Fix Crypto package vulnerability (@jaydeokar )
• Bug - Fix Crypto package vulnerability (@jaydeokar )

To apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.1-rc3/config/master/aws-k8s-cni.yaml

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2                                                   
amazon-k8s-cni-init:v1.12.1-rc3
amazon-k8s-cni:v1.12.1-rc3

v1.12.1-rc1 Release

v1.12.1-rc1

Changes since v1.12.0:

• Bug - Cleanup pod networking resources when IPAMD is unreachable to prevent rule leaking.
  (@jdn5126 )
• Improvement - Move VPC CNI and VPC CNI init images to use EKS minimal base image.
  (@jdn5126 )
• Improvement - Updating helm chart as per helm v3 standard (@jaydeokar )
• Improvement - Update golang to 1.19.2 (@jayanthvn )
• Testing - Fixes to automation runs (@jdn5126 )
• Feature - Reporting EC2 API calls metrics through CNI metrics helper (@jaydeokar)
• Feature - Added resources block to cni-metrics-helper helm chart (@jcogilvie )
• Feature - CLUSTER_ENDPOINT can now be specified to allow the VPC CNI to initialize before kube-proxy has finished setting up cluster IP routes (@bwagner5 )
• Testing - Fix environment variable name in update-cni-image script @sushrk
• Documentation - Update troubleshooting docs for node operating system(@jdn5126 )
• Cleanup - Merging makefile and go.mod from test directory to root directory (@jerryhe1999 )
• Bug - Skip add-on installation when an add-on information is not available(@sushrk )
• Bug - Add missing rules when NodePort support is disabled(@antoninbas )
• Bug - Fix logging in publisher package (@jdn5126 )

To apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.1-rc1/config/master/aws-k8s-cni.yaml

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2                                                   
amazon-k8s-cni-init:v1.12.1-rc1
amazon-k8s-cni:v1.12.1-rc1

v1.12.0

v1.12.0

This new version removes dependency on CRI socket(e.g. dockershim.sock).

🚨 🚨 🚨 Action Required For Upgrading

1. To upgrade to VPC CNI >=v1.12.0, you must upgrade to VPC CNI >=v1.7.x first. We recommend that you update one minor version at a time.
2. aws-vpc-cni Helm chart v1.2.0 is released with VPC CNI v1.12.0, thus no longer supports the cri.hostPath.path. If you need to install a VPC CNI <v1.12.0 with helm chart, a aws-vpc-cni Helm chart with version <v1.2.0 should be used.

Changes since v1.11.4:

• Improvement - switch to use state file for IP allocation pool management (@M00nF1sh )
• Improvement - explicitly request NET_RAW capabilities in CNI manifests (@JingmingGuo )
• Improvement - Reduce startup latency by removing some unneeded sleeps (@bwagner5 )
• Bug - Remove extra decrement of totalIP count (@jayanthvn )
• New Instance Support - Add trn1 limits (@cartermckinnon )
• Documentation - Update readme with slack channel (@jayanthvn )
• Documentation - Fix ENIConfig keys in values.yaml (@chotiwat )
• Testing - fix metrics-helper test to detach role policy early (@sushrk )
• Testing - Use GetNodes in metrics-helper; explicitly install latest addon (@jdn5126 )
• Testing - refine all github workflows (@M00nF1sh )
• Testing - Resolve flakiness in IPAMD warm target tests (@jdn5126 )
• Testing - VPC CNI Integration Test Fixes (@jdn5126 )
• Testing - Update CNI canary integration test and cleanup for ginkgo v2 (@jdn5126 )

To apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.12.0/config/master/aws-k8s-cni.yaml

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2                                                   
amazon-k8s-cni-init:v1.12.0
amazon-k8s-cni:v1.12.0

v1.11.4

v1.11.4

Changes since v1.11.3:

• Improvement - update aws-node clusterrole permissions (@sushrk)
• Improvement - IPAMD optimizations and makefile changes (@jayanthvn)
• Documentation - Fix minor typo on documentation (@guikcd)
• Documentation - Fixing prefixes per ENI value in example (@mkarakas)
• New release - multus manifest for release v3.9.0-eksbuild.2 (@sushrk)
• Bug - Setting AWS_VPC_K8S_CNI_RANDOMIZESNAT to the default value (@vgunapati)
• New instance support - Updated new instances (@jayanthvn)

To apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.11.4/config/master/aws-k8s-cni.yaml

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2                                                   
amazon-k8s-cni-init:v1.11.4
amazon-k8s-cni:v1.11.4

v1.11.4 Release Candidate 1

v1.11.4-rc1

Changes since v1.11.3:

• Improvement - update aws-node clusterrole permissions (@sushrk)
• Improvement - IPAMD optimizations and makefile changes (@jayanthvn)
• Documentation - Fix minor typo on documentation (@guikcd)
• Documentation - Fixing prefixes per ENI value in example (@mkarakas)
• New release - multus manifest for release v3.9.0-eksbuild.2 (@sushrk)
• Bug - Setting AWS_VPC_K8S_CNI_RANDOMIZESNAT to the default value (@vgunapati)
• New instance support - Updated new instances (@jayanthvn)

To apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.11.4-rc1/config/master/aws-k8s-cni.yaml

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2                                                   
amazon-k8s-cni-init:v1.11.4-rc1
amazon-k8s-cni:v1.11.4-rc1