v1.19.3

What's Changed

• Changes to attach probes at pod start by @Pavani-Panakanti and @haouc in #3206
• Add grpc call to fetch networkpolicymode from NP by @Pavani-Panakanti in #3202
• Update NP agent to v1.2.0 in #3209

This release has important fixes that went in AWS network policy agent update. Please check network policy agent v1.2.0 release notes

Full Changelog: v1.19.2...v1.19.3

v1.19.3-rc1

What's Changed

• Update AWS VPC CNI to SDK V2 Update - master branch by @orsenthil in #3070
• Handle EKS Service for the Beta Endpoint by @orsenthil in #3143
• Adding multus v4.1.4 manifest by @jaydeokar in #3154
• KOps Integration Test Follow Up by @dshehbaj in #3149
• fix(test): add volume mount for docker-func-test target by @omerap12 in #3160
• cni-metrics-helper metrics: do type assertion before type casting by @dshehbaj in #3152
• Add CNINode to cache filter by @dims in #3164
• fix: remove null creationTimestamp from CRD metadata by @omerap12 in #3163
• Fix issue with primary ENI ip lookup when an ENI has both IPv4 and IPv6 Address Assigned by @orsenthil in #3156
• Use awshttp client instead of smithy httpclient by @orsenthil in #3193
• retryOnConflict shouldnt' retry on NotFound by @haouc in #3192
• Update awsutils.go by @git4example in #3191
• Add grpc call to fetch networkpolicymode from NP by @Pavani-Panakanti in #3202
• Changes to attach probes at pod start by @haouc in #3206

Full Changelog: v1.19.2...v1.19.3-rc1

v1.19.2

What's Changed

• Feature: run make generate-limits to update the max pods file by @tzneal in #3141
• Update NP agent to 1.1.6 (#3153) and VPC CNI 1.19.2 (#3159)
• Tests: Fix KOps Integration Test by @dshehbaj in #3140
• Bug-Fix: Revert "utils prometheusmetrics: convert gauges to counters (#3093)" by @orsenthil in #3147
• Docs: Update NP strict mode doc by @Pavani-Panakanti in #3125
• Docs: adding email to share node bundle by @yash97 in #3134
• Dependency: crypto module dependency #3151
• Dependency: Dependabot PRs. #3135
• Dependency: Dependabot PRs. #3137
• Dependency: Bump golang.org/x/sys from 0.27.0 to 0.28.0 in /test/agent by @dependabot in #3138

Full Changelog: v1.19.0...v1.19.2

v1.19.0

What's Changed

• This release includes a bug fix in Network Policy Agent which avoids running into a panic when network policy is disabled and policyendpoint objects still exist
• Manifest update to include unsupported compute type

Full Changelog: v1.18.6...v1.19.0

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.0/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.0/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.0/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.0/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.19.0/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3

amazon-k8s-cni-init:v1.19.0
amazon-k8s-cni:v1.19.0
amazon/aws-network-policy-agent:v1.1.5

v1.18.6

What's Changed

• Improvement - Add byobject filter on nodes #2888

• Improvement - Move KUBE_CONFIG_PATH variable to KUBECONFIG variable #3015

• Improvement - Update Limits and Add New Instance Types. #3077

• Dependency - Bump google.golang.org/grpc from 1.62.0 to 1.67.1 #3056

• Dependency - Bump github.com/prometheus/common from 0.53.0 to 0.60.0 #3057

• Dependency - Bump golang.org/x/sys from 0.24.0 to 0.25.0 in /test/agent #3052

• Dependency - update upstream cni to 1.5.1 #3065

• Dependency - Bump k8s.io/client-go from 0.30.3 to 0.31.1 #3036

• Dependency - Bump github.com/vishvananda/netlink from 1.2.1-beta.2 to 1.3.0 #3054

• Docs - Document the limitation of SGP with kube-proxy IPVS mode. #3064

• Bugfix - Fix test run scripts. #3088

• Bugfix - Fix the SCRIPT_DIR reference in integration tests. #3090

Full Changelog: v1.18.5...v1.18.6

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.6/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.6/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.6/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.6/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.18.6/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3

amazon-k8s-cni-init:v1.18.6
amazon-k8s-cni:v1.18.6
amazon/aws-network-policy-agent:v1.1.4

v1.18.5

What's Changed

• Improvement - Filter out interfaces with no ip info by @Pavani-Panakanti in #3047

New Contributors

• @Pavani-Panakanti made their first contribution in #3047

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.5/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.5/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.5/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.5/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.18.5/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3

amazon-k8s-cni-init:v1.18.5
amazon-k8s-cni:v1.18.5
amazon/aws-network-policy-agent:v1.1.3

Full Changelog: v1.18.4...v1.18.5

v1.18.4

What's Changed

• Dependency - Bump golang.org/x/sys from 0.21.0 to 0.22.0 in #3005
• Dependency - Bump github.com/onsi/gomega from 1.33.1 to 1.34.1 #3002
• Dependency - Bump github.com/aws/aws-sdk-go from 1.54.11 to 1.55.5 #3000
• Dependency - Bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.19.1 #3001
• Dependency - Bump k8s.io/client-go from 0.30.2 to 0.30.3 #3003
• Dependency - Bump github.com/containernetworking/cni from 1.2.0 to 1.2.3 #3004
• Bugfix - fix: init.image.pullPolicy and nodeAgent.image.pullPolicy not being respect #3010
• Dependency - Bump github.com/docker/docker #3011
• Bugfix - Bug fix: Ensure exact IP match between IMDS and local datastore. #3033
• Dependency - Bump github.com/prometheus/client_model from 0.6.0 to 0.6.1 #3024
• Dependency - Bump github.com/coreos/go-iptables from 0.7.0 to 0.8.0 #3020
• Dependency - Bump golang.org/x/sys from 0.22.0 to 0.25.0 #3037
• Dependency - Bump google.golang.org/protobuf from 1.34.1 to 1.34.2 #3023

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.4/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.4/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.4/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.4/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.18.4/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3

amazon-k8s-cni-init:v1.18.4
amazon-k8s-cni:v1.18.4
amazon/aws-network-policy-agent:v1.1.3

v1.18.3

v1.18.3

What's Changed

• Feature - [cni-metrics-helper] Expose container port when enabling prometheus metrics by @toVersus in #2957

• Feature - Add extraEnv for add additional env from configmap or secrets to aws-node daemonset by @gawsoftpl in #2946

• Feature - Upgrade to latest versions of GitHub actions by @electrocucaracha in #2952

• Feature - use MTU variable for IPv4 egress-cni too by @benben in #2951

• Bugfix - Subnet Discovery - Unfilled ENI fix by @jchen6585 in #2954

• Bugfix - Update the APISpec Schema definition for ENIConfig. by @orsenthil in #2969

• Bugfix - Use ECR Mirror for Curl Test Image. by @orsenthil in #2956

• Bugfix - Add unit test and readme update for POD_MTU/ AWS_VPC_ENI_MTU for Egress plugin behavior. by @orsenthil in #2979

• Bugfix - bugfix: templating broken on helm when cniconfig is enabled by @FatPudgeB93 in #2983

• Bugfix - Update vpc_ip_resource_limit.go link in README.md by @kimsehwan96 in #2986

• Bugfix - updating iam doc with subnet policy by @yash97 in #2992

• Cleanup - Skip Static Canary in run-integration-test in Github. by @orsenthil in #2935

• Cleanup - Helpful Make target to login to public ECR. by @orsenthil in #2934

• Cleanup - Run Kops Test Separately to triage failures. by @orsenthil in #2936

• Cleanup - Update test options default value and help. by @orsenthil in #2955

• Cleanup - Refactor static canary tests. by @orsenthil in #2966

• Dependency - Update golang to go1.22.3 by @orsenthil in #2924

• Dependency - Bump go.uber.org/zap from 1.26.0 to 1.27.0 by @dependabot in #2938

• Dependency - Bump golang.org/x/sys from 0.19.0 to 0.20.0 in /test/agent by @dependabot in #2937

• Dependency - Update .go-version to 1.22.4 by @orsenthil in #2950

• Dependency - Bump github.com/containernetworking/cni from 1.1.2 to 1.2.0 by @dependabot in #2901

• Dependency - Bump sigs.k8s.io/controller-runtime from 0.17.0 to 0.18.4 by @dependabot in #2962

• Dependency - Bump k8s.io/cli-runtime from 0.29.0 to 0.30.2 by @dependabot in #2965

• Dependency - Bump helm.sh/helm/v3 from 3.14.3 to 3.15.2 by @dependabot in #2964

• Dependency - Bump github.com/aws/aws-sdk-go from 1.51.32 to 1.54.11 by @dependabot in #2976

• Dependency - Bump github.com/go-logr/logr from 1.4.1 to 1.4.2 by @dependabot in #2975

• Dependency - Bump github.com/prometheus/client_golang from 1.19.0 to 1.19.1 by @dependabot in #2972

• Dependency - Bump golang.org/x/sys from 0.20.0 to 0.21.0 in /test/agent by @dependabot in #2977

• Dependency - Bump github.com/containernetworking/plugins from 1.4.1 to 1.5.1 by @dependabot in #2974

• Dependency - chore: Update .go-version by @orsenthil in #2981

New Contributors

• @toVersus made their first contribution in #2957
• @electrocucaracha made their first contribution in #2952
• @benben made their first contribution in #2951
• @gawsoftpl made their first contribution in #2946
• @FatPudgeB93 made their first contribution in #2983
• @kimsehwan96 made their first contribution in #2986
• @yash97 made their first contribution in #2992

Full Changelog: v1.18.2...v1.18.3

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.3/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.3/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.3/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.3/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.18.3/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3

amazon-k8s-cni-init:v1.18.3-eksbuild.1
amazon-k8s-cni:v1.18.3-eksbuild.1
amazon/aws-network-policy-agent:v1.1.2-eksbuild.1

v1.18.2

v1.18.2

Release Notes

None

Changes since v1.18.1

• Enhancement - Improve "cni-metrics-helper" setup experience (@guessi)

• Enhancement - Filter Managed ENI. (@orsenthil)

• Enhancement - Soak Test for CNI. (@orsenthil)

• Enhancement - Switch to counter type metic for awscni_no_available_ip_addresses (@liptanbiswas)

• Enhancement - Expose network policy log file location to be configured using helm (@orsenthil)

• Bug - Add correct labels to CNI metrics chart. (@orsenthil)

• Bug - Skip Soak Test while running other tests. (@orsenthil)

• Cleanup - remove unused Dockerfile (@sushrk)

• Cleanup - CHANGELOG, chart, and manifest changes following VPC CNI v1.18.0 release (@jchen6585)

• Cleanup - Fix merge conflicts from release-1.18 to master (@jchen6585)

• Cleanup - Added information on the build troubleshooting. (@orsenthil)

• Cleanup - Remove unused code in vpc cni init and vpc cni binary (@orsenthil)

• Cleanup - Merge release-1.18 to master after v1.18.1 release (@jchen6585)

• Dependency - Bump github.com/onsi/ginkgo/v2 from 2.14.0 to 2.17.1 (@dependabot)

• Dependency - Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (@dependabot)

• Dependency- Bump github.com/prometheus/common from 0.48.0 to 0.52.2 (@dependabot)i

• Dependency - Bump helm.sh/helm/v3 from 3.14.2 to 3.14.3 (@dependabot)

• Dependency - Bump golang.org/x/sys from 0.17.0 to 0.18.0 in /test/agent (@dependabot)

• Dependency - Bump github.com/containernetworking/plugins from 1.4.0 to 1.4.1 (@dependabot)

• Dependency - Update Kops test for 1.30 (@jchen6585)

• Dependency - Update .go-version to 1.22.2 to fix CVE reports (@orsenthil)

• Dependency - Bump golang.org/x/sys from 0.18.0 to 0.19.0 in /test/agent (@dependabot)

• Dependency - Update .go-version to fix GO-2024-2824 (@orsenthil)

• Dependency - Bump github.com/aws/amazon-vpc-resource-controller-k8s from 1.4.1 to 1.5.0 (@dependabot)

• Dependency - Update ENI Limits. (@orsenthil)

• Dependency - Update golang to go1.22.3 (@orsenthil)

• Dependency - Bump k8s.io/api from 0.29.3 to 0.30.1 (@dependabot)

Thanks to all our contributors! 😊

New Contributors

• @kwohlfahrt made their first contribution in #2841
• @guessi made their first contribution in #2874
• @liptanbiswas made their first contribution in #2919

Full Changelog: v1.18.1...v1.18.2

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.2/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.2/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.2/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.2/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.18.2/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3
amazon-k8s-cni-init:v1.18.2
amazon-k8s-cni:v1.18.2
amazon/aws-network-policy-agent:v1.1.2

v1.18.1

v1.18.1

Release Notes

None

Changes since v1.18.0

• Bug - Mount /run/xtables.lock as FileOrCreate in Helm chart (@kwohlfahrt)
• Cleanup - remove unused Dockerfile (@sushrk)
• Dependency - Bump github.com/containernetworking/plugins from 1.4.0 to 1.4.1 (@dependabot)
• Dependency - Bump golang.org/x/sys from 0.17.0 to 0.18.0 in /test/agent (@dependabot)
• Dependency - Bump helm.sh/helm/v3 from 3.14.2 to 3.14.3 (@dependabot)
• Dependency - Bump github.com/prometheus/common from 0.48.0 to 0.52.2 (@dependabot)
• Dependency - Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (@dependabot)
• Dependency - Bump github.com/onsi/ginkgo/v2 from 2.14.0 to 2.17.1 (@dependabot)
• Enhancement - Update .go-version to 1.22.2 to fix CVE reports. (@orsenthil)

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.1/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.1/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.1/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.1/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.18.1/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3                                                 
amazon-k8s-cni-init:v1.18.1
amazon-k8s-cni:v1.18.1
amazon/aws-network-policy-agent:v1.1.1