Skip to content

Commit eb43e54

Browse files
jaydeokarjaydeokar
authored
Update charts manifest for v1.17.1 release (#2853)
1 parent 58336b7 commit eb43e54

18 files changed

+99
-66
lines changed

‎CHANGELOG.md

+15
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,20 @@
11
# Changelog
22

3+
## v1.17.1
4+
5+
* Feature - [Send pod name/ns to nodeagent for strict mode](https://github.com/aws/amazon-vpc-cni-k8s/pull/2790) (@jayanthvn)
6+
* Feature - [gRPC call for networkpolicy agent](https://github.com/aws/amazon-vpc-cni-k8s/pull/2785)(@jayanthvn)
7+
* Improvement - [Bump golang.org/x/sys from 0.16.0 to 0.17.0 in /test/agent](https://github.com/aws/amazon-vpc-cni-k8s/pull/2822) (@dependabot)
8+
* Improvement - [Bump google.golang.org/grpc from 1.61.0 to 1.62.0](https://github.com/aws/amazon-vpc-cni-k8s/pull/2827) (@dependabot)
9+
* Improvement - [Bump google.golang.org/grpc from 1.61.0 to 1.62.0](https://github.com/aws/amazon-vpc-cni-k8s/pull/2827) (@dependabot)
10+
* Improvement - [Bump github.com/aws/aws-sdk-go from 1.49.13 to 1.50.29](https://github.com/aws/amazon-vpc-cni-k8s/pull/2826) (@dependabot)
11+
* Improvement - [Bump k8s.io/apimachinery from 0.29.0 to 0.29.2](https://github.com/aws/amazon-vpc-cni-k8s/pull/2825) (@dependabot)
12+
* Improvement - [make generate; make generate-limits; remove soak tests](https://github.com/aws/amazon-vpc-cni-k8s/pull/2819) (@dependabot)
13+
* Improvement - [Bump github.com/prometheus/client_golang from 1.18.0 to 1.19.0](https://github.com/aws/amazon-vpc-cni-k8s/pull/2824) (@dependabot)
14+
* Improvement - [Make vpc cni as master CNI in multus-daemonset-thick.yml](https://github.com/aws/amazon-vpc-cni-k8s/pull/2828) (@raghs-aws)
15+
* Improvement - [Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0](https://github.com/aws/amazon-vpc-cni-k8s/pull/2829) (@dependabot)
16+
* Improvement - [Repo controlled build go version](https://github.com/aws/amazon-vpc-cni-k8s/pull/2831) (@xdu31)
17+
318
## v1.16.4
419

520
* Bug - [Revert #2744 to prevent livelock when attempting to increase datastore pool](https://github.com/aws/amazon-vpc-cni-k8s/pull/2810) (@jdn5126 )

‎README.md

+9
Original file line numberDiff line numberDiff line change
@@ -729,6 +729,15 @@ Container runtimes such as `containerd` will enable IPv6 in newly created contai
729729

730730
Note that if you set this while using Multus, you must ensure that any chained plugins do not depend on IPv6 networking. You must also ensure that chained plugins do not also modify these sysctls.
731731

732+
733+
#### `NETWORK_POLICY_ENFORCING_MODE` (v1.17.1+)
734+
735+
Type: String
736+
737+
Default: `standard`
738+
739+
Network Policy agent now supports two modes for Network Policy enforcement - Strict and Standard. By default, the Amazon VPC CNI plugin for Kubernetes configures network policies for pods in parallel with the pod provisioning. In the `standard` mode, until all of the policies are configured for the new pod, containers in the new pod will start with a default allow policy. A default allow policy means that all ingress and egress traffic is allowed to and from the new pods. However, in the `strict` mode, a new pod will be blocked from Egress and Ingress connections till a qualifying Network Policy is applied. In Strict Mode, you must have a network policy defined for every pod in your cluster. Host Networking pods are exempted from this requirement.
740+
732741
### VPC CNI Feature Matrix
733742

734743

‎charts/aws-vpc-cni/Chart.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
apiVersion: v1
22
name: aws-vpc-cni
3-
version: 1.16.4
4-
appVersion: "v1.16.4"
3+
version: 1.17.1
4+
appVersion: "v1.17.1"
55
description: A Helm chart for the AWS VPC CNI
66
icon: https://raw.githubusercontent.com/aws/eks-charts/master/docs/logo/aws.png
77
home: https://github.com/aws/amazon-vpc-cni-k8s

‎charts/aws-vpc-cni/README.md

+3-3
Original file line numberDiff line numberDiff line change
@@ -48,15 +48,15 @@ The following table lists the configurable parameters for this chart and their d
4848
| `minimumWindowsIPTarget`| Minimum IP target value for Windows prefix delegation | `3` |
4949
| `branchENICooldown` | Number of seconds that branch ENIs remain in cooldown | `60` |
5050
| `fullnameOverride` | Override the fullname of the chart | `aws-node` |
51-
| `image.tag` | Image tag | `v1.16.4` |
51+
| `image.tag` | Image tag | `v1.17.1` |
5252
| `image.domain` | ECR repository domain | `amazonaws.com` |
5353
| `image.region` | ECR repository region to use. Should match your cluster | `us-west-2` |
5454
| `image.endpoint` | ECR repository endpoint to use. | `ecr` |
5555
| `image.account` | ECR repository account number | `602401143452` |
5656
| `image.pullPolicy` | Container pull policy | `IfNotPresent` |
5757
| `image.override` | A custom docker image to use | `nil` |
5858
| `imagePullSecrets` | Docker registry pull secret | `[]` |
59-
| `init.image.tag` | Image tag | `v1.16.4` |
59+
| `init.image.tag` | Image tag | `v1.17.1` |
6060
| `init.image.domain` | ECR repository domain | `amazonaws.com` |
6161
| `init.image.region` | ECR repository region to use. Should match your cluster | `us-west-2` |
6262
| `init.image.endpoint` | ECR repository endpoint to use. | `ecr` |
@@ -69,7 +69,7 @@ The following table lists the configurable parameters for this chart and their d
6969
| `originalMatchLabels` | Use the original daemonset matchLabels | `false` |
7070
| `nameOverride` | Override the name of the chart | `aws-node` |
7171
| `nodeAgent.enabled` | If the Node Agent container should be created | `true` |
72-
| `nodeAgent.image.tag` | Image tag for Node Agent | `v1.0.8` |
72+
| `nodeAgent.image.tag` | Image tag for Node Agent | `v1.1.0` |
7373
| `nodeAgent.image.domain`| ECR repository domain | `amazonaws.com` |
7474
| `nodeAgent.image.region`| ECR repository region to use. Should match your cluster | `us-west-2` |
7575
| `nodeAgent.image.endpoint` | ECR repository endpoint to use. | `ecr` |

‎charts/aws-vpc-cni/values.yaml

+5-4
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ nameOverride: aws-node
88

99
init:
1010
image:
11-
tag: v1.16.4
11+
tag: v1.17.1
1212
domain: amazonaws.com
1313
region: us-west-2
1414
endpoint: ecr
@@ -27,7 +27,7 @@ init:
2727
nodeAgent:
2828
enabled: true
2929
image:
30-
tag: v1.0.8
30+
tag: v1.1.0
3131
domain: amazonaws.com
3232
region: us-west-2
3333
endpoint: ecr
@@ -50,7 +50,7 @@ nodeAgent:
5050
resources: {}
5151

5252
image:
53-
tag: v1.16.4
53+
tag: v1.17.1
5454
domain: amazonaws.com
5555
region: us-west-2
5656
endpoint: ecr
@@ -83,8 +83,9 @@ env:
8383
DISABLE_NETWORK_RESOURCE_PROVISIONING: "false"
8484
ENABLE_IPv4: "true"
8585
ENABLE_IPv6: "false"
86-
VPC_CNI_VERSION: "v1.16.4"
8786
ENABLE_SUBNET_DISCOVERY: "true"
87+
VPC_CNI_VERSION: "v1.17.1"
88+
NETWORK_POLICY_ENFORCING_MODE: "standard"
8889

8990
# this flag enables you to use the match label that was present in the original daemonset deployed by EKS
9091
# You can then annotate and label the original aws-node resources and 'adopt' them into a helm release

‎charts/cni-metrics-helper/Chart.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
apiVersion: v2
22
name: cni-metrics-helper
3-
version: 1.16.4
4-
appVersion: v1.16.4
3+
version: 1.17.1
4+
appVersion: v1.17.1
55
description: A Helm chart for the AWS VPC CNI Metrics Helper
66
icon: https://raw.githubusercontent.com/aws/eks-charts/master/docs/logo/aws.png
77
home: https://github.com/aws/amazon-vpc-cni-k8s

‎charts/cni-metrics-helper/README.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ The following table lists the configurable parameters for this chart and their d
4747
|------------------------------|---------------------------------------------------------------|--------------------|
4848
| fullnameOverride | Override the fullname of the chart | cni-metrics-helper |
4949
| image.region | ECR repository region to use. Should match your cluster | us-west-2 |
50-
| image.tag | Image tag | v1.16.4 |
50+
| image.tag | Image tag | v1.17.1 |
5151
| image.account | ECR repository account number | 602401143452 |
5252
| image.domain | ECR repository domain | amazonaws.com |
5353
| env.USE_CLOUDWATCH | Whether to export CNI metrics to CloudWatch | true |

‎charts/cni-metrics-helper/values.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ nameOverride: cni-metrics-helper
44

55
image:
66
region: us-west-2
7-
tag: v1.16.4
7+
tag: v1.17.1
88
account: "602401143452"
99
domain: "amazonaws.com"
1010
# Set to use custom image

‎config/master/aws-k8s-cni-cn.yaml

+11-9
Original file line numberDiff line numberDiff line change
@@ -266,7 +266,7 @@ metadata:
266266
app.kubernetes.io/name: aws-node
267267
app.kubernetes.io/instance: aws-vpc-cni
268268
k8s-app: aws-node
269-
app.kubernetes.io/version: "v1.16.4"
269+
app.kubernetes.io/version: "v1.17.1"
270270
---
271271
# Source: aws-vpc-cni/templates/configmap.yaml
272272
apiVersion: v1
@@ -278,7 +278,7 @@ metadata:
278278
app.kubernetes.io/name: aws-node
279279
app.kubernetes.io/instance: aws-vpc-cni
280280
k8s-app: aws-node
281-
app.kubernetes.io/version: "v1.16.4"
281+
app.kubernetes.io/version: "v1.17.1"
282282
data:
283283
enable-windows-ipam: "false"
284284
enable-network-policy-controller: "false"
@@ -297,7 +297,7 @@ metadata:
297297
app.kubernetes.io/name: aws-node
298298
app.kubernetes.io/instance: aws-vpc-cni
299299
k8s-app: aws-node
300-
app.kubernetes.io/version: "v1.16.4"
300+
app.kubernetes.io/version: "v1.17.1"
301301
rules:
302302
- apiGroups:
303303
- crd.k8s.amazonaws.com
@@ -343,7 +343,7 @@ metadata:
343343
app.kubernetes.io/name: aws-node
344344
app.kubernetes.io/instance: aws-vpc-cni
345345
k8s-app: aws-node
346-
app.kubernetes.io/version: "v1.16.4"
346+
app.kubernetes.io/version: "v1.17.1"
347347
roleRef:
348348
apiGroup: rbac.authorization.k8s.io
349349
kind: ClusterRole
@@ -363,7 +363,7 @@ metadata:
363363
app.kubernetes.io/name: aws-node
364364
app.kubernetes.io/instance: aws-vpc-cni
365365
k8s-app: aws-node
366-
app.kubernetes.io/version: "v1.16.4"
366+
app.kubernetes.io/version: "v1.17.1"
367367
spec:
368368
updateStrategy:
369369
rollingUpdate:
@@ -384,7 +384,7 @@ spec:
384384
hostNetwork: true
385385
initContainers:
386386
- name: aws-vpc-cni-init
387-
image: 961992271922.dkr.ecr.cn-northwest-1.amazonaws.com.cn/amazon-k8s-cni-init:v1.16.4
387+
image: 961992271922.dkr.ecr.cn-northwest-1.amazonaws.com.cn/amazon-k8s-cni-init:v1.17.1
388388
env:
389389
- name: DISABLE_TCP_EARLY_DEMUX
390390
value: "false"
@@ -405,7 +405,7 @@ spec:
405405
{}
406406
containers:
407407
- name: aws-node
408-
image: 961992271922.dkr.ecr.cn-northwest-1.amazonaws.com.cn/amazon-k8s-cni:v1.16.4
408+
image: 961992271922.dkr.ecr.cn-northwest-1.amazonaws.com.cn/amazon-k8s-cni:v1.17.1
409409
ports:
410410
- containerPort: 61678
411411
name: metrics
@@ -464,8 +464,10 @@ spec:
464464
value: "false"
465465
- name: ENABLE_PREFIX_DELEGATION
466466
value: "false"
467+
- name: NETWORK_POLICY_ENFORCING_MODE
468+
value: "standard"
467469
- name: VPC_CNI_VERSION
468-
value: "v1.16.4"
470+
value: "v1.17.1"
469471
- name: ENABLE_SUBNET_DISCOVERY
470472
value: "true"
471473
- name: WARM_ENI_TARGET
@@ -502,7 +504,7 @@ spec:
502504
- mountPath: /run/xtables.lock
503505
name: xtables-lock
504506
- name: aws-eks-nodeagent
505-
image: 961992271922.dkr.ecr.cn-northwest-1.amazonaws.com.cn/amazon/aws-network-policy-agent:v1.0.8
507+
image: 961992271922.dkr.ecr.cn-northwest-1.amazonaws.com.cn/amazon/aws-network-policy-agent:v1.1.0
506508
env:
507509
- name: MY_NODE_NAME
508510
valueFrom:

‎config/master/aws-k8s-cni-us-gov-east-1.yaml

+11-9
Original file line numberDiff line numberDiff line change
@@ -266,7 +266,7 @@ metadata:
266266
app.kubernetes.io/name: aws-node
267267
app.kubernetes.io/instance: aws-vpc-cni
268268
k8s-app: aws-node
269-
app.kubernetes.io/version: "v1.16.4"
269+
app.kubernetes.io/version: "v1.17.1"
270270
---
271271
# Source: aws-vpc-cni/templates/configmap.yaml
272272
apiVersion: v1
@@ -278,7 +278,7 @@ metadata:
278278
app.kubernetes.io/name: aws-node
279279
app.kubernetes.io/instance: aws-vpc-cni
280280
k8s-app: aws-node
281-
app.kubernetes.io/version: "v1.16.4"
281+
app.kubernetes.io/version: "v1.17.1"
282282
data:
283283
enable-windows-ipam: "false"
284284
enable-network-policy-controller: "false"
@@ -297,7 +297,7 @@ metadata:
297297
app.kubernetes.io/name: aws-node
298298
app.kubernetes.io/instance: aws-vpc-cni
299299
k8s-app: aws-node
300-
app.kubernetes.io/version: "v1.16.4"
300+
app.kubernetes.io/version: "v1.17.1"
301301
rules:
302302
- apiGroups:
303303
- crd.k8s.amazonaws.com
@@ -343,7 +343,7 @@ metadata:
343343
app.kubernetes.io/name: aws-node
344344
app.kubernetes.io/instance: aws-vpc-cni
345345
k8s-app: aws-node
346-
app.kubernetes.io/version: "v1.16.4"
346+
app.kubernetes.io/version: "v1.17.1"
347347
roleRef:
348348
apiGroup: rbac.authorization.k8s.io
349349
kind: ClusterRole
@@ -363,7 +363,7 @@ metadata:
363363
app.kubernetes.io/name: aws-node
364364
app.kubernetes.io/instance: aws-vpc-cni
365365
k8s-app: aws-node
366-
app.kubernetes.io/version: "v1.16.4"
366+
app.kubernetes.io/version: "v1.17.1"
367367
spec:
368368
updateStrategy:
369369
rollingUpdate:
@@ -384,7 +384,7 @@ spec:
384384
hostNetwork: true
385385
initContainers:
386386
- name: aws-vpc-cni-init
387-
image: 151742754352.dkr.ecr.us-gov-east-1.amazonaws.com/amazon-k8s-cni-init:v1.16.4
387+
image: 151742754352.dkr.ecr.us-gov-east-1.amazonaws.com/amazon-k8s-cni-init:v1.17.1
388388
env:
389389
- name: DISABLE_TCP_EARLY_DEMUX
390390
value: "false"
@@ -405,7 +405,7 @@ spec:
405405
{}
406406
containers:
407407
- name: aws-node
408-
image: 151742754352.dkr.ecr.us-gov-east-1.amazonaws.com/amazon-k8s-cni:v1.16.4
408+
image: 151742754352.dkr.ecr.us-gov-east-1.amazonaws.com/amazon-k8s-cni:v1.17.1
409409
ports:
410410
- containerPort: 61678
411411
name: metrics
@@ -464,8 +464,10 @@ spec:
464464
value: "false"
465465
- name: ENABLE_PREFIX_DELEGATION
466466
value: "false"
467+
- name: NETWORK_POLICY_ENFORCING_MODE
468+
value: "standard"
467469
- name: VPC_CNI_VERSION
468-
value: "v1.16.4"
470+
value: "v1.17.1"
469471
- name: ENABLE_SUBNET_DISCOVERY
470472
value: "true"
471473
- name: WARM_ENI_TARGET
@@ -502,7 +504,7 @@ spec:
502504
- mountPath: /run/xtables.lock
503505
name: xtables-lock
504506
- name: aws-eks-nodeagent
505-
image: 151742754352.dkr.ecr.us-gov-east-1.amazonaws.com/amazon/aws-network-policy-agent:v1.0.8
507+
image: 151742754352.dkr.ecr.us-gov-east-1.amazonaws.com/amazon/aws-network-policy-agent:v1.1.0
506508
env:
507509
- name: MY_NODE_NAME
508510
valueFrom:

‎config/master/aws-k8s-cni-us-gov-west-1.yaml

+11-9
Original file line numberDiff line numberDiff line change
@@ -266,7 +266,7 @@ metadata:
266266
app.kubernetes.io/name: aws-node
267267
app.kubernetes.io/instance: aws-vpc-cni
268268
k8s-app: aws-node
269-
app.kubernetes.io/version: "v1.16.4"
269+
app.kubernetes.io/version: "v1.17.1"
270270
---
271271
# Source: aws-vpc-cni/templates/configmap.yaml
272272
apiVersion: v1
@@ -278,7 +278,7 @@ metadata:
278278
app.kubernetes.io/name: aws-node
279279
app.kubernetes.io/instance: aws-vpc-cni
280280
k8s-app: aws-node
281-
app.kubernetes.io/version: "v1.16.4"
281+
app.kubernetes.io/version: "v1.17.1"
282282
data:
283283
enable-windows-ipam: "false"
284284
enable-network-policy-controller: "false"
@@ -297,7 +297,7 @@ metadata:
297297
app.kubernetes.io/name: aws-node
298298
app.kubernetes.io/instance: aws-vpc-cni
299299
k8s-app: aws-node
300-
app.kubernetes.io/version: "v1.16.4"
300+
app.kubernetes.io/version: "v1.17.1"
301301
rules:
302302
- apiGroups:
303303
- crd.k8s.amazonaws.com
@@ -343,7 +343,7 @@ metadata:
343343
app.kubernetes.io/name: aws-node
344344
app.kubernetes.io/instance: aws-vpc-cni
345345
k8s-app: aws-node
346-
app.kubernetes.io/version: "v1.16.4"
346+
app.kubernetes.io/version: "v1.17.1"
347347
roleRef:
348348
apiGroup: rbac.authorization.k8s.io
349349
kind: ClusterRole
@@ -363,7 +363,7 @@ metadata:
363363
app.kubernetes.io/name: aws-node
364364
app.kubernetes.io/instance: aws-vpc-cni
365365
k8s-app: aws-node
366-
app.kubernetes.io/version: "v1.16.4"
366+
app.kubernetes.io/version: "v1.17.1"
367367
spec:
368368
updateStrategy:
369369
rollingUpdate:
@@ -384,7 +384,7 @@ spec:
384384
hostNetwork: true
385385
initContainers:
386386
- name: aws-vpc-cni-init
387-
image: 013241004608.dkr.ecr.us-gov-west-1.amazonaws.com/amazon-k8s-cni-init:v1.16.4
387+
image: 013241004608.dkr.ecr.us-gov-west-1.amazonaws.com/amazon-k8s-cni-init:v1.17.1
388388
env:
389389
- name: DISABLE_TCP_EARLY_DEMUX
390390
value: "false"
@@ -405,7 +405,7 @@ spec:
405405
{}
406406
containers:
407407
- name: aws-node
408-
image: 013241004608.dkr.ecr.us-gov-west-1.amazonaws.com/amazon-k8s-cni:v1.16.4
408+
image: 013241004608.dkr.ecr.us-gov-west-1.amazonaws.com/amazon-k8s-cni:v1.17.1
409409
ports:
410410
- containerPort: 61678
411411
name: metrics
@@ -464,8 +464,10 @@ spec:
464464
value: "false"
465465
- name: ENABLE_PREFIX_DELEGATION
466466
value: "false"
467+
- name: NETWORK_POLICY_ENFORCING_MODE
468+
value: "standard"
467469
- name: VPC_CNI_VERSION
468-
value: "v1.16.4"
470+
value: "v1.17.1"
469471
- name: ENABLE_SUBNET_DISCOVERY
470472
value: "true"
471473
- name: WARM_ENI_TARGET
@@ -502,7 +504,7 @@ spec:
502504
- mountPath: /run/xtables.lock
503505
name: xtables-lock
504506
- name: aws-eks-nodeagent
505-
image: 013241004608.dkr.ecr.us-gov-west-1.amazonaws.com/amazon/aws-network-policy-agent:v1.0.8
507+
image: 013241004608.dkr.ecr.us-gov-west-1.amazonaws.com/amazon/aws-network-policy-agent:v1.1.0
506508
env:
507509
- name: MY_NODE_NAME
508510
valueFrom:

0 commit comments

Comments
 (0)