v1.19.0

What's Changed

• This release includes a bug fix in Network Policy Agent which avoids running into a panic when network policy is disabled and policyendpoint objects still exist
• Manifest update to include unsupported compute type

Full Changelog: v1.18.6...v1.19.0

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.0/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.0/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.0/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.0/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.19.0/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3

amazon-k8s-cni-init:v1.19.0
amazon-k8s-cni:v1.19.0
amazon/aws-network-policy-agent:v1.1.5

v1.18.6

What's Changed

• Improvement - Add byobject filter on nodes #2888

• Improvement - Move KUBE_CONFIG_PATH variable to KUBECONFIG variable #3015

• Improvement - Update Limits and Add New Instance Types. #3077

• Dependency - Bump google.golang.org/grpc from 1.62.0 to 1.67.1 #3056

• Dependency - Bump github.com/prometheus/common from 0.53.0 to 0.60.0 #3057

• Dependency - Bump golang.org/x/sys from 0.24.0 to 0.25.0 in /test/agent #3052

• Dependency - update upstream cni to 1.5.1 #3065

• Dependency - Bump k8s.io/client-go from 0.30.3 to 0.31.1 #3036

• Dependency - Bump github.com/vishvananda/netlink from 1.2.1-beta.2 to 1.3.0 #3054

• Docs - Document the limitation of SGP with kube-proxy IPVS mode. #3064

• Bugfix - Fix test run scripts. #3088

• Bugfix - Fix the SCRIPT_DIR reference in integration tests. #3090

Full Changelog: v1.18.5...v1.18.6

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.6/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.6/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.6/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.6/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.18.6/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3

amazon-k8s-cni-init:v1.18.6
amazon-k8s-cni:v1.18.6
amazon/aws-network-policy-agent:v1.1.4

v1.18.5

What's Changed

• Improvement - Filter out interfaces with no ip info by @Pavani-Panakanti in #3047

New Contributors

• @Pavani-Panakanti made their first contribution in #3047

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.5/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.5/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.5/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.5/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.18.5/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3

amazon-k8s-cni-init:v1.18.5
amazon-k8s-cni:v1.18.5
amazon/aws-network-policy-agent:v1.1.3

Full Changelog: v1.18.4...v1.18.5

v1.18.4

What's Changed

• Dependency - Bump golang.org/x/sys from 0.21.0 to 0.22.0 in #3005
• Dependency - Bump github.com/onsi/gomega from 1.33.1 to 1.34.1 #3002
• Dependency - Bump github.com/aws/aws-sdk-go from 1.54.11 to 1.55.5 #3000
• Dependency - Bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.19.1 #3001
• Dependency - Bump k8s.io/client-go from 0.30.2 to 0.30.3 #3003
• Dependency - Bump github.com/containernetworking/cni from 1.2.0 to 1.2.3 #3004
• Bugfix - fix: init.image.pullPolicy and nodeAgent.image.pullPolicy not being respect #3010
• Dependency - Bump github.com/docker/docker #3011
• Bugfix - Bug fix: Ensure exact IP match between IMDS and local datastore. #3033
• Dependency - Bump github.com/prometheus/client_model from 0.6.0 to 0.6.1 #3024
• Dependency - Bump github.com/coreos/go-iptables from 0.7.0 to 0.8.0 #3020
• Dependency - Bump golang.org/x/sys from 0.22.0 to 0.25.0 #3037
• Dependency - Bump google.golang.org/protobuf from 1.34.1 to 1.34.2 #3023

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.4/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.4/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.4/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.4/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.18.4/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3

amazon-k8s-cni-init:v1.18.4
amazon-k8s-cni:v1.18.4
amazon/aws-network-policy-agent:v1.1.3

v1.18.3

v1.18.3

What's Changed

• Feature - [cni-metrics-helper] Expose container port when enabling prometheus metrics by @toVersus in #2957

• Feature - Add extraEnv for add additional env from configmap or secrets to aws-node daemonset by @gawsoftpl in #2946

• Feature - Upgrade to latest versions of GitHub actions by @electrocucaracha in #2952

• Feature - use MTU variable for IPv4 egress-cni too by @benben in #2951

• Bugfix - Subnet Discovery - Unfilled ENI fix by @jchen6585 in #2954

• Bugfix - Update the APISpec Schema definition for ENIConfig. by @orsenthil in #2969

• Bugfix - Use ECR Mirror for Curl Test Image. by @orsenthil in #2956

• Bugfix - Add unit test and readme update for POD_MTU/ AWS_VPC_ENI_MTU for Egress plugin behavior. by @orsenthil in #2979

• Bugfix - bugfix: templating broken on helm when cniconfig is enabled by @FatPudgeB93 in #2983

• Bugfix - Update vpc_ip_resource_limit.go link in README.md by @kimsehwan96 in #2986

• Bugfix - updating iam doc with subnet policy by @yash97 in #2992

• Cleanup - Skip Static Canary in run-integration-test in Github. by @orsenthil in #2935

• Cleanup - Helpful Make target to login to public ECR. by @orsenthil in #2934

• Cleanup - Run Kops Test Separately to triage failures. by @orsenthil in #2936

• Cleanup - Update test options default value and help. by @orsenthil in #2955

• Cleanup - Refactor static canary tests. by @orsenthil in #2966

• Dependency - Update golang to go1.22.3 by @orsenthil in #2924

• Dependency - Bump go.uber.org/zap from 1.26.0 to 1.27.0 by @dependabot in #2938

• Dependency - Bump golang.org/x/sys from 0.19.0 to 0.20.0 in /test/agent by @dependabot in #2937

• Dependency - Update .go-version to 1.22.4 by @orsenthil in #2950

• Dependency - Bump github.com/containernetworking/cni from 1.1.2 to 1.2.0 by @dependabot in #2901

• Dependency - Bump sigs.k8s.io/controller-runtime from 0.17.0 to 0.18.4 by @dependabot in #2962

• Dependency - Bump k8s.io/cli-runtime from 0.29.0 to 0.30.2 by @dependabot in #2965

• Dependency - Bump helm.sh/helm/v3 from 3.14.3 to 3.15.2 by @dependabot in #2964

• Dependency - Bump github.com/aws/aws-sdk-go from 1.51.32 to 1.54.11 by @dependabot in #2976

• Dependency - Bump github.com/go-logr/logr from 1.4.1 to 1.4.2 by @dependabot in #2975

• Dependency - Bump github.com/prometheus/client_golang from 1.19.0 to 1.19.1 by @dependabot in #2972

• Dependency - Bump golang.org/x/sys from 0.20.0 to 0.21.0 in /test/agent by @dependabot in #2977

• Dependency - Bump github.com/containernetworking/plugins from 1.4.1 to 1.5.1 by @dependabot in #2974

• Dependency - chore: Update .go-version by @orsenthil in #2981

New Contributors

• @toVersus made their first contribution in #2957
• @electrocucaracha made their first contribution in #2952
• @benben made their first contribution in #2951
• @gawsoftpl made their first contribution in #2946
• @FatPudgeB93 made their first contribution in #2983
• @kimsehwan96 made their first contribution in #2986
• @yash97 made their first contribution in #2992

Full Changelog: v1.18.2...v1.18.3

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.3/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.3/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.3/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.3/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.18.3/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3

amazon-k8s-cni-init:v1.18.3-eksbuild.1
amazon-k8s-cni:v1.18.3-eksbuild.1
amazon/aws-network-policy-agent:v1.1.2-eksbuild.1

v1.18.2

v1.18.2

Release Notes

None

Changes since v1.18.1

• Enhancement - Improve "cni-metrics-helper" setup experience (@guessi)

• Enhancement - Filter Managed ENI. (@orsenthil)

• Enhancement - Soak Test for CNI. (@orsenthil)

• Enhancement - Switch to counter type metic for awscni_no_available_ip_addresses (@liptanbiswas)

• Enhancement - Expose network policy log file location to be configured using helm (@orsenthil)

• Bug - Add correct labels to CNI metrics chart. (@orsenthil)

• Bug - Skip Soak Test while running other tests. (@orsenthil)

• Cleanup - remove unused Dockerfile (@sushrk)

• Cleanup - CHANGELOG, chart, and manifest changes following VPC CNI v1.18.0 release (@jchen6585)

• Cleanup - Fix merge conflicts from release-1.18 to master (@jchen6585)

• Cleanup - Added information on the build troubleshooting. (@orsenthil)

• Cleanup - Remove unused code in vpc cni init and vpc cni binary (@orsenthil)

• Cleanup - Merge release-1.18 to master after v1.18.1 release (@jchen6585)

• Dependency - Bump github.com/onsi/ginkgo/v2 from 2.14.0 to 2.17.1 (@dependabot)

• Dependency - Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (@dependabot)

• Dependency- Bump github.com/prometheus/common from 0.48.0 to 0.52.2 (@dependabot)i

• Dependency - Bump helm.sh/helm/v3 from 3.14.2 to 3.14.3 (@dependabot)

• Dependency - Bump golang.org/x/sys from 0.17.0 to 0.18.0 in /test/agent (@dependabot)

• Dependency - Bump github.com/containernetworking/plugins from 1.4.0 to 1.4.1 (@dependabot)

• Dependency - Update Kops test for 1.30 (@jchen6585)

• Dependency - Update .go-version to 1.22.2 to fix CVE reports (@orsenthil)

• Dependency - Bump golang.org/x/sys from 0.18.0 to 0.19.0 in /test/agent (@dependabot)

• Dependency - Update .go-version to fix GO-2024-2824 (@orsenthil)

• Dependency - Bump github.com/aws/amazon-vpc-resource-controller-k8s from 1.4.1 to 1.5.0 (@dependabot)

• Dependency - Update ENI Limits. (@orsenthil)

• Dependency - Update golang to go1.22.3 (@orsenthil)

• Dependency - Bump k8s.io/api from 0.29.3 to 0.30.1 (@dependabot)

Thanks to all our contributors! 😊

New Contributors

• @kwohlfahrt made their first contribution in #2841
• @guessi made their first contribution in #2874
• @liptanbiswas made their first contribution in #2919

Full Changelog: v1.18.1...v1.18.2

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.2/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.2/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.2/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.2/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.18.2/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3
amazon-k8s-cni-init:v1.18.2
amazon-k8s-cni:v1.18.2
amazon/aws-network-policy-agent:v1.1.2

v1.18.1

v1.18.1

Release Notes

None

Changes since v1.18.0

• Bug - Mount /run/xtables.lock as FileOrCreate in Helm chart (@kwohlfahrt)
• Cleanup - remove unused Dockerfile (@sushrk)
• Dependency - Bump github.com/containernetworking/plugins from 1.4.0 to 1.4.1 (@dependabot)
• Dependency - Bump golang.org/x/sys from 0.17.0 to 0.18.0 in /test/agent (@dependabot)
• Dependency - Bump helm.sh/helm/v3 from 3.14.2 to 3.14.3 (@dependabot)
• Dependency - Bump github.com/prometheus/common from 0.48.0 to 0.52.2 (@dependabot)
• Dependency - Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (@dependabot)
• Dependency - Bump github.com/onsi/ginkgo/v2 from 2.14.0 to 2.17.1 (@dependabot)
• Enhancement - Update .go-version to 1.22.2 to fix CVE reports. (@orsenthil)

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.1/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.1/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.1/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.1/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.18.1/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3                                                 
amazon-k8s-cni-init:v1.18.1
amazon-k8s-cni:v1.18.1
amazon/aws-network-policy-agent:v1.1.1

v1.18.0

v1.18.0

Release Notes

VPC-CNI now supports enhanced subnet discovery - A default mode in which pod IP addresses are allocated from all tagged and available subnets. This is aimed at helping increase the number of available IPv4 addresses and scale your workloads in IP constrained environments.

Changes since v1.17.1

• Cleanup - run make generate-limits (@jaydeokar)
• Dependency - Bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible (@dependabot)
• Dependency - upgrade golang to 1.21.8 (@jchen6585)
• Dependency - Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (@dependabot)
• Feature - Enhance subnet selection (@jchen6585)
• Improvement - Add vpc-id to leaked eni filters (@jchen6585)
• Testing - Add missing params to authorize ingress (@jchen6585)
• Testing - Integration test suite for Custom Networking + Security Groups for Pods (@jdn5126)
• Testing - Fix coredns failing during custom networking tests (@jchen6585)

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.0/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.0/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.0/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.0/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.18.0/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3                                                 
amazon-k8s-cni-init:v1.18.0
amazon-k8s-cni:v1.18.0
amazon/aws-network-policy-agent:v1.1.0

v1.17.1

v1.17.1

Release Notes

Network Policy agent now supports a strict mode for network policy enforcement.

Changes since v1.16.4

• Feature - Send pod name/ns to nodeagent for strict mode (@jayanthvn)
• Feature - gRPC call for networkpolicy agent (@jayanthvn)
• Improvement - Bump golang.org/x/sys from 0.16.0 to 0.17.0 in /test/agent (@dependabot)
• Improvement - Bump google.golang.org/grpc from 1.61.0 to 1.62.0 (@dependabot)
• Improvement - Bump google.golang.org/grpc from 1.61.0 to 1.62.0 (@dependabot)
• Improvement - Bump github.com/aws/aws-sdk-go from 1.49.13 to 1.50.29 (@dependabot)
• Improvement - Bump k8s.io/apimachinery from 0.29.0 to 0.29.2 (@dependabot)
• Improvement - make generate; make generate-limits; remove soak tests (@jdn5126)
• Improvement - Bump github.com/prometheus/client_golang from 1.18.0 to 1.19.0 (@dependabot)
• Improvement - Make vpc cni as master CNI in multus-daemonset-thick.yml (@raghs-aws)
• Improvement - Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 (@dependabot)
• Improvement - Repo controlled build go version (@xdu31)

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.17.1/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.17.1/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.17.1/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.17.1/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.17.1/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3                                                 
amazon-k8s-cni-init:v1.17.1
amazon-k8s-cni:v1.17.1
amazon/aws-network-policy-agent:v1.1.0

v1.16.4

v1.16.4

Release Notes

None

Changes since v1.16.3

• Bug - Revert #2744 to prevent livelock when attempting to increase datastore pool (@jdn5126 )
• Bug - Do not allocate IPs or prefixes to trunk ENIs; enable Custom Networking before Security Groups for Pods (@jdn5126 )
• Bug - Ignore non-zero cards (@jchen6585 )
• Documentation - Added description to list of metrics reported by cni-metrics-helper (@zachdorame )
• Enhancement - Bump helm.sh/helm/v3 from 3.14.1 to 3.14.2 (@dependabot )
• Enhancement - Add validation for MTU, update ANNOTATE_POD_IP README (@jdn5126 )
• Enhancement - Update Golang version to 1.21.7; update aws-vpc-cni chart README (@jdn5126 )
• Enhancement - Bump helm.sh/helm/v3 from 3.14.0 to 3.14.1 (@jdn5126 )
• Feature - Pod MTU (@jchen6585 )

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.16.4/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.16.4/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.16.4/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.16.4/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.16.4/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3                                                 
amazon-k8s-cni-init:v1.16.4
amazon-k8s-cni:v1.16.4
amazon/aws-network-policy-agent:v1.0.8