Weekly Release 2024-12-15

This is the weekly bundle and EKS-A CLI release from main.

Date: 2024-12-15
Build-tooling repo commit: 75e079625003f9f48a43e7f0962032356f1e345b
CLI repo commit: 92985cc

V0.21.2

v0.21.2

Supported OS version details

	vSphere	Bare Metal	Nutanix	CloudStack	Snow
Ubuntu 20.04	✔	✔	✔	—	✔
Ubuntu 22.04	✔	✔	✔	—	—
Bottlerocket 1.26.1	✔	*	—	—	—
RHEL 8.x	✔	✔	✔	✔	—
RHEL 9.x	—	✔	✔	✔	—

* EKS Anywhere issue regarding deprecation of Bottlerocket bare metal variants

Upgraded

• Bumped EKS-D:
  • v1-31-eks-8
  • v1-30-eks-19
  • v1-29-eks-26
  • v1-28-eks-37
• Kube-rbac-proxy: v0.18.1 to v0.18.2
• Kube-vip: v0.8.6 to v0.8.7

Fixed

• Fix iam kubeconfig generation in workload clusters #9048
• Update collectors for curated packages namespaces #9044
• Fixed redhat image builds for ansible version v10.0.0 and up #4109

Weekly Release 2024-12-05

This is the weekly bundle and EKS-A CLI release from main.

Date: 2024-12-05
Build-tooling repo commit: 250d52547105a2768ad41a0553bc71e180b6a79b
CLI repo commit: 62653fa

Weekly Release 2024-11-28

This is the weekly bundle and EKS-A CLI release from main.

Date: 2024-11-28
Build-tooling repo commit: 2a0a052ba37687c80e0cd867edf1bd8df6874dee
CLI repo commit: 195ea65

v0.21.1

Supported OS version details

	vSphere	Bare Metal	Nutanix	CloudStack	Snow
Ubuntu 20.04	✔	✔	✔	—	✔
Ubuntu 22.04	✔	✔	✔	—	—
Bottlerocket 1.26.1	✔	*	—	—	—
RHEL 8.x	✔	✔	✔	✔	—
RHEL 9.x	—	✔	✔	✔	—

* EKS Anywhere issue regarding deprecation of Bottlerocket bare metal variants

Upgraded

• Bumped EKS-D:
  • v1-31-eks-7
  • v1-30-eks-18
  • v1-29-eks-25
  • v1-28-eks-36
• Cluster API Provider vSphere: v1.11.2 to v1.11.3
• Govmomi: v0.44.1 to v0.46.1
• Helm: v3.16.2 to v3.16.3
• Troubleshoot: v0.107.4 to v0.107.5

v0.20.9

Supported OS version details

	vSphere	Bare Metal	Nutanix	CloudStack	Snow
Ubuntu 20.04	✔	✔	✔	—	✔
Ubuntu 22.04	✔	✔	✔	—	—
Bottlerocket 1.20.5	✔	—	—	—	—
RHEL 8.x	✔	✔	✔	✔	—
RHEL 9.x	—	✔	✔	✔	—

Changed

• cilium: v1.13.20-eksa.1 to v1.13.21-eksa.5
• cloud-provider-vsphere
  • v1.29.1 to v1.29.2
  • v1.30.1 to v1.30.2
• EKS Distro:
  • v1-28-eks-34 to v1-28-eks-35
  • v1-29-eks-23 to v1-29-eks-24
  • v1-30-eks-16 to v1-30-eks-17
• cluster-api-provider-vsphere(CAPV): v1.10.3 to v1.10.4
• etcdadm-bootstrap-provider: v1.0.14 to v1.0.15
• kube-vip: v0.8.4 to v0.8.6

Fixed

• Release init-lock when the owner machine fails to launch. (#41)

Weekly Release 2024-11-07

This is the weekly bundle and EKS-A CLI release from main.

Date: 2024-11-07
Build-tooling repo commit: 6507fc0d168a2ad318e71ce156f3ad507caebab2
CLI repo commit: c448e9e

Weekly Release 2024-10-31

This is the weekly bundle and EKS-A CLI release from main.

Date: 2024-10-31
Build-tooling repo commit: 10f8e84960be10160d96927e88468285c13a89b5
CLI repo commit: 9713aab

v0.21.0

Supported OS version details

	vSphere	Bare Metal	Nutanix	CloudStack	Snow
Ubuntu 20.04	✔	✔	✔	—	✔
Ubuntu 22.04	✔	✔	✔	—	—
Bottlerocket 1.26.1	✔	*	—	—	—
RHEL 8.x	✔	✔	✔	✔	—
RHEL 9.x	—	✔	✔	✔	—

* EKS Anywhere issue regarding deprecation of Bottlerocket bare metal variants

Added

• Support for Kubernetes v1.31
• Support for configuring tinkerbell stack load balancer interface in cluster spec (#8805)
• GPU support for Nutanix provider (#8745)
• Support for worker nodes failure domains on Nutanix (#8837)

Upgraded

• Added EKS-D for 1-31:
  • v1-31-eks-6
• Cert Manager: v1.14.7 to v1.15.3
• Cilium: v1.13.20 to v1.14.12
• Cluster API: v1.7.2 to v1.8.3
• Cluster API Provider CloudStack: v0.4.10-rc.1 to v0.5.0
• Cluster API Provider Nutanix: v1.3.5 to v1.4.0
• Cluster API Provider vSphere: v1.10.4 to v1.11.2
• Cri-tools: v1.30.1 to v1.31.1
• Flux: v2.3.0 to v2.4.0
• Govmomi: v0.37.3 to v0.44.1
• Kind: v0.23.0 to v0.24.0
• Kube-vip: v0.7.0 to v0.8.0
• Tinkerbell Stack:
  • Rufio: v0.3.3 to v0.4.1
  • Hook: v0.8.1 to v0.9.1
• Troubleshoot: v0.93.2 to v0.107.4

Changed

• Use HookOS embedded images in Tinkerbell Templates by default (#8708 and #3471)

Removed

• Support for Kubernetes v1.26

v0.20.8

Supported OS version details

	vSphere	Bare Metal	Nutanix	CloudStack	Snow
Ubuntu 20.04	✔	✔	✔	—	✔
Ubuntu 22.04	✔	✔	✔	—	—
Bottlerocket 1.20.5	✔	—	—	—	—
RHEL 8.x	✔	✔	✔	✔	—
RHEL 9.x	—	✔	✔	✔	—

Must read before upgrade

• On October 11, 2024, a security issue CVE-2024-9594 was discovered in the Kubernetes Image Builder where default credentials are enabled during the image build process when using the Nutanix, OVA, QEMU or raw providers. The credentials can be used to gain root access. The credentials are disabled at the conclusion of the image build process. Kubernetes clusters are only affected if their nodes use VM images created via the Image Builder project. Clusters using virtual machine images built with Kubernetes Image Builder version v0.1.37 or earlier are affected if built with the Nutanix, OVA, QEMU or raw providers. These images built using previous versions of image-builder will be vulnerable only during the image build process, if an attacker was able to reach the VM where the image build was happening, login using these default credentials and modify the image at the time the image build was occurring. This CVE has been fixed in image-builder versions >= v0.1.38, which has been included in EKS Anywhere releases v0.19.11 and v0.20.8.
  • CVE-2024-9594: VM images built with Image Builder with some providers use default credentials during builds

Changed

• EKS Distro:
  • v1-28-eks-33 to v1-28-eks-34
  • v1-29-eks-22 to v1-29-eks-23
  • v1-30-eks-15 to v1-30-eks-16
• image-builder: v0.1.36 to v0.1.39
• cluster-api-provider-vsphere(CAPV): v1.10.3 to v1.10.4
• etcdadm-controller: v1.0.23 to v1.0.24
• etcdadm-bootstrap-provider: v1.0.13 to v1.0.14
• kube-vip: v0.8.3 to v0.8.4
• containerd: v1.7.22 to v1.7.23
• runc: v1.1.14 to v1.1.15
• local-path-provisioner: v0.0.29 to v0.0.30

Fixed

• Skip hardware validation logic for InPlace upgrades. #8779
• Status reconciliation of etcdadm cluster in etcdadm-controller when etcd-machines are unhealthy. #63
• Skip generating AWS IAM Kubeconfig on cluster upgrade. #8851