giantswarm / aws-operator

Manages Kubernetes clusters running on AWS (before Cluster API)
https://www.giantswarm.io/
Apache License 2.0
131 stars 22 forks source link

Update module github.com/aws/amazon-vpc-cni-k8s to v1.15.3 #3639

Closed renovate[bot] closed 11 months ago

renovate[bot] commented 11 months ago

Mend Renovate

This PR contains the following updates:

Package Type Update Change
github.com/aws/amazon-vpc-cni-k8s require minor v1.12.1 -> v1.15.3

Release Notes

aws/amazon-vpc-cni-k8s (github.com/aws/amazon-vpc-cni-k8s) ### [`v1.15.3`](https://togithub.com/aws/amazon-vpc-cni-k8s/releases/tag/v1.15.3) [Compare Source](https://togithub.com/aws/amazon-vpc-cni-k8s/compare/v1.15.1...v1.15.3) #### v1.15.3 ##### Major Changes since v1.15.1 - Bug - [Fully address CVE-2023-44487](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2626) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [feat(chart): Made node agent optional](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2623) ([@​stevehipwell](https://togithub.com/stevehipwell) ) - Improvement - [Update Golang to 1.21.3](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2616) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [Go module updates and Golang builder image update](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2615) ([@​jdn5126](https://togithub.com/jdn5126) ) ##### Note - The bundled Network Policy agent image has been updated to v1.0.5. - The Network Policy agent container can now be removed from the Daemonset during helm installation by setting `nodeAgent.enabled` to `false`. ##### To manually apply this release: kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.15.3/config/master/aws-k8s-cni.yaml Note that the following regions use different manifests: *us-gov-east-1*: kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.15.3/config/master/aws-k8s-cni-us-gov-east-1.yaml *us-gov-west-1*: kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.15.3/config/master/aws-k8s-cni-us-gov-west-1.yaml *cn*: kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.15.3/config/master/aws-k8s-cni-cn.yaml ##### To apply this release using helm: Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.15.3/charts/aws-vpc-cni/README.md#installing-the-chart ##### Verify the update: $ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3 amazon-k8s-cni-init:v1.15.3 amazon-k8s-cni:v1.15.3 amazon/aws-network-policy-agent:v1.0.5 ### [`v1.15.1`](https://togithub.com/aws/amazon-vpc-cni-k8s/blob/HEAD/CHANGELOG.md#v1151) [Compare Source](https://togithub.com/aws/amazon-vpc-cni-k8s/compare/v1.15.0...v1.15.1) - Bug - [Do not patch CNINode for custom networking unless SGPP is enabled](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2591) ([@​jdn5126](https://togithub.com/jdn5126) ) - Bug - [Pass CNINode scheme to k8s client only](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2570) ([@​jdn5126](https://togithub.com/jdn5126) ) - Bug - [fix(chart): Switch base64 encoded cniConfig.fileContents to the binaryData](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2552) ([@​VLZZZ](https://togithub.com/VLZZZ) ) - Cleanup - [chore: remove refs to deprecated io/ioutil](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2541) ([@​testwill](https://togithub.com/testwill) ) - Documentation - [Update example table 'Pod per Prefixes' value](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2573) ([@​rlaisqls](https://togithub.com/rlaisqls) ) - Documentation - [Bandwidth plugin with NP is currently unsupported](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2572) ([@​jayanthvn](https://togithub.com/jayanthvn) ) - Documentation - [Update the use of privileged flag in aws-vpc-cni manifest](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2555) ([@​jaydeokar](https://togithub.com/jaydeokar) ) - Improvement - [Dependabot Updates](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2605) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [Update Golang Builder image](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2586) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [Add ENABLE_V4\_EGRESS env var to control IPv4 egress in IPv6 clusters](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2577) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [Reduce API calls](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2575) ([@​jchen6585](https://togithub.com/jchen6585) ) - Improvement - [Add cni version to userAgent](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2566) ([@​jchen6585](https://togithub.com/jchen6585) ) - Improvement - [bump controller runtime to 0.16.1](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2548) ([@​jchen6585](https://togithub.com/jchen6585) ) - Improvement - [Instance limits api pkg](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2528) ([@​jchen6585](https://togithub.com/jchen6585) ) - Improvement - [Mimic VPC-RC limit struture](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2516) ([@​jchen6585](https://togithub.com/jchen6585) ) - Metrics - [rename warm pool metrics](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2569) ([@​lnhanks](https://togithub.com/lnhanks) ) - Metrics - [Only metrics](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2557) ([@​lnhanks](https://togithub.com/lnhanks) ) - Testing - [Remove self-managed node group from custom-networking suite](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2590) ([@​jdn5126](https://togithub.com/jdn5126) ) - Testing - [Integration test cleanup: Security Groups for Pods](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2547) ([@​jdn5126](https://togithub.com/jdn5126) ) ### [`v1.15.0`](https://togithub.com/aws/amazon-vpc-cni-k8s/blob/HEAD/CHANGELOG.md#v1150) [Compare Source](https://togithub.com/aws/amazon-vpc-cni-k8s/compare/v1.14.1...v1.15.0) - Feature - [Add support for VPC Resource Controller's CNINode (reintroduce #​2442)](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2503) ([@​haouc](https://togithub.com/haouc) ) - Feature - [Add DISABLE_CONTAINER_V6 to disable IPv6 networking in container network namespaces](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2499) ([@​jdn5126](https://togithub.com/jdn5126) ) - Feature - [IP_COOLDOWN_PERIOD environment variable for ip cooldown period configuration](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2492) ([@​jchen6585](https://togithub.com/jchen6585) ) - Improvement - [Fix test kubeconfig, upgrade helm](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2509) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [Update instance limits for upcoming vpc-cni release](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2506) ([@​jchen6585](https://togithub.com/jchen6585) ) - Improvement - [Upgrade controller-runtime to v0.15.0](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2481) ([@​jdn5126](https://togithub.com/jdn5126) ) ### [`v1.14.1`](https://togithub.com/aws/amazon-vpc-cni-k8s/blob/HEAD/CHANGELOG.md#v1141) [Compare Source](https://togithub.com/aws/amazon-vpc-cni-k8s/compare/v1.14.0...v1.14.1) - Improvement - [Update aws-eks-nodeagent image version to v1.0.2](https://togithub.com/aws/aws-network-policy-agent/pull/51) ([@​jayanthvn](https://togithub.com/jayanthvn)) ### [`v1.14.0`](https://togithub.com/aws/amazon-vpc-cni-k8s/blob/HEAD/CHANGELOG.md#v1140) [Compare Source](https://togithub.com/aws/amazon-vpc-cni-k8s/compare/v1.13.4...v1.14.0) - Feature - `v1.14.0` introduces Kubernetes Network Policy support. This is accomplished via the `aws-eks-nodeagent` container, which is now present in the `aws-node` pod. ### [`v1.13.4`](https://togithub.com/aws/amazon-vpc-cni-k8s/blob/HEAD/CHANGELOG.md#v1134) [Compare Source](https://togithub.com/aws/amazon-vpc-cni-k8s/compare/v1.13.3...v1.13.4) - Bug - [RefreshSecurityGroups must be called after unmanaged ENIs are set](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2475) ([@​jdn5126](https://togithub.com/jdn5126) ) - Bug - [Fix event recorder initialization and add check to log](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2467) ([@​jdn5126](https://togithub.com/jdn5126) ) ### [`v1.13.3`](https://togithub.com/aws/amazon-vpc-cni-k8s/blob/HEAD/CHANGELOG.md#v1133) [Compare Source](https://togithub.com/aws/amazon-vpc-cni-k8s/compare/v1.13.2...v1.13.3) - Bug - [Decrease memory usage by K8S Clients](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2463) ([@​jdn5126](https://togithub.com/jdn5126) ) - Documentation - [update docs and CNI logging](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2433) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [Updates instance limits including c7gn](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2438) ([@​mmerkes](https://togithub.com/mmerkes) ) ### [`v1.13.2`](https://togithub.com/aws/amazon-vpc-cni-k8s/blob/HEAD/CHANGELOG.md#v1132) [Compare Source](https://togithub.com/aws/amazon-vpc-cni-k8s/compare/v1.13.0...v1.13.2) - Bug - [Sync node security groups to cache before node initialization](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2427) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [Fix hard-coded nitro instance types: p4de.24xlarge and c7g.metal](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2428) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [Upgrade to Go 1.20 and apply dependabot updates](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2412) - Improvement - [Set iptables mode automatically and deprecate ENABLE_NFTABLES](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2402) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [Upgrade client-go and controller-runtime modules](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2396) ([@​jdn5126](https://togithub.com/jdn5126) ) ### [`v1.13.0`](https://togithub.com/aws/amazon-vpc-cni-k8s/blob/HEAD/CHANGELOG.md#v1130) [Compare Source](https://togithub.com/aws/amazon-vpc-cni-k8s/compare/v1.12.6...v1.13.0) - Bug - [Increase datastore pool at startup](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2354) ([@​jdn5126](https://togithub.com/jdn5126) ) - Bug - [Deallocate IP address according to warm IP target when multiple enis are present](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2368) ([@​bikashmishra100](https://togithub.com/bikashmishra100) ) - Bug - [Return success from CNI DEL when IPAMD is unreachable](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2350) ([@​jdn5126](https://togithub.com/jdn5126) ) - Bug - [Fix for aws-vpc-cni chart with tolerations to produce syntax valid yaml](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2345) ([@​Bourne-ID](https://togithub.com/Bourne-ID) ) - Bug - [adding ip check for annotatePod in ipamd](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2328) ([@​jerryhe1999](https://togithub.com/jerryhe1999) ) - Feature - [Introduce DISABLE_LEAKED_ENI_CLEANUP to disable leaked ENI cleanup task](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2370) ([@​jdn5126](https://togithub.com/jdn5126) ) - Feature - [Add IPv6 egress support to eks IPv4 cluster](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2361) ([@​wanyufe](https://togithub.com/wanyufe) ) - Feature - [feat(chart): Refactored image template logic for endpoint flexibility](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2335) ([@​stevehipwell](https://togithub.com/stevehipwell) ) - Feature - [add AWS_EC2\_ENDPOINT variable for custom endpoint](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2326) ([@​jihunseol](https://togithub.com/jihunseol) ) - Improvement - [Refactor egress-v4-cni plugin to support unit testing](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2353) ([@​wanyufe](https://togithub.com/wanyufe) ) - Improvement - [Update instance limits and core plugins version in preparation for upcoming VPC CNI release](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2390) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [refactoring eniconfig func to only take node as parameter](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2387) ([@​haouc](https://togithub.com/haouc) ) - Improvement - [Remove go mod download from Dockerfiles](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2383) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [Add apiVersion to MY_NODE_NAME](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2372) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [install all core CNI plugins via init container](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2355) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [Make all the aws vpc cni environmental variables case insensitive](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2334) ([@​jerryhe1999](https://togithub.com/jerryhe1999) ) - Improvement - [resource limit on init container in eks addon](https://togithub.com/aws/amazon-vpc-cni-k8s/issues/2191) ([@​pdeva](https://togithub.com/pdeva) ) - Testing - [Add integration test for POD v4/v6 egress traffic](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2371) ([@​wanyufe](https://togithub.com/wanyufe) ) ### [`v1.12.6`](https://togithub.com/aws/amazon-vpc-cni-k8s/blob/HEAD/CHANGELOG.md#v1126) [Compare Source](https://togithub.com/aws/amazon-vpc-cni-k8s/compare/v1.12.5...v1.12.6) - Bug - [Fix MTU parameter in egress-v4-cni plugin](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2295) ([@​jdn5126](https://togithub.com/jdn5126) ) - Documentation - [Fixing the log message to be meaningful](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2260) ([@​rajeeshckr](https://togithub.com/rajeeshckr) ) - Improvement - [Add bmn-sf1.metal instance support](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2286) ([@​vpineda1996](https://togithub.com/vpineda1996) ) - Improvement - [Support routing to external IPs behind service](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2243) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [Use Go 1.19; fix egress-v4-cni MTU parsing, update containerd](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2303) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [Added enviroment variable to allow ipamd to manage the ENIs on a non schedulable node](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2296) ([@​rajeeshckr](https://togithub.com/rajeeshckr) ) - Improvement - [Use GET for IAM Permissions event; update controller-runtime from 0.13.1 to 0.14.4 and client-go from v0.25.5 to v0.26.1](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2304) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [Remove old checkpoint migration logic; update containerd version](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2307) ([@​jdn5126](https://togithub.com/jdn5126) ) ### [`v1.12.5`](https://togithub.com/aws/amazon-vpc-cni-k8s/blob/HEAD/CHANGELOG.md#v1125) [Compare Source](https://togithub.com/aws/amazon-vpc-cni-k8s/compare/v1.12.2...v1.12.5) - Bug - [Handle private IP exceeded error](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2210) ([@​jayanthvn](https://togithub.com/jayanthvn) ) - Documentation - [doc: document AWS_VPC_K8S_CNI_LOGLEVEL for cni-metric-helper helm chart](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2226) ([@​csantanapr](https://togithub.com/csantanapr) ) - Documentation - [Added cni-metrics-helper docs](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2187) ([@​0xquark](https://togithub.com/0xquark) ) - Improvement - [Update golang builder image](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2255) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [Update golang builder image](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2271) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [run make generate-limits](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2235) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [Add M7g, R7g instance](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2250) ([@​Issacwww](https://togithub.com/Issacwww) ) - Improvement - [Update client-go and k8s packages](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2204) ([@​jaydeokar](https://togithub.com/jaydeokar) ) - Improvement - [Refactor cni-metrics-helper chart for eks charts release](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2201) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [fix: Upgrade to golang.org/x/net@v0.7.0](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2273) ([@​ellistarn](https://togithub.com/ellistarn) ) ### [`v1.12.2`](https://togithub.com/aws/amazon-vpc-cni-k8s/blob/HEAD/CHANGELOG.md#v1122) [Compare Source](https://togithub.com/aws/amazon-vpc-cni-k8s/compare/v1.12.1...v1.12.2) - Bug - [Cherry-pick prometheus/client_golang module update to address CVE](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2239) ([@​jdn5126](https://togithub.com/jdn5126) ) - Improvement - [Minimal base image for cni-metrics-helper minimal base image](https://togithub.com/aws/amazon-vpc-cni-k8s/pull/2189) ([@​jdn5126](https://togithub.com/jdn5126) )

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.

renovate[bot] commented 11 months ago

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (v1.15.3). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.