v0.21.1

Supported OS version details

	vSphere	Bare Metal	Nutanix	CloudStack	Snow
Ubuntu 20.04	✔	✔	✔	—	✔
Ubuntu 22.04	✔	✔	✔	—	—
Bottlerocket 1.26.1	✔	*	—	—	—
RHEL 8.x	✔	✔	✔	✔	—
RHEL 9.x	—	✔	✔	✔	—

* EKS Anywhere issue regarding deprecation of Bottlerocket bare metal variants

Upgraded

• Bumped EKS-D:
  • v1-31-eks-7
  • v1-30-eks-18
  • v1-29-eks-25
  • v1-28-eks-36
• Cluster API Provider vSphere: v1.11.2 to v1.11.3
• Govmomi: v0.44.1 to v0.46.1
• Helm: v3.16.2 to v3.16.3
• Troubleshoot: v0.107.4 to v0.107.5

v0.20.9

Supported OS version details

	vSphere	Bare Metal	Nutanix	CloudStack	Snow
Ubuntu 20.04	✔	✔	✔	—	✔
Ubuntu 22.04	✔	✔	✔	—	—
Bottlerocket 1.20.5	✔	—	—	—	—
RHEL 8.x	✔	✔	✔	✔	—
RHEL 9.x	—	✔	✔	✔	—

Changed

• cilium: v1.13.20-eksa.1 to v1.13.21-eksa.5
• cloud-provider-vsphere
  • v1.29.1 to v1.29.2
  • v1.30.1 to v1.30.2
• EKS Distro:
  • v1-28-eks-34 to v1-28-eks-35
  • v1-29-eks-23 to v1-29-eks-24
  • v1-30-eks-16 to v1-30-eks-17
• cluster-api-provider-vsphere(CAPV): v1.10.3 to v1.10.4
• etcdadm-bootstrap-provider: v1.0.14 to v1.0.15
• kube-vip: v0.8.4 to v0.8.6

Fixed

• Release init-lock when the owner machine fails to launch. (#41)

Weekly Release 2024-11-07

This is the weekly bundle and EKS-A CLI release from main.

Date: 2024-11-07
Build-tooling repo commit: 6507fc0d168a2ad318e71ce156f3ad507caebab2
CLI repo commit: c448e9e

Weekly Release 2024-10-31

This is the weekly bundle and EKS-A CLI release from main.

Date: 2024-10-31
Build-tooling repo commit: 10f8e84960be10160d96927e88468285c13a89b5
CLI repo commit: 9713aab

v0.21.0

Supported OS version details

	vSphere	Bare Metal	Nutanix	CloudStack	Snow
Ubuntu 20.04	✔	✔	✔	—	✔
Ubuntu 22.04	✔	✔	✔	—	—
Bottlerocket 1.26.1	✔	*	—	—	—
RHEL 8.x	✔	✔	✔	✔	—
RHEL 9.x	—	✔	✔	✔	—

* EKS Anywhere issue regarding deprecation of Bottlerocket bare metal variants

Added

• Support for Kubernetes v1.31
• Support for configuring tinkerbell stack load balancer interface in cluster spec (#8805)
• GPU support for Nutanix provider (#8745)
• Support for worker nodes failure domains on Nutanix (#8837)

Upgraded

• Added EKS-D for 1-31:
  • v1-31-eks-6
• Cert Manager: v1.14.7 to v1.15.3
• Cilium: v1.13.20 to v1.14.12
• Cluster API: v1.7.2 to v1.8.3
• Cluster API Provider CloudStack: v0.4.10-rc.1 to v0.5.0
• Cluster API Provider Nutanix: v1.3.5 to v1.4.0
• Cluster API Provider vSphere: v1.10.4 to v1.11.2
• Cri-tools: v1.30.1 to v1.31.1
• Flux: v2.3.0 to v2.4.0
• Govmomi: v0.37.3 to v0.44.1
• Kind: v0.23.0 to v0.24.0
• Kube-vip: v0.7.0 to v0.8.0
• Tinkerbell Stack:
  • Rufio: v0.3.3 to v0.4.1
  • Hook: v0.8.1 to v0.9.1
• Troubleshoot: v0.93.2 to v0.107.4

Changed

• Use HookOS embedded images in Tinkerbell Templates by default (#8708 and #3471)

Removed

• Support for Kubernetes v1.26

v0.20.8

Supported OS version details

	vSphere	Bare Metal	Nutanix	CloudStack	Snow
Ubuntu 20.04	✔	✔	✔	—	✔
Ubuntu 22.04	✔	✔	✔	—	—
Bottlerocket 1.20.5	✔	—	—	—	—
RHEL 8.x	✔	✔	✔	✔	—
RHEL 9.x	—	✔	✔	✔	—

Must read before upgrade

• On October 11, 2024, a security issue CVE-2024-9594 was discovered in the Kubernetes Image Builder where default credentials are enabled during the image build process when using the Nutanix, OVA, QEMU or raw providers. The credentials can be used to gain root access. The credentials are disabled at the conclusion of the image build process. Kubernetes clusters are only affected if their nodes use VM images created via the Image Builder project. Clusters using virtual machine images built with Kubernetes Image Builder version v0.1.37 or earlier are affected if built with the Nutanix, OVA, QEMU or raw providers. These images built using previous versions of image-builder will be vulnerable only during the image build process, if an attacker was able to reach the VM where the image build was happening, login using these default credentials and modify the image at the time the image build was occurring. This CVE has been fixed in image-builder versions >= v0.1.38, which has been included in EKS Anywhere releases v0.19.11 and v0.20.8.
  • CVE-2024-9594: VM images built with Image Builder with some providers use default credentials during builds

Changed

• EKS Distro:
  • v1-28-eks-33 to v1-28-eks-34
  • v1-29-eks-22 to v1-29-eks-23
  • v1-30-eks-15 to v1-30-eks-16
• image-builder: v0.1.36 to v0.1.39
• cluster-api-provider-vsphere(CAPV): v1.10.3 to v1.10.4
• etcdadm-controller: v1.0.23 to v1.0.24
• etcdadm-bootstrap-provider: v1.0.13 to v1.0.14
• kube-vip: v0.8.3 to v0.8.4
• containerd: v1.7.22 to v1.7.23
• runc: v1.1.14 to v1.1.15
• local-path-provisioner: v0.0.29 to v0.0.30

Fixed

• Skip hardware validation logic for InPlace upgrades. #8779
• Status reconciliation of etcdadm cluster in etcdadm-controller when etcd-machines are unhealthy. #63
• Skip generating AWS IAM Kubeconfig on cluster upgrade. #8851

Weekly Release 2024-10-24

This is the weekly bundle and EKS-A CLI release from main.

Date: 2024-10-24
Build-tooling repo commit: 1d8f6dfb24a7940049a1375531031bba0eaed46d
CLI repo commit: 37b11d0

v0.19.11

v0.19.11

Supported OS version details

	vSphere	Bare Metal	Nutanix	CloudStack	Snow
Ubuntu 20.04	✔	✔	✔	—	✔
Ubuntu 22.04	✔	✔	✔	—	—
Bottlerocket 1.20.5	✔	*	—	—	—
RHEL 8.x	✔	✔	✔	✔	—
RHEL 9.x	—	—	✔	✔	—

Must read before upgrade

• On October 11, 2024, a security issue CVE-2024-9594 was discovered in the Kubernetes Image Builder where default credentials are enabled during the image build process when using the Nutanix, OVA, QEMU or raw providers. The credentials can be used to gain root access. The credentials are disabled at the conclusion of the image build process. Kubernetes clusters are only affected if their nodes use VM images created via the Image Builder project. Clusters using virtual machine images built with Kubernetes Image Builder version v0.1.37 or earlier are affected if built with the Nutanix, OVA, QEMU or raw providers. These images built using previous versions of image-builder will be vulnerable only during the image build process, if an attacker was able to reach the VM where the image build was happening, login using these default credentials and modify the image at the time the image build was occurring. This CVE has been fixed in image-builder versions >= v0.1.38, which has been included in EKS Anywhere release v0.19.11.
  • CVE-2024-9594: VM images built with Image Builder with some providers use default credentials during builds

Changed

• EKS Distro:
  • v1-27-eks-38 to v1-27-eks-40
  • v1-28-eks-31 to v1-28-eks-34
  • v1-29-eks-20 to v1-29-eks-23
• Image-builder: v0.1.36 to v0.1.39 (CVE-2024-9594)
• containerd: v1.7.22 to v1.7.23
• Cilium: v1.13.19 to v1.13.20
• etcdadm-controller: v1.0.23 to v1.0.24
• etcdadm-bootstrap-provider: v1.0.13 to v1.0.14
• local-path-provisioner: v0.0.29 to v0.0.30
• runc: v1.1.14 to v1.1.15

Fixed

• Skip hardware validation logic for InPlace upgrades. #8779
• Status reconciliation of etcdadm cluster in etcdadm-controller when etcd-machines are unhealthy. #63
• Skip generating AWS IAM Kubeconfig on cluster upgrade. #8851

Weekly Release 2024-10-17

This is the weekly bundle and EKS-A CLI release from main.

Date: 2024-10-17
Build-tooling repo commit: 8c6cb61c206f03c401b2799fc1291054eac7fb9d
CLI repo commit: b1ebe82

v0.20.7

v0.20.7

Supported OS version details

	vSphere	Bare Metal	Nutanix	CloudStack	Snow
Ubuntu 20.04	✔	✔	✔	—	✔
Ubuntu 22.04	✔	✔	✔	—	—
Bottlerocket 1.20.5	✔	—	—	—	—
RHEL 8.x	✔	✔	✔	✔	—
RHEL 9.x	—	✔	✔	✔	—

Changed

• EKS Distro:
  • v1-27-eks-39 to v1-27-eks-40
  • v1-28-eks-32 to v1-28-eks-33
  • v1-29-eks-21 to v1-29-eks-22
  • v1-30-eks-14 to v1-30-eks-15
• cilium: v1.13.19 to v1.13.20
• image-builder: v0.1.30 to v0.1.36
• cluster-api-provider-vsphere(CAPV): v1.10.2 to v1.10.3

Fixed

• Fixed support for efi on rhel 9 raw builds. (#3824)