Warning
If you have Network Policy enabled, this release is not backward compatible. The Network Policy Agent's internal pod identifier format has changed. Existing enforcement state is migrated automatically on upgrade, but if you later downgrade, enforcement will not apply to pods created before the rollback until their nodes are replaced. If you do not use Network Policy, this change does not affect you.
What's Changed
- Cherrypick changes to 1.22.4 from main by @parlakisik in #3747
- fix: hyperpod ESD issue (cherry-pick of #3754 to release-1.22) by @parlakisik in #3756
- Cherry pick fixes for metrics helper tests by @jupdec in #3759
- IRSA for cni-metrics-helper tests by @jaydeokar in #3765
New Contributors
- @parlakisik made their first contribution in #3747
Full Changelog: v1.22.3...v1.22.4
To manually apply this release:
kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.22.4/config/master/aws-k8s-cni.yaml
Note that the following regions use different manifests:
us-gov-east-1:
kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.22.4/config/master/aws-k8s-cni-us-gov-east-1.yaml
us-gov-west-1:
kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.22.4/config/master/aws-k8s-cni-us-gov-west-1.yaml
cn:
kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/refs/heads/v1.22.4/config/master/aws-k8s-cni-cn.yaml
To apply this release using helm:
Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.22.4/charts/aws-vpc-cni/README.md#installing-the-chart
Verify the update:
$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3
amazon-k8s-cni-init:v1.22.4
amazon-k8s-cni:v1.22.4
amazon/aws-network-policy-agent:v1.4.0
