Skip to content

🥳 aws-vpc-cni v1.21.2 Automated Release! 🥑#1330

Merged
jaydeokar merged 1 commit into
aws:masterfrom
eks-networking-bot:aws-vpc-cni-v1.21.2-646f1367
May 21, 2026
Merged

🥳 aws-vpc-cni v1.21.2 Automated Release! 🥑#1330
jaydeokar merged 1 commit into
aws:masterfrom
eks-networking-bot:aws-vpc-cni-v1.21.2-646f1367

Conversation

@eks-networking-bot
Copy link
Copy Markdown
Contributor

aws-vpc-cni v1.21.2 Automated Chart Sync! 🤖🤖

Release Notes 📝:

What's Changed

  • Amazon VPC CNI now propagates the EC2 security group idle connection tracking timeout settings from the instance's primary ENI to all secondary ENIs it creates, ensuring consistent connection tracking behavior across all network interfaces. To customize these settings on the primary ENI, use a custom launch template to configure the desired connection tracking timeout values.

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts

Features

Bug Fixes

Improvements

Full Changelog: aws/amazon-vpc-cni-k8s@v1.21.1...v1.21.2

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/release-1.21/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/release-1.21/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/release-1.21/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/refs/heads/release-1.21/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:
Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/release-1.21/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3
amazon-k8s-cni-init:v1.21.2
amazon-k8s-cni:v1.21.2
amazon/aws-network-policy-agent:v1.3.5

Copy link
Copy Markdown
Contributor

@jaydeokar jaydeokar left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR syncs the stable/aws-vpc-cni Helm chart to the upstream aws-vpc-cni v1.21.2 release, updating default images/configuration to match the new release features and fixes.

Changes:

  • Bump chart/app versions and default image tags to aws-vpc-cni v1.21.2 (and node agent to v1.3.5).
  • Switch default container pull policies to IfNotPresent and wire imagePullPolicy for the aws-node container.
  • Add support for extraVolumeMounts on the init container and introduce nodeAgent.conntrackCacheTableSize value + daemonset arg.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File Description
stable/aws-vpc-cni/values.yaml Updates default tags/pullPolicy; adds conntrackCacheTableSize; bumps VPC_CNI_VERSION.
stable/aws-vpc-cni/templates/daemonset.yaml Adds init extraVolumeMounts, sets aws-node imagePullPolicy, and passes new node agent conntrack flag.
stable/aws-vpc-cni/README.md Updates documented defaults and adds documentation for conntrackCacheTableSize.
stable/aws-vpc-cni/Chart.yaml Bumps chart version/appVersion to 1.21.2.
Comments suppressed due to low confidence (2)

stable/aws-vpc-cni/README.md:92

  • README table rows for nodeAgent.resources use the misspelling "defualt"; this should be "default" to avoid propagating typos into chart documentation.
| `nodeAgent.conntrackCacheTableSize` | Size of the conntrack cache table (valid range: 32K-1024K) | `524288`            |
| `nodeAgent.enableIpv6`  | Enable IPv6 support for Node Agent                      | `false`                             |
| `nodeAgent.resources`   | Node Agent resources, will defualt to .Values.resources if not set | `{}`                     |
| `nodeAgent.logLevel`    | Node Agent logging verbosity level.                     | `debug`                             |

stable/aws-vpc-cni/README.md:95

  • README parameter description for extraVolumeMounts says "Array to add extra mount"; consider changing this to "mounts" (or "volume mounts") for correct grammar and clarity.
| `nodeAgent.logLevel`    | Node Agent logging verbosity level.                     | `debug`                             |
| `extraVolumes`          | Array to add extra volumes                              | `[]`                                |
| `extraVolumeMounts`     | Array to add extra mount                                | `[]`                                |
| `nodeSelector`          | Node labels for pod assignment                          | `{}`                                |

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread stable/aws-vpc-cni/README.md
Comment thread stable/aws-vpc-cni/Chart.yaml
@jaydeokar jaydeokar merged commit 2558998 into aws:master May 21, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants