v1.66.0

Pre-release Note

This is the latest Bottlerocket release, and is currently being made available.
You may notice nodes upgrading to this new version, though it may not yet be available globally until the "pre-release" flag is removed.

Release Highlights

• Add new Kubernetes 1.37 variants (#4935)
  • Add aws-k8s-1.37, aws-k8s-1.37-nvidia, aws-k8s-1.37-fips, aws-k8s-1.37-nvidia-fips, vmware-k8s-1.37, and vmware-k8s-1.37-fips variants
  • All k8s-1.37 variants, including FIPS variants, use kernel-6.18 and containerd-2.3
• Add opt-in NVIDIA GPU DRA support for Kubernetes 1.34-1.37 NVIDIA variants, including FIPS variants (#4926, bottlerocket-core-kit#1035)
• Add NVIDIA driver branch selection at boot for aws-k8s-1.37-nvidia and aws-k8s-1.37-nvidia-fips (#4939, bottlerocket-core-kit#1041, bottlerocket-kernel-kit#536)
• Remove /usr/lib/nvidia/tesla/ compatibility symlinks inside containers on Kubernetes 1.37 NVIDIA variants (#4942, bottlerocket-core-kit#1044)

Security Fixes

• Fix Nitro Enclaves use-after-free on SLOT_ALLOC failure (bottlerocket-kernel-kit#550)
• Backport patches to fix TUN and AH6 bugs in the networking stack (bottlerocket-kernel-kit#559)

OS Changes

• Update bottlerocket-core-kit from 16.3.0 to 17.0.0 CHANGELOG (commits) (bottlerocket-core-kit#1045)
• Update bottlerocket-kernel-kit from 9.1.0 to 9.2.0 CHANGELOG (commits) (bottlerocket-kernel-kit#561)
• Update admin-container from 0.21.5 to 0.21.6 CHANGELOG (commits) (#4945)
• Update control-container from 0.21.5 to 0.21.6 CHANGELOG (commits) (#4945)
• Update bootstrap-container from 0.3.5 to 0.3.6 CHANGELOG (commits) (#4945)
• Boot aws-mantle-1 variants directly from UKIs (#4937, bottlerocket-core-kit#1042)
• Disable host containers by default and disable corgid SBOM uploads for aws-mantle-1 variants (#4937)

Orchestrator Changes

Kubernetes

• Add settings.kubernetes.memory-reservation-policy and settings.kubernetes.memory-throttling-factor (#4922, bottlerocket-core-kit#1029)

Build Changes

• Update Twoliter from 0.24.0 to 0.25.0 (#4944)
• Update bottlerocket-settings-models to v0.29.0 (#4926, #4939)
• Add key for signing UKIs locally (#4936)
• Add UKI mode for generating AWS Secure Boot keys (#4940)