v2.12.1

Release notes for Cluster API Provider AWS (CAPA) v2.12.1

Documentation

Changelog since v2.11.1

What's Changed

⚠ API Changes

• ✨ feat(ROSA): add optional sts:ExternalId support for ROSA account roles and control plane by @michaelryanmcneill in #6049

🚀 Features

• ✨ feat: Eks pod identity for controller role by @joshfrench in #5809
• 🌱 Adding CAPA AMIs Inventory Report and release-tool command to find missing ami by @wendy-ha18 in #6020
• 🐛 fix: only manage security groups for ENIs tagged by CAPA by @fiunchinho in #5813
• ✨ feat: add support for OCM role creation by @andclt in #6055

🐛 Bug Fixes

• 🐛 fix: cloud build image not found by @richardcase in #5949
• 🐛 Fix GC not covering all resources by using API response paging by @AndiDog in #5943
• 🐛 Fix AWS SDK request metrics not being captured by @AndiDog in #5924
• 🐛 Changed DHA to require hostAffinity to be host to prevent instance drift by @vr4manta in #5910
• 🐛fix: return actual error from NAT gateway creation failures by @tthvo in #5962
• 🐛 fix: grandfather hostAffinity validation on AWSMachine updates by @damdo in #5971
• 🐛 Expose IPv6 addresses on AWSMachine Status by @jiaqiluo in #5993
• 🐛 fix: CRD reference docs not regenerating for v1beta2 API types by @michaelryanmcneill in #6051
• 🐛 Fix 404 for "Specifying the IAM Role for ROSA HCP Management Components" page by @michaelryanmcneill in #6054
• 🌱 Replace static sleep with active polling for IAM access key propagation by @Arpit529Srivastava in #5862
• 🐛 fix(e2e): use targeted patch for EKS upgrade policy test by @damdo in #6064
• 🐛 fix(eks): add ObservedGeneration to AWSManagedControlPlane to prevent missed spec changes by @damdo in #6084
• 🐛 fix: Prevent volumeSize updates in ROSAMachinePool by @andclt in #6086
• 🐛 fix: clean up orphaned ENIs before subnet deletion at teardown by @damdo in #6073
• 🐛 fix: add missing RBAC delete permission for MachinePools in ROSA controller by @andclt in #6089

📖 Documentation

• 📖 Documentation Update to Creating a ROSA HCP cluster directions by @tinaafitz in #5920
• 📖 Proposal for ROSA networking by @mzazrivec in #5381
• 📖 docs(api): clarify DNSResolutionCheck default behavior by @damdo in #6078

Dependencies

• 🌱 Bump github.com/go-git/go-git/v5 from 5.16.0 to 5.17.1 in /hack/tools by @dependabot[bot] in #5918
• 🌱 Bump github.com/moby/spdystream from 0.5.0 to 0.5.1 by @dependabot[bot] in #5952
• 🌱 Bump google.golang.org/grpc from 1.75.1 to 1.79.3 by @dependabot[bot] in #5912
• 🌱 Bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 in /hack/tools by @dependabot[bot] in #5957
• 🌱 Bump github.com/docker/cli from 25.0.4+incompatible to 29.2.0+incompatible in /hack/tools by @dependabot[bot] in #5886
• 🌱 Bump go.opentelemetry.io/otel from 1.39.0 to 1.41.0 in /hack/tools by @dependabot[bot] in #5983
• 🌱 Bump go.opentelemetry.io/otel from 1.39.0 to 1.41.0 by @dependabot[bot] in #5984
• 🌱 Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in #5929
• 🌱 Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.51.4 to 1.97.3 in /hack/tools by @dependabot[bot] in #5933
• 🌱 Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.88.4 to 1.97.3 by @dependabot[bot] in #5935
• 🌱 Bump go.mongodb.org/mongo-driver from 1.14.0 to 1.17.7 in /hack/tools by @dependabot[bot] in #6061

🌱 Others

• 🌱 chore: update github workflows to use sha hashes by @richardcase in #5948
• 🌱 Bump EndBug/add-and-commit from 9 to 10 by @dependabot[bot] in #5916
• 🌱 Bump artyom/mdlinks from 0.2.0 to 0.4.2 by @dependabot[bot] in #5959
• 🌱 Bump actions/checkout from 5.0.1 to 6.0.2 by @dependabot[bot] in #5958
• 🌱 Bump actions/setup-go from 6.0.0 to 6.4.0 by @dependabot[bot] in #5960
• 🐛 fix: isolate ROSAExpiredCreds test from local AWS credentials by @andclt in #5973
• 🌱 Bump actions/checkout from 5.0.1 to 6.0.2 by @dependabot[bot] in #5991
• 🌱 Use auto-detected parallelism for EKS e2e tests by @damdo in #5996
• 🐛 fix: migrate goreleaser from v1 to v2 to fix Go 1.25+ build failure by @raykrueger in #6004
• ✨ Add AWS Nitro Enclave support to AWSLaunchTemplate by @raykrueger in #5928
• 🌱 Print diagnostics to stderr in boskos.py by @AndiDog in #6010
• 🌱 Bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 by @dependabot[bot] in #6014
• 🌱 feat: Auto detect Kubernetest release version for publish AMI by @wendy-ha18 in #5990
• 🌱 Bump github/codeql-action from 4.35.2 to 4.35.5 by @dependabot[bot] in #6022
• 🌱 feat: Adding workflow for auto build and publishing AMIs by @wendy-ha18 in #6009
• 🌱 Bump github/codeql-action from 4.35.5 to 4.36.0 by @dependabot[bot] in #6027
• 🌱 Bump actions/checkout from 4.2.2 to 6.0.2 by @dependabot[bot] in #6028
• 🌱 Bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by @dependabot[bot] in #6029
• 🌱 Bump actions/setup-go from 5.5.0 to 6.4.0 by @dependabot[bot] in #6030
• 🌱 Bump aws-actions/configure-aws-credentials from 6.1.0 to 6.2.0 by @dependabot[bot] in #6040
• 🌱 chore: update dependabot config by @richardcase in #6039
• 🌱 Bump the all-github-actions group with 3 updates by @dependabot[bot] in #6041
• 🌱 Re-enable dependency report generation in main by @AnmolxSingh in #5851
• 🌱 Bump cloudbuild to use latest gcb-docker-gcloud image by @Prajyot-Parab in #6045
• 🌱 chore: remove old classic elb upgrade test by @richardcase in #6058
• 🐛 fix(e2e): increase multitenancy STS role session duration to 1 hour by @damdo in #6068
• 🐛 ROSA Fix cross account creation issues-6037 by @serngawy in #6038
• 🌱 Bump CAPI to v1.12.2, k8s to v1.34 and controller-runtime to v0.22.5 by @clebs in #5857
• 🌱 build(ami): bump image-builder default to v0.1.52 by @damdo in #6065
• 🌱 Bump the all-github-actions group with 3 updates by @dependabot[bot] in #6072
• 🌱 chore: ami housekeeping scripts by @richardcase in #6057
• 🌱 test(e2e): bump EKS addons (VPC v1.21.1, kube-proxy v1.34.6) by @AndiDog in #5992
• 🐛 fix: allow cluster-scoped resources to bypass allowedNamepsaces checks by @andclt in #6080
• 🐛 fix: create CAPI-contract kubeconfig for external auth ROSA clusters by @judexzhu in #6099
• [release-2.12] 🌱 release 2.12 updates by @k8s-infra-cherrypick-robot in #6119

New Contributors

• @raykrueger made their first contribution in #6004
• @jiaqiluo made their first contribution in #5993
• @AnmolxSingh made their first contribution in #5851
• @michaelryanmcneill made their first contribution in #6051
• @judexzhu made their first contribution in #6099

The images for this release are:

registry.k8s.io/cluster-api-aws/cluster-api-aws-controller:v2.11.1

Thanks to all our contributors.