v1.16.3

v1.16.3

IMPORTANT: v1.16.3 contains a regression (#2807) that may lead to high CPU consumption by the aws-node pod when the maximum number of ENIs have been attached to a node. This bug is being addressed in v1.16.4.

Release Notes

• With this release, the Network Policy agent image is updated to v1.0.8.
• With this release, the VPC CNI now supports IPv4 clusters where only a subset of nodes enable IPv6 egress (instead of all).

Changes since v1.16.2

• Dependency - Dependabot updates (@jdn5126 )
• Dependency - Upgrade Golang version to 1.21.6 (@jdn5126 )
• Improvement - Enable ENABLE_V6_EGRESS on Clusters with Mixed IPv6/IPv4 Subnets (@sergeylanzman )
• Improvement - cni-metrics-helper add podAnnotation value (@prysmakou )
• Improvement - Track max pods, simplify warm IP pool management (@jdn5126 )
• Improvement - Faster eni scaleup (@jchen6585 )

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.16.3/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.16.3/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.16.3/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.16.3/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.16.3/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3                                                 
amazon-k8s-cni-init:v1.16.3
amazon-k8s-cni:v1.16.3
amazon/aws-network-policy-agent:v1.0.8