Skip to content

EKS Distro v1.21-7 Release
Compare
Choose a tag to compare
@kschumy kschumy released this 24 Jun 16:48
· 2215 commits to main since this release
v1-21-eks-7
5dcca42
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

This changelog highlights the changes for v1-21-eks-7.

Version Upgrades

Kubernetes

  • Upgraded Kubernetes from v1.21.2 to v1.21.5

Components

  • AWS-IAM-Authenticator: upgrade from 0.5.2 to
    0.5.3
  • coreDNS: upgraded from 1.8.3 to
    1.8.4
  • Metrics Server
    • Upgraded from 0.5.0 to 0.5.20

Base Image

Security updates to Amazon Linux 2.

Patch Changes

Patches Added

  • 0002-EKS-PATCH-Pass-region-to-sts-client.patch
    • Update to the now-removed 0002-EKS-PATCH-Pass-region-to-sts-client-for-ap-east-1.patch due because an update
      to aws-sdk-go.
  • 0013-EKS-PATCH-ConsistentRead-tries-10-times.patch
    • Taken from a commit
      in Kubernetes PR #102059. The change made in the PR is part
      of Kubernetes 1.22.
    • From the original commit message:

      We've seen clusters where 3 attempts were not enough. Bumping to 10. The slowdown should be negligible and it will reduce retry attempts in the upper layers of kubelet.

  • 0014-EKS-PATCH-Ignore-wait-no-child-processes-error-when-calling-mo.patch
    • Cherry-pick of upstream Kubernetes PR #103780, which is
      included in Kubernetes 1.23. This change fixes an issue related to a race condition.
      See Kubernetes Issue #103753.
    • From the original PR description:

      I've only fixed the exec commands that are part of Mount() and Unmount() functions and that too in the linux mount helper. Not touching others, since I'm not sure about the implications.

  • 0015-EKS-PATCH-Get-inodes-and-disk-usage-via-pure-go.patch
    • Cherry-pick of upstream Kubernetes PR #96115, which is
      included in Kubernetes 1.22. There was an upstream PR opened
      to cherry-pick this change for 1.21, but it was not approved before the release ofthe patch version of Kubernetes
      EKS-Distro uses for 1.21.
    • This patch and the EKS-Distro patch 0016-EKS-PATCH-Add-test-for-counting-inodes-correct-with-hardlinks.patch are
      tied together. This patch is the first commit in the above-mentioned PRs, while the other one is the second commit
      on the PR.
    • From the original upstream commit message (with minor formatting edits):

      Fix inode usage calculation to use filepath.Walk instead of executing an external find. Also calculate the disk usage while at it so we also get rid of the external dependency of nice and du. (Issue #95172)
      This is similar to what cadvisor does since commit google/cadvisor@046818d.
      This solves three problems: Counts number of inodes correct when there are hardlinks (#96114), Makes kubelet work without GNU findutils (#95186), [and] Makes kubelet work without GNU coreutils (#95172)

  • 0016-EKS-PATCH-Add-test-for-counting-inodes-correct-with-hardlinks.patch
    • See 0015-EKS-PATCH-Get-inodes-and-disk-usage-via-pure-go.patch above.
  • 0017-EKS-PATCH-apiserver-healthz-upper-log-verbosity-for-.patch
    • Silences cannot exclude some health checks, no health checks are installed matching "kms-provider-0".
    • This is logged when external health checker calls "/healthz?exclude=kms-provider-0" against an API server that does
      not enable KMS encryption. These changes reduce such logs to minimize the noise.

Patches Removed

  • 0001-EKS-PATCH-Added-allowlist-CIDR-flag-use-klog.patch
    • Removed because it is an unneeded feature, which upstream Kubernetes does not seem interested in including.
  • 0002-EKS-PATCH-Pass-region-to-sts-client-for-ap-east-1.patch
    • Replaced by 0002-EKS-PATCH-Pass-region-to-sts-client.patch because of an update to aws-sdk-go.
  • 0004-EKS-PATCH-Lookup-sts-endpoint-from-custom-map.patch
    • Removed because an update to aws-sdk-go made patch irrelevant.
  • 0009-EKS-PATCH-Pass-additional-flags-to-subpath-mount-to-avoid-flak.patch
  • 0010-EKS-PATCH-Add-missing-interface-method-in-mount_unsupported.go.patch
  • 0011-EKS-PATCH-Update-the-unit-tests-to-handle-mountFlags.patch
  • 0012-EKS-PATCH-Keep-MakeMountArgSensitive-and-add-a-new-signature-t.patch

Existing Patches

The existing patches have some minor changes, which are described below. None of these changes impact how patches are
applied or intended result of the patches.

  • Numbers in patch filenames
    • In past releases, removing a patch would result in the number at the start of all subsequent patch filenames
      (e.g., 0016 in 0016-EKS-PATCH-...) to decrease so there would be no numerical gaps in the filenames. However,
      this practice made it difficult to track the history of a patch and view changes in PRs because renamed files would
      appear like new files.
    • Due to these reasons, this release preserves the filenames, even if earlier patches are deleted.
  • Patch descriptions
    • The descriptions of most of the existing patches were improved to provided additional information about them.
  • Minor changes to code in patches
    • Some patches had minor changes in their diff hunk and files changed due to earlier patches being removed in this
      release.

For additional information, see the changelog for this release.

Release Manifest

Download the release manifest here: kubernetes-1-21-eks-7.yaml

Name Version URI
aws-iam-authenticator 0.5.3 public.ecr.aws/eks-distro/kubernetes-sigs/aws-iam-authenticator:v0.5.3-eks-1-21-7
coredns 1.8.4 public.ecr.aws/eks-distro/coredns/coredns:v1.8.4-eks-1-21-7
csi-snapshotter 3.0.3 public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v3.0.3-eks-1-21-7
etcd 3.4.16 public.ecr.aws/eks-distro/etcd-io/etcd:v3.4.16-eks-1-21-7
external-attacher 3.1.0 public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v3.1.0-eks-1-21-7
external-provisioner 2.1.1 public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v2.1.1-eks-1-21-7
external-resizer 1.1.0 public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.1.0-eks-1-21-7
go-runner 0.9.0 public.ecr.aws/eks-distro/kubernetes/go-runner:v0.9.0-eks-1-21-7
kube-apiserver 1.21.5 public.ecr.aws/eks-distro/kubernetes/kube-apiserver:v1.21.5-eks-1-21-7
kube-controller-manager 1.21.5 public.ecr.aws/eks-distro/kubernetes/kube-controller-manager:v1.21.5-eks-1-21-7
kube-proxy 1.21.5 public.ecr.aws/eks-distro/kubernetes/kube-proxy:v1.21.5-eks-1-21-7
kube-proxy-base 0.9.0 public.ecr.aws/eks-distro/kubernetes/kube-proxy-base:v0.9.0-eks-1-21-7
kube-scheduler 1.21.5 public.ecr.aws/eks-distro/kubernetes/kube-scheduler:v1.21.5-eks-1-21-7
livenessprobe 2.2.0 public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.2.0-eks-1-21-7
metrics-server 0.5.2 public.ecr.aws/eks-distro/kubernetes-sigs/metrics-server:v0.5.2-eks-1-21-7
node-driver-registrar 2.1.0 public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.1.0-eks-1-21-7
pause 1.21.5 public.ecr.aws/eks-distro/kubernetes/pause:v1.21.5-eks-1-21-7
snapshot-controller 3.0.3 public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/snapshot-controller:v3.0.3-eks-1-21-7
snapshot-validation-webhook 3.0.3 public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/snapshot-validation-webhook:v3.0.3-eks-1-21-7
Assets 2
Loading