AMI Release v20230711

AMI Release v20230711

• amazon-eks-gpu-node-1.27-v20230711
• amazon-eks-gpu-node-1.26-v20230711
• amazon-eks-gpu-node-1.25-v20230711
• amazon-eks-gpu-node-1.24-v20230711
• amazon-eks-gpu-node-1.23-v20230711
• amazon-eks-arm64-node-1.27-v20230711
• amazon-eks-arm64-node-1.26-v20230711
• amazon-eks-arm64-node-1.25-v20230711
• amazon-eks-arm64-node-1.24-v20230711
• amazon-eks-arm64-node-1.23-v20230711
• amazon-eks-node-1.27-v20230711
• amazon-eks-node-1.26-v20230711
• amazon-eks-node-1.25-v20230711
• amazon-eks-node-1.24-v20230711
• amazon-eks-node-1.23-v20230711

Release versions for these AMIs:

• 1.27.3-20230711
• 1.26.6-20230711
• 1.25.11-20230711
• 1.24.15-20230711
• 1.23.17-20230711

Binaries used to build these AMIs are published:

• s3://amazon-eks/1.27.3/2023-06-30/
• s3://amazon-eks/1.26.6/2023-06-30/
• s3://amazon-eks/1.25.11/2023-06-30/
• s3://amazon-eks/1.24.15/2023-06-30/
• s3://amazon-eks/1.23.17/2023-06-30/

AMI details:

• kernel:
  • Kubernetes 1.23 and below: 5.4.247-162.350.amzn2
  • Kubernetes 1.24 and above: 5.10.184-175.731.amzn2
• dockerd: 20.10.23-1.amzn2.0.1
  • Note that Docker is not installed on AMI's with Kubernetes 1.25+.
• containerd: 1.6.19-1.amzn2.0.1
• runc: 1.1.5-1.amzn2
• cuda: 11.4.0-1
• nvidia-container-runtime-hook: 1.4.0-1.amzn2
• amazon-ssm-agent: 3.1.1732.0-1.amzn2

Notable changes:

• Kubelet versions bumped up for k8s version 1.23-1.27 to address bug
• Source VPC CNI plugin version bumped from 0.8 to 1.2.0

Note: release notes have been. updated to correct an issue with the git tag.

AMI Release v20230703

AMI Release v20230703

• amazon-eks-gpu-node-1.27-v20230703
• amazon-eks-gpu-node-1.26-v20230703
• amazon-eks-gpu-node-1.25-v20230703
• amazon-eks-gpu-node-1.24-v20230703
• amazon-eks-gpu-node-1.23-v20230703
• amazon-eks-gpu-node-1.22-v20230703
• amazon-eks-arm64-node-1.27-v20230703
• amazon-eks-arm64-node-1.26-v20230703
• amazon-eks-arm64-node-1.25-v20230703
• amazon-eks-arm64-node-1.24-v20230703
• amazon-eks-arm64-node-1.23-v20230703
• amazon-eks-arm64-node-1.22-v20230703
• amazon-eks-node-1.27-v20230703
• amazon-eks-node-1.26-v20230703
• amazon-eks-node-1.25-v20230703
• amazon-eks-node-1.24-v20230703
• amazon-eks-node-1.23-v20230703
• amazon-eks-node-1.22-v20230703

Release versions for these AMIs:

• 1.27.1-20230703
• 1.26.4-20230703
• 1.25.9-20230703
• 1.24.13-20230703
• 1.23.17-20230703
• 1.22.17-20230703

Binaries used to build these AMIs are published:

• s3://amazon-eks/1.27.1/2023-04-19/
• s3://amazon-eks/1.26.4/2023-05-11/
• s3://amazon-eks/1.25.9/2023-05-11/
• s3://amazon-eks/1.24.13/2023-05-11/
• s3://amazon-eks/1.23.17/2023-05-11/
• s3://amazon-eks/1.22.17/2023-05-11/

AMI details:

• kernel:
  • Kubernetes 1.23 and below: 5.4.247-162.350.amzn2.x86_64
  • Kubernetes 1.24 and above: 5.10.184-175.731.amzn2.x86_64
• dockerd: 20.10.23-1.amzn2.0.1
  • Note that Docker is not installed on AMI's with Kubernetes 1.25+.
• containerd: 1.6.19-1.amzn2.0.1
• runc: 1.1.5-1.amzn2
• cuda: 11.4.0-1
• nvidia-container-runtime-hook: 1.4.0-1.amzn2
• amazon-ssm-agent: 3.1.1732.0-1.amzn2

Notable changes:

• This is the last AMI release for Kubernetes 1.22
• Update Kernel to 5.4.247-162.350.amzn2 to address ALASKERNEL-5.4-2023-048, CVE-2023-1206
• Update Kernel to 5.10.184-175.731.amzn2 to address ALASKERNEL-5.10-2023-035, CVE-2023-1206
• Use recommended clocksources (#1328)
• Add configurable working directory (#1231)
• Update eni-max-pods.txt (#1330)
• Mount bpffs by default on 1.25+ (#1320)

AMI Release v20230607

AMI Release v20230607

• amazon-eks-gpu-node-1.27-v20230607
• amazon-eks-gpu-node-1.26-v20230607
• amazon-eks-gpu-node-1.25-v20230607
• amazon-eks-gpu-node-1.24-v20230607
• amazon-eks-gpu-node-1.23-v20230607
• amazon-eks-gpu-node-1.22-v20230607
• amazon-eks-arm64-node-1.27-v20230607
• amazon-eks-arm64-node-1.26-v20230607
• amazon-eks-arm64-node-1.25-v20230607
• amazon-eks-arm64-node-1.24-v20230607
• amazon-eks-arm64-node-1.23-v20230607
• amazon-eks-arm64-node-1.22-v20230607
• amazon-eks-node-1.27-v20230607
• amazon-eks-node-1.26-v20230607
• amazon-eks-node-1.25-v20230607
• amazon-eks-node-1.24-v20230607
• amazon-eks-node-1.23-v20230607
• amazon-eks-node-1.22-v20230607

Release versions for these AMIs:

• 1.27.1-20230607
• 1.26.4-20230607
• 1.25.9-20230607
• 1.24.13-20230607
• 1.23.17-20230607
• 1.22.17-20230607

Binaries used to build these AMIs are published:

• s3://amazon-eks/1.27.1/2023-04-19/
• s3://amazon-eks/1.26.4/2023-05-11/
• s3://amazon-eks/1.25.9/2023-05-11/
• s3://amazon-eks/1.24.13/2023-05-11/
• s3://amazon-eks/1.23.17/2023-05-11/
• s3://amazon-eks/1.22.17/2023-05-11/

AMI details:

• kernel:
  • Kubernetes 1.23 and below: 5.4.242-156.349.amzn2
  • Kubernetes 1.24 and above: 5.10.179-168.710.amzn2
• dockerd: 20.10.23-1.amzn2.0.1
  • Note that Docker is not installed on AMI's with Kubernetes 1.25+.
• containerd: 1.6.19-1.amzn2.0.1
• runc: 1.1.5-1.amzn2
• cuda: 11.4.0-1
• nvidia-container-runtime-hook: 1.4.0-1.amzn2
• amazon-ssm-agent: 3.1.1732.0-1.amzn2

Notable changes:

• 5.4 kernel update to 5.4.242-156.349.amzn2 and 5.10 kernel update to 5.10.179-168.710.amzn2 address CVE-2023-32233
• Updating runc version to 1.1.5-1.amzn2 which contains fixes for CVE-2023-28642 and CVE-2023-27561.

AMI Release v20230526

AMI Release v20230526

• amazon-eks-gpu-node-1.27-v20230526
• amazon-eks-gpu-node-1.26-v20230526
• amazon-eks-gpu-node-1.25-v20230526
• amazon-eks-gpu-node-1.24-v20230526
• amazon-eks-gpu-node-1.23-v20230526
• amazon-eks-gpu-node-1.22-v20230526
• amazon-eks-arm64-node-1.27-v20230526
• amazon-eks-arm64-node-1.26-v20230526
• amazon-eks-arm64-node-1.25-v20230526
• amazon-eks-arm64-node-1.24-v20230526
• amazon-eks-arm64-node-1.23-v20230526
• amazon-eks-arm64-node-1.22-v20230526
• amazon-eks-node-1.27-v20230526
• amazon-eks-node-1.26-v20230526
• amazon-eks-node-1.25-v20230526
• amazon-eks-node-1.24-v20230526
• amazon-eks-node-1.23-v20230526
• amazon-eks-node-1.22-v20230526

Release versions for these AMIs:

• 1.27.1-20230526
• 1.26.4-20230526
• 1.25.9-20230526
• 1.24.13-20230526
• 1.23.17-20230526
• 1.22.17-20230526

Binaries used to build these AMIs are published:

• s3://amazon-eks/1.27.1/2023-04-19/
• s3://amazon-eks/1.26.4/2023-05-11/
• s3://amazon-eks/1.25.9/2023-05-11/
• s3://amazon-eks/1.24.13/2023-05-11/
• s3://amazon-eks/1.23.17/2023-05-11/
• s3://amazon-eks/1.22.17/2023-05-11/

AMI details:

• kernel:
  • Kubernetes 1.23 and below: 5.4.242-155.348.amzn2
  • Kubernetes 1.24 and above: 5.10.179-166.674.amzn2
• dockerd: 20.10.23-1.amzn2.0.1
  • Note that Docker is not installed on AMI's with Kubernetes 1.25+.
• containerd: 1.6.19-1.amzn2.0.1
• runc: 1.1.4-1.amzn2
• cuda: 11.4.0-1
• nvidia-container-runtime-hook: 1.4.0-1.amzn2
• amazon-ssm-agent: 3.1.1732.0-1.amzn2

Notable changes:

• 5.4 kernel update to 5.4.242-155.348.amzn2 addresses CVE ALAS2KERNEL-5.4-2023-045
• 5.10 kernel update to 5.10.179-166.674.amzn2 addresses ALAS2KERNEL-5.10-2023-032
• Glib update to glib2-2.56.1-9.amzn2 addresses ALAS-2023-2049

AMI Release v20230513

AMI Release v20230513

• amazon-eks-gpu-node-1.27-v20230513
• amazon-eks-gpu-node-1.26-v20230513
• amazon-eks-gpu-node-1.25-v20230513
• amazon-eks-gpu-node-1.24-v20230513
• amazon-eks-gpu-node-1.23-v20230513
• amazon-eks-gpu-node-1.22-v20230513
• amazon-eks-arm64-node-1.27-v20230513
• amazon-eks-arm64-node-1.26-v20230513
• amazon-eks-arm64-node-1.25-v20230513
• amazon-eks-arm64-node-1.24-v20230513
• amazon-eks-arm64-node-1.23-v20230513
• amazon-eks-arm64-node-1.22-v20230513
• amazon-eks-node-1.27-v20230513
• amazon-eks-node-1.26-v20230513
• amazon-eks-node-1.25-v20230513
• amazon-eks-node-1.24-v20230513
• amazon-eks-node-1.23-v20230513
• amazon-eks-node-1.22-v20230513

Release versions for these AMIs:

• 1.27.1-20230513
• 1.26.4-20230513
• 1.25.9-20230513
• 1.24.13-20230513
• 1.23.17-20230513
• 1.22.17-20230513

Binaries used to build these AMIs are published:

• s3://amazon-eks/1.27.1/2023-04-19/
• s3://amazon-eks/1.26.4/2023-05-11/
• s3://amazon-eks/1.25.9/2023-05-11/
• s3://amazon-eks/1.24.13/2023-05-11/
• s3://amazon-eks/1.23.17/2023-05-11/
• s3://amazon-eks/1.22.17/2023-05-11/

AMI details:

• kernel:
  • Kubernetes 1.23 and below: 5.4.241-150.347.amzn2
  • Kubernetes 1.24 and above: 5.10.178-162.673.amzn2
• dockerd: 20.10.23-1.amzn2.0.1
  • Note that Docker is not installed on AMI's with Kubernetes 1.25+.
• containerd: 1.6.19-1.amzn2.0.1
• runc: 1.1.4-1.amzn2
• cuda: 11.4.0-1
• nvidia-container-runtime-hook: 1.4.0-1.amzn2
• amazon-ssm-agent: 3.1.1732.0-1.amzn2

Notable changes:

• Add support for Kubernetes 1.27 (#1300)

Other changes:

• Updated max pods for i4g instance types (#1296)

AMI Release v20230509

AMI Release v20230509

• amazon-eks-gpu-node-1.26-v20230509
• amazon-eks-gpu-node-1.25-v20230509
• amazon-eks-gpu-node-1.24-v20230509
• amazon-eks-gpu-node-1.23-v20230509
• amazon-eks-gpu-node-1.22-v20230509
• amazon-eks-arm64-node-1.26-v20230509
• amazon-eks-arm64-node-1.25-v20230509
• amazon-eks-arm64-node-1.24-v20230509
• amazon-eks-arm64-node-1.23-v20230509
• amazon-eks-arm64-node-1.22-v20230509
• amazon-eks-node-1.26-v20230509
• amazon-eks-node-1.25-v20230509
• amazon-eks-node-1.24-v20230509
• amazon-eks-node-1.23-v20230509
• amazon-eks-node-1.22-v20230509

Release versions for these AMIs:

• 1.26.2-20230509
• 1.25.7-20230509
• 1.24.11-20230509
• 1.23.17-20230509
• 1.22.17-20230509

Binaries used to build these AMIs are published:

• s3://amazon-eks/1.26.2/2023-03-17/
• s3://amazon-eks/1.25.7/2023-03-17/
• s3://amazon-eks/1.24.11/2023-03-17/
• s3://amazon-eks/1.23.17/2023-03-17/
• s3://amazon-eks/1.22.17/2023-03-17/

AMI details:

• kernel:
  • Kubernetes 1.23 and below: 5.4.241-150.347.amzn2
  • Kubernetes 1.24 and above: 5.10.178-162.673.amzn2
• dockerd: 20.10.23-1.amzn2.0.1
  • Note that Docker is not installed on AMI's with Kubernetes 1.25+.
• containerd: 1.6.19-1.amzn2.0.1
• runc: 1.1.4-1.amzn2
• cuda: 11.4.0-1
• nvidia-container-runtime-hook: 1.4.0-1.amzn2
• amazon-ssm-agent: 3.1.1732.0-1.amzn2

Notable changes:

• The new AMIs have updated docker version 20.10.23-1.amzn2.0.1 that addresses two docker CVEs; CVE-2022-36109 - docker and CVE-2022-37708 - docker.
• For the GPU Variants of these AMIs, the Nvidia Fabric Manager version is upgraded from 470.161.03-1 to 470.182.03-1.
• Fix ECR pattern for aws-cn (#1280)
• Fix imds setting for multiple enis on ipv6 (1275)

AMI Release v20230501

AMI Release v20230501

• amazon-eks-gpu-node-1.26-v20230501
• amazon-eks-gpu-node-1.25-v20230501
• amazon-eks-gpu-node-1.24-v20230501
• amazon-eks-gpu-node-1.23-v20230501
• amazon-eks-gpu-node-1.22-v20230501
• amazon-eks-arm64-node-1.26-v20230501
• amazon-eks-arm64-node-1.25-v20230501
• amazon-eks-arm64-node-1.24-v20230501
• amazon-eks-arm64-node-1.23-v20230501
• amazon-eks-arm64-node-1.22-v20230501
• amazon-eks-node-1.26-v20230501
• amazon-eks-node-1.25-v20230501
• amazon-eks-node-1.24-v20230501
• amazon-eks-node-1.23-v20230501
• amazon-eks-node-1.22-v20230501

Release versions for these AMIs:

• 1.26.2-20230501
• 1.25.7-20230501
• 1.24.11-20230501
• 1.23.17-20230501
• 1.22.17-20230501

Binaries used to build these AMIs are published:

• s3://amazon-eks/1.26.2/2023-03-17/
• s3://amazon-eks/1.25.7/2023-03-17/
• s3://amazon-eks/1.24.11/2023-03-17/
• s3://amazon-eks/1.23.17/2023-03-17/
• s3://amazon-eks/1.22.17/2023-03-17/

AMI details:

• kernel:
  • Kubernetes 1.23 and below: 5.4.241-150.347.amzn2
  • Kubernetes 1.24 and above: 5.10.178-162.673.amzn2
• dockerd: 20.10.17-1.amzn2.0.1
  • Note that Docker is not installed on AMI's with Kubernetes 1.25+.
• containerd: 1.6.19-1.amzn2.0.1
• runc: 1.1.4-1.amzn2
• cuda: 11.4.0-1
• nvidia-container-runtime-hook: 1.4.0-1.amzn2
• amazon-ssm-agent: 3.1.1732.0-1.amzn2

Notable changes:

• Add bootstrap option to create a local NVMe raid0 or individual volume mounts (#1171)
• Improve bootstrap logging (#1276)
• Use credential provider API v1 in 1.27+, v1alpha1 in 1.26- (#1269)
• Override hostname to match EC2's PrivateDnsName (#1264)
• Add ethtool (#1261)
• Update kernel-5.10 for ALASKERNEL-5.10-2023-031
• Kernel version upgrade to 5.10.178-162.673.amzn2 fixes the Containers failing to create and probe exec errors related to seccomp on recent kernel-5.10 versions issue

AMI Release v20230411

AMI Release v20230411

• amazon-eks-gpu-node-1.26-v20230411
• amazon-eks-gpu-node-1.25-v20230411
• amazon-eks-gpu-node-1.24-v20230411
• amazon-eks-gpu-node-1.23-v20230411
• amazon-eks-gpu-node-1.22-v20230411
• amazon-eks-arm64-node-1.26-v20230411
• amazon-eks-arm64-node-1.25-v20230411
• amazon-eks-arm64-node-1.24-v20230411
• amazon-eks-arm64-node-1.23-v20230411
• amazon-eks-arm64-node-1.22-v20230411
• amazon-eks-node-1.26-v20230411
• amazon-eks-node-1.25-v20230411
• amazon-eks-node-1.24-v20230411
• amazon-eks-node-1.23-v20230411
• amazon-eks-node-1.22-v20230411

Release versions for these AMIs:

• 1.26.2-20230411
• 1.25.7-20230411
• 1.24.11-20230411
• 1.23.17-20230411
• 1.22.17-20230411

Binaries used to build these AMIs are published:

• s3://amazon-eks/1.26.2/2023-03-17/
• s3://amazon-eks/1.25.7/2023-03-17/
• s3://amazon-eks/1.24.11/2023-03-17/
• s3://amazon-eks/1.23.17/2023-03-17/
• s3://amazon-eks/1.22.17/2023-03-17/

AMI details:

• kernel:
  • Kubernetes 1.23 and below: 5.4.238-148.347.amzn2
  • Kubernetes 1.24 and above: 5.10.176-157.645.amzn2
    • ⚠️ Be aware that this kernel version exhibits an issue related to seccomp security profiles. More information is available in #1219.
• dockerd: 20.10.17-1.amzn2.0.1
  • Note that Docker is not installed on AMI's with Kubernetes 1.25+.
• containerd: 1.6.19-1.amzn2.0.1
• runc: 1.1.4
• cuda: 11.4.0-1
• nvidia-container-runtime-hook: 1.4.0-1.amzn2
• amazon-ssm-agent: 3.1.1732.0

Notable changes:

• The AMI changes include update for 5.4 kernel version from 5.4.238-148.346.amzn2 to kernel-5.4.238-148.347.amzn2. kernel-5.4.238-148.346 had a fatal issue affecting SMB mounts in which a null pointer dereference caused a panic. As a result, this package was removed from the Amazon Linux 2 repositories.

AMI Release v20230406

AMI Release v20230406

• amazon-eks-gpu-node-1.26-v20230406
• amazon-eks-gpu-node-1.25-v20230406
• amazon-eks-gpu-node-1.24-v20230406
• amazon-eks-gpu-node-1.23-v20230406
• amazon-eks-gpu-node-1.22-v20230406
• amazon-eks-arm64-node-1.26-v20230406
• amazon-eks-arm64-node-1.25-v20230406
• amazon-eks-arm64-node-1.24-v20230406
• amazon-eks-arm64-node-1.23-v20230406
• amazon-eks-arm64-node-1.22-v20230406
• amazon-eks-node-1.26-v20230406
• amazon-eks-node-1.25-v20230406
• amazon-eks-node-1.24-v20230406
• amazon-eks-node-1.23-v20230406
• amazon-eks-node-1.22-v20230406

Release versions for these AMIs:

• 1.26.2-20230406
• 1.25.7-20230406
• 1.24.11-20230406
• 1.23.17-20230406
• 1.22.17-20230406

Binaries used to build these AMIs are published:

• s3://amazon-eks/1.26.2/2023-03-17/
• s3://amazon-eks/1.25.7/2023-03-17/
• s3://amazon-eks/1.24.11/2023-03-17/
• s3://amazon-eks/1.23.17/2023-03-17/
• s3://amazon-eks/1.22.17/2023-03-17/

AMI details:

• kernel:
  • Kubernetes 1.23 and below: 5.4.238-148.346.amzn2
    • ⚠️ Be aware that an issue with SMB mounts has been identified in this kernel version, in which a null pointer dereference causes a panic. The issue has been fixed in 5.4.238-148.347.amzn2, which will be included in the next AMI release.
  • Kubernetes 1.24 and above: 5.10.173-154.642.amzn2
• dockerd: 20.10.17-1.amzn2.0.1
  • Note that Docker is not installed on AMI's with Kubernetes 1.25+.
• containerd: 1.6.19-1.amzn2.0.1
• runc: 1.1.4
• cuda: 11.4.0-1
• nvidia-container-runtime-hook: 1.4.0-1.amzn2
• amazon-ssm-agent: 3.1.1732.0

Notable changes:

• Add support for Kubernetes 1.26 (#1246)
• Add support inf2, trn1n instance types (#1251)
• Updated containerd to address:
  • ALASDOCKER-2023-023
• Fixed ecr-credential-provider flags not being passed correctly to kubelet (#1240)
  • Added --image-credential-provider-config and --image-credential-provider-bin-dir flags to the systemd units.
  • Set KubeletCredentialProviders feature flag to true in the kubelet JSON config.

Other changes:

• Use gp3 volume_type for 1.27+ (#1197)
• Use default kubelet API QPS for 1.27+ (#1241)
• Remove --container-runtime kubelet flag for 1.27+ (#1250)

AMI Release v20230322

AMI Release v20230322

• amazon-eks-gpu-node-1.25-v20230322
• amazon-eks-gpu-node-1.24-v20230322
• amazon-eks-gpu-node-1.23-v20230322
• amazon-eks-gpu-node-1.22-v20230322
• amazon-eks-arm64-node-1.25-v20230322
• amazon-eks-arm64-node-1.24-v20230322
• amazon-eks-arm64-node-1.23-v20230322
• amazon-eks-arm64-node-1.22-v20230322
• amazon-eks-node-1.25-v20230322
• amazon-eks-node-1.24-v20230322
• amazon-eks-node-1.23-v20230322
• amazon-eks-node-1.22-v20230322

Release versions for these AMIs:

• 1.25.7-20230322
• 1.24.11-20230322
• 1.23.17-20230322
• 1.22.17-20230322

Binaries used to build these AMIs are published:

• s3://amazon-eks/1.25.7/2023-03-17/
• s3://amazon-eks/1.24.11/2023-03-17/
• s3://amazon-eks/1.23.17/2023-03-17/
• s3://amazon-eks/1.22.17/2023-03-17/

AMI details:

• kernel:
  • Kubernetes 1.23 and below: 5.4.235-144.344.amzn2
  • Kubernetes 1.24 and above: 5.10.173-154.642.amzn2
  • The GPU AMI will continue to use kernel-5.4 for all Kubernetes versions as we work to address a compatibility issue with nvidia-driver-latest-dkms (#1222).
• dockerd: 20.10.17-1.amzn2.0.1
  • Note that with Kubernetes 1.25+, Docker is only installed on GPU AMI's. This is subject to change as we remove unnecessary dependencies, and we recommend completing the migration to containerd immediately.
• containerd: 1.6.6-1.amzn2.0.2
• runc: 1.1.4-1.amzn2
• cuda: 11.4.0-1
• nvidia-container-runtime-hook: 1.4.0-1.amzn2
• amazon-ssm-agent: 3.1.1732.0-1.amzn2

Notable changes:

• Validate package versionlocks (#1195)
• Updated kernel-5.4 to address:
  • ALASKERNEL-5.4-2023-043
• Updated kernel-5.10 to address:
  • ALASKERNEL-5.10-2023-027
  • ALASKERNEL-5.10-2023-028