aws/eks-distro v1-19-eks-12

EKS Distro v1.19-12 Release

on GitHub

This changelog highlights the changes for v1-19-eks-12.

Version Upgrades

Kubernetes

• Upgraded Kubernetes from v1.19.13 to v1.19.15

Components

• AWS-IAM-Authenticator: upgrade from 0.5.2 to
  0.5.3

Base Image

Security updates to Amazon Linux 2.

Patch Changes

Patches Added

• 0014-EKS-PATCH-Fix-kubectl-version-unit-test.patch
  • Cherry-pick of upstream Kubernetes PR #103955, which is
    included in Kubernetes 1.23.
  • Fixes configuration requirement that results in test TestNewCmdVersionWithoutConfigFile failing for some
    developers.
• 0015-EKS-PATCH-Skip-TestLoopbackHostPortIPv6-run-on-non-I.patch
  • Cherry-pick of upstream Kubernetes PR #94376, which is
    included in Kubernetes 1.20.
  • Fixes TestLoopbackHostPortIPv6 test failure if there is no IPv6 loopback device configured.
• 0016-EKS-PATCH-apiserver-healthz-upper-log-verbosity-for-.patch
  • Silences cannot exclude some health checks, no health checks are installed matching "kms-provider-0".
  • This is logged when external health checker calls "/healthz?exclude=kms-provider-0" against an API server that does
    not enable KMS encryption. These changes reduce such logs to minimize the noise.
• 0017-EKS-PATCH-Get-inodes-and-disk-usage-via-pure-go.patch
  • Cherry-pick of upstream Kubernetes PR #96115, which is
    included in Kubernetes 1.22.
  • This patch and the patch 0018-EKS-PATCH-Add-test-for-counting-inodes-correct-with-hardlinks.patch, which was also
    added in this release, are tied together. This patch is the first commit in the above-mentioned PRs, while the other
    one is the second commit on the PR.
  • From the original upstream commit message (with minor formatting edits):

    Fix inode usage calculation to use filepath.Walk instead of executing an external find. Also calculate the disk usage while at it so we also get rid of the external dependency of nice and du. (Issue #95172)
    This is similar to what cadvisor does since commit google/cadvisor@046818d.
    This solves three problems: Counts number of inodes correct when there are hardlinks (#96114), Makes kubelet work without GNU findutils (#95186), [and] Makes kubelet work without GNU coreutils (#95172)

• 0018-EKS-PATCH-Add-test-for-counting-inodes-correct-with-hardlinks.patch
  • See 0017-EKS-PATCH-Get-inodes-and-disk-usage-via-pure-go.patch above.
• 0019-EKS-PATCH-ConsistentRead-tries-10-times.patch
  • Taken from a commit
    in Kubernetes PR #102059. The change made in the PR is part
    of Kubernetes 1.22.
  • From the original commit message:

    We've seen clusters where 3 attempts were not enough. Bumping to 10. The slowdown should be negligible and it will reduce retry attempts in the upper layers of kubelet.

• 0020-EKS-PATCH-Ignore-wait-no-child-processes-error-when-.patch
  • Cherry-pick of upstream Kubernetes PR #103780, which is
    included in Kubernetes 1.23.
  • This change fixes an issue related to a race condition.
    See Kubernetes Issue #103753.
  • From the original PR description:

    I've only fixed the exec commands that are part of Mount() and Unmount() functions and that too in the linux mount helper. Not touching others, since I'm not sure about the implications.

Patches Removed

• 0001-EKS-PATCH-Added-allowlist-CIDR-flag-use-klog.patch
  • Removed because it is an unneeded feature, which upstream Kubernetes does not seem interested in including.
• 0004-EKS-PATCH-volume-plugin-requests-patch.patch
  • Related to the now-removed 0001-EKS-PATCH-Added-allowlist-CIDR-flag-use-klog.patch. See removal note above.
• 0009-EKS-PATCH-Allow-override-of-kube-proxy-base-image.patch
  • Removed because it is an unneeded feature
• 0013-EKS-CHERRYPICK-Pass-additional-flags-to-subpath-moun.patch
  • Included in this version of Kubernetes.
    See Kubernetes PR #104340

Existing Patches

The existing patches have some minor changes, which are described below. None of these changes impact how patches are
applied or intended result of the patches.

• Numbers in patch filenames
  • In past releases, removing a patch would result in the number at the start of all subsequent patch filenames
    (e.g., 0016 in 0016-EKS-PATCH-...) to decrease so there would be no numerical gaps in the filenames. However,
    this practice made it difficult to track the history of a patch and view changes in PRs because renamed files would
    appear like new files.
  • Due to these reasons, this release preserves the filenames, even if earlier patches are deleted.
• Patch descriptions
  • The descriptions of most of the existing patches were improved to provided additional information about them.
• Minor changes to code in patches
  • Some patches had minor changes in their diff hunk and files changed due to earlier patches being removed in this
    release.

For additional information, see the changelog for this release.

Release Manifest

Download the release manifest here: kubernetes-1-19-eks-12.yaml