Pre-release Note
This is the latest Bottlerocket release, and is currently being made available.
You may notice nodes upgrading to this new version, though it may not yet be available globally until the "pre-release" flag is removed.
Release Highlights
- Add new Kubernetes 1.37 variants (#4935)
- Add
aws-k8s-1.37,aws-k8s-1.37-nvidia,aws-k8s-1.37-fips,aws-k8s-1.37-nvidia-fips,vmware-k8s-1.37, andvmware-k8s-1.37-fipsvariants - All k8s-1.37 variants, including FIPS variants, use
kernel-6.18andcontainerd-2.3
- Add
- Add opt-in NVIDIA GPU DRA support for Kubernetes 1.34-1.37 NVIDIA variants, including FIPS variants (#4926, bottlerocket-core-kit#1035)
- Add NVIDIA driver branch selection at boot for
aws-k8s-1.37-nvidiaandaws-k8s-1.37-nvidia-fips(#4939, bottlerocket-core-kit#1041, bottlerocket-kernel-kit#536) - Remove
/usr/lib/nvidia/tesla/compatibility symlinks inside containers on Kubernetes 1.37 NVIDIA variants (#4942, bottlerocket-core-kit#1044)
Security Fixes
- Fix Nitro Enclaves use-after-free on
SLOT_ALLOCfailure (bottlerocket-kernel-kit#550) - Backport patches to fix TUN and AH6 bugs in the networking stack (bottlerocket-kernel-kit#559)
OS Changes
- Update
bottlerocket-core-kitfrom 16.3.0 to 17.0.0 CHANGELOG (commits) (bottlerocket-core-kit#1045) - Update
bottlerocket-kernel-kitfrom 9.1.0 to 9.2.0 CHANGELOG (commits) (bottlerocket-kernel-kit#561) - Update
admin-containerfrom 0.21.5 to 0.21.6 CHANGELOG (commits) (#4945) - Update
control-containerfrom 0.21.5 to 0.21.6 CHANGELOG (commits) (#4945) - Update
bootstrap-containerfrom 0.3.5 to 0.3.6 CHANGELOG (commits) (#4945) - Boot
aws-mantle-1variants directly from UKIs (#4937, bottlerocket-core-kit#1042) - Disable host containers by default and disable
corgidSBOM uploads foraws-mantle-1variants (#4937)
Orchestrator Changes
Kubernetes
- Add
settings.kubernetes.memory-reservation-policyandsettings.kubernetes.memory-throttling-factor(#4922, bottlerocket-core-kit#1029)