Release notes for Cluster API Provider AWS (CAPA) v2.10.0

Documentation

Changelog since v2.9.3

Urgent Upgrade Notes

(No, really, you MUST read this before you upgrade)

• Action required
  The short name for AWSManagedClusterTemplate has changed from amct to awsmct. If you have any automation that relies on the short name it will need to be updated. (#5662, @alexander-demicev)

Changes by Kind

Support

• Add Metadata kind to metadata (#5637, @damdo)
• Bump CAPI to v1.11 and k8s to v1.33 (#5720, @clebs)
• Bump Go to v1.24 (#5652, @bryan-cox)

Feature

• Add autoscaling from zero support with auto-population of AWSMachineTemplate capacity/nodeInfo (#5711, @LiangquanLi930)
• Add support for 'eus' channelGroupType in ROSA provider (#5651, @andreadecorte)
• Add support for AMD SEV-SNP instances (#5605, @fangge1212)
• Added support for configuring node auto repair functionality in EKS managed node groups (#5604, @afarbos)
• Added support for setting EKS AuthenticationMode (required for migrating to EKS Access Entries) (#5578, @joshfrench)
• Adding Rosa Role Config API and implementation (#5667, @serngawy)
• Adds support for provisioning a new instance on a newly allocated dedicated host. The dedicate host is associated only with the new instance. When the instance is deprovisioned, the dedicated host will be released as well. (#5631, @rvanderp3)
• Allow preserving EKS addons. (#5520, @alam0rt)
• Create only one nat gateway per AZ (#5602, @fiunchinho)
• Disable defaulting for .spec.ignition.version when .spec.ignition.storageType is set to UnencryptedUserData (#5641, @chrischdi)
• New API for provisioning network infrastructure for ROSA clusters (#5464, @mzazrivec)
• New ROSAMachinePool parameter for specifying AWS capacity reservation. (#5649, @mzazrivec)
• Support EKS upgrade policy (#5471, @phuhung273)

Documentation

• Fix AWSManagedControlPlaneSpec.OIDCIdentityProvider field documentation (#5579, @joshfrench)

Failing Test

• Fix e2e templates to create an AWSClusterRoleIdentity per Cluster (#5773, @chrischdi)

Bug or Regression

• @damdo moves to maintainer (#5780, @richardcase)
• Add update permission for AWSMachinePool finalizers as needed by OwnerReferencesPermissionEnforcement admission policy for setting BlockOwnerDeletion: true on AWSMachinePool AWSMachines (#5722, @AndiDog)
• Ensure CAPA only manages cluster-owned egress only internet gateway (#5684, @tthvo)
• Ensure custom service endpoints for supported AWS services are properly selected by
  both AWS SDKv2 and SDKv1 service ID (for backwards compatibility) (#5680, @tthvo)
• Fix ROSA control plane manage default ROSA machine pool (#5629, @serngawy)
• Fix awsmanagedcontrolplanes/finalizer permission (#5668, @serngawy)
• Fix delete ROSAControlPlane with multiple availability zones (#5730, @serngawy)
• Fix invalid cloud-config when EKS config has no files (#5768, @joshfrench)
• Fix lifecycle hooks being updated constantly, consider changes to RoleARN field as well (#5762, @AndiDog)
• Fix: CAPA v1beta1 to v1beta2 resources generated conversion webhook (#5739, @damdo)
• Fix: changing capacity-reservations-only to CapacityReservationsOnly and update some other webhook message to be more accurate (#5640, @huali9)
• Fix: disallow setting of CapacityReservationPreference: CapacityReservationsOnly when MarketType: Spot or SpotMarketOptions is set (#5633, @BraeTroutman)
• Only try to delete AWSMachine bootstrap data for non-machine pool machines (#5761, @AndiDog)
• Return early when owner Cluster is paused. (#5645, @fiunchinho)
• The clusterawsadm print-policy command now prints all the policies in the template generated by the print-cloudformation-template command, and when it outputs multiple policies, the output is valid JSON. (#5654, @dlipovetsky)

Uncategorized

• Add ROSA-HCP auto node feature for karpenter support (#5686, @serngawy)
• Add missing IAM permission ec2:RevokeSecurityGroupEgress for emptyRoutesDefaultVPCSecurityGroup option (#5342, @darkweaver87)
• Cancel instance refresh on any relevant change to ASG instead of blocking until previous one is finished (#5543, @AndiDog)
• Fix AWSMachineTemplate autoscaler test (#5765, @LiangquanLi930)
• Fix create ROSANetwork with specifying the availabilityZones (#5721, @serngawy)
• Log desired AMI architecture and owner ID on errors (#5703, @AndiDog)

The images for this release are:
registry.k8s.io/cluster-api-aws/cluster-api-aws-controller:v2.10.0

Thanks to all our contributors.