Release notes for Cluster API Provider AWS (CAPA) v2.12.1
Changelog since v2.11.1
What's Changed
⚠ API Changes
- ✨ feat(ROSA): add optional sts:ExternalId support for ROSA account roles and control plane by @michaelryanmcneill in #6049
🚀 Features
- ✨ feat: Eks pod identity for controller role by @joshfrench in #5809
- 🌱 Adding CAPA AMIs Inventory Report and release-tool command to find missing ami by @wendy-ha18 in #6020
- 🐛 fix: only manage security groups for ENIs tagged by CAPA by @fiunchinho in #5813
- ✨ feat: add support for OCM role creation by @andclt in #6055
🐛 Bug Fixes
- 🐛 fix: cloud build image not found by @richardcase in #5949
- 🐛 Fix GC not covering all resources by using API response paging by @AndiDog in #5943
- 🐛 Fix AWS SDK request metrics not being captured by @AndiDog in #5924
- 🐛 Changed DHA to require hostAffinity to be host to prevent instance drift by @vr4manta in #5910
- 🐛fix: return actual error from NAT gateway creation failures by @tthvo in #5962
- 🐛 fix: grandfather hostAffinity validation on AWSMachine updates by @damdo in #5971
- 🐛 Expose IPv6 addresses on AWSMachine Status by @jiaqiluo in #5993
- 🐛 fix: CRD reference docs not regenerating for v1beta2 API types by @michaelryanmcneill in #6051
- 🐛 Fix 404 for "Specifying the IAM Role for ROSA HCP Management Components" page by @michaelryanmcneill in #6054
- 🌱 Replace static sleep with active polling for IAM access key propagation by @Arpit529Srivastava in #5862
- 🐛 fix(e2e): use targeted patch for EKS upgrade policy test by @damdo in #6064
- 🐛 fix(eks): add ObservedGeneration to AWSManagedControlPlane to prevent missed spec changes by @damdo in #6084
- 🐛 fix: Prevent volumeSize updates in ROSAMachinePool by @andclt in #6086
- 🐛 fix: clean up orphaned ENIs before subnet deletion at teardown by @damdo in #6073
- 🐛 fix: add missing RBAC delete permission for MachinePools in ROSA controller by @andclt in #6089
📖 Documentation
- 📖 Documentation Update to Creating a ROSA HCP cluster directions by @tinaafitz in #5920
- 📖 Proposal for ROSA networking by @mzazrivec in #5381
- 📖 docs(api): clarify DNSResolutionCheck default behavior by @damdo in #6078
Dependencies
- 🌱 Bump github.com/go-git/go-git/v5 from 5.16.0 to 5.17.1 in /hack/tools by @dependabot[bot] in #5918
- 🌱 Bump github.com/moby/spdystream from 0.5.0 to 0.5.1 by @dependabot[bot] in #5952
- 🌱 Bump google.golang.org/grpc from 1.75.1 to 1.79.3 by @dependabot[bot] in #5912
- 🌱 Bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 in /hack/tools by @dependabot[bot] in #5957
- 🌱 Bump github.com/docker/cli from 25.0.4+incompatible to 29.2.0+incompatible in /hack/tools by @dependabot[bot] in #5886
- 🌱 Bump go.opentelemetry.io/otel from 1.39.0 to 1.41.0 in /hack/tools by @dependabot[bot] in #5983
- 🌱 Bump go.opentelemetry.io/otel from 1.39.0 to 1.41.0 by @dependabot[bot] in #5984
- 🌱 Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in #5929
- 🌱 Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.51.4 to 1.97.3 in /hack/tools by @dependabot[bot] in #5933
- 🌱 Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.88.4 to 1.97.3 by @dependabot[bot] in #5935
- 🌱 Bump go.mongodb.org/mongo-driver from 1.14.0 to 1.17.7 in /hack/tools by @dependabot[bot] in #6061
🌱 Others
- 🌱 chore: update github workflows to use sha hashes by @richardcase in #5948
- 🌱 Bump EndBug/add-and-commit from 9 to 10 by @dependabot[bot] in #5916
- 🌱 Bump artyom/mdlinks from 0.2.0 to 0.4.2 by @dependabot[bot] in #5959
- 🌱 Bump actions/checkout from 5.0.1 to 6.0.2 by @dependabot[bot] in #5958
- 🌱 Bump actions/setup-go from 6.0.0 to 6.4.0 by @dependabot[bot] in #5960
- 🐛 fix: isolate ROSAExpiredCreds test from local AWS credentials by @andclt in #5973
- 🌱 Bump actions/checkout from 5.0.1 to 6.0.2 by @dependabot[bot] in #5991
- 🌱 Use auto-detected parallelism for EKS e2e tests by @damdo in #5996
- 🐛 fix: migrate goreleaser from v1 to v2 to fix Go 1.25+ build failure by @raykrueger in #6004
- ✨ Add AWS Nitro Enclave support to AWSLaunchTemplate by @raykrueger in #5928
- 🌱 Print diagnostics to stderr in
boskos.pyby @AndiDog in #6010 - 🌱 Bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 by @dependabot[bot] in #6014
- 🌱 feat: Auto detect Kubernetest release version for publish AMI by @wendy-ha18 in #5990
- 🌱 Bump github/codeql-action from 4.35.2 to 4.35.5 by @dependabot[bot] in #6022
- 🌱 feat: Adding workflow for auto build and publishing AMIs by @wendy-ha18 in #6009
- 🌱 Bump github/codeql-action from 4.35.5 to 4.36.0 by @dependabot[bot] in #6027
- 🌱 Bump actions/checkout from 4.2.2 to 6.0.2 by @dependabot[bot] in #6028
- 🌱 Bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by @dependabot[bot] in #6029
- 🌱 Bump actions/setup-go from 5.5.0 to 6.4.0 by @dependabot[bot] in #6030
- 🌱 Bump aws-actions/configure-aws-credentials from 6.1.0 to 6.2.0 by @dependabot[bot] in #6040
- 🌱 chore: update dependabot config by @richardcase in #6039
- 🌱 Bump the all-github-actions group with 3 updates by @dependabot[bot] in #6041
- 🌱 Re-enable dependency report generation in main by @AnmolxSingh in #5851
- 🌱 Bump cloudbuild to use latest gcb-docker-gcloud image by @Prajyot-Parab in #6045
- 🌱 chore: remove old classic elb upgrade test by @richardcase in #6058
- 🐛 fix(e2e): increase multitenancy STS role session duration to 1 hour by @damdo in #6068
- 🐛 ROSA Fix cross account creation issues-6037 by @serngawy in #6038
- 🌱 Bump CAPI to v1.12.2, k8s to v1.34 and controller-runtime to v0.22.5 by @clebs in #5857
- 🌱 build(ami): bump image-builder default to v0.1.52 by @damdo in #6065
- 🌱 Bump the all-github-actions group with 3 updates by @dependabot[bot] in #6072
- 🌱 chore: ami housekeeping scripts by @richardcase in #6057
- 🌱 test(e2e): bump EKS addons (VPC v1.21.1, kube-proxy v1.34.6) by @AndiDog in #5992
- 🐛 fix: allow cluster-scoped resources to bypass allowedNamepsaces checks by @andclt in #6080
- 🐛 fix: create CAPI-contract kubeconfig for external auth ROSA clusters by @judexzhu in #6099
- [release-2.12] 🌱 release 2.12 updates by @k8s-infra-cherrypick-robot in #6119
New Contributors
- @raykrueger made their first contribution in #6004
- @jiaqiluo made their first contribution in #5993
- @AnmolxSingh made their first contribution in #5851
- @michaelryanmcneill made their first contribution in #6051
- @judexzhu made their first contribution in #6099
The images for this release are:
registry.k8s.io/cluster-api-aws/cluster-api-aws-controller:v2.11.1
Thanks to all our contributors.