AWS VPC CNI addon

Amazon VPC CNI plugin for Kubernetes

• https://docs.aws.amazon.com/eks/latest/userguide/managing-vpc-cni.html
• https://docs.aws.amazon.com/eks/latest/userguide/cni-iam-role.html
• https://github.com/aws/amazon-vpc-cni-k8s/releases
• Versions: v1.16.2, v1.16.1, v1.16.0, v1.15.4, v1.7.0
  • Obtain version:kubectl describe daemonset aws-node --namespace kube-system | grep amazon-k8s-cni: | cut -d : -f 3
  • kubectl describe daemonset aws-node --namespace kube-system | grep amazon-k8s-cni: | cut -d : -f 3

We strongly recommend that you update one minor version at a time. For example, if your current minor version is 1.9 and you want to update to 1.11, you should update to the latest patch version of 1.10 first, then update to the latest patch version of 1.11.

aws-node

• aws-node
• aws-eks-nodeagent
• aws-vpc-cni-init

aws-network-policy-agent:

• aws-eks-na-cli

Optional:

• cni-metrics-helper

{"env": {"AWS_VPC_K8S_CNI_CUSTOM_NETWORK_CFG":"true","ENABLE_PREFIX_DELEGATION":"true","ENI_CONFIG_LABEL_DEF":"topology.kubernetes.io/zone","WARM_PREFIX_TARGET":"1"}}

News

• 08/2023 Amazon VPC CNI now supports Kubernetes Network Policies

Related

• Working with the Amazon VPC CNI plugin for Kubernetes Amazon EKS add-on
• EKS best practices: https://aws.github.io/aws-eks-best-practices/networking/vpc-cni/

See also

• AWS VPC CNI, aws-node (ipamd): (aws-node, aws-eks-nodeagent, aws-vpc-cni-init), cluster_addons: vpc-cni, aws-network-policy-agent: aws-eks-na-cli, AmazonEKS_CNI_Policy, AmazonEKS_CNI_Policy

https://aws.github.io/aws-eks-best-practices/networking/vpc-cni/