AWS VPC CNI addon

Amazon VPC CNI plugin for Kubernetes is a Networking plugin for pod networking in Kubernetes using Elastic Network Interfaces on AWS

• https://docs.aws.amazon.com/eks/latest/userguide/managing-vpc-cni.html
• https://docs.aws.amazon.com/eks/latest/userguide/cni-iam-role.html
• https://github.com/aws/amazon-vpc-cni-k8s/releases
• Versions: v1.16.4, v1.16.3, v1.16.2, v1.16.1, v1.16.0, v1.15.4, v1.7.0
  • Obtain version:kubectl describe daemonset aws-node --namespace kube-system | grep amazon-k8s-cni: | cut -d : -f 3
  • kubectl describe daemonset aws-node --namespace kube-system | grep amazon-k8s-cni: | cut -d : -f 3
  • kubectl describe pods -n kube-system aws-node | grep -w Image

We strongly recommend that you update one minor version at a time. For example, if your current minor version is 1.9 and you want to update to 1.11, you should update to the latest patch version of 1.10 first, then update to the latest patch version of 1.11.

aws-node:

• aws-node
• aws-eks-nodeagent
• aws-vpc-cni-init

aws-network-policy-agent:

• aws-eks-na-cli

• aws-cni

Optional:

• cni-metrics-helper

{"env": {"AWS_VPC_K8S_CNI_CUSTOM_NETWORK_CFG":"true","ENABLE_PREFIX_DELEGATION":"true","ENI_CONFIG_LABEL_DEF":"topology.kubernetes.io/zone","WARM_PREFIX_TARGET":"1"}}

News

• 08/2023 Amazon VPC CNI now supports Kubernetes Network Policies

Errors

• InsufficientNumberOfReplicas The add-on is unhealthy because it doesn't have the desired number of replicas.

Related

• Working with the Amazon VPC CNI plugin for Kubernetes Amazon EKS add-on
• EKS best practices: https://aws.github.io/aws-eks-best-practices/networking/vpc-cni/
• before_compute
• aws eks describe-addon --cluster-name my-cluster --addon-name vpc-cni

See also

• AWS VPC CNI, aws-node (ipamd): (aws-node, aws-eks-nodeagent, aws-vpc-cni-init), cluster_addons: vpc-cni, aws-network-policy-agent: aws-eks-na-cli, AmazonEKS_CNI_Policy, AmazonEKS_CNI_Policy, aws-cni, topology.kubernetes.io, Configuration variables
• aws-node, ipamd, kubectl logs -n kube-system aws-node, aws-vpc-cni-init, aws-eks-nodeagent, Amazon VPC CNI, managed add-ons

https://aws.github.io/aws-eks-best-practices/networking/vpc-cni/