AMI Release v20211004

AMI Release v20211004

• amazon-eks-gpu-node-1.21-v20211004
• amazon-eks-gpu-node-1.20-v20211004
• amazon-eks-gpu-node-1.19-v20211004
• amazon-eks-gpu-node-1.18-v20211004
• amazon-eks-gpu-node-1.17-v20211004
• amazon-eks-gpu-node-1.16-v20211004
• amazon-eks-arm64-node-1.21-v20211004
• amazon-eks-arm64-node-1.20-v20211004
• amazon-eks-arm64-node-1.19-v20211004
• amazon-eks-arm64-node-1.18-v20211004
• amazon-eks-arm64-node-1.17-v20211004
• amazon-eks-arm64-node-1.16-v20211004
• amazon-eks-node-1.21-v20211004
• amazon-eks-node-1.20-v20211004
• amazon-eks-node-1.19-v20211004
• amazon-eks-node-1.18-v20211004
• amazon-eks-node-1.17-v20211004
• amazon-eks-node-1.16-v20211004

Binaries used to build these AMIs are published:

• s3://amazon-eks/1.21.2/2021-04-12/
• s3://amazon-eks/1.20.7/2021-04-12/
• s3://amazon-eks/1.19.13/2021-01-05/
• s3://amazon-eks/1.18.20/2020-11-02/
• s3://amazon-eks/1.17.17/2020-11-02/
• s3://amazon-eks/1.16.15/2020-11-02/

AMI details:

• kernel: 5.4.149-73.259.amzn2 (1.19 and above), 4.14.246-187.474.amzn2 (1.18 and below)
• dockerd: 20.10.7-3.amzn2
• containerd: 1.4.6-3.amzn2
• runc: 1.0.0-2.amzn2
• cuda: 460.73.01
• nvidia-container-runtime-hook: 460.73.01
• SSM agent: 3.0.1124.0

Notable changes:

• Created AMI released on the latest commit

AMI Release v20210914

AMI Release v20210914

• amazon-eks-gpu-node-1.21-v20210914
• amazon-eks-gpu-node-1.20-v20210914
• amazon-eks-gpu-node-1.19-v20210914
• amazon-eks-gpu-node-1.18-v20210914
• amazon-eks-gpu-node-1.17-v20210914
• amazon-eks-gpu-node-1.16-v20210914
• amazon-eks-arm64-node-1.21-v20210914
• amazon-eks-arm64-node-1.20-v20210914
• amazon-eks-arm64-node-1.19-v20210914
• amazon-eks-arm64-node-1.18-v20210914
• amazon-eks-arm64-node-1.17-v20210914
• amazon-eks-arm64-node-1.16-v20210914
• amazon-eks-node-1.21-v20210914
• amazon-eks-node-1.20-v20210914
• amazon-eks-node-1.19-v20210914
• amazon-eks-node-1.18-v20210914
• amazon-eks-node-1.17-v20210914
• amazon-eks-node-1.16-v20210914

Notable changes:
Adding support for new ec2 instance types i.e. m6i

v20211003

AMI Release v20211003

• amazon-eks-gpu-node-1.20-v20211003
• amazon-eks-gpu-node-1.19-v20211003
• amazon-eks-gpu-node-1.18-v20211003
• amazon-eks-gpu-node-1.17-v20211003
• amazon-eks-gpu-node-1.16-v20211003
• amazon-eks-gpu-node-1.15-v20211003
• amazon-eks-arm64-node-1.20-v20211003
• amazon-eks-arm64-node-1.19-v20211003
• amazon-eks-arm64-node-1.18-v20211003
• amazon-eks-arm64-node-1.17-v20211003
• amazon-eks-arm64-node-1.16-v20211003
• amazon-eks-arm64-node-1.15-v20211003
• amazon-eks-node-1.20-v20211003
• amazon-eks-node-1.19-v20211003
• amazon-eks-node-1.18-v20211003
• amazon-eks-node-1.17-v20211003
• amazon-eks-node-1.16-v20211003
• amazon-eks-node-1.15-v20211003

AMI details:

• kernel: 5.4.144-69.257.amzn2 (1.19 and above), 4.14.246-187.474.amzn2 (1.18 and below)
• dockerd: 20.10.7-3.amzn2
• containerd: 1.4.6-3.amzn2
• runc: 1.0.0-2.amzn2
• cuda: 460.73.01
• nvidia-container-runtime-hook: 460.73.01
• SSM agent: 3.0.1124.0

Notable changes:

• Updated version of RunC to 1.0.0-2.amzn2
• Updated version of Docker to 20.10.7-3.amzn2
• Updated version of Containerd to 1.4.6-3.amzn2
• Following CVEs are addressed Docker (CVE-2021-41089, CVE-2021-41091, CVE-2021-41092) and containerd (CVE-2021-41103)

AMI Release v20210830

AMI Release v20210830

• amazon-eks-gpu-node-1.21-v20210830
• amazon-eks-gpu-node-1.20-v20210830
• amazon-eks-gpu-node-1.19-v20210830
• amazon-eks-gpu-node-1.18-v20210830
• amazon-eks-gpu-node-1.17-v20210830
• amazon-eks-gpu-node-1.16-v20210830
• amazon-eks-arm64-node-1.21-v20210830
• amazon-eks-arm64-node-1.20-v20210830
• amazon-eks-arm64-node-1.19-v20210830
• amazon-eks-arm64-node-1.18-v20210830
• amazon-eks-arm64-node-1.17-v20210830
• amazon-eks-arm64-node-1.16-v20210830
• amazon-eks-node-1.21-v20210830
• amazon-eks-node-1.20-v20210830
• amazon-eks-node-1.19-v20210830
• amazon-eks-node-1.18-v20210830
• amazon-eks-node-1.17-v20210830
• amazon-eks-node-1.16-v20210830

Notable changes:

• Upgrade kubelet version for 1.17 and 1.20
  • 1.17.12 -> 1.17.17
  • 1.20.4 -> 1.20.7
• Patch for CVE-2021-25741

AMI Release v20210826

AMI Release v20210826

amazon-eks-gpu-node-1.21-v20210826
amazon-eks-gpu-node-1.20-v20210826
amazon-eks-gpu-node-1.19-v20210826
amazon-eks-gpu-node-1.18-v20210826
amazon-eks-gpu-node-1.17-v20210826
amazon-eks-gpu-node-1.16-v20210826
amazon-eks-gpu-node-1.15-v20210826
amazon-eks-arm64-node-1.21-v20210826
amazon-eks-arm64-node-1.20-v20210826
amazon-eks-arm64-node-1.19-v20210826
amazon-eks-arm64-node-1.18-v20210826
amazon-eks-arm64-node-1.17-v20210826
amazon-eks-arm64-node-1.16-v20210826
amazon-eks-arm64-node-1.15-v20210826
amazon-eks-node-1.21-v20210826
amazon-eks-node-1.20-v20210826
amazon-eks-node-1.19-v20210826
amazon-eks-node-1.18-v20210826
amazon-eks-node-1.17-v20210826
amazon-eks-node-1.16-v20210826
amazon-eks-node-1.15-v20210826

Notable changes:

• Fix to reduce permissions of pull-sandbox-image.sh (c78bb6b)

AMI Release v20210813

• amazon-eks-gpu-node-1.21-v20210813
• amazon-eks-gpu-node-1.20-v20210813
• amazon-eks-gpu-node-1.19-v20210813
• amazon-eks-gpu-node-1.18-v20210813
• amazon-eks-gpu-node-1.17-v20210813
• amazon-eks-gpu-node-1.16-v20210813
• amazon-eks-gpu-node-1.15-v20210813
• amazon-eks-arm64-node-1.21-v20210813
• amazon-eks-arm64-node-1.20-v20210813
• amazon-eks-arm64-node-1.19-v20210813
• amazon-eks-arm64-node-1.18-v20210813
• amazon-eks-arm64-node-1.17-v20210813
• amazon-eks-arm64-node-1.16-v20210813
• amazon-eks-arm64-node-1.15-v20210813
• amazon-eks-node-1.21-v20210813
• amazon-eks-node-1.20-v20210813
• amazon-eks-node-1.19-v20210813
• amazon-eks-node-1.18-v20210813
• amazon-eks-node-1.17-v20210813
• amazon-eks-node-1.16-v20210813
• amazon-eks-node-1.15-v20210813

Notable changes:

• Contains fix for sandbox-image issue with containerd in Gov-cloud and CN regions.
• Updating to 1.18.20 and 1.19.13 kubernetes version.

AMI Release v20210722

AMI Release v20210722

• amazon-eks-gpu-node-1.21-v20210722
• amazon-eks-gpu-node-1.20-v20210722
• amazon-eks-gpu-node-1.19-v20210722
• amazon-eks-gpu-node-1.18-v20210722
• amazon-eks-gpu-node-1.17-v20210722
• amazon-eks-gpu-node-1.16-v20210722
• amazon-eks-gpu-node-1.15-v20210722
• amazon-eks-arm64-node-1.21-v20210722
• amazon-eks-arm64-node-1.20-v20210722
• amazon-eks-arm64-node-1.19-v20210722
• amazon-eks-arm64-node-1.18-v20210722
• amazon-eks-arm64-node-1.17-v20210722
• amazon-eks-arm64-node-1.16-v20210722
• amazon-eks-arm64-node-1.15-v20210722
• amazon-eks-node-1.21-v20210722
• amazon-eks-node-1.20-v20210722
• amazon-eks-node-1.19-v20210722
• amazon-eks-node-1.18-v20210722
• amazon-eks-node-1.17-v20210722
• amazon-eks-node-1.16-v20210722
• amazon-eks-node-1.15-v20210722

Notable changes

• This release includes the security patch for the kernel, for CVE-2021-33909.

AMI Release v20210720

AMI Release v20210720

• amazon-eks-gpu-node-1.21-v20210720
• amazon-eks-gpu-node-1.20-v20210720
• amazon-eks-gpu-node-1.19-v20210720
• amazon-eks-gpu-node-1.18-v20210720
• amazon-eks-gpu-node-1.17-v20210720
• amazon-eks-gpu-node-1.16-v20210720
• amazon-eks-gpu-node-1.15-v20210720
• amazon-eks-arm64-node-1.21-v20210720
• amazon-eks-arm64-node-1.20-v20210720
• amazon-eks-arm64-node-1.19-v20210720
• amazon-eks-arm64-node-1.18-v20210720
• amazon-eks-arm64-node-1.17-v20210720
• amazon-eks-arm64-node-1.16-v20210720
• amazon-eks-arm64-node-1.15-v20210720
• amazon-eks-node-1.21-v20210720
• amazon-eks-node-1.20-v20210720
• amazon-eks-node-1.19-v20210720
• amazon-eks-node-1.18-v20210720
• amazon-eks-node-1.17-v20210720
• amazon-eks-node-1.16-v20210720
• amazon-eks-node-1.15-v20210720

Notable changes

EKS AMI release for Kubernetes version 1.21 (1.21 AMIs for GPU and ARM in us-gov-west-1 and us-gov-east-1 are included in this release)

Note: The containerd package has patch for CVE-2-21-32760

Containerd runtime support

The EKS Optimized Amazon Linux 2 AMI now contains a bootstrap (https://github.com/awslabs/amazon-eks-ami/blob/master/files/bootstrap.sh) flag --container-runtime to optionally enable the containerd runtime. This flag is available in all supported Kubernetes versions of the AMI. This change is to get ahead of the removal of Docker as a supported runtime in Kubernetes (more details here (https://kubernetes.io/blog/2020/12/02/dockershim-faq/). Feedback is appreciated.

FIPS Kernel Panic issue on 5.4.X is fixed - #632

AMI Release v20210716

AMI Release v20210716

• amazon-eks-gpu-node-1.21-v20210716
• amazon-eks-gpu-node-1.20-v20210716
• amazon-eks-gpu-node-1.19-v20210716
• amazon-eks-gpu-node-1.18-v20210716
• amazon-eks-gpu-node-1.17-v20210716
• amazon-eks-gpu-node-1.16-v20210716
• amazon-eks-gpu-node-1.15-v20210716
• amazon-eks-arm64-node-1.21-v20210716
• amazon-eks-arm64-node-1.20-v20210716
• amazon-eks-arm64-node-1.19-v20210716
• amazon-eks-arm64-node-1.18-v20210716
• amazon-eks-arm64-node-1.17-v20210716
• amazon-eks-arm64-node-1.16-v20210716
• amazon-eks-arm64-node-1.15-v20210716
• amazon-eks-node-1.21-v20210716
• amazon-eks-node-1.20-v20210716
• amazon-eks-node-1.19-v20210716
• amazon-eks-node-1.18-v20210716
• amazon-eks-node-1.17-v20210716
• amazon-eks-node-1.16-v20210716
• amazon-eks-node-1.15-v20210716

Notable changes

EKS AMI release for Kubernetes version 1.21 (1.21 AMIs for GPU and ARM in us-gov-west-1 and us-gov-east-1 aren't a part of this release)

Note: The containerd package has patch for CVE-2-21-32760

Containerd runtime support

The EKS Optimized Amazon Linux 2 AMI now contains a bootstrap (https://github.com/awslabs/amazon-eks-ami/blob/master/files/bootstrap.sh) flag --container-runtime to optionally enable the containerd runtime. This flag is available in all supported Kubernetes versions of the AMI. This change is to get ahead of the removal of Docker as a supported runtime in Kubernetes (more details here (https://kubernetes.io/blog/2020/12/02/dockershim-faq/). Feedback is appreciated.

FIPS Kernel Panic issue on 5.4.X is fixed - #632

AMI Release v20210628

AMI Release v20210628

• amazon-eks-gpu-node-1.20-v20210628
• amazon-eks-gpu-node-1.19-v20210628
• amazon-eks-gpu-node-1.18-v20210628
• amazon-eks-gpu-node-1.17-v20210628
• amazon-eks-gpu-node-1.16-v20210628
• amazon-eks-gpu-node-1.15-v20210628
• amazon-eks-arm64-node-1.20-v20210628
• amazon-eks-arm64-node-1.19-v20210628
• amazon-eks-arm64-node-1.18-v20210628
• amazon-eks-arm64-node-1.17-v20210628
• amazon-eks-arm64-node-1.16-v20210628
• amazon-eks-arm64-node-1.15-v20210628
• amazon-eks-node-1.20-v20210628
• amazon-eks-node-1.19-v20210628
• amazon-eks-node-1.18-v20210628
• amazon-eks-node-1.17-v20210628
• amazon-eks-node-1.16-v20210628
• amazon-eks-node-1.15-v20210628

Binaries used to build these AMIs are published:

• s3://amazon-eks/1.20.4/2021-04-12/
• s3://amazon-eks/1.19.6/2021-01-05/
• s3://amazon-eks/1.18.9/2020-11-02/
• s3://amazon-eks/1.17.12/2020-11-02/
• s3://amazon-eks/1.16.15/2020-11-02/
• s3://amazon-eks/1.15.12/2020-11-02/

AMI details:

• kernel: 5.4.117-58.216.amzn2 (1.19 and above), 4.14.232-177.418.amzn2 (1.18 and below)
• dockerd: 19.03.13ce
• containerd: 1.4.1
• runc: 1.0.0-rc93
• cuda: 460.73.01
• nvidia-container-runtime-hook: 460.73.01
• SSM agent: 3.0.1295.0

Notable changes:

Includes the latest security patches for systemd, python3 and others.