Skip to content

Releases: awslabs/cdk-eks-blueprints

Release 1.18.1

12 Mar 22:13
5c61c04

Choose a tag to compare

Patch Release

What's Changed

Full Changelog: blueprints-1.18.0...blueprints-1.18.1

Release 1.18.0

06 Mar 21:21
b7a6861

Choose a tag to compare

EKS Blueprints for CDK v1.18.0 Release Notes

🚀 Major Updates

CDK v2 Stable Migration

  • Upgraded AWS CDK: Updated from aws-cdk-lib 2.215.0 to 2.241.0 and aws-cdk from 2.1029.2 to 2.1109.0
  • Enhanced Stability: Migration to stable eks-v2 CDK v2 APIs for improved reliability and performance
  • Kubectl Layer Updates: Added support for kubectl v34 layer (@aws-cdk/lambda-layer-kubectl-v34)

Kubernetes 1.34 Support

  • New Kubernetes Version: Added full support for Amazon EKS Kubernetes version 1.34
  • Updated Version Maps: All add-ons now include version mappings for Kubernetes 1.34
  • E2E Testing: Moved end-to-end testing to Kubernetes 1.34 for latest compatibility validation (that is what we validate against now)

🆕 New Features

AWS Network Flow Monitor Add-On

  • New Add-On: Introduced AwsNetworkFlowMonitorAddOn for enhanced network observability
  • Configuration Options:
    • openMetrics: Enable OpenMetrics endpoint
    • openMetricsPort: Configure metrics port
    • openMetricsAddress: Set metrics address
  • Pod Identity Support: Uses EKS Pod Identity for secure AWS API access
  • Managed Policy: Automatically applies CloudWatchNetworkFlowMonitorAgentPublishPolicy

Enhanced Karpenter v1 Support

  • CRD Lifecycle Management: Added installCRDs flag (default: true) for automatic CRD updates
  • Custom CRD Repository: New crdRepository property for private registry support
  • Static NodePools: Support for static nodepool configurations
  • Improved Dependency Management: Better handling of CRD dependencies during upgrades

AutoMode Advanced Networking

  • Enhanced AutoMode: Support for advanced networking features in EKS Auto Mode
  • Custom Node Classes: Ability to define custom node classes with AutoMode
  • Extended Configuration: Additional properties for fine-tuning AutoMode clusters

🔧 Improvements

Resource Provider Enhancements

  • Multi-Resource Support: Resource providers can now return multiple resources
  • Subnet Dependencies: Improved handling of secondary subnet dependencies
  • VPC Provider Updates: Enhanced VPC provider with better error handling

Service Account Improvements

  • Default Node Role Support: Added support for using default node roles in node classes
  • Race Condition Fixes: Resolved service account creation race conditions
  • Enhanced Pod Identity: Better integration with EKS Pod Identity Agent

Documentation Updates

  • New Add-On Documentation: Comprehensive docs for Network Flow Monitor
  • AutoMode Builder Guide: Detailed documentation for AutoMode cluster configuration
  • Union Add-On: Added documentation for Union platform integration
  • Updated Examples: New examples for Karpenter CRD lifecycle and AutoMode advanced networking

🐛 Bug Fixes

  • Security Improvements
  • Lint Issues: Resolved various ESLint warnings and errors
  • Unit Tests: Fixed Jest warnings and improved test reliability
  • Import Cleanup: Removed unused imports across the codebase
  • Type Safety: Improved TypeScript type definitions and casting

📦 Add-On Version Updates

Based on the latest version check, the following add-ons are at their latest versions:

Core Add-Ons (Auto-versioned)

  • VPC CNI: v1.20.4-eksbuild.2
  • CoreDNS: v1.12.3-eksbuild.1
  • ADOT: v0.141.0-eksbuild.1
  • EBS CSI Driver: v1.56.0-eksbuild.*
  • EKS Pod Identity Agent: v1.3.10-eksbuild.2
  • AWS Network Flow Monitoring Agent: v1.1.3-eksbuild.2
  • Kube Proxy: Auto-versioned

Helm Chart Add-Ons

  • AWS Load Balancer Controller: 3.1.0
  • Cert Manager: v1.19.4
  • AWS EFS CSI Driver: 3.4.0
  • App Mesh Controller: 1.13.3
  • ArgoCD: 9.4.7
  • AWS Private CA Issuer: v1.8.0
  • Calico (Tigera Operator): v3.31.4
  • AWS for Fluent Bit: 0.2.0
  • External Secrets: 2.0.1
  • GPU Operator: v25.10.1
  • Ingress NGINX: 4.14.3
  • Istio Components: 1.29.0 (base, istiod, cni, gateway)
  • Karpneter: 1.9.0
  • KEDA: 2.19.0
  • KubeRay Operator: 1.5.1
  • Kube State Metrics: 7.2.0
  • Kubevious: 1.2.2
  • Metrics Server: 3.13.0
  • NGINX Ingress: 2.4.4
  • OPA Gatekeeper: 3.21.1
  • Prometheus Node Exporter: 4.52.0
  • AWS Mountpoint S3 CSI Driver: 2.4.0
  • External DNS: 1.20.0
  • Secrets Store CSI Driver: 1.5.6

🔄 Breaking Changes

Removed Dependencies

  • Deprecated Kubectl Layers: Removed support for older kubectl layers (v23-v28)
  • CDK Alpha Dependencies: Removed @aws-cdk/aws-eks-v2-alpha dependency

Version Requirements

  • Minimum CDK Version: Now requires AWS CDK 2.241.0 or later
  • Node.js Version: Updated to Node.js 22.22.0 as per AWS CDK prerequisites

🚨 Migration Guide

From v1.17.x to v1.18.0

  1. Update CDK Dependencies:

    npm install aws-cdk@2.1109.0 aws-cdk-lib@2.241.0
  2. Karpenter Users:

    • The installCRDs flag is now true by default
    • CRDs will be automatically managed during upgrades
    • To disable: set installCRDs: false in KarpenterV1AddOn props
  3. AutoMode Users:

    • Review new advanced networking options
    • Update node class configurations if using custom classes
  4. Network Flow Monitor:

    • New add-on available for network observability
    • Requires EKS Pod Identity Agent add-on

📋 Compatibility

  • AWS CDK: 2.241.0+
  • Node.js: 22.22.0+
  • Kubernetes: 1.26 - 1.34
  • TypeScript: 5.8.2+

🙏 Contributors

Special thanks to all contributors who made this release possible, including improvements to documentation, bug fixes, and new feature implementations.

📚 Additional Resources


For complete details on all changes, see the commit history since v1.17.4.

What's Changed

New Contributors

Full Changelog: blueprints-1.17.4...blueprints-1.18.0

Release 1.17.4

18 Dec 21:28
ade6f93

Choose a tag to compare

Patch Release

What's Changed

  • updated AMP collector to latest - now collector works with EKS 1.33 and latest ADOT (validated) by @zjaco13 in #1211
  • Fixed dependency issue when multiple ACK addons are used with one creating namespace @shapirov103 in #1218

Full Changelog: blueprints-1.17.3...blueprints-1.17.4

Release 1.17.3

20 Oct 21:42
8eb8f1b

Choose a tag to compare

Patch Release with Functional Compatibility Impact

This release upgrades the default EKS version to 1.33 and validates add-on functionality, introducing several breaking changes:

Key Changes

EKS Version Update

  • Default EKS version upgraded from 1.32 to 1.33

Add-on Compatibility

  • ADOT and AMP collector: While ADOT is recently supported on EKS 1.33 (and 1.32), AMP collector still does not function on 1.33
    • Action Required: Use EKS versions ≤1.32 if ADOT/AMP functionality is needed

AMI Configuration Changes

  • Amazon Linux 2 (AL2): No longer supported on EKS 1.33
  • Default AMI: Changed from AL2 to Amazon Linux 2023 (AL2023)
  • Node Group AMI: Automatically migrated to AL2023 configurations

Custom AMI Limitations

  • Legacy bootstrap.sh-based configurations not supported on EKS 1.33
  • New nodeadm bootstrapping method required
  • Workaround: Supply nodeadm manifest directly (convenience methods not yet available)
  • Feedback: Open GitHub issues for additional functionality requests

CDK Version Requirements

{
  "aws-cdk": "2.1029.2",
  "aws-cdk-lib": "2.215.0"
}

What's Changed

  • Create Default StorageClass Addon for EBS and Default Ingress Class for ALB on AutoMode by @zjaco13 in #1177
  • Add support for automode in observability builder by @zjaco13 in #1180
  • fix(karpenter): add the compatibility for Kubernetes v1.33 by @chansuke in #1174
  • fix: correct typo in Karpenter aws-auth groups by @VincentDebug in #1179
  • Make conflictsWithAutomode util function more understandable, and add to SSM Agent Addon by @zjaco13 in #1184
  • Fixed #1185 Graviton builder failure with strict validation by default by @shapirov103 in #1186
  • Update ack charts version and add new options by @zjaco13 in #1187
  • Add adot version mapping for EKS 1.32 and 1.33 by @samjarrett in #1202
  • 1.17.3 Release Prep by @zjaco13 in #1199
  • Allow volume expansion on ebs csi driver by @Guberlo in #1203

New Contributors

Add-on versions in the release

WARN Upgrade is needed for chart aws-load-balancer-controller-1.13.4: latest version is 1.14.1.
WARN Upgrade is needed for chart cert-manager-1.18.2: latest version is v1.19.1.
DEBUG Core add-on adot is at version v0.131.0-eksbuild.1
WARN Upgrade is needed for chart aws-efs-csi-driver-3.2.3: latest version is 3.2.4.
INFO Chart appmesh-controller-1.13.1 is at the latest version.
WARN Upgrade is needed for chart argo-cd-7.9.0: latest version is 9.0.3.
INFO Chart aws-privateca-issuer-1.7.0 is at the latest version.
WARN Upgrade is needed for chart tigera-operator-v3.30.3: latest version is v3.30.4.
INFO Chart aws-for-fluent-bit-0.1.35 is at the latest version.
WARN Upgrade is needed for chart external-secrets-0.19.2: latest version is 0.20.3.
WARN Upgrade is needed for chart gpu-operator-v25.3.3: latest version is v25.3.4.
WARN Upgrade is needed for chart ingress-nginx-4.13.2: latest version is 4.13.3.
WARN Upgrade is needed for chart base-1.27.1: latest version is 1.27.3.
WARN Upgrade is needed for chart istiod-1.27.1: latest version is 1.27.3.
WARN Upgrade is needed for chart cni-1.27.1: latest version is 1.27.3.
WARN Upgrade is needed for chart gateway-1.27.1: latest version is 1.27.3.
WARN Upgrade is needed for chart keda-2.17.2: latest version is 2.18.0.
INFO Chart kuberay-operator-1.4.2 is at the latest version.
INFO Chart kube-state-metrics-6.3.0 is at the latest version.
INFO Chart kubevious-1.2.2 is at the latest version.
INFO Chart metrics-server-3.13.0 is at the latest version.
WARN Upgrade is needed for chart nginx-ingress-1.4.0: latest version is 2.3.1.
INFO Chart gatekeeper-3.20.1 is at the latest version.
INFO Chart prometheus-node-exporter-4.48.0 is at the latest version.
WARN Upgrade is needed for chart aws-mountpoint-s3-csi-driver-v1.14.1: latest version is 2.1.0.
INFO Chart external-dns-1.19.0 is at the latest version.
WARN Upgrade is needed for chart secrets-store-csi-driver-1.5.3: latest version is 1.5.4.
DEBUG Core add-on coredns has autoselected version v1.12.1-eksbuild.2
DEBUG Core add-on kube-proxy has autoselected version v1.33.3-eksbuild.4
DEBUG Core add-on eks-pod-identity-agent has autoselected version v1.3.9-eksbuild.3
DEBUG Core add-on vpc-cni has autoselected version v1.20.4-eksbuild.1
DEBUG Core add-on aws-ebs-csi-driver has autoselected version v1.51.0-eksbuild.1

Full Changelog: blueprints-1.17.2...blueprints-1.17.3

Release 1.17.2

11 Jul 02:25
a633472

Choose a tag to compare

Patch Release

What's Changed

Library Version Changes

Library Previous Version (5 commits ago) Current Version Change Type
aws-cdk 2.1012.0 2.1020.2 Patch
aws-cdk-lib 2.192.0 2.204.0 Minor
@aws-cdk/aws-eks-v2-alpha ^2.187.0-alpha.0 ^2.204.0-alpha.0 Minor
@aws-sdk/client-eks ^3.529.1 ^3.844.0 Minor
@aws-sdk/client-secrets-manager ^3.529.1 ^3.844.0 Minor
semver ^7.6.0 ^7.7.2 Minor
uuid ^10.0.0 ^11.1.0 Major
yaml ^2.4.1 ^2.8.0 Minor
Overrides
semver ^7.6.0 ^7.7.2 Minor
rimraf (not present) ^5.0.0 Added

Summary of Changes:

6 Major version updates: @types/jest, @types/node, @typescript-eslint packages, eslint, and uuid
8 Minor version updates: Including AWS CDK libraries and SDK clients
2 Patch updates: aws-cdk and typedoc
1 Package removed: lint dependency
1 New override added: rimraf

New Contributors

Full Changelog: blueprints-1.17.1...blueprints-1.17.2

Release 1.17.1

07 May 22:31
5b82993

Choose a tag to compare

Patch Release

What's Changed

New Contributors

Full Changelog: blueprints-1.17.0...blueprints-1.17.1

blueprints-1.17.0

02 May 15:22
d273838

Choose a tag to compare

Release Notes

Key Changes

EKS Auto Mode Support

The challenge to support Auto Mode with the existing CDK constructs was lack of support for ComputeConfig options in the aws-cdk-lib/eks constructs for eks.Cluster. To solve this challenge, the blueprint framework has adopted the new approach to provision EKS clusters based on native CFN constructs (as opposed to custom resources).

The new GenericClusterProviderV2 was introduced to support native CFN constructs for cluster provisioning. The underlying L1 constructs are kept up to date with EKS release and should improve adoption time for new features in the blueprints project. It also reduces the number of custom resources and nested stacks, enabling customers to use standard CloudFormation guardrails and aspects for resource utilization, tagging, etc. Overall, it should be largely compatible with the existing GenericClusterProvider. This does not mean deprecation of the existing cluster providers, as we are maturing the V2 versions.

AutomodeClusterProvider is based on the GenericClusterProviderV2 and by default will allow system and general-purpose node pools, with flexibility to disable them and/or add custom node pools in addition to them.

Examples:

  1. Using cluster provider directly:
const clusterProvider = new blueprints.AutomodeClusterProvider({
  version: KubernetesVersion.V1_32
});

EksBlueprint.builder()
    .clusterProvider(clusterProvider)
    .build(app, 'automode-cluster');
  1. Using AutomodeBuilder
bp.AutomodeBuilder.builder({version: KubernetesVersion.V1_32}) // ['system','general-purpose'] node pool are added by default
  .account(process.env.CDK_DEFAULT_ACCOUNT)
  .region(process.env.CDK_DEFAULT_REGION)
  .addOns(new IngressNginxAddOn({internetFacing: true}))
  .build(app, "eksv2-automode-blueprint");

Please see more examples in the public documentation under /cluster-providers/.

Compatibility with other add-ons:
While we tested and validated automode with multiple add-ons, we could not validate each individual add-on for compatibility (for example, ADOT, AMP, AMG may exhibit compatibility issues).

Karpenter V1 Support

We received many requests to support stable CRD versions with Karpenter, while our existing codebase only supported alpha and beta. Given the volatility of the Karpenter project during initial releases, we have accumulated too much tech debt in the KarpenterAddOn which affected its maintenance.

The address this issue we introduced KarpenterV1AddOn based on the stable versions of both Karpenter and CRDs.

The existing KarpenterAddOn will stay in the code base for compatibility, however it is currently deprecated to allow customers migrating to the stable version.

Example:

const karpenterAddOn =  new addons.KarpenterV1AddOn({
    nodePoolSpec,
    ec2NodeClassSpec: nodeClassSpec,
    interruptionHandling: true
  });

AWS Gateway API Controller (VPC Lattice)

This add-on installs the AWS Gateway API Controller in your cluster to enable Amazon VPC Lattice service networking capabilities.

The AWS Gateway API Controller watches for Gateway API resources (Gateway, HTTPRoute, etc) and provisions corresponding Amazon VPC Lattice resources to enable service networking across multiple clusters and VPCs.

Example:

import * as cdk from 'aws-cdk-lib';
import * as blueprints from '@aws-quickstart/eks-blueprints';

const addOns = [
    new blueprints.addons.GatewayApiCrdsAddOn(),
    new blueprints.addons.AwsGatewayApiControllerAddOn(),
];

const blueprint = blueprints.EksBlueprint.builder()
    .addOns(...addOns)
    .build();

Please see extended documentation on this add-on in our official documentation under AddOns.

ADOT support for 1.31

EKS Blueprints is watching many AWS-owned and OSS projects for updates and compatiblity upgrades to support latest Kubernetes and EKS versions. For a long time, ADOT did not have support for 1.31, it was now added to the blueprints.

Warning: ADOT version that has been verified for AdotCollectorAddOn and 1.31 is v0.109.0-eksbuild.2. Higher versions introduced breaking changes for existing configs (e.g. with AMP collector for example).

Example of using ADOT with 1.31:

new addons.AdotCollectorAddOn({
    namespace: "adot",
    version: "v0.109.0-eksbuild.2",
}),

Other

Multiple improvements, enhancements and bug fixes from our community.

What's Changed

New Contributors

Add-on versions in the release

INFO Chart aws-load-balancer-controller-1.12.0 is at the latest version.
INFO Chart cert-manager-1.17.2 is at the latest version.
DEBUG Core add-on adot is at version v0.109.0-eksbuild.2
INFO Chart aws-efs-csi-driver-3.1.8 is at the latest version.
INFO Chart airflow-1.16.0 is at the latest version.
INFO Chart appmesh-controller-1.13.1 is at the latest version.
INFO Chart argo-cd-7.9.0 is at the latest version.
INFO Chart aws-privateca-issuer-1.4.1 is at the latest version.
INFO Chart tigera-operator-v3.29.3 is at the latest version.
INFO Chart aws-for-fluent-bit-0.1.35 is at the latest version.
INFO Chart external-secrets-0.16.1 is at the latest version.
INFO Chart gpu-operator-v24.9.2 is at the latest version.
WARN Upgrade is needed for chart ingress-nginx-4.12.1: latest version is 4.12.2.
INFO Chart base-1.25.2 is at the latest version.
INFO Chart istiod-1.25.2 is at the latest version.
INFO Chart cni-1.25.2 is at the latest version.
INFO Chart gateway-1.25.2 is at the latest version.
INFO Chart keda-2.17.0 is at the latest version.
INFO Chart kuberay-operator-1.3.2 is at the latest version.
INFO Chart kube-state-metrics-5.33.0 is at the latest version.
INFO Chart kubevious-1.2.2 is at the latest version.
INFO Chart metrics-server-3.12.2 is at the latest version.
WARN Upgrade is needed for chart nginx-ingress-1.4.0: latest version is 2.1.0.
INFO Chart gatekeeper-3.19.1 is at the latest version.
INFO Chart prometheus-node-exporter-4.45.3 is at the latest version.
INFO Chart aws-mountpoint-s3-csi-driver-v1.14.1 is at the latest version.
INFO Chart external-dns-1.16.1 is at the latest version.
INFO Chart secrets-store-csi-driver-1.5.0 is at the latest version.
DEBUG Core add-on kube-proxy has autoselected version v1.31.2-eksbuild.3
DEBUG Core add-on aws-ebs-csi-driver has autoselected version v1.42.0-eksbuild.1
DEBUG Core add-on eks-pod-identity-agent has autoselected version v1.3.4-eksbuild.1
DEBUG Core add-on vpc-cni has autoselected version v1.19.0-eksbuild.1

CDK Dependencies in the release:

    "aws-cdk": "2.1012.0",
    "aws-cdk-lib": "2.192.0"

Full Changelog: blueprints-1.16.3...blueprints-1.17.0

Release 1.16.3

31 Dec 15:38
8cafa9e

Choose a tag to compare

Minor Version Release

What's Changed

  • Correct Kube-proxy mapping version for EKS v1.31 by @vumdao in #1101
  • Remove console.log when looking up non-default VPCs by @samjarrett in #1100
  • ADOT version upgrades for the latest EKS versions. Added new scraping jobs for KSH and KCM metrics by @ashoksrirama in #1103
  • Add S3 CSI Driver IAM policy as blueprints addon by @jesperalmstrom in #1093
  • Upgraded the aws-otel-collector image in otel-collector-amp-collector by @ashoksrirama in #1107
  • fix(aws-lb-controller): wait till deployed by @wombelix in #1102
  • CDK updates, doc updates, fixed AWS load balancer controller installation with vpc-cni by @shapirov103 in #1106

New Contributors

Add-on versions in the release

INFO Chart aws-load-balancer-controller-1.11.0 is at the latest version.
WARN Upgrade is needed for chart cert-manager-1.16.1: latest version is v1.16.2.
WARN Upgrade is needed for chart aws-efs-csi-driver-3.1.3: latest version is 3.1.4.
INFO Chart airflow-1.15.0 is at the latest version.
INFO Chart appmesh-controller-1.13.1 is at the latest version.
WARN Upgrade is needed for chart argo-cd-7.6.12: latest version is 7.7.11.
INFO Chart aws-privateca-issuer-1.4.0 is at the latest version.
INFO Chart aws-node-termination-handler-0.21.0 is at the latest version.
WARN Upgrade is needed for chart tigera-operator-v3.28.2: latest version is v3.29.1.
INFO Chart aws-for-fluent-bit-0.1.34 is at the latest version.
WARN Upgrade is needed for chart external-secrets-0.10.4: latest version is 0.12.1.
WARN Upgrade is needed for chart gpu-operator-v24.6.2: latest version is v24.9.1.
WARN Upgrade is needed for chart ingress-nginx-4.11.3: latest version is 4.12.0.
WARN Upgrade is needed for chart base-1.23.2: latest version is 1.24.2.
WARN Upgrade is needed for chart istiod-1.23.2: latest version is 1.24.2.
WARN Upgrade is needed for chart cni-1.23.2: latest version is 1.24.2.
WARN Upgrade is needed for chart gateway-1.23.2: latest version is 1.24.2.
WARN Upgrade is needed for chart keda-2.15.2: latest version is 2.16.1.
DEBUG Core add-on kube-proxy is at version auto
INFO Chart kuberay-operator-1.2.2 is at the latest version.
WARN Upgrade is needed for chart kube-state-metrics-5.26.0: latest version is 5.28.0.
INFO Chart kubevious-1.2.2 is at the latest version.
INFO Chart metrics-server-3.12.2 is at the latest version.
WARN Upgrade is needed for chart nginx-ingress-1.4.0: latest version is 2.0.0.
WARN Upgrade is needed for chart gatekeeper-3.17.1: latest version is 3.18.1.
WARN Upgrade is needed for chart prometheus-node-exporter-4.39.0: latest version is 4.43.1.
INFO Chart aws-mountpoint-s3-csi-driver-v1.11.0 is at the latest version.
INFO Chart external-dns-1.15.0 is at the latest version.
WARN Upgrade is needed for chart secrets-store-csi-driver-1.4.6: latest version is 1.4.7.
DEBUG Core add-on coredns has autoselected version v1.11.1-eksbuild.8
DEBUG Core add-on adot has autoselected version v0.109.0-eksbuild.2
DEBUG Core add-on vpc-cni has autoselected version v1.19.0-eksbuild.1
DEBUG Core add-on aws-ebs-csi-driver has autoselected version v1.37.0-eksbuild.1
DEBUG Core add-on eks-pod-identity-agent has autoselected version v1.3.4-

Full Changelog: blueprints-1.16.2...blueprints-1.16.3

blueprints-1.16.2

28 Oct 19:44
3169844

Choose a tag to compare

Patch Release

What's Changed

New Contributors

Full Changelog: blueprints-1.16.1...blueprints-1.16.2

Release 1.16.1

24 Oct 15:12
f2de8cc

Choose a tag to compare

Patch release

What's Changed

Full Changelog: blueprints-1.16.0...blueprints-1.16.1