diff --git a/pkg/model/components/awsebscsidriver.go b/pkg/model/components/awsebscsidriver.go index bb6dff02b0b64..269b480ace913 100644 --- a/pkg/model/components/awsebscsidriver.go +++ b/pkg/model/components/awsebscsidriver.go @@ -43,7 +43,7 @@ func (b *AWSEBSCSIDriverOptionsBuilder) BuildOptions(o *kops.Cluster) error { c := aws.EBSCSIDriver if c.Version == nil { - version := "v1.33.0" + version := "v1.38.1" c.Version = &version } diff --git a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index c4e81629f3d3a..28e9783c345c0 100644 --- a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-bootstrap_content b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-bootstrap_content index 9ef25df35fc0f..fd75af6f46d80 100644 --- a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: ab4a6f82af9ce89cfc4458d0da29e42b2fbe13b5be0515af0f27dd1256bb7b56 + manifestHash: 0434ac2a3fbf8042accd3a4fe8420fa20aee13698e81829f8887ad3498e23e35 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_cluster-completed.spec_content index 0c5ed8b036c7e..c0afcd37fb6ed 100644 --- a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_cluster-completed.spec_content index 26f139167bb03..1256c19349081 100644 --- a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 40228d7670217..8386dcf7c32e2 100644 --- a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 065af6f94ae44..f38608c2cc56b 100644 --- a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 22e3d94070e9b480315c0163479741d8c6b55005252539f486d2dceb1a284c8e + manifestHash: fb5877ae3c9cb99347e5141f99c9b1fab4c4f827cfa761db646768d48b2a07b5 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_cluster-completed.spec_content index 0dd6af64887fa..9ce68bb1c576f 100644 --- a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_cluster-completed.spec_content @@ -15,7 +15,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 96242f5b7008c..003d023c003b3 100644 --- a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -865,7 +885,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -951,7 +970,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -987,7 +1006,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -999,6 +1018,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1025,7 +1046,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1062,7 +1083,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1084,13 +1105,12 @@ spec: readOnly: true - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 env: - name: AWS_ROLE_ARN value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1164,7 +1184,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 35e1da5cf6291..9da3f231f44f9 100644 --- a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -170,7 +170,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 3b0df2d544873a0453d87b9a197830fba310cb73cbd09f367fad7db6161e9e34 + manifestHash: 9b572e5cdf70d0e576656a1c501d6f3550e379301dce9cc9f11f71bf2c4d5c2b name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index f6a80a0ab6773..29113d2bf45fe 100644 --- a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-bootstrap_content b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-bootstrap_content index fc33dc5f521b5..5b39d2881d686 100644 --- a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 175814ab70587812d227ab0fa84fea60598ca86bbb1b6b916132dcf9558bdedc + manifestHash: 4c8ce9310cb90960da80dcfaa3b4f5d337d738cff104975cac3b262d3f5fce48 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_cluster-completed.spec_content index 7380ed06d9021..9b0f839e41814 100644 --- a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index ea67099bab6ec..f1bbcefee6736 100644 --- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-bootstrap_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-bootstrap_content index 5ecac44d2765d..89cc56200e5b7 100644 --- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-bootstrap_content @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 618a57463c43b385b746a8d9cfa66606143d675750baa52e587e442785f3d77d + manifestHash: 1b715d6674d6cf774deca6b510d6059a4be65351f9a7ea942ed57efc36ee87f6 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cluster-completed.spec_content index e8d6145720558..6847a05989b2f 100644 --- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 1176258530113..c13180ca54f74 100644 --- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-bootstrap_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-bootstrap_content index c5d09152c357d..2424675e1051a 100644 --- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-bootstrap_content @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 916c40c65c8dd2498d7976c60a90f86812ae553164515bd151ffe4462f9dbe42 + manifestHash: eac40f838000d3127573be654fcd7568beffe7bb8612523ea798178ac748fdb3 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cluster-completed.spec_content index e89dc6a80c3b1..6c4b490eb9e7b 100644 --- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/complex/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/complex/data/aws_s3_object_cluster-completed.spec_content index f4819fc064fd9..db2c6b4667d23 100644 --- a/tests/integration/update_cluster/complex/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/complex/data/aws_s3_object_cluster-completed.spec_content @@ -29,7 +29,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 0b12c52576563..60c158bcb8cd7 100644 --- a/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-bootstrap_content b/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-bootstrap_content index 73038598b5df7..b8d6567b2c05a 100644 --- a/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-bootstrap_content @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: bfc948340e56cecb10d825d217ee9b614a9fdb37c54d9dde7eef6177fc04dccd + manifestHash: 1662c9549843d79e58ac6755492f8877884ca85e7aa44a7513aba585a1920e64 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/compress/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/compress/data/aws_s3_object_cluster-completed.spec_content index c8222c08beddd..a0cb96fc344cf 100644 --- a/tests/integration/update_cluster/compress/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/compress/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 6004da6860b06..4f188197352ef 100644 --- a/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-bootstrap_content b/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-bootstrap_content index 84c500cbcdb93..d637148dceb34 100644 --- a/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 69447c3e0d8cfe291773dfa3baeae28731448de5b6b236b0deb9b1144bc4b845 + manifestHash: cfa155d180c41489e4e4dc838e46ff7d69fa1c2749b58603b163b88b107a96b6 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_cluster-completed.spec_content index f01d13d004d01..6cc494fbd906d 100644 --- a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index ac04088483a10..9e7a5963a9a45 100644 --- a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-bootstrap_content b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-bootstrap_content index c9c5412cea361..0bfebaf71c8ab 100644 --- a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: fc81153cec28c58bb1db488b9f8d683591d660eaff2c7075f018c963e21a4bda + manifestHash: c3827b36db1c294bb8d5ec2e3ced8bb49acd4bbc04f25aa8e8e229d27a4ad2ce name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/containerd/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/containerd/data/aws_s3_object_cluster-completed.spec_content index 1c9bfac88706b..30b733dd613b6 100644 --- a/tests/integration/update_cluster/containerd/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/containerd/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index ac04088483a10..9e7a5963a9a45 100644 --- a/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-bootstrap_content b/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-bootstrap_content index c9c5412cea361..0bfebaf71c8ab 100644 --- a/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: fc81153cec28c58bb1db488b9f8d683591d660eaff2c7075f018c963e21a4bda + manifestHash: c3827b36db1c294bb8d5ec2e3ced8bb49acd4bbc04f25aa8e8e229d27a4ad2ce name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index cf4b1e0069ab9..2b01d6e233571 100644 --- a/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-bootstrap_content b/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-bootstrap_content index eaa7b10938f5b..3ed0eaa488132 100644 --- a/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: d10948a715a668965ad7e82fdebf5541188b2407493f2d7efb72da48224badb8 + manifestHash: 861559629e9967cd478c29a5eb51208826fbe7c6de4e086d7ec653a62fd96788 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/digit/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/digit/data/aws_s3_object_cluster-completed.spec_content index f60d299b62f4b..e70c8c167430a 100644 --- a/tests/integration/update_cluster/digit/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/digit/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_cluster-completed.spec_content index bf259e5a1deb7..10463e89760ea 100644 --- a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 546fe24f4d8cc..1901a66023f57 100644 --- a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-bootstrap_content b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-bootstrap_content index 7702a2c7f0964..cd0a20258165d 100644 --- a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 6174190a8dbb2f3efcb49a4cb99504f5b328d179b1a7970e89d1650fc2b5da86 + manifestHash: 7170b43163197d17eb31560ad8c8f34923a305e0a10666da737b7dba8f8f6156 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_cluster-completed.spec_content index 94b3398401aeb..90d90023d6efb 100644 --- a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_cluster-completed.spec_content @@ -14,7 +14,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 73e86be8e9cc0..75716f133e496 100644 --- a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-bootstrap_content b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-bootstrap_content index bb53abdf12186..e2ce8f61e0b3b 100644 --- a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: e7c3df47bf5ff90f86348c6598fb84ea03bc94719bb0adaa123e72807ee3ac5e + manifestHash: 3781dba828cb76f18505429fb96bce1706ba8e6e96f3316e6965956720d39323 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/external_dns/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/external_dns/data/aws_s3_object_cluster-completed.spec_content index 4873839afb6e3..76f2d51d834f4 100644 --- a/tests/integration/update_cluster/external_dns/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/external_dns/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 40228d7670217..8386dcf7c32e2 100644 --- a/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 127c779aa8912..7a238962c799d 100644 --- a/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 22e3d94070e9b480315c0163479741d8c6b55005252539f486d2dceb1a284c8e + manifestHash: fb5877ae3c9cb99347e5141f99c9b1fab4c4f827cfa761db646768d48b2a07b5 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_cluster-completed.spec_content index fabe9406b7cdf..5f36467f49583 100644 --- a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 96242f5b7008c..003d023c003b3 100644 --- a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -865,7 +885,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -951,7 +970,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -987,7 +1006,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -999,6 +1018,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1025,7 +1046,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1062,7 +1083,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1084,13 +1105,12 @@ spec: readOnly: true - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 env: - name: AWS_ROLE_ARN value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1164,7 +1184,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 53ca7c3b6eeaf..819b08349fad6 100644 --- a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 3b0df2d544873a0453d87b9a197830fba310cb73cbd09f367fad7db6161e9e34 + manifestHash: 9b572e5cdf70d0e576656a1c501d6f3550e379301dce9cc9f11f71bf2c4d5c2b name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/externallb/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/externallb/data/aws_s3_object_cluster-completed.spec_content index 9b1320e6192a4..45425cc8740c3 100644 --- a/tests/integration/update_cluster/externallb/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/externallb/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 59ab28c43110a..6d4446e7f5814 100644 --- a/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-bootstrap_content b/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-bootstrap_content index a4dc6338b16b8..f668fb75690c5 100644 --- a/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 6862502b85afabd105ca745cd708a50aafd455e9e24a5f58d6cb5320d54fcf61 + manifestHash: 48dd8f89533fdd3414b51ebcaadb845ee777d35bcd4d3356c34e96acaca907ea name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_cluster-completed.spec_content index 348a102e22fec..c79b0390ab5a9 100644 --- a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_cluster-completed.spec_content @@ -16,7 +16,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index e57390dc0bd4d..83d2988d3e663 100644 --- a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-bootstrap_content b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-bootstrap_content index 306dca1b2eec0..69f8c9acc04c0 100644 --- a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 8c4a375af16a025bbfa0a8585e2f88f62ac76c4c580a86b001fe678de5be6125 + manifestHash: 0cb38c0fc85ced549f17b42e8645e709d5e3ae1c8c2c7272da09bf84efc48fae name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/ha/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/ha/data/aws_s3_object_cluster-completed.spec_content index 08db981f396e0..6a1c57493b116 100644 --- a/tests/integration/update_cluster/ha/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/ha/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index d8e8d991da07f..2b722d8a3835b 100644 --- a/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-bootstrap_content b/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-bootstrap_content index 1d49e2c7ad12b..a0a5a71a5e83f 100644 --- a/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: ac43c73942f638aa93329a3448ace0139d6ca40318addf6e555f3f6cc9bb0e67 + manifestHash: 2d4c96145bc99a2d97718d1498399cc98f39cf5d080331b451dd4904ee28da36 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/irsa/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/irsa/data/aws_s3_object_cluster-completed.spec_content index d0d0fb2d51fb9..593753dd2dd2c 100644 --- a/tests/integration/update_cluster/irsa/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/irsa/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 40228d7670217..8386dcf7c32e2 100644 --- a/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 0b152f446266b..c5ae7a55b0176 100644 --- a/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -170,7 +170,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 22e3d94070e9b480315c0163479741d8c6b55005252539f486d2dceb1a284c8e + manifestHash: fb5877ae3c9cb99347e5141f99c9b1fab4c4f827cfa761db646768d48b2a07b5 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/karpenter/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/karpenter/data/aws_s3_object_cluster-completed.spec_content index 1e138e6814d2f..f33efb1e53835 100644 --- a/tests/integration/update_cluster/karpenter/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/karpenter/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 96242f5b7008c..003d023c003b3 100644 --- a/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -865,7 +885,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -951,7 +970,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -987,7 +1006,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -999,6 +1018,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1025,7 +1046,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1062,7 +1083,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1084,13 +1105,12 @@ spec: readOnly: true - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 env: - name: AWS_ROLE_ARN value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1164,7 +1184,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 03355d6523994..c339c6bf59822 100644 --- a/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 3b0df2d544873a0453d87b9a197830fba310cb73cbd09f367fad7db6161e9e34 + manifestHash: 9b572e5cdf70d0e576656a1c501d6f3550e379301dce9cc9f11f71bf2c4d5c2b name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_cluster-completed.spec_content index 2a03ba034af8b..8c54bd0339619 100644 --- a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_cluster-completed.spec_content @@ -15,7 +15,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index f5f3572927925..929e80beefd44 100644 --- a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -865,7 +885,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -951,7 +970,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -987,7 +1006,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -1010,6 +1029,7 @@ spec: - args: - --csi-address=$(ADDRESS) - --leader-election=true + - --v=5 - --extra-create-metadata - --kube-api-qps=20 - --kube-api-burst=100 @@ -1022,7 +1042,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v8.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v8.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-snapshotter resources: @@ -1062,7 +1082,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1099,7 +1119,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1121,13 +1141,12 @@ spec: readOnly: true - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 env: - name: AWS_ROLE_ARN value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1201,7 +1220,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 29cb04918c166..7b579a6b43427 100644 --- a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -193,7 +193,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: db7ca215ecd9c12f6f746b37865600f8130ef9844faf7bad48ba8e661fd83ee7 + manifestHash: e99be7e18b75363a7f0f305aa8f4b5e67ac2912908a234b5efcbe559bc2add43 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_cluster-completed.spec_content index f8c612068e496..dbb1ca5a06704 100644 --- a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_cluster-completed.spec_content @@ -15,7 +15,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index f5f3572927925..929e80beefd44 100644 --- a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -865,7 +885,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -951,7 +970,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -987,7 +1006,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -1010,6 +1029,7 @@ spec: - args: - --csi-address=$(ADDRESS) - --leader-election=true + - --v=5 - --extra-create-metadata - --kube-api-qps=20 - --kube-api-burst=100 @@ -1022,7 +1042,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v8.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v8.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-snapshotter resources: @@ -1062,7 +1082,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1099,7 +1119,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1121,13 +1141,12 @@ spec: readOnly: true - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 env: - name: AWS_ROLE_ARN value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1201,7 +1220,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 0f20499bdea9f..21b19d89cb14a 100644 --- a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -200,7 +200,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: db7ca215ecd9c12f6f746b37865600f8130ef9844faf7bad48ba8e661fd83ee7 + manifestHash: e99be7e18b75363a7f0f305aa8f4b5e67ac2912908a234b5efcbe559bc2add43 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_cluster-completed.spec_content index 252a5d9f05fc9..bdc06b730631f 100644 --- a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_cluster-completed.spec_content @@ -15,7 +15,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index f5f3572927925..929e80beefd44 100644 --- a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -865,7 +885,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -951,7 +970,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -987,7 +1006,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -1010,6 +1029,7 @@ spec: - args: - --csi-address=$(ADDRESS) - --leader-election=true + - --v=5 - --extra-create-metadata - --kube-api-qps=20 - --kube-api-burst=100 @@ -1022,7 +1042,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v8.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v8.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-snapshotter resources: @@ -1062,7 +1082,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1099,7 +1119,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1121,13 +1141,12 @@ spec: readOnly: true - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 env: - name: AWS_ROLE_ARN value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1201,7 +1220,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index a1cbcf707618a..5264a76a9b60c 100644 --- a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -201,7 +201,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: db7ca215ecd9c12f6f746b37865600f8130ef9844faf7bad48ba8e661fd83ee7 + manifestHash: e99be7e18b75363a7f0f305aa8f4b5e67ac2912908a234b5efcbe559bc2add43 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_cluster-completed.spec_content index da8b7b957ebeb..ecb2f0408b142 100644 --- a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_cluster-completed.spec_content @@ -16,7 +16,7 @@ spec: cloudConfig: awsEBSCSIDriver: hostNetwork: true - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 326e6cbdf2204..8559920a3443f 100644 --- a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -621,6 +636,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -633,6 +650,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -644,7 +662,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -691,7 +709,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -721,7 +739,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -785,7 +803,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -809,7 +827,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -821,6 +839,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -867,7 +887,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -887,7 +906,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -899,7 +918,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -942,7 +961,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -971,7 +990,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -991,6 +1010,7 @@ spec: - args: - --csi-address=$(ADDRESS) - --leader-election=true + - --v=5 - --extra-create-metadata - --kube-api-qps=20 - --kube-api-burst=100 @@ -999,7 +1019,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v8.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v8.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-snapshotter resources: @@ -1032,7 +1052,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1062,7 +1082,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1081,8 +1101,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1142,7 +1161,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index be80061b0c321..3a5abc8232ece 100644 --- a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -193,7 +193,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: b9cc46ce67bb8b7d3a0524b892ee74363af29d4f3cd81d3dc9c95dcc1c1e32d2 + manifestHash: 5f9c431ca70a3f9bf3425b31143744190d4a013f77be1a5601a40987016ece36 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/many-addons/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/many-addons/data/aws_s3_object_cluster-completed.spec_content index 39282f99dbfb2..fa78fdd2c1e55 100644 --- a/tests/integration/update_cluster/many-addons/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/many-addons/data/aws_s3_object_cluster-completed.spec_content @@ -17,7 +17,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 71d9f6ce48cac..52dc1e62dd729 100644 --- a/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -993,6 +1012,7 @@ spec: - args: - --csi-address=$(ADDRESS) - --leader-election=true + - --v=5 - --extra-create-metadata - --kube-api-qps=20 - --kube-api-burst=100 @@ -1001,7 +1021,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v8.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v8.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-snapshotter resources: @@ -1034,7 +1054,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1064,7 +1084,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1083,8 +1103,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1144,7 +1163,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-bootstrap_content b/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-bootstrap_content index 71dd7584f56bb..73397a406efbf 100644 --- a/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-bootstrap_content @@ -242,7 +242,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 93f2cbab89b3a139165fd128ca4f247bf13bd000e65fe7c876702dd4670ad6b7 + manifestHash: 8f8cc0b09d712d0d66cca6c609ffa59667c964d34e8bf73cfdeacc7e42a34816 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_cluster-completed.spec_content index 1f7753e438212..5e2f5e97d017a 100644 --- a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 40228d7670217..8386dcf7c32e2 100644 --- a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 018679818fb23..cc9fcc0f2ca18 100644 --- a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 22e3d94070e9b480315c0163479741d8c6b55005252539f486d2dceb1a284c8e + manifestHash: fb5877ae3c9cb99347e5141f99c9b1fab4c4f827cfa761db646768d48b2a07b5 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_cluster-completed.spec_content index 83a1bcbfa7aa8..d28972bfd88f3 100644 --- a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 40228d7670217..8386dcf7c32e2 100644 --- a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 97589f64d8745..dd51f8d4ae2c3 100644 --- a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 22e3d94070e9b480315c0163479741d8c6b55005252539f486d2dceb1a284c8e + manifestHash: fb5877ae3c9cb99347e5141f99c9b1fab4c4f827cfa761db646768d48b2a07b5 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_cluster-completed.spec_content index eb06a026c8252..c2dca540a939a 100644 --- a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 40228d7670217..8386dcf7c32e2 100644 --- a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 210cb2c6d04ec..037ac790ec8a3 100644 --- a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 22e3d94070e9b480315c0163479741d8c6b55005252539f486d2dceb1a284c8e + manifestHash: fb5877ae3c9cb99347e5141f99c9b1fab4c4f827cfa761db646768d48b2a07b5 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_cluster-completed.spec_content index 123c2ed5f701b..05641f2ab9219 100644 --- a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 40228d7670217..8386dcf7c32e2 100644 --- a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 52af8eeb0322f..2c0493cac1158 100644 --- a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 22e3d94070e9b480315c0163479741d8c6b55005252539f486d2dceb1a284c8e + manifestHash: fb5877ae3c9cb99347e5141f99c9b1fab4c4f827cfa761db646768d48b2a07b5 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_cluster-completed.spec_content index a8ac9ac523170..8d98994e95c0d 100644 --- a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 40228d7670217..8386dcf7c32e2 100644 --- a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index f74ac9d8186ed..966aec226ebbe 100644 --- a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 22e3d94070e9b480315c0163479741d8c6b55005252539f486d2dceb1a284c8e + manifestHash: fb5877ae3c9cb99347e5141f99c9b1fab4c4f827cfa761db646768d48b2a07b5 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_cluster-completed.spec_content index 9458b2588cce8..e8042eb795c6d 100644 --- a/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 40228d7670217..8386dcf7c32e2 100644 --- a/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index a27f81c8f13e0..c6e3606f32915 100644 --- a/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 22e3d94070e9b480315c0163479741d8c6b55005252539f486d2dceb1a284c8e + manifestHash: fb5877ae3c9cb99347e5141f99c9b1fab4c4f827cfa761db646768d48b2a07b5 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_cluster-completed.spec_content index e41826ca9214f..873b5bd5c39b4 100644 --- a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 0479fa415dc2f..92836c4c4d358 100644 --- a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-bootstrap_content index 4ae0440dd5668..97e2e1cd76f86 100644 --- a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: acddf456ba0164b8d109efaade70478d2da76f72966d61ba55113503fede2f93 + manifestHash: 33383e12bf78f3e55067d789bf1f832b4b8a8b2a2c7683de1f959cd6dbe6f450 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_cluster-completed.spec_content index 186ad7c34ab99..efd95b1868043 100644 --- a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 40228d7670217..8386dcf7c32e2 100644 --- a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 82d161438a1c7..12e14192509fc 100644 --- a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -99,7 +99,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 22e3d94070e9b480315c0163479741d8c6b55005252539f486d2dceb1a284c8e + manifestHash: fb5877ae3c9cb99347e5141f99c9b1fab4c4f827cfa761db646768d48b2a07b5 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_cluster-completed.spec_content index 242c499f22512..4934db1fa4bb0 100644 --- a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index ce4c9a3fd5e54..5f252c50de767 100644 --- a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-bootstrap_content index d09d5a53bbdbc..938533d863524 100644 --- a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 5fc43105ee9423944095c1da90ccdd3429355d8c4de4326d0ff7124e4ef196a7 + manifestHash: 4410094078e6683053ab345b0f8bb7b3097ac8e4c97d8052bc32eb7522912b8a name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_cluster-completed.spec_content index 33027606fe3b7..5821ec3b5d564 100644 --- a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 40228d7670217..8386dcf7c32e2 100644 --- a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 2c3f3b4fdfeb2..081c343816c54 100644 --- a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 22e3d94070e9b480315c0163479741d8c6b55005252539f486d2dceb1a284c8e + manifestHash: fb5877ae3c9cb99347e5141f99c9b1fab4c4f827cfa761db646768d48b2a07b5 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_cluster-completed.spec_content index f699aedb6868b..4f7ee99307176 100644 --- a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true nodeIPFamilies: - ipv6 diff --git a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index b2dc3d859b277..83da63135eed5 100644 --- a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -648,7 +666,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -695,7 +713,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -725,7 +743,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -789,7 +807,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -813,7 +831,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -825,6 +843,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -873,7 +893,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -893,7 +912,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -905,7 +924,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -948,7 +967,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -977,7 +996,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -989,6 +1008,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1008,7 +1029,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1038,7 +1059,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1057,8 +1078,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1118,7 +1138,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content index 8a7af1cd83b43..109f4b6904e1a 100644 --- a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content @@ -168,7 +168,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 02ffc898b0f441a3757cdbe800f27e6adfdf67c062f1d1dd701e81ccec879a25 + manifestHash: 1d351cede39021a1754c872160d01c17bd0f58e1f24f735c1248306e976af056 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_cluster-completed.spec_content index 4daf5ff42e0e2..034d0cd780668 100644 --- a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true nodeIPFamilies: - ipv6 diff --git a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index b2dc3d859b277..83da63135eed5 100644 --- a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -648,7 +666,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -695,7 +713,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -725,7 +743,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -789,7 +807,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -813,7 +831,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -825,6 +843,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -873,7 +893,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -893,7 +912,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -905,7 +924,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -948,7 +967,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -977,7 +996,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -989,6 +1008,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1008,7 +1029,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1038,7 +1059,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1057,8 +1078,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1118,7 +1138,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content index 9e7f0d1e80e8f..772c55521c0b6 100644 --- a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content @@ -121,7 +121,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 02ffc898b0f441a3757cdbe800f27e6adfdf67c062f1d1dd701e81ccec879a25 + manifestHash: 1d351cede39021a1754c872160d01c17bd0f58e1f24f735c1248306e976af056 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_cluster-completed.spec_content index b6280be26f414..c904fd711f13d 100644 --- a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true nodeIPFamilies: - ipv6 diff --git a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index b2dc3d859b277..83da63135eed5 100644 --- a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -648,7 +666,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -695,7 +713,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -725,7 +743,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -789,7 +807,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -813,7 +831,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -825,6 +843,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -873,7 +893,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -893,7 +912,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -905,7 +924,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -948,7 +967,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -977,7 +996,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -989,6 +1008,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1008,7 +1029,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1038,7 +1059,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1057,8 +1078,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1118,7 +1138,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content index b1091896c9bdd..71d7e80051906 100644 --- a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 02ffc898b0f441a3757cdbe800f27e6adfdf67c062f1d1dd701e81ccec879a25 + manifestHash: 1d351cede39021a1754c872160d01c17bd0f58e1f24f735c1248306e976af056 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_cluster-completed.spec_content index 10536b591a3be..197d01d173234 100644 --- a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true nodeIPFamilies: - ipv6 diff --git a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index b2dc3d859b277..83da63135eed5 100644 --- a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -648,7 +666,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -695,7 +713,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -725,7 +743,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -789,7 +807,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -813,7 +831,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -825,6 +843,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -873,7 +893,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -893,7 +912,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -905,7 +924,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -948,7 +967,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -977,7 +996,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -989,6 +1008,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1008,7 +1029,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1038,7 +1059,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1057,8 +1078,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1118,7 +1138,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content index b1091896c9bdd..71d7e80051906 100644 --- a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 02ffc898b0f441a3757cdbe800f27e6adfdf67c062f1d1dd701e81ccec879a25 + manifestHash: 1d351cede39021a1754c872160d01c17bd0f58e1f24f735c1248306e976af056 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_cluster-completed.spec_content index b431d0791e937..4e0bf8b4809e8 100644 --- a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 5f888d4bdde42..2d00fada6f03b 100644 --- a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-bootstrap_content index b5bb2530c19ed..7caf3e3171f7f 100644 --- a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 32694ed7b6bad6047e5f82e037c71f0d2ef1da116e5f778a150fec0b1fdae044 + manifestHash: 3f04c5249e9bf247210bea59241ec0d06950d93605ce8c5979e47aa95085ec40 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_cluster-completed.spec_content index b70c35128617e..4a9b27a56784d 100644 --- a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 848707fe3a1e3..b5192e394f387 100644 --- a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-bootstrap_content index ba2ae05f72ebc..473a3a0acd530 100644 --- a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-bootstrap_content @@ -114,7 +114,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: d7631bc37a7ff85109c478b3657f4f37ab6973757fa25cc5da34686ee863e956 + manifestHash: 8489703d5ee8668212c585909e538bc3193cd7f981395da8811266c7938c59cf name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_cluster-completed.spec_content index 0cab6c92a5fe7..69ea5a7ee1428 100644 --- a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index f9584f7e45f00..07064e21dd76c 100644 --- a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content index e206243c615f2..400e3db7cfbff 100644 --- a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: e87584bab5b76e6acd04df7897ba77ce3e1a1bca885a3bae5769b3d566afe544 + manifestHash: f62505d2d2ba478618b10edcdc68f61258456fa2c58ac640a89e49fba81676a9 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_cluster-completed.spec_content index cfb7e2d043bf4..2ccffe822a6d1 100644 --- a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 03d158f490def..91b89b67fac3d 100644 --- a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -865,7 +885,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.k8s.local - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -951,7 +970,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.k8s.local - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -987,7 +1006,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.k8s.local - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -999,6 +1018,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1025,7 +1046,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.k8s.local - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1062,7 +1083,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.k8s.local - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1084,13 +1105,12 @@ spec: readOnly: true - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 env: - name: AWS_ROLE_ARN value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.k8s.local - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1164,7 +1184,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content index 3427680b2da7d..2c85a32e6df57 100644 --- a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 4b03c78c6dd4e2eb383102d7a212de1725971d2fa0d22326ac31feedea01110e + manifestHash: 35d4bfc281b6512892d418a7f9b7d7e1be9a0ef860d3c491fcbb7504db40b34d name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_cluster-completed.spec_content index b915f27b6c9c7..92136447a4ec0 100644 --- a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 39dfadcebc786..8f26e952cd2a2 100644 --- a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content index 21a39253366d2..20e35ef7bb098 100644 --- a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 791d8f8f03c1937ad4bcae6574628da5811461ac170ac22da3e915129256022e + manifestHash: 96e58f480097962ae736eb4268974b3e799c87cc55fef7381f42c6dbe6e0f554 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_cluster-completed.spec_content index b915f27b6c9c7..92136447a4ec0 100644 --- a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 39dfadcebc786..8f26e952cd2a2 100644 --- a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content index 21a39253366d2..20e35ef7bb098 100644 --- a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 791d8f8f03c1937ad4bcae6574628da5811461ac170ac22da3e915129256022e + manifestHash: 96e58f480097962ae736eb4268974b3e799c87cc55fef7381f42c6dbe6e0f554 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_cluster-completed.spec_content index 6b0cb4e2b44e9..dca9e35c98e94 100644 --- a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index e9a44df01cfa7..de3be5300ac62 100644 --- a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -865,7 +885,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.nthimdsprocessor.lon-kfj86l - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -951,7 +970,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.nthimdsprocessor.lon-kfj86l - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -987,7 +1006,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.nthimdsprocessor.lon-kfj86l - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -999,6 +1018,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1025,7 +1046,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.nthimdsprocessor.lon-kfj86l - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1062,7 +1083,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.nthimdsprocessor.lon-kfj86l - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1084,13 +1105,12 @@ spec: readOnly: true - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 env: - name: AWS_ROLE_ARN value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.nthimdsprocessor.lon-kfj86l - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1164,7 +1184,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content index 2149c77f79c5a..3b36e4b631962 100644 --- a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content @@ -104,7 +104,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 89d9d1b576ddca58a20420074ddef2671101c266c1dd599a719f1b91751cab5c + manifestHash: 30b21abec3778c031e362ea131d1d16a29a34712d16bc9cd62ed957b9dff654c name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_cluster-completed.spec_content index d44b060198ebc..de1f0ec3aac6f 100644 --- a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 7e127db1e93fa..ed0c36d88ea5e 100644 --- a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content index edc094e9e1a02..7a098ed6e5db5 100644 --- a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content @@ -104,7 +104,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 70b99058533de3424acc9ebcd3e0f215730aff3a84e83ffdefecfe9c7bb8ff1a + manifestHash: bcd2e463c8eefc9b23ad98005828854f0eba2890029f07899ec5ee9a4a4d8755 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/nvidia/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/nvidia/data/aws_s3_object_cluster-completed.spec_content index de425e1c20835..b337f665d095e 100644 --- a/tests/integration/update_cluster/nvidia/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/nvidia/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 40228d7670217..8386dcf7c32e2 100644 --- a/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 146785d7f0d70..4ad5e4e573f49 100644 --- a/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 22e3d94070e9b480315c0163479741d8c6b55005252539f486d2dceb1a284c8e + manifestHash: fb5877ae3c9cb99347e5141f99c9b1fab4c4f827cfa761db646768d48b2a07b5 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_cluster-completed.spec_content index f9e55583f7a28..fce3a07557ed6 100644 --- a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 443ac78cb9a2a..41d0bce3acb18 100644 --- a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-bootstrap_content b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-bootstrap_content index 21e07aa427f1c..12314941689ae 100644 --- a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: fe34112d96ebbff0f4d5e9d202bdcddfa34597f8450effba588347b9df7cd969 + manifestHash: 91925dcb95ca07ace3bee27c41fdad967a534b470aa659d9f2220788d83ff52f name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_cluster-completed.spec_content index 3e092fd1ea800..f73a43637056d 100644 --- a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 8638b089b020d..85e855dcd4c74 100644 --- a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-bootstrap_content b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-bootstrap_content index f00090cfdc834..17e9fc2e0ab8f 100644 --- a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 62ca293e3cd716f4279a08a381774eafd226b153e23760e615bfec381d17a8c9 + manifestHash: 5130ad6807453538da106941d2af2b936cc97da463e0d203d111b82030eb2ee2 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_cluster-completed.spec_content index 9de232b51a89c..6210d7e8ba354 100644 --- a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 96408c26f4742..8ede5944c0f0b 100644 --- a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-bootstrap_content index 5092c0845febc..e09704fdb2ba9 100644 --- a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-bootstrap_content @@ -168,7 +168,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: f1db751f65db1e5cfe3d76d46f646e0e220172e84e4d0f455c68a8d4c1e46b4d + manifestHash: be69b73cc22c83600d7c8e8a8df63d455aa7c053699e17d253719e08d417d2b3 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_cluster-completed.spec_content index 7dc07a82bfdf7..c9f1b7037aa8e 100644 --- a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 5c1234a1b3936..b9962b65a3097 100644 --- a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-bootstrap_content index bf4b5c5875fc9..75e840142cfa5 100644 --- a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-bootstrap_content @@ -168,7 +168,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 5af73c8411274677331a01fb932e654bd3a0a71338b560a670cf70f6bcc75d2d + manifestHash: 3a164898f83c141c0df76a54f5b2c6fa1f566658ac3632cbd0f9860a8f1f59da name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_cluster-completed.spec_content index 262f5fdac94ae..585b0cbeb46fa 100644 --- a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 22a31771b6bd0..2a05e91e4af14 100644 --- a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content index 400e74292b0ee..0ddb9a7a228aa 100644 --- a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content @@ -114,7 +114,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: de80c082290dfe44e460395ca008e78da25cb18ee75d8877757c5cdb55421de8 + manifestHash: 1f62e33cb84ca5e70e796d533aa304e76fe17aa046ca15eeb9c939476a0a05e1 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_cluster-completed.spec_content index bd7754a1334d2..0c4eaa73a1a09 100644 --- a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 22a31771b6bd0..2a05e91e4af14 100644 --- a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content index a67ab91a65101..11cbfc91370fb 100644 --- a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content @@ -114,7 +114,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: de80c082290dfe44e460395ca008e78da25cb18ee75d8877757c5cdb55421de8 + manifestHash: 1f62e33cb84ca5e70e796d533aa304e76fe17aa046ca15eeb9c939476a0a05e1 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_cluster-completed.spec_content index d17ff2fe0870f..358164a62c165 100644 --- a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_cluster-completed.spec_content @@ -15,7 +15,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 22a31771b6bd0..2a05e91e4af14 100644 --- a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content index e1fa127132864..0fa3edc3d724c 100644 --- a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content @@ -171,7 +171,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: de80c082290dfe44e460395ca008e78da25cb18ee75d8877757c5cdb55421de8 + manifestHash: 1f62e33cb84ca5e70e796d533aa304e76fe17aa046ca15eeb9c939476a0a05e1 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_cluster-completed.spec_content index 05c44540aca87..c5391a799f0e1 100644 --- a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 3d60ef8cb1e55..f247da08a8a74 100644 --- a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-bootstrap_content index d96cc5275a15c..cf53472acd0bf 100644 --- a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-bootstrap_content @@ -114,7 +114,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 87a215fe67d46da80e2b7879af91b5f87ddf3bba66df7fa691cab52a93832d34 + manifestHash: 5fc21f917cbd1b5ce829bb1186e9d02102a57691c4567ecf7efee9fc247631a6 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_cluster-completed.spec_content index 2762f960c780d..4ebdb1c8c19de 100644 --- a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index ee262ab9c20ce..680303f02914f 100644 --- a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-bootstrap_content index d0f7e493f963a..8d5aeece2a0f1 100644 --- a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 459d8da90b163c654ba80ce7801f9c106844104944546f2f5bf92d0b23eead8a + manifestHash: 84469346d785dfa2998f8735350079a32a65fc38aefcda044e8ae1c7c55ca561 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_cluster-completed.spec_content index 05d9c4ecee9ff..a8564c016e104 100644 --- a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index ce50b3c4240be..14a9aa727e2de 100644 --- a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-bootstrap_content index 4e95886146e21..869f05e6452ee 100644 --- a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 121a89c29264b3e86637992a3bf1978fcf71dc2ba2034dd47210469de094ac34 + manifestHash: 5fd2e4c41281751d58f9418b00bd9d623eff45d6916cf83e2da3c82ddeb51f1b name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_cluster-completed.spec_content index 03ea9f5a021f4..8a6f830a6cf1c 100644 --- a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index ef9b3289e0c03..aa63599edc368 100644 --- a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-bootstrap_content index cccaa130dbb34..e3cc32f1c57c9 100644 --- a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-bootstrap_content @@ -164,7 +164,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: f3ee02c9da6a3bcfa419cd8e5813e8a91a3bdc817d9c32057ea606e4dc948ba0 + manifestHash: 3402195ca3850336942312ff11e4e0e21e965e616fcffd27ae34576efa120bb6 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_cluster-completed.spec_content index fd23a695a4817..b8eef9ee1b779 100644 --- a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 0f81c8f3d1d60..ce0926d51785f 100644 --- a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-bootstrap_content index 4f63fe30ba4e0..c755bea803790 100644 --- a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-bootstrap_content @@ -155,7 +155,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: ef35355c967fec6ada5ace915b4f8dba46d8ec727f714500db212ef386fc9fc7 + manifestHash: 6b5116213eba20b92e2d693b6c0500cc85be1beb9286aedf76937a2c11c70f8d name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_cluster-completed.spec_content index 8bfa58986ed0b..d566645bc6b4d 100644 --- a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 96242f5b7008c..003d023c003b3 100644 --- a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -865,7 +885,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -951,7 +970,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -987,7 +1006,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -999,6 +1018,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1025,7 +1046,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1062,7 +1083,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1084,13 +1105,12 @@ spec: readOnly: true - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 env: - name: AWS_ROLE_ARN value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1164,7 +1184,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index acece66d4afce..fe0e4b3068564 100644 --- a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 3b0df2d544873a0453d87b9a197830fba310cb73cbd09f367fad7db6161e9e34 + manifestHash: 9b572e5cdf70d0e576656a1c501d6f3550e379301dce9cc9f11f71bf2c4d5c2b name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_cluster-completed.spec_content index 105f1b24ae9b0..34829882f9f50 100644 --- a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 02c3126bb2f25..d50b1a42a1ba5 100644 --- a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-bootstrap_content b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-bootstrap_content index 0480cf7e0efe7..eec7af46cd383 100644 --- a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: a4c1293fa13cc21464ab2771a0ade73ce26851a70fc6b9dd236018412e13ca03 + manifestHash: 22e6e879939d4ecb7cca65792f4672df9b40c4d906934e7a87833d4c6c3f77e4 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_cluster-completed.spec_content index 4c4b3dcad673a..ae0aa99ff5f00 100644 --- a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index fb69df3bd49d7..7f89c7e2ac93a 100644 --- a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-bootstrap_content b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-bootstrap_content index f0a628890f786..1875c54d82a92 100644 --- a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 1c08c5e9b5b550d6d1f3ecd95922ba9bdc58d6fcd1a3a34f7d7799ffb5acca89 + manifestHash: 73aab790e165d2d63dd0b930118858276f58f55e7152c250ba94dccb7aa3a590 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_cluster-completed.spec_content index 30c6199995a78..c1fd6b257594f 100644 --- a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true nodeIPFamilies: - ipv6 diff --git a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index b2dc3d859b277..83da63135eed5 100644 --- a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -648,7 +666,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -695,7 +713,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -725,7 +743,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -789,7 +807,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -813,7 +831,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -825,6 +843,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -873,7 +893,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -893,7 +912,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -905,7 +924,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -948,7 +967,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -977,7 +996,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -989,6 +1008,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1008,7 +1029,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1038,7 +1059,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1057,8 +1078,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1118,7 +1138,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content index b1091896c9bdd..71d7e80051906 100644 --- a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 02ffc898b0f441a3757cdbe800f27e6adfdf67c062f1d1dd701e81ccec879a25 + manifestHash: 1d351cede39021a1754c872160d01c17bd0f58e1f24f735c1248306e976af056 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_cluster-completed.spec_content index 6b7c3410a1354..6fb78434d4dc4 100644 --- a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 642fca31d9bd8..b121cef63d328 100644 --- a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-bootstrap_content b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-bootstrap_content index e847b0ba1e480..94b5de7796e4a 100644 --- a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 724c31fcb29937168fdd2c49227862f123dbc35948fdb2f56d8850d732ce1bb1 + manifestHash: 8a6860ff348e33152c57d6ce97e05dbefb31248ec1f72df80d15cc477fe0588c name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_cluster-completed.spec_content index 31c401c972b60..869fbbd298f21 100644 --- a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.33.0 + version: v1.38.1 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 40228d7670217..8386dcf7c32e2 100644 --- a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -80,20 +80,11 @@ rules: - get - list - watch - - update - patch - apiGroups: - - "" - resources: - - nodes - verbs: - - get - - list - - watch -- apiGroups: - - csi.storage.k8s.io + - storage.k8s.io resources: - - csinodeinfos + - csinodes verbs: - get - list @@ -106,7 +97,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - storage.k8s.io @@ -127,7 +117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -165,7 +155,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -264,7 +254,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -276,7 +266,6 @@ rules: - get - list - watch - - update - patch - apiGroups: - "" @@ -289,14 +278,7 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims/status - verbs: - - update - - patch -- apiGroups: - - storage.k8s.io - resources: - - storageclasses + - pods verbs: - get - list @@ -304,21 +286,19 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumeclaims/status verbs: - - list - - watch - - create - - update - patch - apiGroups: - "" resources: - - pods + - events verbs: - - get - list - watch + - create + - update + - patch - apiGroups: - storage.k8s.io resources: @@ -340,7 +320,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -365,15 +345,25 @@ rules: - apiGroups: - snapshot.storage.k8s.io resources: - - volumesnapshotcontents + - volumesnapshots verbs: + - get + - list + - watch + - update + - patch - create +- apiGroups: + - snapshot.storage.k8s.io + resources: + - volumesnapshotcontents + verbs: - get - list - watch - update - - delete - patch + - create - apiGroups: - snapshot.storage.k8s.io resources: @@ -381,6 +371,31 @@ rules: verbs: - update - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotclasses + verbs: + - get + - list + - watch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents + verbs: + - get + - list + - watch + - update + - patch +- apiGroups: + - groupsnapshot.storage.k8s.io + resources: + - volumegroupsnapshotcontents/status + verbs: + - update + - patch --- @@ -394,7 +409,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -418,7 +433,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -442,7 +457,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -466,7 +481,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -490,7 +505,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -514,7 +529,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -543,7 +558,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -590,7 +605,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -609,7 +624,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -623,6 +638,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -635,6 +652,7 @@ spec: - args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ - --logging-format=text - --v=2 env: @@ -646,7 +664,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -693,7 +711,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -723,7 +741,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -787,7 +805,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -811,7 +829,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 kops.k8s.io/managed-by: kops spec: affinity: @@ -823,6 +841,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: @@ -869,7 +889,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -889,7 +908,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.38.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,7 +920,7 @@ spec: timeoutSeconds: 3 name: ebs-plugin ports: - - containerPort: 9811 + - containerPort: 9808 name: healthz protocol: TCP - containerPort: 3301 @@ -944,7 +963,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -973,7 +992,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -985,6 +1004,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1004,7 +1025,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1034,7 +1055,7 @@ spec: env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1053,8 +1074,7 @@ spec: name: socket-dir - args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1114,7 +1134,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.33.0 + app.kubernetes.io/version: v1.38.1 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 2c3f3b4fdfeb2..081c343816c54 100644 --- a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 22e3d94070e9b480315c0163479741d8c6b55005252539f486d2dceb1a284c8e + manifestHash: fb5877ae3c9cb99347e5141f99c9b1fab4c4f827cfa761db646768d48b2a07b5 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/models/cloudup/resources/addons/aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml.template b/upup/models/cloudup/resources/addons/aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml.template index 20a58660eabf3..c307580331628 100644 --- a/upup/models/cloudup/resources/addons/aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml.template +++ b/upup/models/cloudup/resources/addons/aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml.template @@ -2,7 +2,7 @@ # --set controller.volumeModificationFeature.enabled=true \ # --set sidecars.snapshotter.forceEnable=true \ # --set controller.enableMetrics=true \ -# --no-hooks +# --no-hooks | grep -vi helm {{ with .CloudProvider.AWS.EBSCSIDriver }} --- @@ -61,22 +61,22 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/version: {{ .Version }} app.kubernetes.io/component: csi-driver +# Do not modify the rules below manually, see `make update-sidecar-dependencies` +# BEGIN AUTOGENERATED RULES rules: -- apiGroups: [ "" ] - resources: [ "persistentvolumes" ] - verbs: [ "get", "list", "watch", "update", "patch" ] -- apiGroups: [ "" ] - resources: [ "nodes" ] - verbs: [ "get", "list", "watch" ] -- apiGroups: [ "csi.storage.k8s.io" ] - resources: [ "csinodeinfos" ] - verbs: [ "get", "list", "watch" ] -- apiGroups: [ "storage.k8s.io" ] - resources: [ "volumeattachments" ] - verbs: [ "get", "list", "watch", "update", "patch" ] -- apiGroups: [ "storage.k8s.io" ] - resources: [ "volumeattachments/status" ] - verbs: [ "patch" ] +- apiGroups: [""] + resources: ["persistentvolumes"] + verbs: ["get", "list", "watch", "patch"] +- apiGroups: ["storage.k8s.io"] + resources: ["csinodes"] + verbs: ["get", "list", "watch"] +- apiGroups: ["storage.k8s.io"] + resources: ["volumeattachments"] + verbs: ["get", "list", "watch", "patch"] +- apiGroups: ["storage.k8s.io"] + resources: ["volumeattachments/status"] + verbs: ["patch"] +# END AUTOGENERATED RULES --- # Source: aws-ebs-csi-driver/templates/clusterrole-csi-node.yaml kind: ClusterRole @@ -109,37 +109,50 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/version: {{ .Version }} app.kubernetes.io/component: csi-driver +# Do not modify the rules below manually, see `make update-sidecar-dependencies` +# BEGIN AUTOGENERATED RULES rules: -- apiGroups: [ "" ] - resources: [ "persistentvolumes" ] - verbs: [ "get", "list", "watch", "create", "patch", "delete" ] -- apiGroups: [ "" ] - resources: [ "persistentvolumeclaims" ] - verbs: [ "get", "list", "watch", "update" ] -- apiGroups: [ "storage.k8s.io" ] - resources: [ "storageclasses" ] - verbs: [ "get", "list", "watch" ] -- apiGroups: [ "" ] - resources: [ "events" ] - verbs: [ "list", "watch", "create", "update", "patch" ] -- apiGroups: [ "snapshot.storage.k8s.io" ] - resources: [ "volumesnapshots" ] - verbs: [ "get", "list" ] -- apiGroups: [ "snapshot.storage.k8s.io" ] - resources: [ "volumesnapshotcontents" ] - verbs: [ "get", "list" ] -- apiGroups: [ "storage.k8s.io" ] - resources: [ "csinodes" ] - verbs: [ "get", "list", "watch" ] -- apiGroups: [ "" ] - resources: [ "nodes" ] - verbs: [ "get", "list", "watch" ] -- apiGroups: [ "storage.k8s.io" ] - resources: [ "volumeattachments" ] - verbs: [ "get", "list", "watch" ] -- apiGroups: [ "storage.k8s.io" ] - resources: [ "volumeattributesclasses" ] - verbs: [ "get" ] +# The following rule should be uncommented for plugins that require secrets +# for provisioning. +# - apiGroups: [""] +# resources: ["secrets"] +# verbs: ["get", "list"] +- apiGroups: [""] + resources: ["persistentvolumes"] + verbs: ["get", "list", "watch", "create", "patch", "delete"] +- apiGroups: [""] + resources: ["persistentvolumeclaims"] + verbs: ["get", "list", "watch", "update"] +- apiGroups: ["storage.k8s.io"] + resources: ["storageclasses"] + verbs: ["get", "list", "watch"] +- apiGroups: [""] + resources: ["events"] + verbs: ["list", "watch", "create", "update", "patch"] +- apiGroups: ["snapshot.storage.k8s.io"] + resources: ["volumesnapshots"] + verbs: ["get", "list"] +- apiGroups: ["snapshot.storage.k8s.io"] + resources: ["volumesnapshotcontents"] + verbs: ["get", "list"] +- apiGroups: ["storage.k8s.io"] + resources: ["csinodes"] + verbs: ["get", "list", "watch"] +- apiGroups: [""] + resources: ["nodes"] + verbs: ["get", "list", "watch"] +# Access to volumeattachments is only needed when the CSI driver +# has the PUBLISH_UNPUBLISH_VOLUME controller capability. +# In that case, external-provisioner will watch volumeattachments +# to determine when it is safe to delete a volume. +- apiGroups: ["storage.k8s.io"] + resources: ["volumeattachments"] + verbs: ["get", "list", "watch"] +# END AUTOGENERATED RULES +# Extra rule: VAC rules not present in upstream example +- apiGroups: ["storage.k8s.io"] + resources: ["volumeattributesclasses"] + verbs: ["get"] --- # Source: aws-ebs-csi-driver/templates/clusterrole-resizer.yaml kind: ClusterRole @@ -151,33 +164,34 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/version: {{ .Version }} app.kubernetes.io/component: csi-driver +# Do not modify the rules below manually, see `make update-sidecar-dependencies` +# BEGIN AUTOGENERATED RULES rules: # The following rule should be uncommented for plugins that require secrets # for provisioning. # - apiGroups: [""] # resources: ["secrets"] # verbs: ["get", "list", "watch"] -- apiGroups: [ "" ] - resources: [ "persistentvolumes" ] - verbs: [ "get", "list", "watch", "update", "patch" ] -- apiGroups: [ "" ] - resources: [ "persistentvolumeclaims" ] - verbs: [ "get", "list", "watch" ] -- apiGroups: [ "" ] - resources: [ "persistentvolumeclaims/status" ] - verbs: [ "update", "patch" ] -- apiGroups: [ "storage.k8s.io" ] - resources: [ "storageclasses" ] - verbs: [ "get", "list", "watch" ] -- apiGroups: [ "" ] - resources: [ "events" ] - verbs: [ "list", "watch", "create", "update", "patch" ] -- apiGroups: [ "" ] - resources: [ "pods" ] - verbs: [ "get", "list", "watch" ] -- apiGroups: [ "storage.k8s.io" ] - resources: [ "volumeattributesclasses" ] - verbs: [ "get", "list", "watch" ] +- apiGroups: [""] + resources: ["persistentvolumes"] + verbs: ["get", "list", "watch", "patch"] +- apiGroups: [""] + resources: ["persistentvolumeclaims"] + verbs: ["get", "list", "watch"] +- apiGroups: [""] + resources: ["pods"] + verbs: ["get", "list", "watch"] +- apiGroups: [""] + resources: ["persistentvolumeclaims/status"] + verbs: ["patch"] +- apiGroups: [""] + resources: ["events"] + verbs: ["list", "watch", "create", "update", "patch"] +# only required if enabling the alpha volume modify feature +- apiGroups: ["storage.k8s.io"] + resources: ["volumeattributesclasses"] + verbs: ["get", "list", "watch"] +# END AUTOGENERATED RULES --- # Source: aws-ebs-csi-driver/templates/clusterrole-snapshotter.yaml kind: ClusterRole @@ -189,26 +203,41 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/version: {{ .Version }} app.kubernetes.io/component: csi-driver +# Do not modify the rules below manually, see `make update-sidecar-dependencies` +# BEGIN AUTOGENERATED RULES rules: -- apiGroups: [ "" ] - resources: [ "events" ] - verbs: [ "list", "watch", "create", "update", "patch" ] +- apiGroups: [""] + resources: ["events"] + verbs: ["list", "watch", "create", "update", "patch"] # Secret permission is optional. # Enable it if your driver needs secret. # For example, `csi.storage.k8s.io/snapshotter-secret-name` is set in VolumeSnapshotClass. # See https://kubernetes-csi.github.io/docs/secrets-and-credentials.html for more details. -# - apiGroups: [ "" ] -# resources: [ "secrets" ] -# verbs: [ "get", "list" ] -- apiGroups: [ "snapshot.storage.k8s.io" ] - resources: [ "volumesnapshotclasses" ] - verbs: [ "get", "list", "watch" ] -- apiGroups: [ "snapshot.storage.k8s.io" ] - resources: [ "volumesnapshotcontents" ] - verbs: [ "create", "get", "list", "watch", "update", "delete", "patch" ] -- apiGroups: [ "snapshot.storage.k8s.io" ] - resources: [ "volumesnapshotcontents/status" ] - verbs: [ "update", "patch" ] +# - apiGroups: [""] +# resources: ["secrets"] +# verbs: ["get", "list"] +- apiGroups: ["snapshot.storage.k8s.io"] + resources: ["volumesnapshotclasses"] + verbs: ["get", "list", "watch"] +- apiGroups: ["snapshot.storage.k8s.io"] + resources: ["volumesnapshots"] + verbs: ["get", "list", "watch", "update", "patch", "create"] +- apiGroups: ["snapshot.storage.k8s.io"] + resources: ["volumesnapshotcontents"] + verbs: ["get", "list", "watch", "update", "patch", "create"] +- apiGroups: ["snapshot.storage.k8s.io"] + resources: ["volumesnapshotcontents/status"] + verbs: ["update", "patch"] +- apiGroups: ["groupsnapshot.storage.k8s.io"] + resources: ["volumegroupsnapshotclasses"] + verbs: ["get", "list", "watch"] +- apiGroups: ["groupsnapshot.storage.k8s.io"] + resources: ["volumegroupsnapshotcontents"] + verbs: ["get", "list", "watch", "update", "patch"] +- apiGroups: ["groupsnapshot.storage.k8s.io"] + resources: ["volumegroupsnapshotcontents/status"] + verbs: ["update", "patch"] +# END AUTOGENERATED RULES --- # Source: aws-ebs-csi-driver/templates/clusterrolebinding-attacher.yaml kind: ClusterRoleBinding @@ -221,9 +250,9 @@ metadata: app.kubernetes.io/version: {{ .Version }} app.kubernetes.io/component: csi-driver subjects: - - kind: ServiceAccount - name: ebs-csi-controller-sa - namespace: kube-system +- kind: ServiceAccount + name: ebs-csi-controller-sa + namespace: kube-system roleRef: kind: ClusterRole name: ebs-external-attacher-role @@ -353,9 +382,9 @@ spec: selector: app: ebs-csi-controller ports: - - name: metrics - port: 3301 - targetPort: 3301 + - name: metrics + port: 3301 + targetPort: 3301 type: ClusterIP --- # Source: aws-ebs-csi-driver/templates/node.yaml @@ -406,6 +435,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid - key: node.kubernetes.io/instance-type operator: NotIn values: @@ -434,6 +465,7 @@ spec: args: - node - --endpoint=$(CSI_ENDPOINT) + - --csi-mount-point-prefix=/var/lib/kubelet/plugins/kubernetes.io/csi/ebs.csi.aws.com/ {{- if .VolumeAttachLimit }} - --volume-attach-limit={{ .VolumeAttachLimit }} {{- end }} @@ -492,7 +524,7 @@ spec: exec: command: ["/bin/aws-ebs-csi-driver", "pre-stop-hook"] - name: node-driver-registrar - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent args: - --csi-address=$(ADDRESS) @@ -529,7 +561,7 @@ spec: allowPrivilegeEscalation: false readOnlyRootFilesystem: true - name: liveness-probe - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent args: - --csi-address=/csi/csi.sock @@ -645,6 +677,8 @@ spec: operator: NotIn values: - fargate + - auto + - hybrid weight: 1 podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: @@ -716,7 +750,6 @@ spec: - name: CSI_NODE_NAME valueFrom: fieldRef: - apiVersion: v1 fieldPath: spec.nodeName - name: AWS_ACCESS_KEY_ID valueFrom: @@ -741,7 +774,7 @@ spec: mountPath: /var/lib/csi/sockets/pluginproxy/ ports: - name: healthz - containerPort: 9811 + containerPort: 9808 protocol: TCP - name: metrics containerPort: 3301 @@ -774,7 +807,7 @@ spec: seccompProfile: type: RuntimeDefault - name: csi-provisioner - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent args: - --timeout=60s @@ -806,7 +839,7 @@ spec: seccompProfile: type: RuntimeDefault - name: csi-attacher - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.7.0-eks-1-32-1 imagePullPolicy: IfNotPresent args: - --timeout=60s @@ -832,15 +865,16 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true - {{ if HasSnapshotController }} seccompProfile: type: RuntimeDefault + {{ if HasSnapshotController }} - name: csi-snapshotter - image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v8.0.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v8.1.0-eks-1-32-1 imagePullPolicy: IfNotPresent args: - --csi-address=$(ADDRESS) - --leader-election=true + - --v=5 - --extra-create-metadata - --kube-api-qps=20 - --kube-api-burst=100 @@ -863,9 +897,9 @@ spec: readOnlyRootFilesystem: true seccompProfile: type: RuntimeDefault - {{ end }} + {{ end }} - name: volumemodifier - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.5.0 imagePullPolicy: IfNotPresent args: - --timeout=60s @@ -898,7 +932,7 @@ spec: seccompProfile: type: RuntimeDefault - name: csi-resizer - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.12.0-eks-1-32-1 imagePullPolicy: IfNotPresent args: - --timeout=60s @@ -928,11 +962,10 @@ spec: seccompProfile: type: RuntimeDefault - name: liveness-probe - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-1 imagePullPolicy: IfNotPresent args: - --csi-address=/csi/csi.sock - - --http-endpoint=0.0.0.0:9811 volumeMounts: - name: socket-dir mountPath: /csi @@ -962,9 +995,9 @@ metadata: spec: attachRequired: true podInfoOnMount: false + # Disabled because the field is immutable and kOps doesn't have a way to delete and recreate the resource + # fsGroupPolicy: File {{ if KopsFeatureEnabled "SELinuxMount" }} seLinuxMount: true {{ end }} - {{- /* Disabled because the field is immutable and kOps doesn't have a way to delete and recreate the resource */}} - # fsGroupPolicy: File {{ end }} diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc-containerd/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc-containerd/manifest.yaml index a5c04d183ffd5..57da19b790597 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc-containerd/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc-containerd/manifest.yaml @@ -114,7 +114,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 67176b6289a3c37979877436fe221b2420889b6bc0e63506013ea297a64215ed + manifestHash: 2b27f41b1c7bbd4b307321b7a413825ae797fca7cb42263684d610eea3295735 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc/manifest.yaml index a5c04d183ffd5..57da19b790597 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc/manifest.yaml @@ -114,7 +114,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 67176b6289a3c37979877436fe221b2420889b6bc0e63506013ea297a64215ed + manifestHash: 2b27f41b1c7bbd4b307321b7a413825ae797fca7cb42263684d610eea3295735 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awscloudcontroller/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awscloudcontroller/manifest.yaml index 9d20fcd148b0e..4f85721873c78 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awscloudcontroller/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awscloudcontroller/manifest.yaml @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 67176b6289a3c37979877436fe221b2420889b6bc0e63506013ea297a64215ed + manifestHash: 2b27f41b1c7bbd4b307321b7a413825ae797fca7cb42263684d610eea3295735 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/crd/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/crd/manifest.yaml index b636c7a37b796..236574c220783 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/crd/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/crd/manifest.yaml @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 67176b6289a3c37979877436fe221b2420889b6bc0e63506013ea297a64215ed + manifestHash: 2b27f41b1c7bbd4b307321b7a413825ae797fca7cb42263684d610eea3295735 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/mappings/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/mappings/manifest.yaml index 06a7ffd20469c..8f83701551348 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/mappings/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/mappings/manifest.yaml @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 67176b6289a3c37979877436fe221b2420889b6bc0e63506013ea297a64215ed + manifestHash: 2b27f41b1c7bbd4b307321b7a413825ae797fca7cb42263684d610eea3295735 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/cilium/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/cilium/manifest.yaml index a6cc5e4e523bc..affff7baece3f 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/cilium/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/cilium/manifest.yaml @@ -114,7 +114,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 67176b6289a3c37979877436fe221b2420889b6bc0e63506013ea297a64215ed + manifestHash: 2b27f41b1c7bbd4b307321b7a413825ae797fca7cb42263684d610eea3295735 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/coredns/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/coredns/manifest.yaml index 4e7fa23586229..e42cf81a9d6e0 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/coredns/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/coredns/manifest.yaml @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 67176b6289a3c37979877436fe221b2420889b6bc0e63506013ea297a64215ed + manifestHash: 2b27f41b1c7bbd4b307321b7a413825ae797fca7cb42263684d610eea3295735 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/insecure-1.19/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/insecure-1.19/manifest.yaml index f439f0d554f0e..83d1347d45fa6 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/insecure-1.19/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/insecure-1.19/manifest.yaml @@ -128,7 +128,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 67176b6289a3c37979877436fe221b2420889b6bc0e63506013ea297a64215ed + manifestHash: 2b27f41b1c7bbd4b307321b7a413825ae797fca7cb42263684d610eea3295735 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/secure-1.19/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/secure-1.19/manifest.yaml index dbb7dfb4dca17..7c13b55d0a56c 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/secure-1.19/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/secure-1.19/manifest.yaml @@ -185,7 +185,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 67176b6289a3c37979877436fe221b2420889b6bc0e63506013ea297a64215ed + manifestHash: 2b27f41b1c7bbd4b307321b7a413825ae797fca7cb42263684d610eea3295735 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/service-account-iam/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/service-account-iam/manifest.yaml index b49637477eb41..3f143c81a461d 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/service-account-iam/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/service-account-iam/manifest.yaml @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 4523b7420e3052613c98e961299af12e014c2c87542c6aefaf4849d53cb3471e + manifestHash: c2614a8aba1140588a368fea197253ba405be9f7d9435c72caadb991eebd5306 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/simple/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/simple/manifest.yaml index 389ea61a8e46f..b7c89473bf37b 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/simple/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/simple/manifest.yaml @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 67176b6289a3c37979877436fe221b2420889b6bc0e63506013ea297a64215ed + manifestHash: 2b27f41b1c7bbd4b307321b7a413825ae797fca7cb42263684d610eea3295735 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io