v2.10.0

[damdo]

Release notes for Cluster API Provider AWS (CAPA) v2.10.0

Documentation

Changelog since v2.9.3

Urgent Upgrade Notes

(No, really, you MUST read this before you upgrade)

• Action required
  The short name for AWSManagedClusterTemplate has changed from amct to awsmct. If you have any automation that relies on the short name it will need to be updated. (🐛 Fix AWSManagedClusterTemplate short name #5662, @alexander-demicev)

Changes by Kind

Support

• Add Metadata kind to metadata (🌱 Add kind: Metadata to metadata manifests #5637, @damdo)
• Bump CAPI to v1.11 and k8s to v1.33 (🌱 Bump CAPI to v1.11 and k8s to v1.33 #5720, @clebs)
• Bump Go to v1.24 (🌱 Upgrade Go version to 1.24 #5652, @bryan-cox)

Feature

• Add autoscaling from zero support with auto-population of AWSMachineTemplate capacity/nodeInfo (✨ feat: Implement autoscaling from zero by auto-populating AWSMachineTemplate capacity/nodeInfo #5711, @LiangquanLi930)
• Add support for 'eus' channelGroupType in ROSA provider (✨ feat: add support for 'eus' channelGroupType in ROSA provider #5651, @andreadecorte)
• Add support for AMD SEV-SNP instances (✨ Add support for AMD SEV-SNP instances #5605, @fangge1212)
• Added support for configuring node auto repair functionality in EKS managed node groups (✨ Add node auto repair configuration for EKS managed node groups #5604, @afarbos)
• Added support for setting EKS AuthenticationMode (required for migrating to EKS Access Entries) (✨ feat: Support setting EKS authentication mode #5578, @joshfrench)
• Adding Rosa Role Config API and implementation (✨ Rosa roles config implementations #5667, @serngawy)
• Adds support for provisioning a new instance on a newly allocated dedicated host. The dedicate host is associated only with the new instance. When the instance is deprovisioned, the dedicated host will be released as well. (✨ Allocate dedicated host when a dedicated host doesn't exist #5631, @rvanderp3)
• Allow preserving EKS addons. (✨ allow preserving addons on delete #5520, @alam0rt)
• Create only one nat gateway per AZ (✨ Create only one nat gateway per AZ #5602, @fiunchinho)
• Disable defaulting for .spec.ignition.version when .spec.ignition.storageType is set to UnencryptedUserData (🌱 Fix(ignition): Default version only if not storageType UnencryptedUserData #5641, @chrischdi)
• New API for provisioning network infrastructure for ROSA clusters (✨ ROSANetwork: new CRD & reconciler to provision network infrastructure for ROSA-HCP #5464, @mzazrivec)
• New ROSAMachinePool parameter for specifying AWS capacity reservation. (✨ ROSAMachinePool: support for capacity reservations #5649, @mzazrivec)
• Support EKS upgrade policy (✨ Support EKS upgrade policy #5471, @phuhung273)

Documentation

• Fix AWSManagedControlPlaneSpec.OIDCIdentityProvider field documentation (📖 OIDC identity provider description matches field name #5579, @joshfrench)

Failing Test

• Fix e2e templates to create an AWSClusterRoleIdentity per Cluster (🌱 e2e: adjust templates to use AWSClusterRoleIdentities per Cluster #5773, @chrischdi)

Bug or Regression

• @damdo moves to maintainer (🌱 chore: update owners and aliases #5780, @richardcase)
• Add update permission for AWSMachinePool finalizers as needed by OwnerReferencesPermissionEnforcement admission policy for setting BlockOwnerDeletion: true on AWSMachinePool AWSMachines (🐛 Add update permission for AWSMachinePool finalizers as needed by OwnerReferencesPermissionEnforcement admission policy for setting BlockOwnerDeletion: true on AWSMachinePool AWSMachines #5722, @AndiDog)
• Ensure CAPA only manages cluster-owned egress only internet gateway (🐛 fix: use cluster tag key to list managed egress-only internet gateway #5684, @tthvo)
• Ensure custom service endpoints for supported AWS services are properly selected by
  both AWS SDKv2 and SDKv1 service ID (for backwards compatibility) (🐛 fix: backwards compatibility for AWS service endpoint resolution #5680, @tthvo)
• Fix ROSA control plane manage default ROSA machine pool (🐛 ROSA: Fix RosaControlPlane sync default RosaMachinePool #5629, @serngawy)
• Fix awsmanagedcontrolplanes/finalizer permission (🐛 Fix eks awsmanagedcontrolplane finalizer permission #5668, @serngawy)
• Fix delete ROSAControlPlane with multiple availability zones (🐛 ROSA: Fix delete ROSAControlPlane with multiple availability zones #5730, @serngawy)
• Fix invalid cloud-config when EKS config has no files (🐛 Fix invalid cloud-config when write_files is nil #5768, @joshfrench)
• Fix lifecycle hooks being updated constantly, consider changes to RoleARN field as well (🐛 Fix lifecycle hooks being updated constantly, consider changes to RoleARN field as well #5762, @AndiDog)
• Fix: CAPA v1beta1 to v1beta2 resources generated conversion webhook (🐛 fix: CAPA v1beta1 to v1beta2 generated conversion webhook #5739, @damdo)
• Fix: changing capacity-reservations-only to CapacityReservationsOnly and update some other webhook message to be more accurate (🐛update some CapacityReservationPreference webhook to be more accurate #5640, @huali9)
• Fix: disallow setting of CapacityReservationPreference: CapacityReservationsOnly when MarketType: Spot or SpotMarketOptions is set (🐛 Add validation to prevent Spot instances with CapacityReservationsOnly preference #5633, @BraeTroutman)
• Only try to delete AWSMachine bootstrap data for non-machine pool machines (🐛 Only try to delete AWSMachine bootstrap data for non-machine pool machines #5761, @AndiDog)
• Return early when owner Cluster is paused. (🐛 Return early if Cluster is paused #5645, @fiunchinho)
• The clusterawsadm print-policy command now prints all the policies in the template generated by the print-cloudformation-template command, and when it outputs multiple policies, the output is valid JSON. (🐛 Make print-policy consistent with print-cloudformation-template #5654, @dlipovetsky)

Uncategorized

• Add ROSA-HCP auto node feature for karpenter support (✨ ROSA: Add ROSA-HCP AutoNode for karpenter auto scale #5686, @serngawy)
• Add missing IAM permission ec2:RevokeSecurityGroupEgress for emptyRoutesDefaultVPCSecurityGroup option (🐛 Add missing IAM permission ec2:RevokeSecurityGroupEgress for emptyRoutesDefaultVPCSecurityGroup option #5342, @darkweaver87)
• Cancel instance refresh on any relevant change to ASG instead of blocking until previous one is finished (✨ Cancel instance refresh on any relevant change to ASG instead of blocking until previous one is finished (which may have led to failing nodes due to outdated join token) #5543, @AndiDog)
• Fix AWSMachineTemplate autoscaler test (🌱 e2e: fix AWSMachineTemplate autoscaler test #5765, @LiangquanLi930)
• Fix create ROSANetwork with specifying the availabilityZones (🐛 ROSA: Fix rosaNetwork set availabilityZones #5721, @serngawy)
• Log desired AMI architecture and owner ID on errors (🌱 Log desired AMI architecture and owner ID on errors #5703, @AndiDog)

The images for this release are:
registry.k8s.io/cluster-api-aws/cluster-api-aws-controller:v2.10.0

Thanks to all our contributors.

---

This discussion was created from the release v2.10.0.