diff --git a/pkg/model/components/awsebscsidriver.go b/pkg/model/components/awsebscsidriver.go index c39ce3ceee..8576814fff 100644 --- a/pkg/model/components/awsebscsidriver.go +++ b/pkg/model/components/awsebscsidriver.go @@ -43,7 +43,7 @@ func (b *AWSEBSCSIDriverOptionsBuilder) BuildOptions(o interface{}) error { c := aws.EBSCSIDriver if c.Version == nil { - version := "v1.30.0" + version := "v1.33.0" c.Version = &version } diff --git a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 875e108582..03c24ebe22 100644 --- a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-bootstrap_content b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-bootstrap_content index ed2d8346aa..9827a57574 100644 --- a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_additionalobjects.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: e112ee6e370a2b1b78b4d11781ea0a181d4a8c33e0a44bbbf07c4ed5dc873603 + manifestHash: 0f358b977cafae024aa70d0e97f8e1e9d3f8f2c359934d5f4fbea4d38371e9ab name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_cluster-completed.spec_content index c0bf118353..a456b3f1d5 100644 --- a/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/additionalobjects/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_cluster-completed.spec_content index ebfdacdbfa..9e29ee9477 100644 --- a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 33b287b5f4..3b22dee31e 100644 --- a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 30a79c805d..d8ab4a1b1b 100644 --- a/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/apiservernodes/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 485ad16199a7a2dc6a721ab5349136c5be697e9d1b5b525a86bb09e6eceb8541 + manifestHash: 0c47461d072c7772cd3ba125f6c3480f451e79fdaa8e5c1dfe75539b6dc1d872 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_cluster-completed.spec_content index a77c4c4853..e6b4ee94bb 100644 --- a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_cluster-completed.spec_content @@ -15,7 +15,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 9aff986b17..0cbf94a957 100644 --- a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -918,6 +943,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -925,7 +951,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -937,6 +963,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -951,6 +979,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -958,7 +987,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -996,7 +1025,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1008,6 +1037,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1023,6 +1054,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -1030,7 +1062,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1042,6 +1074,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1055,7 +1089,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1129,7 +1163,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index b3b3a26d2b..b389620148 100644 --- a/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/aws-lb-controller/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -170,7 +170,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 71e11b9e5f8fe7e84c0e30bd0094a71fb9eb9c3779da449c0b1a345c65157780 + manifestHash: 9838f5a9f209b821bf3a81778e13a84c40ee76e1f958816c7e8f917994b147e8 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 7fd3317631..9b17587e1a 100644 --- a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-bootstrap_content b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-bootstrap_content index 68df75d143..fbb319856f 100644 --- a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_bastionuserdata.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 72b708e41901d2ad6a339ce8e9d1592df6c604345319cf7edeb49b79e6a70e20 + manifestHash: 51ab8c8dc3403f0ed85796119f90eb17155cec61fe5008e379fdf3f3e1938e7d name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_cluster-completed.spec_content index 072e39ab30..a2609b8529 100644 --- a/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/bastionadditional_user-data/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index e746eee46b..023e1c1d1f 100644 --- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-bootstrap_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-bootstrap_content index b12a2cd498..0e98d5c643 100644 --- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cas-priority-expander-custom.example.com-addons-bootstrap_content @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 857e8ffeada87dd357bd1d09a845dec9dbc04fef10650afcfc79a74c2fb79e6d + manifestHash: 8af45b143af39fa63a161e4c918ff5a53adb8db08a8e0e3c24dd60fc1c250898 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cluster-completed.spec_content index 5c4d03a2f3..91222cd739 100644 --- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander-custom/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index a3b55b52ed..988ca59913 100644 --- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-bootstrap_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-bootstrap_content index 18cd13fa85..ef91c985f7 100644 --- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cas-priority-expander.example.com-addons-bootstrap_content @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: af73c80fc832e6f2f5a1887e4a4296144ceea4c52559d5461457e353ce3bbd5d + manifestHash: 6707680a1f273f492fa28c86ef6e7e4c32d004e4cffc7d440b368d00f7a1c2c1 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cluster-completed.spec_content index ac9f286789..cbd05c58eb 100644 --- a/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/cluster-autoscaler-priority-expander/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/complex/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/complex/data/aws_s3_object_cluster-completed.spec_content index 571a2ed914..ab2325100e 100644 --- a/tests/integration/update_cluster/complex/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/complex/data/aws_s3_object_cluster-completed.spec_content @@ -29,7 +29,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 560e824072..eb8670dab8 100644 --- a/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-bootstrap_content b/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-bootstrap_content index 8b50402519..75292013d7 100644 --- a/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/complex/data/aws_s3_object_complex.example.com-addons-bootstrap_content @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 08d1c973d4ebf0aece5a8e2bfb768c0b2f9a9951479808216636b70fa8c6dc5e + manifestHash: 18ea1fb3998898c50cc4b029175ebed57f76a2813d70693b8dcb018e1c481a68 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/compress/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/compress/data/aws_s3_object_cluster-completed.spec_content index c2f7e11a44..de3f5cf7e5 100644 --- a/tests/integration/update_cluster/compress/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/compress/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index cdccc482b1..72d0f71015 100644 --- a/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-bootstrap_content b/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-bootstrap_content index 26084b48d4..8c21960994 100644 --- a/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/compress/data/aws_s3_object_compress.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 861bfb2880050a9deaa246f01509bf90c4005bf76a5afdeb3a7af8ba74a83809 + manifestHash: 3171a819cfe7be27935b9d86528eb60ccf7366f549211880df20020f55094132 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_cluster-completed.spec_content index d2f5c4dd3f..82f7acc29c 100644 --- a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 264e29550c..7562bf16cc 100644 --- a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-bootstrap_content b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-bootstrap_content index 39037ae763..fdba1b1d25 100644 --- a/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/containerd-custom/data/aws_s3_object_containerd.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 03708f741ebeb97f8404cb2fd13f2a566871895413952547e459a6228400492d + manifestHash: e439f0c4ed55b12da88dcfaddfc1929015042d53c7d20b529ea4f1635416fe84 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/containerd/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/containerd/data/aws_s3_object_cluster-completed.spec_content index 2ccdf57a22..90f9588fb1 100644 --- a/tests/integration/update_cluster/containerd/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/containerd/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 264e29550c..7562bf16cc 100644 --- a/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-bootstrap_content b/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-bootstrap_content index 39037ae763..fdba1b1d25 100644 --- a/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/containerd/data/aws_s3_object_containerd.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 03708f741ebeb97f8404cb2fd13f2a566871895413952547e459a6228400492d + manifestHash: e439f0c4ed55b12da88dcfaddfc1929015042d53c7d20b529ea4f1635416fe84 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index ebb111cb96..1c3c5321e1 100644 --- a/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-bootstrap_content b/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-bootstrap_content index 071be8a349..295e744591 100644 --- a/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/digit/data/aws_s3_object_123.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: a70a2c65b229325a6f3b63104278c24766dd6e7e0d84237b09a424d33d11f1dc + manifestHash: db3946d46326378f5e433d055a65ab8b393a9c35ee5d325700a0c837e298f1ce name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/digit/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/digit/data/aws_s3_object_cluster-completed.spec_content index 7dc53df05a..71a059dbb5 100644 --- a/tests/integration/update_cluster/digit/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/digit/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_cluster-completed.spec_content index c41795e190..c881103931 100644 --- a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 1ad4467a60..fcec9b5c67 100644 --- a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-bootstrap_content b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-bootstrap_content index cd5c4792fe..6322b64b2e 100644 --- a/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/existing_iam/data/aws_s3_object_existing-iam.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 129a8052c7fa1493741d9bc71ac8616b90bbabd7ff376b357a82336f6637b064 + manifestHash: 07b6b4ada11e5fc462104ef51aaaa435bffca9ed8f1f30bc28e2a1da179c0f6f name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_cluster-completed.spec_content index a89ddee43b..ec92ab3f68 100644 --- a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_cluster-completed.spec_content @@ -14,7 +14,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index f54653db5f..75d18ab0fd 100644 --- a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-bootstrap_content b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-bootstrap_content index 565f3daecc..ccd75fa997 100644 --- a/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/existing_sg/data/aws_s3_object_existingsg.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: ee70d3aa4f6c2d15e7f2778cb92fee38b5312630064d3b9941b273aa9168b7a7 + manifestHash: 97f83992ed64cf4d43ac35326bb3e64b09a9ae441a635a60ad52fd506b294cfe name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/external_dns/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/external_dns/data/aws_s3_object_cluster-completed.spec_content index 35ef5fbff1..72a570c398 100644 --- a/tests/integration/update_cluster/external_dns/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/external_dns/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 33b287b5f4..3b22dee31e 100644 --- a/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 5cf463fa97..9aef1cdd5b 100644 --- a/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/external_dns/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 485ad16199a7a2dc6a721ab5349136c5be697e9d1b5b525a86bb09e6eceb8541 + manifestHash: 0c47461d072c7772cd3ba125f6c3480f451e79fdaa8e5c1dfe75539b6dc1d872 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_cluster-completed.spec_content index fb34177859..6faf3323f8 100644 --- a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 9aff986b17..0cbf94a957 100644 --- a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -918,6 +943,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -925,7 +951,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -937,6 +963,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -951,6 +979,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -958,7 +987,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -996,7 +1025,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1008,6 +1037,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1023,6 +1054,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -1030,7 +1062,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1042,6 +1074,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1055,7 +1089,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1129,7 +1163,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index ff90c7771f..db327a8a5e 100644 --- a/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/external_dns_irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 71e11b9e5f8fe7e84c0e30bd0094a71fb9eb9c3779da449c0b1a345c65157780 + manifestHash: 9838f5a9f209b821bf3a81778e13a84c40ee76e1f958816c7e8f917994b147e8 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/externallb/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/externallb/data/aws_s3_object_cluster-completed.spec_content index 25a33518ef..83a00734be 100644 --- a/tests/integration/update_cluster/externallb/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/externallb/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 4870daae9e..e89a62355d 100644 --- a/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-bootstrap_content b/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-bootstrap_content index 14b5317de9..89ad94d36a 100644 --- a/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/externallb/data/aws_s3_object_externallb.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 112d54650f29cda4f14d149bc03a76255c40b139118711592ebd6b3ac01c98ba + manifestHash: bd552e66240106a7f5a0400c09c09eeb2eb8bd2ec7012d2be168d7600472935e name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_cluster-completed.spec_content index ab65f163e2..6271128038 100644 --- a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_cluster-completed.spec_content @@ -16,7 +16,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index b7e42cdae8..8b2ecc0d1f 100644 --- a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-bootstrap_content b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-bootstrap_content index ba107f8ed8..27db4246b3 100644 --- a/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/externalpolicies/data/aws_s3_object_externalpolicies.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 9966f219cb7c099b759bfbd5729eb6d95218197dcc70a99684e8441937a4751d + manifestHash: 72c581ea6b9f8e7a327c2a4fcca4fc628dfbb61a25833abe3780bbd4ff27b383 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/ha/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/ha/data/aws_s3_object_cluster-completed.spec_content index 1821ddb255..24a383b457 100644 --- a/tests/integration/update_cluster/ha/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/ha/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 36976739d5..9b4cf2458a 100644 --- a/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-bootstrap_content b/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-bootstrap_content index 5bc5900987..0b2b6b50cd 100644 --- a/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/ha/data/aws_s3_object_ha.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 7b5af277c3eac084fa309d36db6156f30351a5183f44b1086811f9bef77c0012 + manifestHash: baa00426a972730fc984b0dfe2a8a6a2fea57c8f204e9f286aa3a8f6d38d3cc0 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/irsa/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/irsa/data/aws_s3_object_cluster-completed.spec_content index ee63db86fb..995783eb23 100644 --- a/tests/integration/update_cluster/irsa/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/irsa/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 33b287b5f4..3b22dee31e 100644 --- a/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 8c1d965624..bf2a21a015 100644 --- a/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -170,7 +170,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 485ad16199a7a2dc6a721ab5349136c5be697e9d1b5b525a86bb09e6eceb8541 + manifestHash: 0c47461d072c7772cd3ba125f6c3480f451e79fdaa8e5c1dfe75539b6dc1d872 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/karpenter/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/karpenter/data/aws_s3_object_cluster-completed.spec_content index a2c69e8bcc..1e138e6814 100644 --- a/tests/integration/update_cluster/karpenter/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/karpenter/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 9aff986b17..0cbf94a957 100644 --- a/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -918,6 +943,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -925,7 +951,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -937,6 +963,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -951,6 +979,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -958,7 +987,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -996,7 +1025,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1008,6 +1037,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1023,6 +1054,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -1030,7 +1062,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1042,6 +1074,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1055,7 +1089,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1129,7 +1163,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index b4894aa571..645a618d3c 100644 --- a/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 71e11b9e5f8fe7e84c0e30bd0094a71fb9eb9c3779da449c0b1a345c65157780 + manifestHash: 9838f5a9f209b821bf3a81778e13a84c40ee76e1f958816c7e8f917994b147e8 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_cluster-completed.spec_content index e7e46942e9..b64ed14bfe 100644 --- a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_cluster-completed.spec_content @@ -15,7 +15,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index acda154543..4ebf2bf020 100644 --- a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -918,6 +943,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -925,7 +951,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -937,6 +963,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -951,6 +979,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -958,7 +987,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -970,6 +999,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -983,6 +1014,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -990,7 +1022,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v7.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v8.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-snapshotter resources: @@ -1002,6 +1034,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1028,7 +1062,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1040,6 +1074,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1055,6 +1091,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -1062,7 +1099,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1074,6 +1111,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1087,7 +1126,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1161,7 +1200,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 65d38fbc96..bfb1ff5bfa 100644 --- a/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/many-addons-ccm-irsa/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -193,7 +193,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: bb18101b2a8e6b143360e2d1d9a2def0c150988efa7ed46377dd9dc6907a2586 + manifestHash: 36cafe1de69359b8ff8d4dd8772ded0837ab404e6b184f675518915ca30ed7e6 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_cluster-completed.spec_content index c1b8b21b29..d86e713485 100644 --- a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_cluster-completed.spec_content @@ -15,7 +15,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index acda154543..4ebf2bf020 100644 --- a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -918,6 +943,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -925,7 +951,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -937,6 +963,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -951,6 +979,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -958,7 +987,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -970,6 +999,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -983,6 +1014,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -990,7 +1022,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v7.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v8.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-snapshotter resources: @@ -1002,6 +1034,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1028,7 +1062,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1040,6 +1074,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1055,6 +1091,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -1062,7 +1099,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1074,6 +1111,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1087,7 +1126,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1161,7 +1200,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 247b3e4841..80a11e401f 100644 --- a/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/many-addons-ccm-irsa25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -200,7 +200,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: bb18101b2a8e6b143360e2d1d9a2def0c150988efa7ed46377dd9dc6907a2586 + manifestHash: 36cafe1de69359b8ff8d4dd8772ded0837ab404e6b184f675518915ca30ed7e6 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_cluster-completed.spec_content index e7c3620051..f4260f77e3 100644 --- a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_cluster-completed.spec_content @@ -15,7 +15,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index acda154543..4ebf2bf020 100644 --- a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -918,6 +943,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -925,7 +951,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -937,6 +963,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -951,6 +979,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -958,7 +987,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -970,6 +999,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -983,6 +1014,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -990,7 +1022,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v7.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v8.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-snapshotter resources: @@ -1002,6 +1034,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1028,7 +1062,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1040,6 +1074,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1055,6 +1091,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -1062,7 +1099,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1074,6 +1111,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1087,7 +1126,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1161,7 +1200,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index ef1ad5100b..0c1678bf1a 100644 --- a/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/many-addons-ccm-irsa26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -201,7 +201,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: bb18101b2a8e6b143360e2d1d9a2def0c150988efa7ed46377dd9dc6907a2586 + manifestHash: 36cafe1de69359b8ff8d4dd8772ded0837ab404e6b184f675518915ca30ed7e6 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_cluster-completed.spec_content index 142eb3e50c..d919b067e1 100644 --- a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_cluster-completed.spec_content @@ -16,7 +16,7 @@ spec: cloudConfig: awsEBSCSIDriver: hostNetwork: true - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 6828a02912..a2bcdd8407 100644 --- a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -622,7 +644,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -669,7 +691,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -699,7 +721,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -724,6 +746,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -762,7 +785,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -786,7 +809,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -864,7 +887,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -899,6 +922,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -913,10 +938,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -928,6 +954,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -939,10 +967,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -954,6 +983,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -964,10 +995,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v7.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v8.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-snapshotter resources: @@ -979,6 +1011,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -998,7 +1032,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1010,6 +1044,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1022,10 +1058,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1037,12 +1074,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1102,7 +1141,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 7a4e2e6435..72c9b076bf 100644 --- a/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/many-addons-ccm/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -193,7 +193,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: a04dc1f761a055b4f2eb8576dcafa70c21bd197fad324ce33db30eca0bad78f7 + manifestHash: 06a9b6cde944c4838b467849771f32657e60e0e6f8631e66a5bc8349a93cd4a7 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/many-addons/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/many-addons/data/aws_s3_object_cluster-completed.spec_content index dacff83248..75d05cf3ad 100644 --- a/tests/integration/update_cluster/many-addons/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/many-addons/data/aws_s3_object_cluster-completed.spec_content @@ -17,7 +17,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index dd6675a511..0949111092 100644 --- a/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -956,6 +985,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -966,10 +997,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v7.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v8.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-snapshotter resources: @@ -981,6 +1013,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1000,7 +1034,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1012,6 +1046,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1024,10 +1060,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1039,12 +1076,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1104,7 +1143,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-bootstrap_content b/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-bootstrap_content index 67f17955ca..f8964f7ebc 100644 --- a/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/many-addons/data/aws_s3_object_many-addons.example.com-addons-bootstrap_content @@ -242,7 +242,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 9d556e27556163b49b70c43f88361456f91a7c80982f25033ca1461926480de7 + manifestHash: 42d982e2e4b754ef3dd055507ca5b5e8a5ac1610632f17233204a6deff0f0419 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_cluster-completed.spec_content index cf4da43576..1f7753e438 100644 --- a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 33b287b5f4..3b22dee31e 100644 --- a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 18451f6253..5806916065 100644 --- a/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-1.25/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 485ad16199a7a2dc6a721ab5349136c5be697e9d1b5b525a86bb09e6eceb8541 + manifestHash: 0c47461d072c7772cd3ba125f6c3480f451e79fdaa8e5c1dfe75539b6dc1d872 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_cluster-completed.spec_content index e5ed80268e..2e87567b39 100644 --- a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 33b287b5f4..3b22dee31e 100644 --- a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 171b17743a..b40d136cc5 100644 --- a/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-1.26/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 485ad16199a7a2dc6a721ab5349136c5be697e9d1b5b525a86bb09e6eceb8541 + manifestHash: 0c47461d072c7772cd3ba125f6c3480f451e79fdaa8e5c1dfe75539b6dc1d872 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_cluster-completed.spec_content index 9411595a9c..21613aefeb 100644 --- a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 33b287b5f4..3b22dee31e 100644 --- a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 58c3e3b228..ffc2dd9db1 100644 --- a/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-1.27/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 485ad16199a7a2dc6a721ab5349136c5be697e9d1b5b525a86bb09e6eceb8541 + manifestHash: 0c47461d072c7772cd3ba125f6c3480f451e79fdaa8e5c1dfe75539b6dc1d872 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_cluster-completed.spec_content index 1c85385ecd..f6643c930e 100644 --- a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 33b287b5f4..3b22dee31e 100644 --- a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 5991c503bf..4961d1b086 100644 --- a/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-1.28/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 485ad16199a7a2dc6a721ab5349136c5be697e9d1b5b525a86bb09e6eceb8541 + manifestHash: 0c47461d072c7772cd3ba125f6c3480f451e79fdaa8e5c1dfe75539b6dc1d872 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_cluster-completed.spec_content index e3aaa35e21..9f0a8784bd 100644 --- a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 33b287b5f4..3b22dee31e 100644 --- a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 39b2b76174..037ba61e08 100644 --- a/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-1.29/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 485ad16199a7a2dc6a721ab5349136c5be697e9d1b5b525a86bb09e6eceb8541 + manifestHash: 0c47461d072c7772cd3ba125f6c3480f451e79fdaa8e5c1dfe75539b6dc1d872 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_cluster-completed.spec_content index 0a18032d43..a1c3d2dfef 100644 --- a/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 33b287b5f4..3b22dee31e 100644 --- a/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index f1f9cb3b15..4ca54d4c1a 100644 --- a/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-1.30/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 485ad16199a7a2dc6a721ab5349136c5be697e9d1b5b525a86bb09e6eceb8541 + manifestHash: 0c47461d072c7772cd3ba125f6c3480f451e79fdaa8e5c1dfe75539b6dc1d872 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_cluster-completed.spec_content index 436a4060b7..e369035ceb 100644 --- a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 3c960fd04f..ae54843afd 100644 --- a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-bootstrap_content index 481fdc3597..a21a69925d 100644 --- a/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-aws/data/aws_s3_object_minimal-aws.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: cac38af78e5abc3cb5d2549a29b3eb1a3c07db85c87f0a854e90bcefd067db68 + manifestHash: 7efaf84918ff7c545fa639ea54b179839d3ccf77b61d19395f6ae6c3faffc2cf name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_cluster-completed.spec_content index 9c159bbb56..d538627ec7 100644 --- a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 33b287b5f4..3b22dee31e 100644 --- a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index cd4ed62bcf..b9549827e6 100644 --- a/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-dns-none/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -99,7 +99,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 485ad16199a7a2dc6a721ab5349136c5be697e9d1b5b525a86bb09e6eceb8541 + manifestHash: 0c47461d072c7772cd3ba125f6c3480f451e79fdaa8e5c1dfe75539b6dc1d872 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_cluster-completed.spec_content index fb0edc4285..e72dec6473 100644 --- a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 45b6d73053..2c3ffa6d30 100644 --- a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-bootstrap_content index 4f13f0b79d..8e8900b714 100644 --- a/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-etcd/data/aws_s3_object_minimal-etcd.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 2786c4c44ee60babd9ba668c0c077a03528c4c7857d9c8f44747b9ca82b3e9ea + manifestHash: bcf49fbdf2568c09e6c0f8fecf8c850c957c314a4c8cf0521c106b979922b08f name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_cluster-completed.spec_content index 0b8f073a5b..591bbf1f8e 100644 --- a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 33b287b5f4..3b22dee31e 100644 --- a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 18dc332d8a..ec24c38ece 100644 --- a/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-gp3/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 485ad16199a7a2dc6a721ab5349136c5be697e9d1b5b525a86bb09e6eceb8541 + manifestHash: 0c47461d072c7772cd3ba125f6c3480f451e79fdaa8e5c1dfe75539b6dc1d872 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_cluster-completed.spec_content index ed053a5c94..f699aedb68 100644 --- a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true nodeIPFamilies: - ipv6 diff --git a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 1698c47bc5..2963aa423e 100644 --- a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -626,7 +648,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -673,7 +695,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -703,7 +725,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -728,6 +750,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -766,7 +789,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -790,7 +813,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -870,7 +893,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -905,6 +928,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -919,10 +944,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -934,6 +960,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -945,10 +973,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -979,7 +1008,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -991,6 +1020,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1003,10 +1034,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1018,12 +1050,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1083,7 +1117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content index c911ff8ac8..17800b7d63 100644 --- a/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-ipv6-calico/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content @@ -168,7 +168,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 489cd92c8debd2acd069099a1ede0d4adfa2a08812c73e85754111db477a320e + manifestHash: 3b3710900f6713f8076ad1a345cf409ecf39f536ff9e63ef00900a2716cb8ac7 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_cluster-completed.spec_content index b96da75fc9..1a03a06ac6 100644 --- a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true nodeIPFamilies: - ipv6 diff --git a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 1698c47bc5..2963aa423e 100644 --- a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -626,7 +648,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -673,7 +695,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -703,7 +725,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -728,6 +750,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -766,7 +789,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -790,7 +813,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -870,7 +893,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -905,6 +928,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -919,10 +944,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -934,6 +960,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -945,10 +973,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -979,7 +1008,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -991,6 +1020,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1003,10 +1034,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1018,12 +1050,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1083,7 +1117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content index 7de2edbb9d..7924c4d186 100644 --- a/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-ipv6-cilium/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content @@ -121,7 +121,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 489cd92c8debd2acd069099a1ede0d4adfa2a08812c73e85754111db477a320e + manifestHash: 3b3710900f6713f8076ad1a345cf409ecf39f536ff9e63ef00900a2716cb8ac7 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_cluster-completed.spec_content index f86c3d51a7..b6280be26f 100644 --- a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true nodeIPFamilies: - ipv6 diff --git a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 1698c47bc5..2963aa423e 100644 --- a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -626,7 +648,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -673,7 +695,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -703,7 +725,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -728,6 +750,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -766,7 +789,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -790,7 +813,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -870,7 +893,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -905,6 +928,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -919,10 +944,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -934,6 +960,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -945,10 +973,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -979,7 +1008,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -991,6 +1020,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1003,10 +1034,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1018,12 +1050,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1083,7 +1117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content index 59cad418b6..51805fca63 100644 --- a/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-ipv6-no-subnet-prefix/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 489cd92c8debd2acd069099a1ede0d4adfa2a08812c73e85754111db477a320e + manifestHash: 3b3710900f6713f8076ad1a345cf409ecf39f536ff9e63ef00900a2716cb8ac7 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_cluster-completed.spec_content index 11250f44a8..10536b591a 100644 --- a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true nodeIPFamilies: - ipv6 diff --git a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 1698c47bc5..2963aa423e 100644 --- a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -626,7 +648,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -673,7 +695,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -703,7 +725,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -728,6 +750,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -766,7 +789,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -790,7 +813,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -870,7 +893,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -905,6 +928,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -919,10 +944,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -934,6 +960,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -945,10 +973,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -979,7 +1008,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -991,6 +1020,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1003,10 +1034,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1018,12 +1050,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1083,7 +1117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content index 59cad418b6..51805fca63 100644 --- a/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 489cd92c8debd2acd069099a1ede0d4adfa2a08812c73e85754111db477a320e + manifestHash: 3b3710900f6713f8076ad1a345cf409ecf39f536ff9e63ef00900a2716cb8ac7 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_cluster-completed.spec_content index 13bb41e3cf..4c40b1f214 100644 --- a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 853c5b594d..a2dc296133 100644 --- a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-bootstrap_content index d105c3d151..fc36460ffc 100644 --- a/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-longclustername/data/aws_s3_object_this.is.truly.a.really.really.long.cluster-name.minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: de15fb7246df0d99936a518c5955a091b5a20b9ea5d4edfd65e586889cca53ac + manifestHash: 1ca448c816db001960176cda2c751f089bb497e4db6a0fc06d471e7a35138cb6 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_cluster-completed.spec_content index be157f6cea..bacf9521bd 100644 --- a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index ea668cdc9e..a2c437794c 100644 --- a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-bootstrap_content b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-bootstrap_content index ad00e9cd90..b62670d583 100644 --- a/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal-warmpool/data/aws_s3_object_minimal-warmpool.example.com-addons-bootstrap_content @@ -114,7 +114,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 697463fbb88be6c269ed13caea78ba31dc1125fbced14e7f203f9b547f55a920 + manifestHash: 230557f533c5f500e6349b50e4b62a38bff57f4d5bf590a377641d653cec2a10 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_cluster-completed.spec_content index 53f6788690..e237c30e99 100644 --- a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 9210b2a1be..c5af70becf 100644 --- a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content index bac524c922..b9b937316a 100644 --- a/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal_gossip/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 0c30edd466a4c821e49cc0ccbea8c34e753b013ecf8a86c8bf270b4fac00ebf8 + manifestHash: 9f3ae0789bae2a53882d6e849df7a1235a9f0c471ac16c5d0e5b9ddeebf4a1bd name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_cluster-completed.spec_content index e3d7b799c7..162dc1e230 100644 --- a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 7f4fe75efd..573c6bd405 100644 --- a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.k8s.local - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -918,6 +943,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -925,7 +951,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.k8s.local - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -937,6 +963,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -951,6 +979,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -958,7 +987,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.k8s.local - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -996,7 +1025,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.k8s.local - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1008,6 +1037,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1023,6 +1054,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -1030,7 +1062,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.k8s.local - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1042,6 +1074,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1055,7 +1089,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.k8s.local - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1129,7 +1163,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content index ca1513d56e..fa41628d5a 100644 --- a/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content +++ b/tests/integration/update_cluster/minimal_gossip_irsa/data/aws_s3_object_minimal.k8s.local-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: c9a54f9ba369f377190e88baef95cfc113dd2d179426534905016c69a02ca2db + manifestHash: 07ba62c8931a7811d9c8f890ba007fd71c0d528e879f913b9bea1ad40856d7a7 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_cluster-completed.spec_content index 00079d4b88..0fc9d38775 100644 --- a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index d5fe5dbb25..ebb2f3b90d 100644 --- a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content index 0605ad2845..ddf460f649 100644 --- a/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/mixed_instances/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: db188b378e0a137d938bfb5e35737c9f8c1f9edc9b865ce5821f7fc01d4b9a11 + manifestHash: 02fba23f0bf118f373b2392d1d2b012cab47ff0957d462b209f0f0d4ea323f5b name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_cluster-completed.spec_content index 00079d4b88..0fc9d38775 100644 --- a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index d5fe5dbb25..ebb2f3b90d 100644 --- a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content index 0605ad2845..ddf460f649 100644 --- a/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/mixed_instances_spot/data/aws_s3_object_mixedinstances.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: db188b378e0a137d938bfb5e35737c9f8c1f9edc9b865ce5821f7fc01d4b9a11 + manifestHash: 02fba23f0bf118f373b2392d1d2b012cab47ff0957d462b209f0f0d4ea323f5b name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_cluster-completed.spec_content index bcefd9470c..42b80e808f 100644 --- a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 97110fe4e3..857fcee64b 100644 --- a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.nthimdsprocessor.lon-kfj86l - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -918,6 +943,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -925,7 +951,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.nthimdsprocessor.lon-kfj86l - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -937,6 +963,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -951,6 +979,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -958,7 +987,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.nthimdsprocessor.lon-kfj86l - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -996,7 +1025,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.nthimdsprocessor.lon-kfj86l - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1008,6 +1037,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1023,6 +1054,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -1030,7 +1062,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.nthimdsprocessor.lon-kfj86l - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1042,6 +1074,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1055,7 +1089,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.nthimdsprocessor.lon-kfj86l - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1129,7 +1163,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content index 58c6a36b13..bde915593b 100644 --- a/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/nth-imds-processor-irsa/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content @@ -104,7 +104,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 7a716482b8ea2ed94f5827ce807c8978eddb15bce13c0ffcb22a330febb3f17b + manifestHash: 5eb80d4a0452e499486949cbde34338f28fe63b0023c63c2eb6ccb646e6dc0d0 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_cluster-completed.spec_content index c2c3a240e6..f3d3b5bee9 100644 --- a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 150576e333..45db652a52 100644 --- a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content index fbd79d1491..6cb20e903b 100644 --- a/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/nth-imds-processor/data/aws_s3_object_nthimdsprocessor.longclustername.example.com-addons-bootstrap_content @@ -104,7 +104,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 0efe4389049f5a5a4623f0206cb28477158222d75f3e68caf54dce0d57346ec8 + manifestHash: da77c1a21ee4b168ed63d59b3c404972d61e05192e4dadc8be60af54af6a5f0a name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/nvidia/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/nvidia/data/aws_s3_object_cluster-completed.spec_content index 444160e9f8..48876672c6 100644 --- a/tests/integration/update_cluster/nvidia/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/nvidia/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 33b287b5f4..3b22dee31e 100644 --- a/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 0883c81f0b..4ed2df6622 100644 --- a/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/nvidia/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 485ad16199a7a2dc6a721ab5349136c5be697e9d1b5b525a86bb09e6eceb8541 + manifestHash: 0c47461d072c7772cd3ba125f6c3480f451e79fdaa8e5c1dfe75539b6dc1d872 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_cluster-completed.spec_content index 6b235f2c85..77db91e9af 100644 --- a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 274723605d..47f02ffe85 100644 --- a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-bootstrap_content b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-bootstrap_content index e7d91b8a5b..16bf5ed8b4 100644 --- a/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/private-shared-ip/data/aws_s3_object_private-shared-ip.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 9c7518307d79a2a113a78b53dd45cb59855525ab46c82827da3e4e021aea9d4f + manifestHash: 14e26987f055b5c3d992aba41f24340d114b3c7479306a6b74177ecae66056a4 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_cluster-completed.spec_content index 4897dbdbcb..a423b60b9d 100644 --- a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 66d978c52a..b854e8075e 100644 --- a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-bootstrap_content b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-bootstrap_content index 051d3e66cc..cdca672d3f 100644 --- a/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/private-shared-subnet/data/aws_s3_object_private-shared-subnet.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 848442739f6592d5f6630fbb464982d6dc932dd92b9025ebdccf93051153c9cb + manifestHash: 099ace7aa9eea5504f98cec6a02fa2e7a7670a900d44ffdd9233dc1395740dc6 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_cluster-completed.spec_content index bcb2b8b756..9de232b51a 100644 --- a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index aefd330749..40d01bdc9d 100644 --- a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-bootstrap_content index a40ff92fae..3ea47a9da3 100644 --- a/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/privatecalico/data/aws_s3_object_privatecalico.example.com-addons-bootstrap_content @@ -168,7 +168,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: f8a93335de54d08d02972d90b9164d5a6b896a80e0cd00da6f3f3b6a78fe45ad + manifestHash: c6e42040133d5edf18610a3ca37fd81677fed236e90b1682cbc6de532640a7a6 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_cluster-completed.spec_content index 8c74eab293..7dc07a82bf 100644 --- a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 2d744faa41..317e4e04ae 100644 --- a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-bootstrap_content index e508ce2f81..bdfbebea40 100644 --- a/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/privatecanal/data/aws_s3_object_privatecanal.example.com-addons-bootstrap_content @@ -168,7 +168,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 44df76e11cce0c3a761f5ce411e080474c428f82b98180e9882bf7e9ee83e49e + manifestHash: a1559c6a80afbaf9edbce880ca232e59bb871555a90633241bd27e4de1c65303 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_cluster-completed.spec_content index 2334ca156c..a975d0b93a 100644 --- a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 8a9b892ccb..99cbabc742 100644 --- a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content index 9f07d727a9..141bb6014d 100644 --- a/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/privatecilium-eni/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content @@ -114,7 +114,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: de33f79b35ef9b32d8eb5cbb4e7a2c482c96806469c28f6b228458cf272f61cd + manifestHash: 07b8668f63ccfa1587db48bbf86aa38c755243eedd7faf9e0735e9eda72de8df name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_cluster-completed.spec_content index 211659140e..b2a3952a2c 100644 --- a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 8a9b892ccb..99cbabc742 100644 --- a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content index 7b4ac28073..0790825e5a 100644 --- a/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/privatecilium/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content @@ -114,7 +114,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: de33f79b35ef9b32d8eb5cbb4e7a2c482c96806469c28f6b228458cf272f61cd + manifestHash: 07b8668f63ccfa1587db48bbf86aa38c755243eedd7faf9e0735e9eda72de8df name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_cluster-completed.spec_content index 9ba20b8856..d6f9a3e313 100644 --- a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_cluster-completed.spec_content @@ -15,7 +15,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 8a9b892ccb..99cbabc742 100644 --- a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content index 491e420859..4d3fc775dc 100644 --- a/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/privatecilium2/data/aws_s3_object_privatecilium.example.com-addons-bootstrap_content @@ -171,7 +171,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: de33f79b35ef9b32d8eb5cbb4e7a2c482c96806469c28f6b228458cf272f61cd + manifestHash: 07b8668f63ccfa1587db48bbf86aa38c755243eedd7faf9e0735e9eda72de8df name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_cluster-completed.spec_content index fb86188673..857a3b9f74 100644 --- a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 5333f413eb..9082f76767 100644 --- a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-bootstrap_content index c3ace771e7..7d20c6f2a0 100644 --- a/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/privateciliumadvanced/data/aws_s3_object_privateciliumadvanced.example.com-addons-bootstrap_content @@ -114,7 +114,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: dd2c503de378b4c1a28290451e5bed233b157b443f3d16d74f26309232c4ed92 + manifestHash: caf5bb44bf55a5c7907c8fbc8871910787b39d8fc04dd2d8e6e5e6340f49b387 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_cluster-completed.spec_content index 5d74f35802..88e5af5d3e 100644 --- a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 8fb9c0b34c..633bb04bd4 100644 --- a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-bootstrap_content index 6811c5a57f..c108bd20c2 100644 --- a/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/privatedns1/data/aws_s3_object_privatedns1.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 36dba269b20b5a4239d79a05d2c7dbcc9b347a0c62be07c73ac473c41c89d5b5 + manifestHash: 44ccb72c36c49bd2be0586dc2ab27a757b9ed94645491c4fde0beb09fe77b7b1 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_cluster-completed.spec_content index 9629cc2446..23c1865e4d 100644 --- a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index f7b1361869..4eff2f521f 100644 --- a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-bootstrap_content index 9e179abb65..ad9e479b39 100644 --- a/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/privatedns2/data/aws_s3_object_privatedns2.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: e98a384ff168d130ff985f06a990c28fa95185f7cca654edcae4bc4f95e09369 + manifestHash: 2fea612b75e1c6d2baad78e0c5ccbd29999249f7f586eefb103b8de41ffcc323 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_cluster-completed.spec_content index 3b37b6c4c5..03ea9f5a02 100644 --- a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index e9b858fa92..442aad52bd 100644 --- a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-bootstrap_content index 186215a7f6..f766bd1840 100644 --- a/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/privateflannel/data/aws_s3_object_privateflannel.example.com-addons-bootstrap_content @@ -164,7 +164,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: e332b1ed695b7b28104587fd740fff2199415a7c777a953566ae1ea14e8ce38c + manifestHash: 2253ab46a610ca01ea6eab6bed5dc477680dc38ba3aca64649c41330575c4dc8 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_cluster-completed.spec_content index 6df5a7ed88..e6c8887a63 100644 --- a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 7da5c3aa54..412da17eea 100644 --- a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-bootstrap_content b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-bootstrap_content index 87264ba114..0e4989240f 100644 --- a/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/privatekopeio/data/aws_s3_object_privatekopeio.example.com-addons-bootstrap_content @@ -155,7 +155,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 2dfd65ab7ac069d3a6da7ccf85c3dd77e938bc3fff7a99af39bdade0f96a54c8 + manifestHash: 46410aecf5f7897b460f7be7930415966d7f3da51b440a2a50d907423f22a77d name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_cluster-completed.spec_content index b18d1f6f08..c543982aaa 100644 --- a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 9aff986b17..0cbf94a957 100644 --- a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -918,6 +943,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -925,7 +951,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -937,6 +963,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -951,6 +979,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -958,7 +987,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -996,7 +1025,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -1008,6 +1037,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1023,6 +1054,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -1030,7 +1062,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1042,6 +1074,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1055,7 +1089,7 @@ spec: value: arn:aws-test:iam::123456789012:role/ebs-csi-controller-sa.kube-system.sa.minimal.example.com - name: AWS_WEB_IDENTITY_TOKEN_FILE value: /var/run/secrets/amazonaws.com/token - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1129,7 +1163,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index c27b7253db..56de6b960f 100644 --- a/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/public-jwks-apiserver/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 71e11b9e5f8fe7e84c0e30bd0094a71fb9eb9c3779da449c0b1a345c65157780 + manifestHash: 9838f5a9f209b821bf3a81778e13a84c40ee76e1f958816c7e8f917994b147e8 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_cluster-completed.spec_content index 57c33f2fd4..28818c6179 100644 --- a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 88ac1ce7d3..490084b261 100644 --- a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-bootstrap_content b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-bootstrap_content index 274cf656ef..c71eb5f830 100644 --- a/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/shared_subnet/data/aws_s3_object_sharedsubnet.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: ae6d04ea669c7723149522dd9650369362d546fc38574e4fbf39538541fce948 + manifestHash: 73668aca193df813fd164b262879623653f329ceed8c6b4739ea7edc837d67c3 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_cluster-completed.spec_content index 73ca30cdea..0ffb6fe1b0 100644 --- a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index f77dc7d4a9..984af86103 100644 --- a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-bootstrap_content b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-bootstrap_content index d785032f3a..cdae970700 100644 --- a/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/shared_vpc/data/aws_s3_object_sharedvpc.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 88bbdd80d9301f263662467830f2ff2a10de435aa378998a35ccc5d0394456f4 + manifestHash: c4bf02dab50bbda5b505d69bc2f810df9e374290dd270fefcdb4707a8209ac4b name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_cluster-completed.spec_content index 6283ffa29a..30c6199995 100644 --- a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true nodeIPFamilies: - ipv6 diff --git a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 1698c47bc5..2963aa423e 100644 --- a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -626,7 +648,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -673,7 +695,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -703,7 +725,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -728,6 +750,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -766,7 +789,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -790,7 +813,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -870,7 +893,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -905,6 +928,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -919,10 +944,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -934,6 +960,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -945,10 +973,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -979,7 +1008,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -991,6 +1020,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -1003,10 +1034,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1018,12 +1050,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1083,7 +1117,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content index 59cad418b6..51805fca63 100644 --- a/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/shared_vpc_ipv6/data/aws_s3_object_minimal-ipv6.example.com-addons-bootstrap_content @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 489cd92c8debd2acd069099a1ede0d4adfa2a08812c73e85754111db477a320e + manifestHash: 3b3710900f6713f8076ad1a345cf409ecf39f536ff9e63ef00900a2716cb8ac7 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_cluster-completed.spec_content index 41a5b27ec4..2c7e54a96e 100644 --- a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_cluster-completed.spec_content @@ -13,7 +13,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index e0789a5f08..261901d488 100644 --- a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-bootstrap_content b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-bootstrap_content index b503c23fc1..3e6a34e50d 100644 --- a/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/unmanaged/data/aws_s3_object_unmanaged.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 44f2c63ad3d61bd7e30968cd948c7abadb6aac9db224f2b71f96a27108ab0e17 + manifestHash: 5949cb5d18610da9642cf6c7df2ca74c81dbfceaa806bfd5c4be1c3f4d092d2a name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_cluster-completed.spec_content index 5634b378fb..d63757e2bc 100644 --- a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_cluster-completed.spec_content +++ b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_cluster-completed.spec_content @@ -11,7 +11,7 @@ spec: channel: stable cloudConfig: awsEBSCSIDriver: - version: v1.30.0 + version: v1.33.0 manageStorageClasses: true cloudControllerManager: allocateNodeCIDRs: true diff --git a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content index 33b287b5f4..3b22dee31e 100644 --- a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content +++ b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-aws-ebs-csi-driver.addons.k8s.io-k8s-1.17_content @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -33,7 +33,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller-sa namespace: kube-system @@ -51,7 +51,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-sa namespace: kube-system @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-attacher-role rules: @@ -127,7 +127,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-role rules: @@ -146,6 +146,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - csinodes + verbs: + - get --- @@ -159,7 +165,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-provisioner-role rules: @@ -172,6 +178,7 @@ rules: - list - watch - create + - patch - delete - apiGroups: - "" @@ -238,6 +245,12 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get --- @@ -251,7 +264,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-resizer-role rules: @@ -306,6 +319,14 @@ rules: - get - list - watch +- apiGroups: + - storage.k8s.io + resources: + - volumeattributesclasses + verbs: + - get + - list + - watch --- @@ -319,7 +340,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-external-snapshotter-role rules: @@ -359,6 +380,7 @@ rules: - volumesnapshotcontents/status verbs: - update + - patch --- @@ -372,7 +394,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-attacher-binding roleRef: @@ -396,7 +418,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node-getter-binding roleRef: @@ -420,7 +442,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-provisioner-binding roleRef: @@ -444,7 +466,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-resizer-binding roleRef: @@ -468,7 +490,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-snapshotter-binding roleRef: @@ -492,7 +514,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-role namespace: kube-system @@ -521,7 +543,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-leases-rolebinding namespace: kube-system @@ -568,7 +590,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-node namespace: kube-system @@ -587,7 +609,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -624,7 +646,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -671,7 +693,7 @@ spec: value: /csi/csi.sock - name: DRIVER_REG_SOCK_PATH value: /var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent livenessProbe: exec: @@ -701,7 +723,7 @@ spec: name: probe-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -726,6 +748,7 @@ spec: runAsNonRoot: false runAsUser: 0 serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: @@ -764,7 +787,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs-csi-controller namespace: kube-system @@ -788,7 +811,7 @@ spec: app.kubernetes.io/component: csi-driver app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 kops.k8s.io/managed-by: kops spec: affinity: @@ -866,7 +889,7 @@ spec: key: endpoint name: aws-meta optional: true - image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.30.0 + image: public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.33.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 @@ -901,6 +924,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -915,10 +940,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-provisioner resources: @@ -930,6 +956,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -941,10 +969,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-attacher resources: @@ -975,7 +1004,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent name: volumemodifier resources: @@ -987,6 +1016,8 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir @@ -999,10 +1030,11 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent name: csi-resizer resources: @@ -1014,12 +1046,14 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /var/lib/csi/sockets/pluginproxy/ name: socket-dir - args: - --csi-address=/csi/csi.sock - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent name: liveness-probe resources: @@ -1079,7 +1113,7 @@ metadata: app.kubernetes.io/instance: aws-ebs-csi-driver app.kubernetes.io/managed-by: kops app.kubernetes.io/name: aws-ebs-csi-driver - app.kubernetes.io/version: v1.30.0 + app.kubernetes.io/version: v1.33.0 k8s-addon: aws-ebs-csi-driver.addons.k8s.io name: ebs.csi.aws.com spec: diff --git a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-bootstrap_content index 18dc332d8a..ec24c38ece 100644 --- a/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-bootstrap_content +++ b/tests/integration/update_cluster/vfs-said/data/aws_s3_object_minimal.example.com-addons-bootstrap_content @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 485ad16199a7a2dc6a721ab5349136c5be697e9d1b5b525a86bb09e6eceb8541 + manifestHash: 0c47461d072c7772cd3ba125f6c3480f451e79fdaa8e5c1dfe75539b6dc1d872 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/models/cloudup/resources/addons/aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml.template b/upup/models/cloudup/resources/addons/aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml.template index d07911760f..4df4e65730 100644 --- a/upup/models/cloudup/resources/addons/aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml.template +++ b/upup/models/cloudup/resources/addons/aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml.template @@ -1,6 +1,8 @@ # helm template aws-ebs-csi-driver . -n kube-system \ # --set controller.volumeModificationFeature.enabled=true \ -# --set sidecars.snapshotter.forceEnable=true +# --set sidecars.snapshotter.forceEnable=true \ +# --set controller.enableMetrics=true \ +# --no-hooks {{ with .CloudProvider.AWS.EBSCSIDriver }} --- @@ -93,6 +95,9 @@ rules: - apiGroups: ["storage.k8s.io"] resources: ["volumeattachments"] verbs: ["get", "list", "watch"] +- apiGroups: ["storage.k8s.io"] + resources: ["csinodes"] + verbs: ["get"] --- # Source: aws-ebs-csi-driver/templates/clusterrole-provisioner.yaml kind: ClusterRole @@ -107,7 +112,7 @@ metadata: rules: - apiGroups: [ "" ] resources: [ "persistentvolumes" ] - verbs: [ "get", "list", "watch", "create", "delete" ] + verbs: [ "get", "list", "watch", "create", "patch", "delete" ] - apiGroups: [ "" ] resources: [ "persistentvolumeclaims" ] verbs: [ "get", "list", "watch", "update" ] @@ -132,6 +137,9 @@ rules: - apiGroups: [ "storage.k8s.io" ] resources: [ "volumeattachments" ] verbs: [ "get", "list", "watch" ] +- apiGroups: [ "storage.k8s.io" ] + resources: [ "volumeattributesclasses" ] + verbs: [ "get" ] --- # Source: aws-ebs-csi-driver/templates/clusterrole-resizer.yaml kind: ClusterRole @@ -167,6 +175,9 @@ rules: - apiGroups: [ "" ] resources: [ "pods" ] verbs: [ "get", "list", "watch" ] +- apiGroups: [ "storage.k8s.io" ] + resources: [ "volumeattributesclasses" ] + verbs: [ "get", "list", "watch" ] --- # Source: aws-ebs-csi-driver/templates/clusterrole-snapshotter.yaml kind: ClusterRole @@ -197,7 +208,7 @@ rules: verbs: [ "create", "get", "list", "watch", "update", "delete", "patch" ] - apiGroups: [ "snapshot.storage.k8s.io" ] resources: [ "volumesnapshotcontents/status" ] - verbs: [ "update" ] + verbs: [ "update", "patch" ] --- # Source: aws-ebs-csi-driver/templates/clusterrolebinding-attacher.yaml kind: ClusterRoleBinding @@ -406,6 +417,7 @@ spec: nodeSelector: kubernetes.io/os: linux serviceAccountName: ebs-csi-node-sa + terminationGracePeriodSeconds: 30 priorityClassName: system-node-critical tolerations: - operator: Exists @@ -480,7 +492,7 @@ spec: exec: command: ["/bin/aws-ebs-csi-driver", "pre-stop-hook"] - name: node-driver-registrar - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.11.0-eks-1-30-10 imagePullPolicy: IfNotPresent args: - --csi-address=$(ADDRESS) @@ -517,7 +529,7 @@ spec: allowPrivilegeEscalation: false readOnlyRootFilesystem: true - name: liveness-probe - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent args: - --csi-address=/csi/csi.sock @@ -759,8 +771,10 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault - name: csi-provisioner - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v4.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent args: - --timeout=60s @@ -773,6 +787,7 @@ spec: - --kube-api-qps={{ or .KubeAPIQPS "20" }} - --kube-api-burst={{ or .KubeAPIBurst "100" }} - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -788,8 +803,10 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault - name: csi-attacher - image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.5.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.6.1-eks-1-30-10 imagePullPolicy: IfNotPresent args: - --timeout=60s @@ -799,6 +816,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=5m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -815,8 +833,10 @@ spec: allowPrivilegeEscalation: false readOnlyRootFilesystem: true {{ if HasSnapshotController }} + seccompProfile: + type: RuntimeDefault - name: csi-snapshotter - image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v7.0.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter:v8.0.1-eks-1-30-10 imagePullPolicy: IfNotPresent args: - --csi-address=$(ADDRESS) @@ -825,6 +845,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --worker-threads=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -840,9 +861,11 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault {{ end }} - name: volumemodifier - image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.2.1 + image: public.ecr.aws/ebs-csi-driver/volume-modifier-for-k8s:v0.3.0 imagePullPolicy: IfNotPresent args: - --timeout=60s @@ -872,8 +895,10 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault - name: csi-resizer - image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.10.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.11.1-eks-1-30-10 imagePullPolicy: IfNotPresent args: - --timeout=60s @@ -884,6 +909,7 @@ spec: - --kube-api-qps=20 - --kube-api-burst=100 - --workers=100 + - --retry-interval-max=30m env: - name: ADDRESS value: /var/lib/csi/sockets/pluginproxy/csi.sock @@ -899,8 +925,10 @@ spec: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault - name: liveness-probe - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.12.0-eks-1-29-5 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.13.0-eks-1-30-10 imagePullPolicy: IfNotPresent args: - --csi-address=/csi/csi.sock diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc-containerd/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc-containerd/manifest.yaml index 28e81329bf..d58acebaf3 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc-containerd/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc-containerd/manifest.yaml @@ -114,7 +114,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 78767e966f12fe734a3b7f49f55ab91f02f736473b7fc88587501383cc5c9873 + manifestHash: c593ff221e831534d4d737cef416352a1b0e13d433554d3751c9ec7f92b26472 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc/manifest.yaml index 28e81329bf..d58acebaf3 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/amazonvpc/manifest.yaml @@ -114,7 +114,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 78767e966f12fe734a3b7f49f55ab91f02f736473b7fc88587501383cc5c9873 + manifestHash: c593ff221e831534d4d737cef416352a1b0e13d433554d3751c9ec7f92b26472 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awscloudcontroller/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awscloudcontroller/manifest.yaml index 7c84d702b3..8c72c5cab1 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awscloudcontroller/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awscloudcontroller/manifest.yaml @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 78767e966f12fe734a3b7f49f55ab91f02f736473b7fc88587501383cc5c9873 + manifestHash: c593ff221e831534d4d737cef416352a1b0e13d433554d3751c9ec7f92b26472 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/crd/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/crd/manifest.yaml index 51c65cd001..3552fea5c4 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/crd/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/crd/manifest.yaml @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 78767e966f12fe734a3b7f49f55ab91f02f736473b7fc88587501383cc5c9873 + manifestHash: c593ff221e831534d4d737cef416352a1b0e13d433554d3751c9ec7f92b26472 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/mappings/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/mappings/manifest.yaml index a9299540f0..ce33273a87 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/mappings/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/awsiamauthenticator/mappings/manifest.yaml @@ -113,7 +113,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 78767e966f12fe734a3b7f49f55ab91f02f736473b7fc88587501383cc5c9873 + manifestHash: c593ff221e831534d4d737cef416352a1b0e13d433554d3751c9ec7f92b26472 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/cilium/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/cilium/manifest.yaml index 3d6361d54a..06763e1cb6 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/cilium/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/cilium/manifest.yaml @@ -114,7 +114,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 78767e966f12fe734a3b7f49f55ab91f02f736473b7fc88587501383cc5c9873 + manifestHash: c593ff221e831534d4d737cef416352a1b0e13d433554d3751c9ec7f92b26472 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/coredns/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/coredns/manifest.yaml index ce7b8c6f7e..e29c3e422b 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/coredns/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/coredns/manifest.yaml @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 78767e966f12fe734a3b7f49f55ab91f02f736473b7fc88587501383cc5c9873 + manifestHash: c593ff221e831534d4d737cef416352a1b0e13d433554d3751c9ec7f92b26472 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/insecure-1.19/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/insecure-1.19/manifest.yaml index c745c511dc..1cae7bea1e 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/insecure-1.19/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/insecure-1.19/manifest.yaml @@ -128,7 +128,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 78767e966f12fe734a3b7f49f55ab91f02f736473b7fc88587501383cc5c9873 + manifestHash: c593ff221e831534d4d737cef416352a1b0e13d433554d3751c9ec7f92b26472 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/secure-1.19/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/secure-1.19/manifest.yaml index eff6309bf3..ae83314747 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/secure-1.19/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/metrics-server/secure-1.19/manifest.yaml @@ -185,7 +185,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 78767e966f12fe734a3b7f49f55ab91f02f736473b7fc88587501383cc5c9873 + manifestHash: c593ff221e831534d4d737cef416352a1b0e13d433554d3751c9ec7f92b26472 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/service-account-iam/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/service-account-iam/manifest.yaml index cebdf73ae0..b21d37d901 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/service-account-iam/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/service-account-iam/manifest.yaml @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 9870c9f32c8bc3371e9b09bc91c2387eb50c2ec5d7bdcfa45f45e05ea71367bc + manifestHash: 0a641fca7a974852b750a7aaf1dfe892466e9b4297f47a556a79ad079080fed3 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io diff --git a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/simple/manifest.yaml b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/simple/manifest.yaml index caed4f103a..8cce212fd8 100644 --- a/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/simple/manifest.yaml +++ b/upup/pkg/fi/cloudup/tests/bootstrapchannelbuilder/simple/manifest.yaml @@ -106,7 +106,7 @@ spec: version: 9.99.0 - id: k8s-1.17 manifest: aws-ebs-csi-driver.addons.k8s.io/k8s-1.17.yaml - manifestHash: 78767e966f12fe734a3b7f49f55ab91f02f736473b7fc88587501383cc5c9873 + manifestHash: c593ff221e831534d4d737cef416352a1b0e13d433554d3751c9ec7f92b26472 name: aws-ebs-csi-driver.addons.k8s.io selector: k8s-addon: aws-ebs-csi-driver.addons.k8s.io