Releases: 1.21-21, 1.22-13, 1.23-8, 1.24-3

[kschumy]

All Releases

Handle Existing PRs and Start Code Freeze for Non-Release Related Changes

• For PRs created by eks-distro-pr-bot in the below repos, review and merge changes
  • eks-distro
  • eks-distro-build-tooling
  • eks-distro-prow-jobs
• For non-EKS-D-bot PRs in the below repos, review and merge all un-held/non-WIP/production-ready/non-breaking PRs intended for the release or release process; follow up with the authors of the remaining PRs about if the changes are intended for the release and, if so, what additional work needs to be done.
  • eks-distro
  • eks-distro-build-tooling
  • eks-distro-prow-jobs

Check for and Make Any Additional Release-Related Changes

• Check for new project versions
  • kubernetes/kubernetes
    • Update to 1.23.13 for 1.23 #1407
  • containernetworking/plugins
    • Update to version 1.10.1 for 1.21 #1408
    • Update to version v1.10.1 for 1.22 #1409
    • Update to version v1.11.4 for 1.24 #1410
  • coredns/coredns
  • kubernetes-sigs/metrics-server
  • kubernetes-sigs/aws-iam-authenticator
    • Update to v0.5.10 for 1.21 #1403
    • Update to v0.5.10 for 1.22 #1404
    • Update to v0.5.10 for 1.23 #1405
    • Update to v0.5.10 for 1.24 #1406
  • etcd-io/etcd
  • kubernetes-csi/external-attacher
  • kubernetes-csi/external-provisioner
  • kubernetes-csi/external-resizer
  • kubernetes-csi/external-snapshotter
  • kubernetes-csi/livenessprobe
    • Update to v2.8.0 for 1.21 #1411
    • Update to v2.8.0 for 1.22 #1412
    • Update to v2.8.0 for 1.23 #1413
    • Update to v2.8.0 for 1.24 #1414
  • kubernetes-csi/node-driver-registrar #1415
    • Update to version 2.6.0 for 1.21 #1416
    • Update to version 2.6.0 for 1.22 #1417
    • Update to version 2.6.0 for 1.23 #1418
    • Update to version 2.6.0 for 1.24 #1419
• Check for patch changes for ALL PROJECTS
• Backport CVE changes to all supported versions
  • Kubernetes CVE-2022-3294: Node address isn't always verified when proxying #1429
  • Kubernetes CVE-2022-3162: Unauthorized read of Custom Resources #1435

After all the release-related changes are done, recheck for new PRs created by eks-distro-pr-bot in the below repos; review and merge them

• eks-distro
• eks-distro-build-tooling
• eks-distro-prow-jobs

---

1.21-21

Cut Release

• Open and merge dev release PR 1.21-21 #1447
• Confirm Prow jobs dev-release-1-XX-postsubmit and build-1-XX-postsubmit finished successfully
• Open and merge prod release PR 1.21-21 #1454
• Confirm prod release was successful
  • Prow jobs prod-release-1-XX-postsubmit and build-1-XX-postsubmit finished successfully
  • Release manifest is available and looks right (https://distro.eks.amazonaws.com/kubernetes-1-XX/kubernetes-1-XX-eks-Z.yaml)
  • Images are in ECR

Announce Release

• Update docs (RELEASE_BRANCH=1-XX make docs + additional manual changes) and get someone to actually review PR
• Confirm docs changes
  • Check website was updated
  • Check that SNS was received
• Tag release (RELEASE_GIT_TAG=v1-XX-eks-Z RELEASE_GIT_COMMIT_HASH=<docs_commit_hash> make tag)
• Generate Release on GitHub from tag (RELEASE_BRANCH=1-XX make github-release)
• Notify Slack channel

---

1.22-13

Cut Release

• Open and merge dev release PR 1.22-13 #1448
• Confirm Prow jobs dev-release-1-XX-postsubmit and build-1-XX-postsubmit finished successfully
• Open and merge prod release PR 1.22-13 #1450
• Confirm prod release was successful
  • Prow jobs prod-release-1-XX-postsubmit and build-1-XX-postsubmit finished successfully
  • Release manifest is available and looks right (https://distro.eks.amazonaws.com/kubernetes-1-XX/kubernetes-1-XX-eks-Z.yaml)
  • Images are in ECR

Announce Release

• Update docs (RELEASE_BRANCH=1-XX make docs + additional manual changes) and get someone to actually review PR
• Confirm docs changes
  • Check website was updated
  • Check that SNS was received
• Tag release (RELEASE_GIT_TAG=v1-XX-eks-Z RELEASE_GIT_COMMIT_HASH=<docs_commit_hash> make tag)
• Generate Release on GitHub from tag (RELEASE_BRANCH=1-XX make github-release)

---

1.23-8

Cut Release

• Open and merge dev release PR 1.23-8 #1449
• Confirm Prow jobs dev-release-1-XX-postsubmit and build-1-XX-postsubmit finished successfully
• Open and merge prod release PR 1.23-8 #1451
• Confirm prod release was successful
  • Prow jobs prod-release-1-XX-postsubmit and build-1-XX-postsubmit finished successfully
  • Release manifest is available and looks right (https://distro.eks.amazonaws.com/kubernetes-1-XX/kubernetes-1-XX-eks-Z.yaml)
  • Images are in ECR

Announce Release

• Update docs (RELEASE_BRANCH=1-XX make docs + additional manual changes) and get someone to actually review PR
• Confirm docs changes
  • Check website was updated
  • Check that SNS was received
• Tag release (RELEASE_GIT_TAG=v1-XX-eks-Z RELEASE_GIT_COMMIT_HASH=<docs_commit_hash> make tag)
• Generate Release on GitHub from tag (RELEASE_BRANCH=1-XX make github-release)

---

1.24-3

Cut Release

• Open and merge dev release PR 1.24-3 #1453
• Confirm Prow jobs dev-release-1-XX-postsubmit and build-1-XX-postsubmit finished successfully
• Open and merge prod release PR 1.24-3 #1452
• Confirm prod release was successfu
  • Prow jobs prod-release-1-XX-postsubmit and build-1-XX-postsubmit finished successfully
  • Release manifest is available and looks right (https://distro.eks.amazonaws.com/kubernetes-1-XX/kubernetes-1-XX-eks-Z.yaml)
  • Images are in ECR

Announce Release

DO NOT DO ANYTHING

---

Update Other Projects

• Open EKS-A PR for 1.21-21, 1.22-13, 1.23-8, 1.24-3 #1464
• Update BottleRocket PRs –– 1.22 - 1.24 only (see example)
• Update Rover
• Update slack (ONLY FOR 1.21 - 1.23)

[captn3m0]

Is there a reason why 1.24-3 wasn't announced? It is listed on the AWS Docs as eks.3, but there is no corresponding tag on this repo.

Noticed, because links at https://endoflife.date/amazon-eks broke for this release.

[markapruett]

Thanks @captn3m0. You should rely on the versions in that table and not the releases in this repo for Amazon EKS's official release versions. Because it runs as a managed service in the cloud, EKS contains additional code on top of open source k8s, and that means the releases don't map 1-to-1.