amazon-eks-ami

amazon-eks-ami copied to clipboard

Ensure that the –read-only-port argument is set to 0 -CIS Kubernetes Benchmark in EKS

1

When running KubeBench for EKS cluster,I am getting below issue in Kubebench report. `Ensure that the --read-only-port argument is set to 0` `Based on section 4.2.4 of the CIS Kubernetes...

KR411-prog

AWS_ACCESS_KEY_ID environment variable issue

1

**What happened**: When `AWS_ACCESS_KEY_ID` is not defined, script [install-worker.sh](https://github.com/awslabs/amazon-eks-ami/blob/master/scripts/install-worker.sh) fails with `AWS_ACCESS_KEY_ID: unbound variable` error. **What you expected to happen**: Binaries should be fetched from `s3` using `wget`, if `AWS_ACCESS_KEY_ID`...

danielkubat

**What would you like to be added**: I'd like to see improved documentation on what the `eks-worker-al2.json` file should contain. **Why is this needed**: As a first time user it...

heydonovan

Add nvidia debug script to EKS Log Collect Script

2

**What would you like to be added**: Add the `nvidia-bug-report.sh` script to the EKS Log Collect Script, check and run it when on GPU nodes. **Why is this needed**: If...

sidewinder12s

Pods are stuck in a Terminating state on specific nodes

1

**What happened**: We have several EKS clusters which autoscale throughout the day - they handle burst workloads, and in a given day the underlying ASG-s may scale down to 0...

dany74q

**Issue #, if available:** Fixes #954 and supersedes #1097 if merged. **Description of changes:** Avoid maintaining a static mapping of GPU names to maximum clock speed values as suggested in...

brannondorsey

rework containerd config merging

6

**Issue #, if available:** **Description of changes:** It was recently realized that containerd's native import merging strategy is not one that behaves as most users would like. This is because...

ndbaker1

AL2023: OOMKills caused by very high file descriptor limits

9

**What happened**: Certain applications experience immediate OOM kills on AL2023 due to what I expect is a change in NOFILE's or Ulimit parameters on the AMI when compared to AL2...

mattbrandman

**Issue #, if available:** **Description of changes:** Taking inspiration from this merged PR: https://github.com/awslabs/amazon-eks-ami/pull/1687 It seems like explicitly adding the iptables rules expected (that are the defaults on Amazon Linux...

varun-armis

Adds CHANGELOG.md entry for release [v20240424](https://github.com/awslabs/amazon-eks-ami/releases/tag/v20240424).

github-actions[bot]