Amazon EKS platform versions
Amazon EKS platform versions represent the capabilities of the Amazon EKS cluster control plane, such as which Kubernetes API server flags are enabled, as well as the current Kubernetes patch version. Each Kubernetes minor version has one or more associated Amazon EKS platform versions. The platform versions for different Kubernetes minor versions are independent. If you have a local cluster on Amazon Outposts, see Amazon EKS local cluster platform versions instead of this topic.
When a new Kubernetes minor version is available in Amazon EKS, such as 1.27, the initial Amazon EKS
platform version for that Kubernetes minor version starts at eks.1. However, Amazon EKS
releases new platform versions periodically to enable new Kubernetes control plane settings and
to provide security fixes.
When new Amazon EKS platform versions become available for a minor version:
-
The Amazon EKS platform version number is incremented (
eks.).n+1 -
Amazon EKS automatically upgrades all existing clusters to the latest Amazon EKS platform version for their corresponding Kubernetes minor version. Automatic upgrades of existing Amazon EKS platform versions are rolled out incrementally. The roll-out process might take some time. If you need the latest Amazon EKS platform version features immediately, you should create a new Amazon EKS cluster.
If your cluster is more than two platform versions behind the current platform version, then it's possible that Amazon EKS wasn't able to automatically update your cluster. For details of what may cause this, see Amazon EKS platform version is more than two versions behind the current platform version.
-
Amazon EKS might publish a new node AMI with a corresponding patch version. However, all patch versions are compatible between the EKS control plane and node AMIs for a given Kubernetes minor version.
New Amazon EKS platform versions don't introduce breaking changes or cause service interruptions.
Clusters are always created with the latest available Amazon EKS platform version
(eks.) for the specified Kubernetes version. If
you update your cluster to a new Kubernetes minor version, your cluster receives the current
Amazon EKS platform version for the Kubernetes minor version that you updated to.n
The current and recent Amazon EKS platform versions are described in the following tables.
Kubernetes version 1.27
The following admission controllers are enabled for all 1.27 platform
versions: NodeRestriction, ExtendedResourceToleration,
NamespaceLifecycle, LimitRanger,
ServiceAccount, TaintNodesByCondition,
PodSecurity, Priority,
DefaultTolerationSeconds, DefaultStorageClass,
StorageObjectInUseProtection, PersistentVolumeClaimResize,
RuntimeClass, CertificateApproval,
CertificateSigning, CertificateSubjectRestriction,
DefaultIngressClass, MutatingAdmissionWebhook,
ValidatingAdmissionPolicy, ValidatingAdmissionWebhook,
ResourceQuota.
|
Kubernetes version |
Amazon EKS platform version |
Release notes |
Release date |
|---|---|---|---|
|
|
|
Initial release of Kubernetes version |
May 24, 2023 |
Kubernetes version 1.26
The following admission controllers are enabled for all 1.26 platform
versions: NodeRestriction, ExtendedResourceToleration,
NamespaceLifecycle, LimitRanger,
ServiceAccount, TaintNodesByCondition,
PodSecurity, Priority,
DefaultTolerationSeconds, DefaultStorageClass,
StorageObjectInUseProtection, PersistentVolumeClaimResize,
RuntimeClass, CertificateApproval,
CertificateSigning, CertificateSubjectRestriction,
DefaultIngressClass, MutatingAdmissionWebhook,
ValidatingAdmissionPolicy, ValidatingAdmissionWebhook,
ResourceQuota.
|
Kubernetes version |
Amazon EKS platform version |
Release notes |
Release date |
|---|---|---|---|
|
|
|
New platform version with security fixes and enhancements. |
May 5, 2023 |
|
|
|
Initial release of Kubernetes version |
April 11, 2023 |
Kubernetes version 1.25
The following admission controllers are enabled for all 1.25 platform
versions: NodeRestriction, ExtendedResourceToleration,
NamespaceLifecycle, LimitRanger,
ServiceAccount, TaintNodesByCondition,
PodSecurity, Priority,
DefaultTolerationSeconds, DefaultStorageClass,
StorageObjectInUseProtection, PersistentVolumeClaimResize,
RuntimeClass, CertificateApproval,
CertificateSigning, CertificateSubjectRestriction,
DefaultIngressClass, MutatingAdmissionWebhook,
ValidatingAdmissionPolicy, ValidatingAdmissionWebhook,
ResourceQuota.
|
Kubernetes version |
Amazon EKS platform version |
Release notes |
Release date |
|---|---|---|---|
|
|
|
New platform version with security fixes and enhancements. | May 5, 2023 |
|
|
|
New platform version with security fixes and enhancements. |
March 24, 2023 |
|
|
|
Initial release of Kubernetes version |
February 21, 2023 |
Kubernetes version 1.24
The following admission controllers are enabled for all 1.24 platform
versions: CertificateApproval, CertificateSigning,
CertificateSubjectRestriction, DefaultIngressClass,
DefaultStorageClass, DefaultTolerationSeconds,
ExtendedResourceToleration, LimitRanger,
MutatingAdmissionWebhook, NamespaceLifecycle,
NodeRestriction, PersistentVolumeClaimResize,
Priority, PodSecurityPolicy, ResourceQuota,
RuntimeClass, ServiceAccount,
StorageObjectInUseProtection, TaintNodesByCondition, and
ValidatingAdmissionWebhook.
|
Kubernetes version |
Amazon EKS platform version |
Release notes |
Release date |
|---|---|---|---|
|
|
|
New platform version with security fixes and enhancements. |
May 5, 2023 |
|
|
|
New platform version with security fixes and enhancements. |
March 24, 2023 |
|
|
|
New platform version with security fixes and enhancements. |
January 27, 2023 |
|
|
|
New platform version with security fixes and enhancements. |
December 5, 2022 |
|
|
|
New platform version with security fixes and enhancements. |
November 18, 2022 |
|
|
|
Initial release of Kubernetes version |
November 15, 2022 |
Kubernetes version 1.23
The following admission controllers are enabled for all 1.23 platform
versions: CertificateApproval, CertificateSigning,
CertificateSubjectRestriction, DefaultIngressClass,
DefaultStorageClass, DefaultTolerationSeconds,
ExtendedResourceToleration, LimitRanger,
MutatingAdmissionWebhook, NamespaceLifecycle,
NodeRestriction, PersistentVolumeClaimResize,
Priority, PodSecurityPolicy, ResourceQuota,
RuntimeClass, ServiceAccount,
StorageObjectInUseProtection, TaintNodesByCondition, and
ValidatingAdmissionWebhook.
|
Kubernetes version |
Amazon EKS platform version |
Release notes |
Release date |
|---|---|---|---|
|
|
|
New platform version with security fixes and enhancements. |
May 5, 2023 |
|
|
|
New platform version with security fixes and enhancements. |
March 24, 2023 |
|
|
|
New platform version with security fixes and enhancements. |
January 27, 2023 |
|
|
|
New platform version with security fixes and enhancements. |
December 5, 2022 |
|
|
|
New platform version with security fixes and enhancements. |
November 18, 2022 |
|
|
|
New platform version with security fixes and enhancements. |
November 7, 2022 |
|
|
|
New platform version with security fixes and enhancements. |
September 21, 2022 |
|
|
|
Initial release of Kubernetes version |
August 11, 2022 |
Kubernetes version 1.22
The following admission controllers are enabled for all 1.22 platform
versions: DefaultStorageClass, DefaultTolerationSeconds, LimitRanger, MutatingAdmissionWebhook, NamespaceLifecycle,
NodeRestriction, ResourceQuota, ServiceAccount, ValidatingAdmissionWebhook, PodSecurityPolicy,
TaintNodesByCondition, StorageObjectInUseProtection,
PersistentVolumeClaimResize, ExtendedResourceToleration,
CertificateApproval, PodPriority,
CertificateSigning, CertificateSubjectRestriction,
RuntimeClass, and DefaultIngressClass.
|
Kubernetes version |
Amazon EKS platform version |
Release notes |
Release date |
|---|---|---|---|
|
|
|
New platform version with security fixes and enhancements. |
May 5, 2023 |
|
|
|
New platform version with security fixes and enhancements. |
March 24, 2023 |
|
|
|
New platform version with security fixes and enhancements. |
January 27, 2023 |
|
|
|
New platform version with security fixes and enhancements. |
December 5, 2022 |
|
|
|
New platform version with security fixes and enhancements. |
November 18, 2022 |
|
|
|
New platform version with security fixes and enhancements. |
November 7, 2022 |
|
|
|
New platform version with security fixes and enhancements. |
September 21, 2022 |
|
|
|
New platform version with improved |
August 15, 2022 |
|
|
|
New platform version with security fixes and enhancements. This
platform version also introduces a new tagging controller which tags
all worker nodes with |
July 21, 2022 |
|
|
|
New platform version with security fixes and enhancements. |
July 7, 2022 |
|
|
|
New platform version with security fixes and enhancements. |
May 31, 2022 |
|
|
|
Initial release of Kubernetes version 1.22 for Amazon EKS. For
more information, see Kubernetes 1.22. |
April 4, 2022 |
Kubernetes version 1.21
The following admission controllers are enabled for all 1.21 platform
versions: DefaultStorageClass, DefaultTolerationSeconds, LimitRanger, MutatingAdmissionWebhook, NamespaceLifecycle,
NodeRestriction, ResourceQuota, ServiceAccount, ValidatingAdmissionWebhook, PodSecurityPolicy,
TaintNodesByCondition, StorageObjectInUseProtection,
PersistentVolumeClaimResize, ExtendedResourceToleration,
CertificateApproval, PodPriority,
CertificateSigning, CertificateSubjectRestriction,
RuntimeClass, and DefaultIngressClass.
|
Kubernetes version |
Amazon EKS platform version |
Release notes |
Release date |
|---|---|---|---|
|
|
|
New platform version with security fixes and enhancements. | May 5, 2023 |
|
|
|
New platform version with security fixes and enhancements. | March 24, 2023 |
|
|
|
New platform version with security fixes and enhancements. | January 27, 2023 |
|
|
|
New platform version with security fixes and enhancements. | December 5, 2022 |
|
|
|
New platform version with security fixes and enhancements. | November 18, 2022 |
|
|
|
New platform version with security fixes and enhancements. | November 7, 2022 |
|
|
|
New platform version with improved etcd
resiliency. |
October 10, 2022 |
|
|
|
New platform version with improved etcd
resiliency. |
August 15, 2022 |
|
|
|
New platform version with security fixes and enhancements. This
platform version also introduces a new tagging controller which tags
all worker nodes with |
July 21, 2022 |
|
|
|
New platform version with security fixes and enhancements. |
July 7, 2022 |
|
|
|
New platform version with security fixes and enhancements. |
May 31, 2022 |
|
|
|
The Amazon Security Token Service endpoint is reverted back to the global endpoint from the previous platform version. If you want to use the Regional endpoint when using IAM roles for service accounts, then you have to enable it. For instructions on how to enable the regional endpoint, see Configuring the Amazon Security Token Service endpoint for a service account. |
April 8, 2022 |
|
|
|
When using IAM roles for service accounts, the Amazon Security Token Service
Regional endpoint is now used by default instead of the global
endpoint. This change is reverted back to the global endpoint in
An updated Fargate scheduler provisions nodes at a significantly higher rate during large deployments. |
March 10, 2022 |
|
|
|
Version 1.10.1-eksbuild.1 of the Amazon VPC CNI self-managed
and Amazon EKS add-on is now the default version deployed. |
December 13, 2021 |
|
|
|
New platform version with support for Windows
IPv4 address management on the VPC Resource Controller
running on the Kubernetes control plane. Added the Kubernetes filter directive for
Fargate Fluent Bit logging. |
November 8, 2021 |
|
|
|
New platform version with security fixes and enhancements. |
September 17, 2021 |
|
|
|
Initial release of Kubernetes version |
July 19, 2021 |
Kubernetes version 1.20
The following admission controllers are enabled for all 1.20 platform
versions: DefaultStorageClass, DefaultTolerationSeconds, LimitRanger, MutatingAdmissionWebhook, NamespaceLifecycle,
NodeRestriction, ResourceQuota, ServiceAccount, ValidatingAdmissionWebhook, PodSecurityPolicy,
TaintNodesByCondition, StorageObjectInUseProtection,
PersistentVolumeClaimResize, ExtendedResourceToleration,
CertificateApproval, PodPriority,
CertificateSigning, CertificateSubjectRestriction,
RuntimeClass, and DefaultIngressClass.
|
Kubernetes version |
Amazon EKS platform version |
Release notes |
Release date |
|---|---|---|---|
|
|
|
New platform version with security fixes and enhancements. | May 5, 2023 |
|
|
|
New platform version with security fixes and enhancements. | March 24, 2022 |
|
|
|
New platform version with security fixes and enhancements. | December 5, 2022 |
|
|
|
New platform version with security fixes and enhancements. | November 18, 2022 |
|
|
|
New platform version with security fixes and enhancements. | November 7, 2022 |
|
|
|
New platform version with security fixes and enhancements. | September 21, 2022 |
|
|
|
New platform version with improved etcd
resiliency. |
August 15, 2022 |
|
|
|
New platform version with security fixes and enhancements. This
platform version also introduces a new tagging controller which tags
all worker nodes with |
July 21, 2022 |
|
|
|
New platform version with security fixes and enhancements. |
May 31, 2022 |
|
|
|
The Amazon Security Token Service endpoint is reverted back to the global endpoint from the previous platform version. If you want to use the Regional endpoint when using IAM roles for service accounts, then you have to enable it. For instructions on how to enable the regional endpoint, see Configuring the Amazon Security Token Service endpoint for a service account. | April 8, 2022 |
|
|
|
When using IAM roles for service accounts, the Amazon Security Token Service
Regional endpoint is now used by default instead of the global
endpoint. This change is reverted back to the global endpoint in
An updated Fargate scheduler provisions nodes at a significantly higher rate during large deployments. |
March 10, 2022 |
|
|
|
New platform version with support for Windows
|
November 8, 2021 |
|
|
|
New platform version with security fixes and enhancements. |
July 30, 2021 |
|
|
|
Initial release of Kubernetes version |
May 18, 2021 |