v1.3.2

What's Changed

• Adding Cluster Network Policy changes by @jaydeokar in #496
• fixed map pointer mangling issue by @viveksb007 in #498
• test unit-test fix by @jaydeokar in #499
• fix(logger): correct caller skip configuration for controller-runtime by @viveksb007 in #503
• Fix GetPodIdentifierFromBPFPinPath for pod names with dots by @Supreeth095 in #504
• fixed cross IP family skip rule conditions by @viveksb007 in #511
• Exclude host network pods from PE during reconciliation by @emilyhuaa in #510
• emitting latency metrics based on PE and CPE updates in NPC by @viveksb007 in #516
• Fixing the rules update for CNP via RPC handler by @jaydeokar in #513
• Merge from main to release-1.3 by @jaydeokar in #517
• adding code coverage for PR's by @yash97 in #521
• updating go version by @yash97 in #522
• ignore mock files from code coverage by @yash97 in #527
• Updating grpc packages by @jaydeokar in #534
• using sha instead of pr ref by @yash97 in #536
• Merge main to release-1.3 by @jaydeokar in #535

New Contributors

• @emilyhuaa made their first contribution in #510

Full Changelog: v1.3.1...v1.3.2

v1.3.1

What's Changed

• fixed map pointer mangling issue #498 by @viveksb007

Full Changelog: v1.3.0...v1.3.1

v1.3.0

🚨 🚨 🚨 Network Policy Agent v1.3.0 contains a bug that may cause issues with existing network policies. Please upgrade to v1.3.1. 🚨 🚨 🚨

What's New

• This release adds support for Cluster Network Policy in AWS Network Policy Agent which allows cluster administrators to define network policies with Layer 3 and 4 network rules at the cluster scope

What's Changed

• adding profiling flag by @yash97 in #469
• upgraded sdk v2 version by @viveksb007 in #475
• make casing check agnostic by @viveksb007 in #483
• documenting drop metrics by @yash97 in #485
• Adding Cluster Network Policy change by @jaydeokar in #497

Full Changelog: v1.2.7...v1.3.0

v1.2.7

What's Changed

• Release 1.2.7 by @viveksb007 in #479

Full Changelog: v1.2.6...v1.2.7

v1.2.6

What's Changed

• fix #456: add IPv6 catchAll entry implicitly if no egress rule and no egress isolation by @viveksb007 in #459
• Move npagent grpc call to unix sockets by @Pavani-Panakanti in #465
• Merge main to release-1.2 by @Pavani-Panakanti in #466

Full Changelog: v1.2.5...v1.2.6

v1.2.5

What's Changed

• Optimize ebpf programs by @Pavani-Panakanti in #387
• Fix race condition with attach and delete concurrency by @Pavani-Panakanti in #452
• Add integration tests by @Pavani-Panakanti in #406
• Merge Main to release-1.2 by @Pavani-Panakanti in #457

Full Changelog: v1.2.4...v1.2.5

Network Policy Agent v1.2.5 is released as part of CNI v1.20.1.eksbuild.3 release

v1.2.4

What's Changed

• Upgrade to SDK v2 by @jaydeokar in #442
• refactored bpf client and fixed log levels by @viveksb007 in #441
• Handle overlaps in except and allow CIDRs by @Pavani-Panakanti in #344
• fix: making cyclonus job resilient to Node restart by @viveksb007 in #447
• Fixed GH E2E conformance test by @viveksb007 in #448
• using in-mem ebpf map for syscall reduction by @viveksb007 in #445
• Merge main to release-1.2 by @Pavani-Panakanti in #451

Full Changelog: v1.2.3...v1.2.4

v1.2.3

What's Changed

• fix: cleaning stale map keys when NP is deleted by @viveksb007 in #413
• refactor: extracted FW rule processing code into pkg for better encapsulation by @viveksb007 in #419
• Minor fixes by @viveksb007 in #422
• feat(logger): allowed network policy logs retention customization by @m00lecule in #393
• fixed unbound variable error by @viveksb007 in #426
• emitting metrics to controller-runtime metric server by @viveksb007 in #425
• updated ebpf-sdk-go version by @viveksb007 in #430
• Removing pinning of patch version by @jaydeokar in #437
• Support to apply network policies to multiple interfaces by @Pavani-Panakanti in #432
• Merge main to release-1.2 by @Pavani-Panakanti in #439

New Contributors

• @m00lecule made their first contribution in #393

Full Changelog: v1.2.2...v1.2.3

v1.2.2

What's Changed

• Merge main into release-1.2 by @Pavani-Panakanti in #373
• Merge main into release 1.2 by @Pavani-Panakanti in #388
• Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.23.4 by @dependabot in #398
• minor script fixes by @viveksb007 in #403
• Fix Ginkgo command flag placement in run-cyclonus-tests.sh by @yash97 in #405
• Adding CVE fixes by @jaydeokar in #402
• adding drop bytes and drop packets count metric by @yash97 in #316
• Prevent bpf prog load when pod is not present by @Pavani-Panakanti in #401
• fix - avoid bpfcontext mangling by @viveksb007 in #410
• Improve NP logs by @Pavani-Panakanti in #409
• Merge main to release-1.2 by @jaydeokar in #411

New Contributors

• @yash97 made their first contribution in #405

Full Changelog: v1.2.1...v1.2.2

v1.2.1

What's Changed

• Default allow tests for Network Policy by @jaydeokar in #375
• Fix ebpf maps/progs cleanup test by @Pavani-Panakanti in #376
• Running cyclonus test with timeout and regular checks by @jaydeokar in #379
• Fix for CVE-2025-22868 and CVE-2025-22870 by @dshehbaj in #378
• only register PE controller when networkpolicy is enabled by @oliviassss in #380
• Add networkpolicy mode checks by @Pavani-Panakanti in #386
• update go version to 1.24.2 by @Pavani-Panakanti in #389

New Contributors

• @dshehbaj made their first contribution in #378
• @oliviassss made their first contribution in #380

Full Changelog: v1.2.0...v1.2.1

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.4/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.4/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.4/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.4/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.19.4/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3                                                 
amazon-k8s-cni-init:v1.19.4
amazon-k8s-cni:v1.19.4
amazon/aws-network-policy-agent:v1.2.1