AWS eks documentation change
Summary
Removed prerequisites section about Pod security policies and condensed CNI plugin version compatibility notes
Security assessment
The changes remove outdated prerequisites and compatibility notes without introducing new security content or addressing specific vulnerabilities. The Pod security policy references were removed but there's no indication of a security flaw being addressed.
Diff
diff --git a/eks/latest/userguide/vpc-add-on-create.md b/eks/latest/userguide/vpc-add-on-create.md index 22b0b3f95..3ec8cd585 100644 --- a//eks/latest/userguide/vpc-add-on-create.md +++ b//eks/latest/userguide/vpc-add-on-create.md @@ -27,2 +26,0 @@ The following are prerequisites for the Amazon VPC CNI plugin for Kubernetes Ama - * If you’re using version `1.7.0` or later of the Amazon VPC CNI plugin for Kubernetes and you use custom Pod security policies, see [Delete the default Amazon EKS Pod security policy](./pod-security-policy.html#psp-delete-default) and [Understand Amazon EKS created Pod security policies (PSP)](./pod-security-policy.html). - @@ -34,3 +32 @@ The following are prerequisites for the Amazon VPC CNI plugin for Kubernetes Ama -Amazon VPC CNI plugin for Kubernetes versions `v1.16.0` to `v1.16.1` removed compatibility with Kubernetes versions `1.23` and earlier. VPC CNI version `v1.16.2` restores compatibility with Kubernetes versions `1.23` and earlier and CNI spec `v0.4.0`. - -Amazon VPC CNI plugin for Kubernetes versions `v1.16.0` to `v1.16.1` implement CNI specification version `v1.0.0`. CNI spec `v1.0.0` is supported on EKS clusters that run the Kubernetes versions `v1.24` or later. VPC CNI version `v1.16.0` to `v1.16.1` and CNI spec `v1.0.0` aren’t supported on Kubernetes version `v1.23` or earlier. For more information about `v1.0.0` of the CNI spec, see [Container Network Interface (CNI) Specification](https://github.com/containernetworking/cni/blob/spec-v1.0.0/SPEC.md) on GitHub. +Amazon VPC CNI plugin for Kubernetes versions `v1.16.0` to `v1.16.1` implement CNI specification version `v1.0.0`. For more information about `v1.0.0` of the CNI spec, see [Container Network Interface (CNI) Specification](https://github.com/containernetworking/cni/blob/spec-v1.0.0/SPEC.md) on GitHub.