AWS batch documentation change
Summary
Added documentation for EKS AL2023 AMI support, including NodeConfigSpec usage, YAML configuration examples, and containerd runtime requirement. Updated bootstrap.sh references and added upgrade guidance.
Security assessment
The changes document secure node joining methods (NodeConfigSpec) and enforce containerd runtime for AL2023 AMIs, which improves security posture by standardizing configurations. However, there is no evidence of addressing a specific vulnerability.
Diff
diff --git a/batch/latest/userguide/eks-launch-templates.md b/batch/latest/userguide/eks-launch-templates.md index c70c8f2ef..44884bdf5 100644 --- a//batch/latest/userguide/eks-launch-templates.md +++ b//batch/latest/userguide/eks-launch-templates.md @@ -13 +13,6 @@ AWS Batch on Amazon EKS supports launch templates. There are constraints on what -AWS Batch runs `/etc/eks/bootstrap.sh`. Don't run `/etc/eks/bootstrap.sh` in your launch template or cloud-init user-data scripts. You can add additional parameters besides the `--kubelet-extra-args` parameter to [bootstrap.sh](https://github.com/awslabs/amazon-eks-ami/blob/main/templates/al2/runtime/bootstrap.sh). To do this, set the `AWS_BATCH_KUBELET_EXTRA_ARGS` variable in the `/etc/aws-batch/batch.config` file. See the following example for details. + * For EKS AL2 AMIs, AWS Batch runs `/etc/eks/bootstrap.sh`. Don't run `/etc/eks/bootstrap.sh` in your launch template or cloud-init user-data scripts. You can add additional parameters besides the `--kubelet-extra-args` parameter to [bootstrap.sh](https://github.com/awslabs/amazon-eks-ami/blob/master/files/bootstrap.sh). To do this, set the `AWS_BATCH_KUBELET_EXTRA_ARGS` variable in the `/etc/aws-batch/batch.config` file. See the following example for details. + + * For EKS AL2023, AWS Batch utilizes the [NodeConfigSpec](https://awslabs.github.io/amazon-eks-ami/nodeadm/doc/api/#nodeconfigspec) from EKS to make instances join the EKS cluster. AWS Batch populates [ClusterDetails](https://awslabs.github.io/amazon-eks-ami/nodeadm/doc/api/#clusterdetails) in [NodeConfigSpec](https://awslabs.github.io/amazon-eks-ami/nodeadm/doc/api/#nodeconfigspec) for the EKS cluster and you don’t need to specify them. + + + @@ -34 +39 @@ If the launch template is changed after [CreateComputeEnvironment](https://docs. -AWS Batch supports adding extra arguments to the `kubelet` command. For the list of supported parameters, see [kubelet](https://kubernetes.io/docs/reference/command-line-tools-reference/kubelet/) in the _Kubernetes documentation_. In the following example, ``\--node-labels mylabel=helloworld`` is added to the `kubelet` command line. +AWS Batch supports adding extra arguments to the `kubelet` command. For the list of supported parameters, see [kubelet](https://kubernetes.io/docs/reference/command-line-tools-reference/kubelet/) in the _Kubernetes documentation_. In the following example for EKS AL2 AMIs, ``\--node-labels mylabel=helloworld`` is added to the `kubelet` command line. @@ -49,0 +55,18 @@ AWS Batch supports adding extra arguments to the `kubelet` command. For the list +For EKS AL2023 AMIs the file format is YAML. For the list of supported parameters, see [NodeConfigSpec](https://awslabs.github.io/amazon-eks-ami/nodeadm/doc/api/#nodeconfigspec) in the _Kubernetes documentation_. In the following example for EKS AL2023 AMIs, ``\--node-labels mylabel=helloworld`` is added to the `kubelet` command line. + + + MIME-Version: 1.0 + Content-Type: multipart/mixed; boundary="==MYBOUNDARY==" + + --==MYBOUNDARY== + Content-Type: application/node.eks.aws + + apiVersion: node.eks.aws/v1alpha1 + kind: NodeConfig + spec: + kubelet: + flags: + - --node-labels=mylabel=helloworld + + --==MYBOUNDARY==-- + @@ -53,0 +77,2 @@ You can use the AWS Batch `CONTAINER_RUNTIME` environment variable to configure +If you are using an optimized `EKS_AL2023` or `EKS_AL2023_NVIDIA` AMI you do not need to specify the container runtime as only **containerd** is supported. + @@ -148 +173 @@ Run a DaemonSet on AWS Batch managed nodes -Job queues +How to upgrade from EKS AL2 to EKS AL2023