AWS eks documentation change
Summary
Added documentation for Amazon EC2 Instance Store CSI driver add-on
Security assessment
The change introduces a new storage driver add-on for local NVMe instance storage. No security vulnerabilities, fixes, or security features are mentioned. The documentation explicitly states no IAM permissions are required since it uses local Linux operations only.
Diff
diff --git a/eks/latest/userguide/workloads-add-ons-available-eks.md b/eks/latest/userguide/workloads-add-ons-available-eks.md index 9290854d6..edf170b6c 100644 --- a//eks/latest/userguide/workloads-add-ons-available-eks.md +++ b//eks/latest/userguide/workloads-add-ons-available-eks.md @@ -7 +7 @@ -Amazon VPC CNI plugin for KubernetesCoreDNSKube-proxyAmazon EBS CSI driverAmazon EFS CSI driverAmazon FSx CSI driverMountpoint for Amazon S3 CSI DriverCSI snapshot controllerAmazon SageMaker HyperPod task governanceAmazon SageMaker HyperPod Observability Add-onAmazon SageMaker HyperPod training operatorAmazon SageMaker HyperPod inference operatorAWS Network Flow Monitor AgentNode monitoring agentAWS Distro for OpenTelemetryAmazon GuardDuty agentAmazon CloudWatch Observability agentAWS Private CA Connector for KubernetesEKS Pod Identity AgentSR-IOV Network Metrics ExporterAmazon SageMaker Spaces +Amazon VPC CNI plugin for KubernetesCoreDNSKube-proxyAmazon EBS CSI driverAmazon EC2 Instance Store CSI driverAmazon EFS CSI driverAmazon FSx CSI driverMountpoint for Amazon S3 CSI DriverCSI snapshot controllerAmazon SageMaker HyperPod task governanceAmazon SageMaker HyperPod Observability Add-onAmazon SageMaker HyperPod training operatorAmazon SageMaker HyperPod inference operatorAWS Network Flow Monitor AgentNode monitoring agentAWS Distro for OpenTelemetryAmazon GuardDuty agentAmazon CloudWatch Observability agentAWS Private CA Connector for KubernetesEKS Pod Identity AgentSR-IOV Network Metrics ExporterAmazon SageMaker Spaces @@ -24,0 +25 @@ Provide Amazon EBS storage for your cluster | Amazon EBS CSI driver | EC2 +Provide Amazon EC2 instance storage for your cluster | Amazon EC2 Instance Store CSI driver | EC2 @@ -145,0 +147,14 @@ To learn more about the add-on, see [Use Kubernetes volume storage with Amazon E +## Amazon EC2 Instance Store CSI driver + +The Amazon EC2 Instance Store CSI driver Amazon EKS add-on is a Kubernetes Container Storage Interface (CSI) plugin that provides Amazon EC2 instance store NVMe storage for your cluster. + +The Amazon EKS add-on name is `aws-ec2-local-instance-store-csi-driver`. + +### Required IAM permissions + +This add-on doesn’t require any permissions. The driver interacts with backend NVMe devices through local Linux operations and doesn’t make AWS API calls. + +### Additional information + +To learn more about the add-on, see [Amazon EC2 instance store for Kubernetes volume storage](./lis-csi.html). +