AWS eks: Add Kubernetes 1.37 platform version and admission controller list
Summary
Introduces the 1.37 platform version section listing enabled admission controllers (NodeRestriction, PodSecurity, etc.) and the initial eks.4 release entry, and updates version examples from 1.36 to 1.37.
Security assessment
The added text documents which admission controllers (including security-relevant ones like NodeRestriction, PodSecurity, and CertificateSubjectRestriction) are enabled for the new 1.37 platform version, which is security-relevant configuration guidance but not a fix for a specific vulnerability.
Evidence
+The following admission controllers are enabled for all `1.37` platform versions: `NodeRestriction`, `ExtendedResourceToleration`, `NamespaceLifecycle`, `LimitRanger`, `ServiceAccount`, `TaintNodesByCondition`, `PodSecurity`, `Priority`, `DefaultTolerationSeconds`, `DefaultStorageClass`, `StorageObjectInUseProtection`, `PersistentVolumeClaimResize`, `RuntimeClass`, `CertificateApproval`, `CertificateSigning`, `CertificateSubjectRestriction`, `DefaultIngressClass`, `MutatingAdmissionWebhook`, `ValidatingAdmissionWebhook`, `ResourceQuota`.
Diff
diff --git a/eks/latest/userguide/platform-versions.md b/eks/latest/userguide/platform-versions.md index f1435ad..00c5539 100644 --- a//eks/latest/userguide/platform-versions.md +++ b//eks/latest/userguide/platform-versions.md @@ -7 +7 @@ -Kubernetes version 1.36Kubernetes version 1.35Kubernetes version 1.34Kubernetes version 1.33Kubernetes version 1.32Kubernetes version 1.31Get current platform versionChange platform version +Kubernetes version 1.37Kubernetes version 1.36Kubernetes version 1.35Kubernetes version 1.34Kubernetes version 1.33Kubernetes version 1.32Kubernetes version 1.31Get current platform versionChange platform version @@ -17 +17 @@ Amazon EKS platform versions represent the capabilities of the Amazon EKS cluste -When a new Kubernetes minor version is available in Amazon EKS, such as 1.36, the initial Amazon EKS platform version for that Kubernetes minor version starts at `eks.1`. However, Amazon EKS releases new platform versions periodically to enable new Kubernetes control plane settings and to provide security fixes. +When a new Kubernetes minor version is available in Amazon EKS, such as 1.37, the initial Amazon EKS platform version for that Kubernetes minor version starts at `eks.1`. However, Amazon EKS releases new platform versions periodically to enable new Kubernetes control plane settings and to provide security fixes. @@ -46,0 +47,8 @@ To receive notifications of all source file changes to this specific documentati +## Kubernetes version `1.37` + +The following admission controllers are enabled for all `1.37` platform versions: `NodeRestriction`, `ExtendedResourceToleration`, `NamespaceLifecycle`, `LimitRanger`, `ServiceAccount`, `TaintNodesByCondition`, `PodSecurity`, `Priority`, `DefaultTolerationSeconds`, `DefaultStorageClass`, `StorageObjectInUseProtection`, `PersistentVolumeClaimResize`, `RuntimeClass`, `CertificateApproval`, `CertificateSigning`, `CertificateSubjectRestriction`, `DefaultIngressClass`, `MutatingAdmissionWebhook`, `ValidatingAdmissionWebhook`, `ResourceQuota`. + +Kubernetes version | EKS platform version | Release notes | Release date +---|---|---|--- +`1.37.0` | `eks.4` | Initial release of Kubernetes version `1.37` for EKS. For more information, see [Kubernetes 1.37](./kubernetes-versions-standard.html#kubernetes-1-37). | October 1, 2026 +