v1.2.1

What's Changed

• Default allow tests for Network Policy by @jaydeokar in #375
• Fix ebpf maps/progs cleanup test by @Pavani-Panakanti in #376
• Running cyclonus test with timeout and regular checks by @jaydeokar in #379
• Fix for CVE-2025-22868 and CVE-2025-22870 by @dshehbaj in #378
• only register PE controller when networkpolicy is enabled by @oliviassss in #380
• Add networkpolicy mode checks by @Pavani-Panakanti in #386
• update go version to 1.24.2 by @Pavani-Panakanti in #389

New Contributors

• @dshehbaj made their first contribution in #378
• @oliviassss made their first contribution in #380

Full Changelog: v1.2.0...v1.2.1

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.4/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.4/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.4/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.4/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.19.4/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3                                                 
amazon-k8s-cni-init:v1.19.4
amazon-k8s-cni:v1.19.4
amazon/aws-network-policy-agent:v1.2.1