can we upgrade cni plugin version

[yongzhang]

Hi, team

Seems like cni plugin version has been stick to v0.8.6 for a long time, can we upgrade it to latest version(v1.2.0)?

I'm asking because we need to install nerdctl which requires higher version of cni plugin, thanks.

[anavarreteuk]

In addition, the tag v0.8.6 comes with CVE-2022-27664.

[cartermckinnon]

The AWS VPC CNI installs newer versions of a subset of these plugins itself, so we're evaluating removing them from the AMI entirely, rather than updating them here.

@yongzhang does your use case require them to be baked into the AMI? If so, would it be reasonable to install them yourself, since you're already installing nerdctl?

[anavarreteuk]

The AWS VPC CNI installs newer versions of a subset of these plugins itself, so we're evaluating removing them from the AMI entirely, rather than updating them here.

Even better, thanks.

[yongzhang]

The AWS VPC CNI installs newer versions of a subset of these plugins itself, so we're evaluating removing them from the AMI entirely, rather than updating them here.

@yongzhang does your use case require them to be baked into the AMI? If so, would it be reasonable to install them yourself, since you're already installing nerdctl?

This should be cool, and yea I'm building a custom AMI based on this repo but using ubuntu os.

[cartermckinnon]

I'm reopening this to track removal of the plugins (or an update, if it comes to that).

[anavarreteuk]

I'm reopening this to track removal of the plugins (or an update, if it comes to that).

I will be keen to create the PR once the decision is made.

[cartermckinnon]

This has been resolved, we're on 1.2.0 now. 👍