Update existing cluster to new Kubernetes version

Compare the Kubernetes version of your cluster control plane to the Kubernetes version of your nodes.

Before updating your control plane to a new Kubernetes version, make sure that the Kubernetes minor version of both the managed nodes and Fargate nodes in your cluster are the same as your control plane’s version. For example, if your control plane is running version 1.29 and one of your nodes is running version 1.28, then you must update your nodes to version 1.29 before updating your control plane to 1.30. We also recommend that you update your self-managed nodes to the same version as your control plane before updating the control plane. For more information, see Update a managed node group for your cluster and Update self-managed nodes for your cluster. If you have Fargate nodes with a minor version lower than the control plane version, first delete the Pod that’s represented by the node. Then update your control plane. Any remaining Pods will update to the new version after you redeploy them.

If the Kubernetes version that you originally deployed your cluster with was Kubernetes 1.25 or later, skip this step.

By default, the Pod security policy admission controller is enabled on Amazon EKS clusters. Before updating your cluster, ensure that the proper Pod security policies are in place. This is to avoid potential security issues. You can check for the default policy with the kubectl get psp eks.privileged command.

kubectl get psp eks.privileged

If you receive the following error, see Amazon EKS default Pod security policy before proceeding.

Error from server (NotFound): podsecuritypolicies.extensions "eks.privileged" not found

If the Kubernetes version that you originally deployed your cluster with was Kubernetes 1.18 or later, skip this step.

You might need to remove a discontinued term from your CoreDNS manifest.

Open the Amazon EKS console.

Choose the name of the Amazon EKS cluster to update and choose Update cluster version.

For Kubernetes version, select the version to update your cluster to and choose Update.

For Cluster name, enter the name of your cluster and choose Confirm.

The update takes several minutes to complete.

Continue to Step 4: Update cluster components

Update your Amazon EKS cluster with the following AWS CLI command. Replace the example values with your own. Replace 1.30 with the Amazon EKS supported version number that you want to update your cluster to. For a list of supported version numbers, see Understand the Kubernetes version lifecycle on EKS.

aws eks update-cluster-version --region region-code --name my-cluster --kubernetes-version 1.30

An example output is as follows.

{
    "update": {
        "id": "b5f0ba18-9a87-4450-b5a0-825e6e84496f",
        "status": "InProgress",
        "type": "VersionUpdate",
        "params": [
            {
                "type": "Version",
                "value": "1.30"
            },
            {
                "type": "PlatformVersion",
                "value": "eks.1"
            }
        ],
[...]
        "errors": []
    }

Monitor the status of your cluster update with the following command. Use the cluster name and update ID that the previous command returned. When a Successful status is displayed, the update is complete. The update takes several minutes to complete.

aws eks describe-update --region region-code --name my-cluster --update-id b5f0ba18-9a87-4450-b5a0-825e6e84496f

An example output is as follows.

{
    "update": {
        "id": "b5f0ba18-9a87-4450-b5a0-825e6e84496f",
        "status": "Successful",
        "type": "VersionUpdate",
        "params": [
            {
                "type": "Version",
                "value": "1.30"
            },
            {
                "type": "PlatformVersion",
                "value": "eks.1"
            }
        ],
[...]
        "errors": []
    }

Continue to Step 4: Update cluster components

After your cluster update is complete, update your nodes to the same Kubernetes minor version as your updated cluster. For more information, see Update self-managed nodes for your cluster and Update a managed node group for your cluster. Any new Pods that are launched on Fargate have a kubelet version that matches your cluster version. Existing Fargate Pods aren’t changed.

(Optional) If you deployed the Kubernetes Cluster Autoscaler to your cluster before updating the cluster, update the Cluster Autoscaler to the latest version that matches the Kubernetes major and minor version that you updated to.

(Clusters with GPU nodes only) If your cluster has node groups with GPU support (for example, p3.2xlarge), you must update the NVIDIA device plugin for Kubernetes DaemonSet on your cluster. Replace vX.X.X with your desired NVIDIA/k8s-device-plugin version before running the following command.

kubectl apply -f https://raw.githubusercontent.com/NVIDIA/k8s-device-plugin/vX.X.X/deployments/static/nvidia-device-plugin.yml

Update the Amazon VPC CNI plugin for Kubernetes, CoreDNS, and kube-proxy add-ons. We recommend updating the add-ons to the minimum versions listed in Service account tokens.

If necessary, update your version of kubectl. You must use a kubectl version that is within one minor version difference of your Amazon EKS cluster control plane. For example, a 1.29 kubectl client works with Kubernetes 1.28, 1.29, and 1.30 clusters. You can check your currently installed version with the following command.

kubectl version --client