Technology: eks-nodeagent
ID | Title | Description | Category | Technology | Tags |
---|---|---|---|---|---|
CRE-2025-0026 Low Impact: 6/10 Mitigation: 1/10 | AWS EBS CSI Driver fails to detach volume when VolumeAttachment has empty nodeName | In clusters using the AWS EBS CSI driver, the controller may fail to detach a volume if the associated VolumeAttachment resource has an empty `spec.nodeName`. This results in a log error and skipped detachment, which may block PVC reuse or node cleanup. | Storage | eks-nodeagent | ebscsiAWSStoragePublic |
CRE-2025-0057 Low Impact: 3/10 Mitigation: 1/10 | Verbose Logging in AWS Network Policy Agent During Policy Verdicts | - When using AWS Network Policy Agent with VPC CNI addon v1.17.1, the log message `failed to get caller` may appear frequently. - This behavior correlates with policy verdicts being evaluated, and the volume increases in environments with higher traffic or more active policies. - The issue does not indicate functional failure, but it increases log volume and may obscure real issues. | Logging Problems | eks-nodeagent | AWSVPC CNILog Noise |