Skip to main content

Technology: eks-nodeagent

IDTitleDescriptionCategoryTechnologyTags
CRE-2025-0026
Low
Impact: 6/10
Mitigation: 1/10
AWS EBS CSI Driver fails to detach volume when VolumeAttachment has empty nodeName
In clusters using the AWS EBS CSI driver, the controller may fail to detach a volume if the associated VolumeAttachment resource has an empty `spec.nodeName`. This results in a log error and skipped detachment, which may block PVC reuse or node cleanup.
Storageeks-nodeagentebscsiAWSStoragePublic
CRE-2025-0057
Low
Impact: 3/10
Mitigation: 1/10
Verbose Logging in AWS Network Policy Agent During Policy Verdicts
  • When using AWS Network Policy Agent with VPC CNI addon v1.17.1, the log message `failed to get caller` may appear frequently.
  • This behavior correlates with policy verdicts being evaluated, and the volume increases in environments with higher traffic or more active policies.
  • The issue does not indicate functional failure, but it increases log volume and may obscure real issues.
Logging Problemseks-nodeagentAWSVPC CNILog Noise