Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

No: changing an Amazon EKS add-on version does not upgrade cluster nodes. AWS documents add-on updates and node-group updates as separate operations. You can aim for no user-visible interruption, but uninterrupted service is not guaranteed: the result depends on available replicas, scheduling capacity, disruption budgets, and the upgrade path.

What the “bridge add-on version trick” actually does

A Kubernetes minor-version change does not automatically update EKS add-ons. You initiate add-on updates separately after checking compatibility. Updating an add-on is not a documented bridge for changing node Kubernetes versions.

AWS’s cluster-upgrade guidance describes a coordinated sequence: prepare and check readiness, update the control plane, update nodes, review and update add-ons and custom controllers as needed, and keep clients such as kubectl compatible. Version-skew rules vary by node type and Kubernetes version, so check the current Amazon EKS Kubernetes version guidance before selecting a target.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For the distinct steps and compatibility checks, see AWS’s EKS add-on update guidance and cluster upgrade best practices.

Choose a node-upgrade path

Path How nodes change Disruption protection and recovery Add-on responsibility
Managed node group AWS updates the node group and drains pods before terminating nodes. A PodDisruptionBudget (PDB) can block draining and cause the update to fail. The update API offers a force option, but overriding a PDB can defeat its intended protection. Rollback to an earlier Kubernetes or AMI version is not supported. Check compatibility and initiate applicable add-on updates separately.
Self-managed nodes Create a replacement node group, allow it to take workload, then taint and drain the old group to migrate pods. AWS describes this as more graceful than changing the AMI on the existing stack. Workload migration depends on capacity and scheduling; plan the transition rather than assuming it is interruption-free. Manage add-on updates separately from node replacement.
EKS Auto Mode After a control-plane update, Auto Mode incrementally replaces nodes. Auto Mode observes PDBs during replacement. That does not guarantee uninterrupted workloads if capacity or scheduling constraints prevent replacement. Confirm which components Auto Mode manages and which self-managed add-ons or controllers remain your responsibility.

Sources: AWS UpdateNodegroupVersion API, self-managed node update guidance, and EKS Auto Mode version update guidance.

Prepare for an update without avoidable service interruption

  • Check workload capacity. Ensure enough nodes and schedulable capacity are available for pods to move while old nodes are being drained or replaced.
  • Review PDBs and scheduling constraints. A PDB can prevent a managed node group drain; placement constraints can also leave replacement pods unscheduled. Verify that the allowed disruptions match the maintenance you intend to perform.
  • Check compatibility before each change. Confirm the target control-plane and node versions are supported for your node type, and check add-on and custom-controller compatibility rather than assuming they update automatically.
  • Plan recovery before starting. Managed node-group updates do not support rollback to a previous Kubernetes or AMI version. Know how you will restore service if the new nodes or workloads do not behave as expected.

What to check for CoreDNS

CoreDNS add-on versions can include PDB configuration. Existing PDBs, a custom Corefile, and readiness settings may affect an upgrade. Review the version-specific notes in AWS’s CoreDNS management guidance before changing the add-on, especially if you have customized its configuration.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Why “without downtime” is a goal, not a guarantee

Node replacement and pod movement are disruptive operations by nature. A careful sequence can reduce risk, but a PDB only governs permitted voluntary disruptions; it does not create spare capacity or ensure every pod can be scheduled elsewhere. If a PDB prevents a managed node group drain, forcing the update may allow it to proceed while removing that protection. Treat force as an exceptional override, not a zero-downtime setting.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.