Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add release notes for v20240827 #4517

Merged
merged 33 commits into from
Sep 7, 2024
+2,558 −0
Merged

Add release notes for v20240827 #4517

Changes from 7 commits
Commits
Show all changes
33 commits
Select commit Hold shift + click to select a range
c017644
Update CHANGELOG.md
dyu1208 Sep 4, 2024
298e658
Update CHANGELOG.md
dyu1208 Sep 4, 2024
a317945
Remove vnet integration change due to PR reverted
dyu1208 Sep 4, 2024
54520ec
Update CHANGELOG.md
dyu1208 Sep 4, 2024
d555b95
Update CHANGELOG.md
dyu1208 Sep 4, 2024
0ae7b5c
Update CHANGELOG.md
dyu1208 Sep 4, 2024
0c11f95
Update CHANGELOG.md
dyu1208 Sep 4, 2024
2a2aac3
Update CHANGELOG.md
dyu1208 Sep 5, 2024
d2c1eee
Update CHANGELOG.md
dyu1208 Sep 5, 2024
3bb6233
Create AKS Mariner release notes 202408.27.0.txt
dyu1208 Sep 5, 2024
4ef7c81
Delete vhd-notes/AKSMariner/202408.27.0.txt
dyu1208 Sep 5, 2024
3a67b17
Create 202408.27.0.txt
dyu1208 Sep 5, 2024
b9f6e92
Create 202408.27.0.txt
dyu1208 Sep 5, 2024
1cb924b
Create 17763.6189.240814.txt
dyu1208 Sep 5, 2024
087fb11
Create 20348.2655.240814.tx
dyu1208 Sep 5, 2024
c01cf8b
Create 25398.1085.240814.txt
dyu1208 Sep 5, 2024
5089a90
Update CHANGELOG.md
dyu1208 Sep 5, 2024
126774a
Update CHANGELOG.md
dyu1208 Sep 5, 2024
322d88a
Update CHANGELOG.md
dyu1208 Sep 5, 2024
17d522d
Create 20348.2655.240814.txt
dyu1208 Sep 5, 2024
272596b
Update CHANGELOG.md
dyu1208 Sep 5, 2024
405a807
Update CHANGELOG.md
dyu1208 Sep 5, 2024
04fe8cd
Update CHANGELOG.md
dyu1208 Sep 5, 2024
40d7d60
Update CHANGELOG.md
dyu1208 Sep 5, 2024
c0f68a5
Update CHANGELOG.md
dyu1208 Sep 5, 2024
a9db264
Update CHANGELOG.md
dyu1208 Sep 5, 2024
f449fb6
Update CHANGELOG.md
dyu1208 Sep 5, 2024
d44a40a
Update CHANGELOG.md
dyu1208 Sep 6, 2024
8b32ad5
Delete vhd-notes/AKSWindows/2022/20348.2655.240814.tx
dyu1208 Sep 6, 2024
e985d95
Update CHANGELOG.md
dyu1208 Sep 6, 2024
92cdb3b
Update CHANGELOG.md
dyu1208 Sep 6, 2024
d8e30cb
Update CHANGELOG.md
dyu1208 Sep 7, 2024
2290e3d
Update CHANGELOG.md
dyu1208 Sep 7, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
56 changes: 56 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,61 @@
# Azure Kubernetes Service Changelog

## Release 2024-08-27

Monitor the release status by regions at [AKS-Release-Tracker](https://releases.aks.azure.com/). This release is titled as v20240827.

### Announcements

dyu1208 marked this conversation as resolved.
Show resolved Hide resolved
* AKS version 1.27 is now deprecated, onboard to LTS if you still need to operate on 1.27.
dyu1208 marked this conversation as resolved.
Show resolved Hide resolved
* [Trusted launch for AKS](https://learn.microsoft.com/en-us/azure/aks/use-trusted-launch) is now GA.
dyu1208 marked this conversation as resolved.
Show resolved Hide resolved
* The attestation report for [CIS Kubernetes V1.9.0 Benchmark](https://learn.microsoft.com/azure/aks/cis-kubernetes) is published which covers AKS 1.27.x through AKS 1.29.x.

### Release Notes

* Bug fixes:
* Fix an Azure NPM issue that user could meet unexpected connectivity for Pods on the Node when editing a NetworkPolicy with a CIDR "except" field.
* Fix a bug where users could not stop/start AgentPools using the PowerState field in the 2020-09-01, 2020-11-01, 2020-12-01, 2021-02-01, 2021-03-01 API versions.
dyu1208 marked this conversation as resolved.
Show resolved Hide resolved
* Fix bug to block non-VMSS (VirtualMachineScaleSets) agent pools in the Automatic SKU validation process.
* Fix bug to ensure correct default network plugin settings for Kubernetes clusters using VMAS.
* Fix bug for intermittent precondition failures when applying an AKS Bicep deployment on the pod subnet delegation.
* Fix bug of public IP on VMSS dropped after upgrade node image or reset service principal operation.
* Fix bug (#4282)[https://github.com/Azure/AKS/issues/4282] to remove duplicated toleration from Calico components.
* Fix bug to ensure AnnotationControlled is correctly populated by default when creating AKS clusters with app routing enabled, and to ensureAnnotationControlled is an accepted value for the default nginx ingress controller config for AKS clusters with K8s versions <1.30.
dyu1208 marked this conversation as resolved.
Show resolved Hide resolved
* Fix bug for [karpenter](https://github.com/Azure/karpenter-poc/issues/639).
dyu1208 marked this conversation as resolved.
Show resolved Hide resolved

* Behavior change:
* Cluster Stop operations will be blocked if the customer has any illegal webhooks:
* If APIGroups is wildcard, and Resources is in the criticalResources or wildcard, the webhook will be blocked.
* If Resources is wildcard, and APIGroups is in the criticalApiGroups or wildcard, the webhook will be blocked.
dyu1208 marked this conversation as resolved.
Show resolved Hide resolved
* For non-host network pods running on AKS nodes, they cannot access wireserver(168.63.129.16) port 32526. Before this change user cannot access wireserver port 80, but port 32526 is accessible.
* When deploying an [AKS Automatic (preview)](https://learn.microsoft.com/en-us/azure/aks/intro-aks-automatic) cluster, user do not need to register extra feature flags for related preview features, such as APIServerVnetIntegration, NRGLockdown, NodeAutoProvisioning, and Safeguards.
dyu1208 marked this conversation as resolved.
Show resolved Hide resolved
* Allow creation of AgentPools without Count field specified if autoscaler enabled.
dyu1208 marked this conversation as resolved.
Show resolved Hide resolved
* CBL-Mariner 1.0 is end of life, creation of new nodepools with OSSKU cblmariner is disabled.
* Azure Linux 2.0 on Kubernetes version 1.30 LTS will be blocked until Azure Linux 3.0 is released and supported.
dyu1208 marked this conversation as resolved.
Show resolved Hide resolved
* KMS v1 is blocked for AKS cluster with K8s version >=1.31.
dyu1208 marked this conversation as resolved.
Show resolved Hide resolved
* [AGIC addon](https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-overview) has been assigned the network contributor role.
dyu1208 marked this conversation as resolved.
Show resolved Hide resolved
dyu1208 marked this conversation as resolved.
Show resolved Hide resolved

* Component updates:
dyu1208 marked this conversation as resolved.
Show resolved Hide resolved
* AKS Ubuntu 22.04 image has been updated to [AKSUbuntu-202408.27.0](https://github.com/Azure/AgentBaker/blob/master/vhdbuilder/release-notes/AKSUbuntu/gen1/2204containerd/202408.27.0.txt).
* Azure Linux image has been updated to [AzureLinux-202408.27.0](https://github.com/Azure/AgentBaker/blob/master/vhdbuilder/release-notes/AKSCBLMarinerV2/gen2/202408.27.0.txt).
dyu1208 marked this conversation as resolved.
Show resolved Hide resolved
* Azure Disk CSI driver has been upgraded to [v1.30.3](https://github.com/kubernetes-sigs/azuredisk-csi-driver/releases/tag/v1.30.3) on AKS 1.30, [V1.29.8](https://github.com/kubernetes-sigs/azuredisk-csi-driver/releases/tag/v1.29.8) on AKS 1.28, [1.28.1](https://github.com/kubernetes-sigs/azuredisk-csi-driver/releases/tag/v1.28.10) on AKS 1.27.
* Azure Blob Disk CSI driver has been upgraded to [v1.24.3][https://github.com/kubernetes-sigs/blob-csi-driver/releases/tag/v1.24.3] on AKS 1.30, [v1.23.7](https://github.com/kubernetes-sigs/blob-csi-driver/releases/tag/v1.23.7) on AKS 1.29 and 1.28.
* Azure File CSI driver has been upgraded to [v1.30.5](https://github.com/kubernetes-sigs/azurefile-csi-driver/releases/tag/v1.30.5) on AKS 1.30 and 1.29, [v1.29.7](https://github.com/kubernetes-sigs/azurefile-csi-driver/releases/tag/v1.29.7) on AKS 1.28.
* AKS Windows Server 2019 image has been updated to [AKSWindows-2019-17763.6189.240814](https://github.com/Azure/AgentBaker/blob/master/vhdbuilder/release-notes/AKSWindows/2019-containerd/17763.6189.240814.txt).
* AKS Windows Server 2022 image has been updated to [AKSWindows-2022-20348.2655.240814](https://github.com/Azure/AgentBaker/blob/master/vhdbuilder/release-notes/AKSWindows/2022-containerd/20348.2655.240814.txt).
* AKS Windows Server 23H2 image has been updated to [AKSWindows-23H2-25398.1085.240814](https://github.com/Azure/AgentBaker/blob/master/vhdbuilder/release-notes/AKSWindows/23H2/25398.1085.240814.txt).
dyu1208 marked this conversation as resolved.
Show resolved Hide resolved
dyu1208 marked this conversation as resolved.
Show resolved Hide resolved
* AKS App Routing operator image has been updated to [v0.2.3-patch-2](https://github.com/Azure/aks-app-routing-operator/releases/tag/v0.2.3-patch-2) for AKS cluster with K8s versions >=1.30, [v0.2.1-patch-4](https://github.com/Azure/aks-app-routing-operator/releases/tag/v0.2.1-patch-4) for AKS cluster with K8s versions <1.30 to address CVEs.
* Windows containerd has been updated to [v1.7.20](https://github.com/containerd/containerd/releases/tag/v1.7.20) in AKS cluster with K8s versions >= v1.28.
* Kubernetes Secrets Store CSI Driver has been updated to [v1.5.3](https://github.com/kubernetes-sigs/secrets-store-csi-driver/releases/tag/v1.5.3).
dyu1208 marked this conversation as resolved.
Show resolved Hide resolved
* Kubernetes Secrets Store CSI Driver has been updated to [v1.4.4](https://github.com/kubernetes-sigs/secrets-store-csi-driver/releases/tag/v1.4.4) and Azure Key Vault Provider for Secrets Store CSI Driver to [v1.5.3](https://github.com/Azure/secrets-store-csi-driver-provider-azure/releases/tag/v1.5.3)
* [AGIC addon image](https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-overview) has been updated to [v1.7.5](https://github.com/Azure/application-gateway-kubernetes-ingress/releases/tag/1.7.5).
dyu1208 marked this conversation as resolved.
Show resolved Hide resolved
* Retina Enterprise and Operator image has been updated to [v0.0.9](https://github.com/azure-networking/retina-enterprise/releases/tag/v0.0.9).
* azure-cloud-controller-manager has been updated to version [v1.30.5](https://github.com/kubernetes-sigs/cloud-provider-azure/releases/tag/v1.30.5), [v1.29.9](https://github.com/kubernetes-sigs/cloud-provider-azure/releases/tag/v1.29.9), [v1.28.11](https://github.com/kubernetes-sigs/cloud-provider-azure/releases/tag/v1.28.11), [v1.27.19](https://github.com/kubernetes-sigs/cloud-provider-azure/releases/tag/v1.27.19).
* KEDA addon has been updated to [v2.14.1](https://github.com/kedacore/keda/releases/tag/v2.14.1) for Kubernetes = 1.30.
* Azure Policy addon has been updated to [v1.7.0](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/policy-for-kubernetes#170).
dyu1208 marked this conversation as resolved.
Show resolved Hide resolved
* Istio-based service mesh add-on revision asm-1-20 has been upgraded to patch [v1.20.8](https://istio.io/latest/news/releases/1.20.x/announcing-1.20.8/), revision asm-1-21 has been upgraded to patch [v1.21.5](https://istio.io/latest/news/releases/1.21.x/announcing-1.21.5/), and revision asm-1-22 has been upgraded to patch [v1.22.3](https://istio.io/latest/news/releases/1.22.x/announcing-1.22.3/). Users can restart the workload pods to trigger re-injection of the newer patch version of istio-proxy. More information can be found [here](https://learn.microsoft.com/en-us/azure/aks/istio-upgrade#patch-version-upgrade).
dyu1208 marked this conversation as resolved.
Show resolved Hide resolved
* Calico [v3.28.1](https://github.com/projectcalico/calico/releases/tag/v3.28.1) is supported for AKS cluster with K8s versions 1.30.

## Release 2024-08-05

Monitor the release status by regions at [AKS-Release-Tracker](https://releases.aks.azure.com/). This release is titled as v20240805.
Expand Down
Loading