v0.81.1

Attention!

Notable changes in this release:

• Chocolatey is a package manager for Windows. Starting from this release, aks-engine-azurestack will no longer be released on chocolatey.
  • Binary downloads for the latest version of AKS Engine are available on Github. Download the package for your operating system, and extract the aks-engine-azurestack file (optionally add it to your %PATH% environment variable for more convenient CLI usage).

v0.81.1 - 2024-11-19

Bug Fixes 🐞

• Fix enableTelemetry apiVersion and ARM template (#281)

Continuous Integration 💜

• fix release github action (#277)

Please report any issues here: https://github.com/Azure/aks-engine-azurestack/issues/new

v0.81.0 - 2024-11-08

Bug Fixes 🐞

• specify securityContext in cloud node manager (#274)
• remove guest agent before sysprep to run windows cse on hub (#273)
• specify instanceView to avoid nil pointer during rotate-certs (#272)

Build 🏭

• deps: bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0 (#258)

Continuous Integration 💜

• fix Hub E2E tests REQUESTS_CA_BUNDLE (#271)
• Replace go-dev base image (#264)
• Output AIB release notes and cgmanifest to customization.log (#263)
• Fix disconnected tests (#262)
• bring back deployment error unit tests (#251)
• Add SkipAzLogin and CheckIngressIPOnly parameters (#250)
• fix release github action (#278)

Documentation 📘

• Azure Stack Hub doc update for v0.80.2 (#223)

Maintenance 🔧

• update Linux and Windows VHDs for Oct 2024 (#275)
• update Linux and Windows VHDs for Oct 2024 (#270)
• Update Windows VHD AIB job to use Oct 2024 patches (#269)
• support Kubernetes v1.28.15 & v1.29.10 (#268)
• update containerd to v1.6.36 and runc to v1.1.14 (#267)
• remove chocolatey package manager (#266)
• update to golang v1.23 (#265)
• support Kubernetes v1.29.8 (#261)
• support Kubernetes v1.28.13 (#260)
• remove usage of module autorest/azure, golint fix (#257)
• remove usage of module autorest/azure (#256)
• remove usage of module autorest/to, golint fix (#255)
• remove usage of module autorest/to (#254)
• remove container monitoring addon (#253)
• use image builder for AKSe VHDs (#248)
• upgrade azure sdk to use MISE and MSAL (#247)
• single ARM client for Azure and Hub (#246)
• Azure ARM client targets hybrid API versions (#245)
• remove support for CLI & DEVICE auth methods (#244)
• remove Virtual Machine ScaleSets support (#243)
• update to ginkgo v2, golang v1.20, and k8s client v1.27 (#242)
• remove skus, locations and update commands (#240)
• grant github action bot proper write permission (#233)

Security Fix 🛡️

• Move E2E clusters to user assigned managed identity (#241)
• Add advanced security policy (Github Policy Service) (#239)
• Add branch protection (Github Policy Service) (#236)

Please report any issues here: https://github.com/Azure/aks-engine-azurestack/issues/new

v0.81.0

Attention!

Notable changes in this release:

• Chocolatey is a package manager for Windows. Starting from this release, aks-engine-azurestack will no longer be released on chocolatey.
  • Binary downloads for the latest version of AKS Engine are available on Github. Download the package for your operating system, and extract the aks-engine-azurestack file (optionally add it to your %PATH% environment variable for more convenient CLI usage).

v0.81.0 - 2024-11-08

Bug Fixes 🐞

• specify securityContext in cloud node manager (#274)
• remove guest agent before sysprep to run windows cse on hub (#273)
• specify instanceView to avoid nil pointer during rotate-certs (#272)

Build 🏭

• deps: bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0 (#258)

Continuous Integration 💜

• fix Hub E2E tests REQUESTS_CA_BUNDLE (#271)
• Replace go-dev base image (#264)
• Output AIB release notes and cgmanifest to customization.log (#263)
• Fix disconnected tests (#262)
• bring back deployment error unit tests (#251)
• Add SkipAzLogin and CheckIngressIPOnly parameters (#250)
• fix release github action (#278)

Documentation 📘

• Azure Stack Hub doc update for v0.80.2 (#223)

Maintenance 🔧

• update Linux and Windows VHDs for Oct 2024 (#275)
• update Linux and Windows VHDs for Oct 2024 (#270)
• Update Windows VHD AIB job to use Oct 2024 patches (#269)
• support Kubernetes v1.28.15 & v1.29.10 (#268)
• update containerd to v1.6.36 and runc to v1.1.14 (#267)
• remove chocolatey package manager (#266)
• update to golang v1.23 (#265)
• support Kubernetes v1.29.8 (#261)
• support Kubernetes v1.28.13 (#260)
• remove usage of module autorest/azure, golint fix (#257)
• remove usage of module autorest/azure (#256)
• remove usage of module autorest/to, golint fix (#255)
• remove usage of module autorest/to (#254)
• remove container monitoring addon (#253)
• use image builder for AKSe VHDs (#248)
• upgrade azure sdk to use MISE and MSAL (#247)
• single ARM client for Azure and Hub (#246)
• Azure ARM client targets hybrid API versions (#245)
• remove support for CLI & DEVICE auth methods (#244)
• remove Virtual Machine ScaleSets support (#243)
• update to ginkgo v2, golang v1.20, and k8s client v1.27 (#242)
• remove skus, locations and update commands (#240)
• grant github action bot proper write permission (#233)

Security Fix 🛡️

• Move E2E clusters to user assigned managed identity (#241)
• Add advanced security policy (Github Policy Service) (#239)
• Add branch protection (Github Policy Service) (#236)

Please report any issues here: https://github.com/Azure/aks-engine-azurestack/issues/new

v0.80.2

Attention!

Notable changes in this release:

• The control-plane nodes' taint has been changed from node-role.kubernetes.io/master to node-role.kubernetes.io/control-plane, requiring users to update tolerations in their applications to schedule pods on these nodes. Example:

tolerations:
- key: node-role.kubernetes.io/control-plane
  operator: "Exists"
  effect: NoSchedule

• Use the new AzureDisk CSI Driver v1.29.1 for k8s v1.28+. Use AzureDisk CSI Driver v1.28.3 for k8s v1.27. Use AzureDisk CSI Driver v1.26.5 for k8s v1.26.
  • See Azure Disk CSI Driver: Version Mapping for more details.
• Upgraded to runc version 1.1.12 to address CVE-2024-21626 vulnerability.

v0.80.2 - 2024-02-06

Maintenance 🔧

• update Linux and Windows VHDs for February 2024 (#230)
• update containerd version to 1.6.28 and runc version to 1.1.12 (#229)
• support Kubernetes v1.27.10 and 1.28.6 (#228)

Please report any issues here: https://github.com/Azure/aks-engine-azurestack/issues/new

v0.80.1 - 2024-01-24

Maintenance 🔧

• Replace taint node-role.kubernetes.io/master to node-role.kubernetes.io/control-plane (#225)

Please report any issues here: https://github.com/Azure/aks-engine-azurestack/issues/new

v0.80.0 - 2024-01-19

Build 🏭

• deps: bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#213)
• deps: bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /test/e2e (#212)

Documentation 📘

• Azure Stack Hub doc update for v0.79.0 (#208)

Maintenance 🔧

• update Linux and Windows VHDs for January 2024 (#222)
• remove unsupported feature gates for kubelet config in master and agent profile. (#220)
• include Windows Server December 2023 patches (#219)
• support CSI driver 1.29.1 for k8s 1.28 (#218)
• support Kubernetes v1.28.5 and 1.27.9 (#217)
• remove invalid k8s v1.28 flags and feature gates (#216)

Please report any issues here: https://github.com/Azure/aks-engine-azurestack/issues/new

v0.80.1

Attention!

Notable changes in this release:

• The control-plane nodes' taint has been changed from node-role.kubernetes.io/master to node-role.kubernetes.io/control-plane, requiring users to update tolerations in their applications to schedule pods on these nodes. Example:

tolerations:
- key: node-role.kubernetes.io/control-plane
  operator: "Exists"
  effect: NoSchedule

• Use the new AzureDisk CSI Driver v1.29.1 for k8s v1.28+. Use AzureDisk CSI Driver v1.28.3 for k8s v1.27. Use AzureDisk CSI Driver v1.26.5 for k8s v1.26.
  • See Azure Disk CSI Driver: Version Mapping for more details.

v0.80.1 - 2024-01-24

Maintenance 🔧

• Replace taint node-role.kubernetes.io/master to node-role.kubernetes.io/control-plane (#225)

Please report any issues here: https://github.com/Azure/aks-engine-azurestack/issues/new

v0.80.0 - 2024-01-19

Build 🏭

• deps: bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#213)
• deps: bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /test/e2e (#212)

Documentation 📘

• Azure Stack Hub doc update for v0.79.0 (#208)

Maintenance 🔧

• update Linux and Windows VHDs for January 2024 (#222)
• remove unsupported feature gates for kubelet config in master and agent profile. (#220)
• include Windows Server December 2023 patches (#219)
• support CSI driver 1.29.1 for k8s 1.28 (#218)
• support Kubernetes v1.28.5 and 1.27.9 (#217)
• remove invalid k8s v1.28 flags and feature gates (#216)

Please report any issues here: https://github.com/Azure/aks-engine-azurestack/issues/new

v0.80.0

v0.80.0 - 2024-01-19

Build 🏭

• deps: bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#213)
• deps: bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /test/e2e (#212)

Documentation 📘

• Azure Stack Hub doc update for v0.79.0 (#208)

Maintenance 🔧

• update Linux and Windows VHDs for Janurary 2024 (#222)
• remove unsupported feature gates for kubelet config in master and agent profile. (#220)
• include Windows Server December 2023 patches (#219)
• support CSI driver 1.29.1 for k8s 1.28 (#218)
• support Kubernetes v1.28.5 and 1.27.9 (#217)
• remove invalid k8s v1.28 flags and feature gates (#216)

Please report any issues here: https://github.com/Azure/aks-engine-azurestack/issues/new

v0.79.0

v0.79.0 - 2023-10-23

Attention!

Notable changes in this release:

• The --seccomp-default flag is now automatically enabled for each node in the cluster.
  • See Seccomp Profile for more details.
• Kubernetes v1.27+ no longer auto generates service account token secrets for ServiceAccounts.
  • See Service account token secrets for more details.
• MTU is set to 1500 (instead of 1350) for Kubenet CNI (#192)
• Fixed aks-engine-azurestack rotate-certs command (#204)
• Use the new AzureDisk CSI Driver v1.28.3 for k8s v1.27+. Use AzureDisk CSI Driver v1.26.5 for k8s v1.26.
  • See Azure Disk CSI Driver: Version Mapping for more details.

Bug Fixes 🐞

• shorten custom data in cloud init files and azure disk csi driver addon (#205)
• remove LegacyServiceAccountTokenNoAutoGeneration for k8s v1.27 (#200)
• Remove unused bridge network (#183)

Build 🏭

• deps: bump golang.org/x/net from 0.10.0 to 0.17.0 (#199)
• deps: bump golang.org/x/net from 0.10.0 to 0.17.0 in /test/e2e (#198)

Documentation 📘

• clarify cluster-autoscaler support on Azure Stack Hub (#202)
• Add seccomp profile, csi driver, and dualstack documentation (#196)
• Azure Stack Hub doc update for v0.78.0 (#189)

Features 🌈

• Enable seccomp profile defaulting (#193)

Maintenance 🔧

• update Linux and Windows VHDs for October 2023 (#206)
• rotate-certs creates its own known_hosts copy (#204)
• include Windows Server October 2023 patches (#203)
• support Kubernetes v1.27.6 (#195)
• remove invalid k8s v1.27 flags and feature gates (#197)
• support Kubernetes v1.26.9 (#194)
• set MTU to 1500 for the kubenet CNI (#192)
• upgrade azuredisk csi driver to v1.28.3 (#190)
• new Windows signed scripts and package version (#176)

Testing 💚

• e2e validates Windows HostProcess pods (#182)

Please report any issues here: https://github.com/Azure/aks-engine-azurestack/issues/new

v0.78.0

v0.78.0 - 2023-09-06

Documentation 📘

• Azure Stack Hub doc update for v0.77.0 (#173)

Maintenance 🔧

• update Linux and Windows VHDs for August 2023 (#181)
• include Windows Server August 2023 patches (#180)
• upgrade Windows csi-proxy to v1.1.3 (#179)
• support Kubernetes v1.26.8 (#178)
• support Kubernetes v1.25.13 (#177)
• remove AKS billing extension (#174)

Please report any issues here: https://github.com/Azure/aks-engine-azurestack/issues/new

v0.77.0

v0.77.0 - 2023-07-26

Bug Fixes 🐞

• update WindowsContainerdURL during upgrade and scale (#167)
• disable powershell progress bar during ssh to collect windows logs (#166)
• stop collecting docker engine logs for Windows nodes (#153)
• upgrade azure network policy manager to v1.4.32 (#151)
• persist runUnattendedUpgradesOnBootstrap (#142)
• addpool generates prefixes based on pool count (#138)

Build 🏭

• produce cgmanifest.json per UbuntuVHD build (#156)

Continuous Integration 💜

• use cloud controller manager in disconnected pipeline (#165)
• fix choco package release action (#137)

Documentation 📘

• how to rotate spn credentials (#163)
• how to renew front-proxy certs (#157)
• Azure Stack Hub doc update for v0.76.0 (#133)

Features 🌈

• DISA Kubernetes STIG compliance (#143)

Maintenance 🔧

• update Linux and Windows VHDs for July 2023 (#170)
• upgrade CSI snapshot to v5.0.1, get node info from labels, disable zones support (#164)
• Update Windows VHD packer job to use July 2023 patches (#162)
• upgrade azuredisk-csi-driver v1.26.5 components (#161)
• support Kubernetes v1.26.6 (#160)
• upgrade containerd to v1.6.21 and runc to v1.1.7 (#159)
• upgrade azuredisk-csi-driver to v1.26.5 (#158)
• remove private preview warning for AzureCNI (#155)
• update ip-masq-agent security context (#144)
• fix Windows VHD version for April 2023 (#131)

Security Fix 🛡️

• use of insecure HostKeyCallback implementation (#149)
• incorrect conversion between integer types (#147)
• create CodeQL action (#145)

Testing 💚

• E2E suite pulls busybox from MCR (#154)

Please report any issues here: https://github.com/Azure/aks-engine-azurestack/issues/new

v0.76.0

v0.76.0 - 2023-04-26

Bug Fixes 🐞

• enableUnattendedUpgrades not honored (#124)
• shorten custom data in cloud init files (#121)
• add kube-addon-manager v9.1.6 to vhd (#118)
• remove invalid k8s v1.24 flags (#114)
• use cross-platform pause image as the containerd sandbox image on Windows (#106)
• enforce each addon manager pod (#99)
• kubernetes-azurestack.json uses distro aks-ubuntu-20.04 (#87)
• get-akse.sh pulls using the correct file name (#84)

Documentation 📘

• clarify that the "azuredisk-csi-driver" addon works now on both Linux and Windows nodes (#96)

Continuous Integration 💜

• call test-vhd-no-egress from release github workflow (#123)
• exclude version control information from test binary (#122)
• Add -buildvcs=false for go build (#120)
• call test-vhd-no-egress github workflow from create-release-branch (#119)
• add no-egress GitHub action (#108)
• release workflow tags the correct commit (#113)
• gen-release-changelog wf creates branch and commit (#112)
• update actions/checkout to v3 (#111)
• chocolatey workflow (#86)
• release workflows run no-egress scenarios (#85)

Features 🌈

• get-logs collects etcd metrics (#126)
• add support for Kubernetes v1.24.11 (#109)
• migrate from Pod Security Policy to Pod Security admission (#94)
• DISA Ubuntu 20.04 STIG compliance (#83)

Maintenance 🔧

• update Linux and Windows VHDs for April 2023 (#129)
• Update Windows VHD packer job to use Apr 2023 patches (#127)
• update go-dev image to v1.36.2 (#128)
• update Linux and Windows VHDs for March 2023 (#115)
• support Kubernetes v1.25.7 (#105)
• upgrade coredns to v1.9.4 (#98)
• replace usage of deprecated "io/ioutil" golang package (#97)
• upgrade containerd to 1.5.16 (#95)
• upgrade pause to v3.8 (#93)
• update golang toolchain to v1.19 (#90)
• update registries for nvidia and k8s.io components (#88)
• remove package apache2-utils from VHD (#82)

Security Fix 🛡️

• bump x/net and x/crypto (#104)

Testing 💚

• remove auditd from packages validate script (#116)
• e2e suite validates an existing PV works after a cluster upgrade (#92)

Please report any issues here: https://github.com/Azure/aks-engine-azurestack/issues/new

v0.75.4

v0.75.4 - 2023-03-09

Bug Fixes 🐞

• kubernetes-azurestack.json uses distro aks-ubuntu-20.04 (#87)
• use cross-platform pause image as the containerd sandbox image on Windows (#106)

Continuous Integration 💜

• release workflow creates pre-release
• release workflows run no-egress scenarios (#85)

Documentation 📘

• Enable azurestack-csi-driver addon for mixed clusters (#96)
• Azure Stack Hub doc update for v0.75.3 (#81)

Testing 💚

• e2e suite validates an existing PV works after a cluster upgrade (#92)

Please report any issues here: https://github.com/Azure/aks-engine-azurestack/issues/new