AKS

Azure Kubernetes Service

Stars
2K
Committers
76
View Code on GitHub Visit Website View on X
Ecosystems: Azure

Bot releases are visible (Hide)

AKS - Release 2023-05-14

Published by miwithro over 1 year ago

Release 2023-05-14

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • Docker container runtime for Windows nodepools has been retired as of May 1, 2023. After docker container runtime is retired, you may remain on existing deployed instances but scaling operations will fail, nodepool creation will fail, and you will be out of support. Follow the detailed steps in our documentation to upgrade to containerd.
  • Each Kubernetes version is supported for 12 months. After 12 months, the minor version will shift to platform support only. Our new platform support policy provides customers with Azure infrastructure support while the cluster is in an n-3 version (where n is the latest supported AKS GA minor version). Platform support does not include anything related to Kubernetes functionality and components, but provides customers with additional support beyond what was previously provided for unsupported versions.
  • AKS is gradually rolling out a change that will rotate the token in the kubeconfig credentials. It shall not incur any impact since kubeconfig has the client certificate. Should you see any issue, retrieve the kubeconfig again with az aks get-credentials.
  • Unattended Upgrades are disabled on Mariner when running on a NVIDIA GPU enabled VM sizes.
  • SecurityPatch OS Servicing channel is not supported on Mariner when running on NVIDIA GPU enabled VM sizes.

Release notes

  • Behavior Changes

  • Bug Fixes

    • Now returning a clientError "Could not find the Public IP in resource group %s in subscription %s" when creating agent pool with invalid nodePublicIPPrefixID.
    • For Node Restriction enabled clusters running window calico, we added a new role "windows-calico-node-role" to grant windows containers permission to get secret from calico-system only.
    • Now returning a clientError "Could not find any load balancer in resource group %s in subscription %s" when Stop Cluster fails with ScaleVMSSAgentPoolFailed when there is no LB on the cluster.

  • Component Updates

    • Blob CSI driver upgraded to v1.21.2 for AKS 1.26.
    • CSI image liveness-probe upgraded to v2.10.0 and the node-driver-registrar image upgraded to v2.8.0 for CVE fixes.
    • Azure File CSI driver upgraded to v1.24.1 for AKS 1.24, 1.25.
    • CoreDNS upgraded to 1.9.4 for AKS clusters of versions >= 1.24.0.
    • AKS Windows 2019 image has been updated to 17763.4377.230510.
    • AKS Windows 2022 image has been updated to 20348.1726.230510.
AKS - Release 2023-05-07

Published by kaarthis over 1 year ago

Release 2023-05-07

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • Docker container runtime for Windows nodepools has been retired as of May 1, 2023. After docker container runtime is retired, you may remain on existing deployed instances but scaling operations will fail, nodepool creation will fail, and you will be out of support. Follow the detailed steps in our documentation to upgrade to containerd.
  • Each Kubernetes version is supported for 12 months. After 12 months, the minor version will shift to platform support only. Our new platform support policy provides customers with Azure infrastructure support while the cluster is in an n-3 version (where n is the latest supported AKS GA minor version). Platform support does not include anything related to Kubernetes functionality and components, but provides customers with additional support beyond what was previously provided for unsupported versions.
  • The Docker Bridge CIDR field in the AKS API was made redundant during our change from Docker to containerD in Kubernetes version 1.19. Starting with the 2023-04-01 AKS API version, the Docker Bridge CIDR field will be removed.
  • AKS is gradually rolling out a change that will rotate the token in the kubeconfig credentials. It shall not incur any impact since kubeconfig has the client certificate. Should you see any issue, retrieve the kubeconfig again with az aks get-credentials.

Release notes

  • Preview Features

  • Bug Fixes

    • Updated 'cilium', 'cilium-operator', 'cilium-pre-flight' ClusterRoles to include 'update' permission for 'ciliumidentities' api-resource. This addresses the issue where cilium-operator and cilium-agent could not garbage collect unused identities. identities.
    • Now returning a clientError, when you do a Stop/RunCommand action on a cluster that was never successfully provisioned and was stuck in failed state. Error message returned is "The cluster is being deleted or hasn't been fully provisioned yet.".
    • The CPU limit of Windows DaemonSet for Azure Monitor Metrics Addon is updated from 200m to 500m to fix throttling issue.
    • In cases where an Azure CNI Overlay cluster's podCIDR becomes exhausted (i.e does not have enough ip addresses for the node count across all nodepools)then based on nodepools.MaxCount value only for those nodepools that have AutoScaling enabled - customer will get an already existing error message 'i18n.InsufficientSubnetSize error Target fieldnames.NetworkProfile_PodCIDR'.
    • In case customer deploys an Azure CNI Overlay cluster into a nodeCIDR, where the nodeCIDR doesn't have enough ip addresses for the number of nodes across the nodepools on the same subnet. Then for nodepools that have autoscaling enabled and based on maxcount, customer will get the same 'i18n.InsufficientSubnetSize error message with an error target fieldnames.AgentPoolProfile_VnetSubnetID'.

  • Component Updates

    • Open Service Mesh add-on images updated from v1.2.3 to v1.2.4 for AKS clusters of versions >= 1.24.0.
    • Istio-based service mesh add-on's istiod and ingress images updated from v1.17.1 to v1.17.2. User needs to restart the workload pods to trigger re-injection of the newer patch version of istio-proxy. More information can be found here.
    • Cilium upgraded to 1.12.8 for AKS clusters with Azure CNI Powered by Cilium.
    • Blob csi driver upgraded to v1.19.5 on AKS 1.24, 1.25 to fix blobfuse install failures.
    • Csi-provisioner version updated to v3.5.0 in order to fix a volume deletion issue, details
    • AKS Ubuntu 18.04 image has been updated to AKSUbuntu-1804-202305.08.0.
    • AKS Ubuntu 22.04 image has been updated to AKSUbuntu-2204-202305.08.0.
    • AKS Mariner image has been updated to AKSMariner-202305.08.0.
AKS - 2023-04-30

Published by qpetraroia over 1 year ago

Release 2023-04-30

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • Starting on March 21, 2023, traffic to k8s.gcr.io will be redirected to registry.k8s.io, following the community announcement.
  • Docker container runtime will be retired for Windows nodepools on May 1, 2023. After docker container runtime is retired, you may remain on existing deployed instances but scaling operations will fail, nodepool creation will fail, and you will be out of support. Follow the detailed steps in our documentation to upgrade to containerd.
  • Each Kubernetes version is supported for 12 months. After 12 months, the minor version will shift to platform support only. Our new platform support policy provides customers with Azure infrastructure support while the cluster is in an n-3 version (where n is the latest supported AKS GA minor version). Platform support does not include anything related to Kubernetes functionality and components, but provides customers with additional support beyond what was previously provided for unsupported versions.
  • We are no longer offering support for Azure Disk and Azure File in-tree drivers in Kubernetes 1.26. Please migrate to csi.
  • AKS is gradually rolling out a change that will rotate the token in the kubeconfig credentials. It shall not incur any impact since kubeconfig has the client certificate. Should you see any issue, retrieve the kubeconfig again with az aks get-credentials.

Release notes

AKS - Release 2023-04-23

Published by miwithro over 1 year ago

Release 2023-04-23

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • Starting on March 21, 2023, traffic to k8s.gcr.io will be redirected to registry.k8s.io, following the community announcement.
  • Docker container runtime will be retired for Windows nodepools on May 1, 2023. After docker container runtime is retired, you may remain on existing deployed instances but scaling operations will fail, nodepool creation will fail, and you will be out of support. Follow the detailed steps in our documentation to upgrade to containerd.
  • Each Kubernetes version is supported for 12 months. After 12 months, the minor version will shift to platform support only. Our new platform support policy provides customers with Azure infrastructure support while the cluster is in an n-3 version (where n is the latest supported AKS GA minor version). Platform support does not include anything related to Kubernetes functionality and components, but provides customers with additional support beyond what was previously provided for unsupported versions.
  • We are no longer offering support for Azure Disk and Azure File in-tree drivers in 1.26. Please migrate to csi.

Release notes

  • Behavior Changes

    • Added certificate validation for the reset service principal operation for cert rotation operations where both certs and service principal are expired.
    • Changed the maxUnavailable pod to 5% from 2% for Large Scale clusters upgrade issues when running Cilium.
    • Mariner is now rebranded to Azure Linux. Customers can deploy with Mariner or Azure Linux, as both point to the same sku.
    • The Azure Kubernetes Service RBAC Admin role definition has been updated to contain explicit references to dataActions instead of the broad "Microsoft.ContainerService/managedClusters/*" dataAction. This role is now equivalent to the permissions specified in the Kubernetes built-in admin role.

  • Component Updates

AKS - Release 2023-04-16

Published by shashankbarsin over 1 year ago

Release 2023-04-16

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • Starting on March 21, 2023, traffic to k8s.gcr.io will be redirected to registry.k8s.io, following the community announcement.
  • Docker container runtime will be retired for Windows nodepools on May 1, 2023. After docker container runtime is retired, you may remain on existing deployed instances but scaling operations will fail, nodepool creation will fail, and you will be out of support. Follow the detailed steps in our documentation to upgrade to containerd.
  • Each Kubernetes version is supported for 12 months. After 12 months, the minor version will shift to platform support only. Our new platform support policy provides customers with Azure infrastructure support while the cluster is in an n-3 version (where n is the latest supported AKS GA minor version). Platform support does not include anything related to Kubernetes functionality and components, but provides customers with additional support beyond what was previously provided for unsupported versions.

Release notes

  • Features

  • Preview Features

  • Bug Fix

    • Fixed an issue that prevented the user-assigned managed identity of the AKS cluster from being updated from identity to another user-assigned managed identity.
    • Disabled kubelet-registration-probe on Windows nodes of AKS version 1.26 to reduce CPU consumption.
    • For clusters using Image Cleaner preview feature, the unused role eraser-leader-election-role and rolebinding eraser-leader-election-rolebinding have been deleted.
    • Reduced Azure Blob CSI driver memory limit on agent node from 2100Mi to 400Mi.
    • For dual-stack networking (IPv4/IPv6) clusters, fixed an issue where the Standard Load Balancer couldn't have IPv6 public prefixes.

  • Behavior Changes

    • For AKS clusters of version >= 1.23, RuntimeDefault is set as the default seccomp profile for all workloads.

  • Component Updates

AKS - Release 2023-04-09

Published by shashankbarsin over 1 year ago

Release 2023-04-09

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • Starting on March 21, 2023, traffic to k8s.gcr.io will be redirected to registry.k8s.io, following the community announcement.
  • Docker container runtime will be retired for Windows nodepools on May 1, 2023. After docker container runtime is retired, you may remain on existing deployed instances but scaling operations will fail, nodepool creation will fail, and you will be out of support. Follow the detailed steps in our documentation to upgrade to containerd.
  • Kubernetes version 1.26 is now Generally Available with AKS. AKS has deprecated Kubernetes version 1.23 on April 2, 2023. Please upgrade your AKS clusters to version 1.24 or above.

Release notes

AKS - Release 2023-04-02

Published by CocoWang-wql over 1 year ago

Release 2023-04-02

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • Starting on March 21, 2023, traffic to k8s.gcr.io will be redirected to registry.k8s.io, following the community announcement.
  • Docker container runtime will be retired for Windows nodepools on May 1, 2023. After docker container runtime is retired, you may remain on existing deployed instances but scaling operations will fail, nodepool creation will fail, and you will be out of support. Follow the detailed steps in our documentation to upgrade to containerd.
  • AKS has deprecated Kubernetes version 1.23 on April 2, 2023. Please upgrade your AKS clusters to version 1.24 or above.

Release notes

AKS - Release 2023-03-26

Published by phealy over 1 year ago

Release 2023-03-26

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • Starting on March 21, 2023, traffic to k8s.gcr.io will be redirected to registry.k8s.io, following the community announcement.
  • Docker container runtime will be retired for Windows nodepools on May 1, 2023. After docker container runtime is retired, you may remain on existing deployed instances but scaling operations will fail, nodepool creation will fail, and you will be out of support. Follow the detailed steps in our documentation to upgrade to containerd.
  • AKS will deprecate Kubernetes version 1.23 on April 2, 2023. Please upgrade your AKS clusters to version 1.24 or above.
  • Starting with Kubernetes 1.26:
    • HostProcess Containers will be GA
    • Some AKS labels will be deprecated. Update your AKS labels to the recommended substitutions. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.
    • Two in-tree driver persistent volumes won't be supported in AKS: kubernetes.io/azure-disk, kubernetes.io/azure-file.
    • All AKS clusters on version 1.26+ will use the latest coreDNS version v1.10.1..
      • For all AKS clusters on version 1.26+, coreDNS health plugin will use lameduck 5s to minimizes DNS resolution failures during coreDNS pod restart or deployment rollout.
      • For all AKS clusters on version 1.26+, coreDNS will use ttl 30 as default TTL for DNS records.
  • Starting with Kubernetes 1.27:
    • The Max Surge default value will change on newly created nodepools from 1 node to 10% of the node pool size.

Release notes

  • Features
    • New k8s patch versions
      • Removed 1.24.6, added 1.24.10.
      • Removed 1.25.4, added 1.25.6.
  • Preview Features
  • Bug Fixes
    • Fixed a bug where clusters with multiple node pools using the same pod subnet could get stuck during deletion.
  • Component Updates
AKS - Release 2023-03-19

Published by allyford over 1 year ago

Release 2023-03-19

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • Starting on March 21, 2023, traffic to k8s.gcr.io will be redirected to registry.k8s.io, following the community announcement.
  • Docker container runtime will be retired for Windows nodepools on May 1, 2023. After docker container runtime is retired, you may remain on existing deployed instances but scaling operations will fail, nodepool creation will fail, and you will be out of support. Follow the detailed steps in our documentation to upgrade to containerd.
  • AKS will deprecate Kubernetes version 1.23 on April 2, 2023. Please upgrade your AKS clusters to version 1.24 or above.
  • Starting with Kubernetes 1.26:
    • HostProcess Containers will be GA
    • Some AKS labels will be deprecated. Update your AKS labels to the recommended substitutions. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.
    • Two in-tree driver persistent volumes won't be supported in AKS: kubernetes.io/azure-disk, kubernetes.io/azure-file.
    • All AKS clusters on version 1.26+ will use the latest coreDNS version v1.10.1..
      • For all AKS clusters on version 1.26+, coreDNS health plugin will use lameduck 5s to minimizes DNS resolution failures during coreDNS pod restart or deployment rollout.
      • For all AKS clusters on version 1.26+, coreDNS will use ttl 30 as default TTL for DNS records.
  • Starting with Kubernetes 1.27:
    • The Max Surge default value will change on newly created nodepools from 1 to 10%.

Release notes

  • Bug Fix

    • Fixed an issue where default Linux sysctls were not applied if users specified any Linux OS custom configuration. If the following sysctls were not specified, the defaults may previously have changed unintentionally: net.core.somaxconn, net.ipv4.tcp_max_syn_backlog, net.ipv4.neigh.default.gc_thresh1, net.ipv4.neigh.default.gc_thresh2, and net.ipv4.neigh.default.gc_thresh3. A node image upgrade is recommended to restore the previous behavior.
    • Fixed an issue where CAs passed during provisioning would not be added to trust store correctly. This fix is already applied and should be reflected in all new create operations. New scale operations will require a node image upgrade.
    • Fixed an issue that when client installed oss version of Image Cleaner or Workload Identity, AKS addon manager deleted their roles, service accounts, etc. which blocked its running.

  • Behavior Changes

    • Default memory for Windows pods increased from 600mi to 700mi.

  • Component Updates

AKS - Release 2023-03-05

Published by miwithro over 1 year ago

Release 2023-03-05

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • Windows Server 2019 will be retired with Kubernetes version 1.32 EOL on March 1, 2026. Follow the detailed steps
    in our documentation to transition to Windows Server 2022.
  • Docker container runtime will be retired for Windows nodepools on May 1, 2023. After docker container runtime is retired,you may remain on existing deployed instances but scaling operations will fail, nodepool creation will fail, and you will be out of support. Follow the detailed steps in our documentation to upgrade to containerd.
  • The Docker Bridge CIDR field in the AKS API was made redundant during our change from Docker to containerD in Kubernetes version 1.19. Starting in April 2023 with the 2023-04-01 AKS API version, the Docker Bridge CIDR field will be removed. It will continue to be supported (but ignored) in all preexisting API versions.
  • The KEDA addon currently supports aks versions 1.23, 1.24 and 1.25. the managed KEDA addon will not be supported on 1.26 GA at launch. If you use the KEDA addon, please do not upgrade to 1.26. If you use auto-upgrade with the rapid channel enabled as well as the KEDA addon, please switch off the rapid channel and update manually.
  • AKS will deprecate Kubernetes version 1.23 on April 2nd 2023. Please upgrade your AKS clusters to version 1.24 or above.
  • Java/JDK support for cgroups v2 is available in JDK 11 (patch 11.0.16 and later) or JDK 15 and above. AKS Kubernetes 1.25+ uses cgroups v2. Please migrate your workloads to the new JDK.
  • Starting with Kubernetes 1.26:
    • HostProcess Containers will be GA
    • Some AKS labels will be deprecated. Update your AKS labels to the recommended substitutions. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.
    • Two in-tree driver persistent volumes won't be supported in AKS : kubernetes.io/azure-disk, kubernetes.io/azure-file.
  • Starting with Kubernetes 1.27:
    • The Max Surge default value will change on newly created nodepools from 1 to 10%.
  • AKS began pod security policy deprecation on 2022-11-01 API. The pod security policy will be removed completely on 2023-06-01 API with AKS 1.25 version or higher. You can migrate pod security policy to pod security admission controller before the deprecation deadline.

Release notes

  • Preview Features
  • Bug Fix
    • Fixed issue with Linux node outbound connectivity failing due to HTTP_PROXY/HTTPS_PROXY not fully respected.
  • Behavior Changes
    • Increased qps limits and worker threads for CSI driver on azuredisk v2.
    • For customers using the Web App Routing add-on (Preview), we added an "identity" field in the API response exposing the managed service identity creates by the add-on. You can grant that identity permissions to manage other Azure resources used by the add-on, such as Azure DNS and Azure Key Vault.
    • Bumped the memory limit for the Container Insights Add-on for Windows to 1Gb.
  • Component Updates
AKS - Release 2023-02-26

Published by justindavies over 1 year ago

Release 2023-02-26

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • AKS will deprecate Kubernetes version 1.23 on April 2nd 2023. Please upgrade your AKS clusters to version 1.24 or above.
  • Java/JDK support for cgroups v2 is available in JDK 15 and above. Kubernetes 1.25+ and on AKS uses cgroups. Please migrate your workloads to the new JDK.
  • Starting with Kubernetes 1.26:
    • HostProcess Containers will be GA
    • Some AKS labels will be deprecated. Update your AKS labels to the recommended substitutions. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.
  • Starting with Kubernetes 1.27:
    • The Max Surge default value will change on newly created nodepools from 1 to 10%.
  • AKS began pod security policy deprecation on 2022-11-01 API. The pod security policy will be removed completely on 2023-06-01 API with AKS 1.25 version or higher. You can migrate pod security policy to pod security admission controller before the deprecation deadline.

Release notes

  • Preview Features

    • Support for (Pod Sandboxing)[https://learn.microsoft.com/en-gb/azure/aks/use-pod-sandboxing] workloads
    • Enable windows metrics collection from the Azure Monitor Metrics
    • (Node OS auto-upgrade channel)[https://learn.microsoft.com/en-us/azure/aks/auto-upgrade-node-image] for automatically applying OS security patches promptly

  • Bug Fix

    • In 2023-01-01 Azure API, a hot fix is released to fix this (bug)[https://github.com/Azure/AKS/issues/3481] and returns 400 error on PUT requests to "Base" or "Standard" parameters, allowing customers to still use "Basic" parameter in ManagedClusterSKUName with "Free" or "Paid" parameters in ManagedClusterSKUTier.
    • Fix Agent Pool stop issue when powerstate reporting is inconsistent
    • Fix blobfuse2 backward compatibility issue on AKS 1.25
    • Fix cluster autoscaler scheduler bug which is causing CA to crash
    • Update node label with Security Patch versions from VHD

  • Behavior Changes

    • Removed 5 minute back off when attemptng to delete a node pool with an existing operation taking place

  • Component Updates

AKS - Release 2023-02-19

Published by qpetraroia over 1 year ago

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • AKS will deprecate Kubernetes version 1.23 on April 2nd 2023. Please upgrade your AKS clusters to version 1.24 or above.
  • Starting with Kubernetes 1.26:
    • HostProcess Containers will be GA
    • Some AKS labels will be deprecated. Update your AKS labels to the recommended substitutions. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.
  • Starting with Kubernetes 1.27:
    • The Max Surge default value will change on newly created nodepools from 1 to 10%.
  • AKS began pod security policy deprecation on 2022-11-01 API. The pod security policy will be removed completely on 2023-06-01 API with AKS 1.25 version or higher. You can migrate pod security policy to pod security admission controller before the deprecation deadline.
  • Azure Policy will be updated to GateKeeper 3.11 on Feb 20th for AKS 1.24 and up.

Release notes

  • Bug Fix
    • In 2023-01-01 Azure API, a hot fix is released and currently rolling out to fix this (bug)[https://github.com/Azure/AKS/issues/3481] and returns 400 error on PUT requests to "Base" or "Standard" parameters, allowing customers to still use "Basic" parameter in ManagedClusterSKUName with "Free" or "Paid" parameters in ManagedClusterSKUTier.
  • Behavior Changes
    • Clusters on upgrade-channel nodeimage or nodeos-channel will no longer pull security updates through unattended upgrade. They will now get security updates through the weekly node image upgrade.
    • Clusters with automatic node image upgrades (node-image auto-upgrade channel) will have nightly in-place patches turned off. You can set your own schedule (via upgrade schedules).
  • Component Updates
AKS - Release 2023-02-12

Published by palma21 over 1 year ago

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • Starting with Kubernetes 1.26:
    • HostProcess Containers will be GA
    • Some AKS labels will be deprecated. Update your AKS labels to the recommended substitutions. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.
  • Starting with Kubernetes 1.27:
    • The Max Surge default value will change on newly created nodepools from 1 to 10%.
  • AKS began pod security policy deprecation on 2022-11-01 API. The pod security policy will be removed completely on 2023-06-01 API with AKS 1.25 version or higher. You can migrate pod security policy to pod security admission controller before the deprecation deadline.
  • Azure Policy will be updated to GateKeeper 3.11 on Feb 20th for AKS 1.24 and up.
  • Starting from the release of 2023-02-19, clusters with automatic node image upgrades (node-image auto-upgrade channel) will have nightly in-place patches turned off. Node image auto upgrade offers a better idempotent way to receive these fixes on a schedule (via upgrade schedules). Clusters not using the node-image auto-upgrade channel remain unchanged in preparation for the release of the OS Upgrade Channel functionality.

Release notes

  • Preview Features
    • Kubernetes 1.26.0 is now in Public Preview.
  • Behavior Changes
    • Auto-upgrade Patch channel can now be set in any patch version of a supported Kubernetes minor version and it will bring the cluster to the latest supported patch.
  • Component Updates
AKS - Release 2023-02-05

Published by kaarthis over 1 year ago

Azure Kubernetes Service Changelog

Release 2023-02-05

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • AKS introduces a new Standard tier which includes the previous standalone uptime SLA in addition to improved capabilities over the Free tier. Read the blog to learn more about the launch of the Standard tier. Azure API is updated to include the new “Standard” tier, as a result, "Basic" and "Paid" will be removed in the 2023-07-01 API version, and this will be a breaking change in API version 2023-07-01 or newer. If you use automated scripts, CD pipelines, ARM templates, Terraform, or other third-party toolings that rely on the above parameters, please be sure to make the necessary changes before upgrading to the 2023-07-01 or newer API version. From API version 2023-01-01 and newer, you can start transitioning to the new API parameters "Base" and "Standard".
  • Starting with Kubernetes 1.26:
    • HostProcess Containers will be GA
    • Some AKS labels will be deprecated. Update your AKS labels to the recommended substitutions. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.
  • Starting with Kubernetes 1.27:
    • The Max Surge default value will change on newly created nodepools from 1 to 10%.
  • AKS began pod security policy deprecation on 2022-11-01 API. The pod security policy will be removed completely on 2023-06-01 API with AKS 1.25 version or higher. You can migrate pod security policy to pod security admission controller before the deprecation deadline.
  • Azure Policy will be updated to GateKeeper 3.11 on Feb 20th for AKS 1.24 and up.
  • Workload Identity: Application pods using workload identity will need the following label added azure.workload.identity/use starting with the 2023-01-29 release. Add the label to your running pods/deployments to avoid pods from failing at restart. See more here.
  • The aks swagger api specs now moved under a subfolder per the issue.

Release notes

  • Bug Fix
    • HTTP Proxy Fixed an issue on the "No Proxy" update - where the cluster FQDN would be removed from noProxy on updates.
  • Component Updates
AKS - Release 2023-01-29

Published by miwithro over 1 year ago

Azure Kubernetes Service Changelog

Release 2023-01-29

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • Starting with Kubernetes 1.26:
    • HostProcess Containers will be GA
    • Some AKS labels will be deprecated. Update your AKS labels to the recommended substitutions. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.
  • AKS began pod security policy deprecation on 2022-11-01 API. The pod security policy will be removed completely on 2023-06-01 API with AKS 1.25 version or higher. You can migrate pod security policy to pod security admission controller before the deprecation deadline.
  • Azure Policy will be updated to GateKeeper 3.11 on Feb 20th for AKS 1.24 and up.
  • Workload Identity: Application pods using workload identity will need the following label added azure.workload.identity/use starting with the 2023-01-29 release. Add the label to your running pods/deployments to avoid pods from failing at restart. See more here.

Release notes

  • Features
    • New k8s patch versions for 1.23: Added 1.23.15, removed 1.23.8
    • HTTP Proxy now allows updating the "No Proxy" configuration after cluster deployment using aks update.
  • Preview Feature
    • Azure CNI Overlay now available in uksouth, australiaeast
  • Component Updates
  • Container Insights addon upgraded to ciprod01182023.
  • Azure NPM addon upgraded to v1.4.32 in SOV Clouds.
  • AKS Ubuntu 18.04 image has been updated to AKSUbuntu-1804-2023.01.25.
  • AKS Ubuntu 22.04 image has been updated to AKSUbuntu-2204-2023.01.25.
  • AKS Mariner image has been updated to AKSMariner-2023.01.25.
AKS - Release 2023-01-22

Published by miwithro over 1 year ago

Azure Kubernetes Service Changelog

Release 2023-01-22

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • Starting with Kubernetes 1.26:
    • HostProcess Containers will be GA
    • Some AKS labels will be deprecated. Update your AKS labels to the recommended substitutions. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.
  • AKS began pod security policy deprecation on 2022-11-01 API. The pod security policy will be removed completely on 2023-06-01 API with AKS 1.25 version or higher. You can migrate pod security policy to pod security admission controller before the deprecation deadline.
  • Azure Policy will be updated to GateKeeper 3.11 on Feb 20th for AKS 1.24 and up.

Release notes

  • Features
    • New k8s patch versions for 1.24 and 1.25: Added 1.24.9, removed 1.24.3; added 1.25.5, removed 1.25.2
  • Preview Feature
    • New AKS Auto Upgrade Schedule "aksmanagedAutoUPgradeSchedule" that offers better controls, flexibility like quarterly , biweekly, bimonthly etc. Read more
  • Bug Fix
    • Add multiple replicas for the OSM injector for clusters versioned lower than 1.24. Initially AKS added an HPA and removed the explicit replicas count, but the HPA was conditionally added only for clusters >= 1.24. The fix ensures that the replica count will continue to exist for lower version clusters.
  • Component Updates
AKS - Release 2023-01-15

Published by phealy over 1 year ago

Release 2023-01-15

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • Starting with Kubernetes 1.26:
    • HostProcess Containers will be GA
    • Some AKS labels will be deprecated. Update your AKS labels to the recommended substitutions. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.
  • AKS began pod security policy deprecation on 2022-11-01 API. The pod security policy will be removed completely on 2023-06-01 API with AKS 1.25 version or higher. You can migrate pod security policy to pod security admission controller before the deprecation deadline.

Release notes

AKS - Release 2023-01-08

Published by allyford almost 2 years ago

Release 2023-01-08

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • Kubernetes 1.25 has finished rolling out in all non-sovereign regions.
  • AKS begins pod security policy deprecation on 2022-11-01 API. The pod security policy will be removed completely on 2023-06-01 API with AKS 1.25 version or higher. You can migrate pod security policy to pod security admission controller before the deprecation deadline.

Release notes

  • Features
    • Starting with Kubernetes 1.26:
      • HostProcess Containers will be GA
      • Some AKS labels will be deprecated. Update your AKS labels to the recommended substitutions. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.
    • Dynamic IP Allocation is now available for Windows nodes.
  • Preview Features
  • Behavior Changes
    • The OSM addon's osm-injector pod's autoscaler will no longer scale on memory, only on CPU. The osm-controller pod's HPA resource will be reconciled in EnsureExists mode to allow you to edit the resource.
  • Bug Fixes
    • A bug regarding Kubernetes version 1.25 and the tigera operator has been fixed. If your cluster is already running on v1.25.4, please create a new cluster or file a support ticket with AKS for any further help.
  • Component Updates
    • CIS Kubernetes v1.24 Benchmark has been published which covers AKS 1.21.x through AKS 1.24.x
    • KEDA add-on for AKS has been upgraded to v2.9
    • Virtual Kubelet has been upgraded to v1.4.7 and v1.4.8. See changelog for bug fixes and new features.
    • Azure disk csi driver has been updated to v1.26.0
    • Azure files csi driver has been updated to v1.24.0
    • Azure blob csi driver has been updated to v1.19.0
    • AKS Windows 2022 image has been updated to 20348.1366.221214
    • AKS Windows 2019 image has been updated to 17763.3770.221214.
AKS - Release 2022-12-04

Published by palma21 almost 2 years ago

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • AKS is retiring v1.22.x on this (December 4th) release. Please upgrade your clusters to v1.23 or (preferably) above.
  • On this release (December 4th 2022), AKS is updating all patches on supported Kubernetes versions. This means that the oldest patch version on a supported minor version will be deprecated. Read more about AKS versioning and our policy here.
  • Some AKS labels are being deprecated with the Kubernetes 1.26 release in January. Update your AKS labels to the recommended substitutions. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.
  • AKS begins pod security policy deprecation on 2022-11-01 API. The pod security policy will be removed completely on 2023-06-01 API with AKS 1.25 version or higher. You can migrate pod security policy to pod security admission controller before the deprecation deadline.
  • Azure NAT gateways do not support IPv6 and therefore cannot be used with dual-stack clusters as the cluster would not have a valid IPv6 outbound connection.
  • AKS clusters with Calico enabled should not upgrade to Kubernetes v1.25.
  • Starting Kubernetes v1.26 two in-tree driver persistent volumes types kubernetes.io/azure-disk, kubernetes.io/azure-file are deprecated and will no longer be supported. Removal of these drivers following its deprecation is not currently planned but all users should migrate as soon as possible to the corresponding persistent volume types, disk.csi.azure.com and file.csi.azure.com respectively. See how here.
  • Workload Identity: Application pods using workload identity will need the following label added azure.workload.identity/use starting with the 2023-01-15 release. Add the label to your running pods/deployments to avoid pods from failing at restart. See more here.
  • Starting Jan 3, 2023 AKS will expand the policy of 0 node clusters, that are automatically stopped after 30d to include clusters with 0 "Ready" nodes (or all "Not Ready") and 0 Running VMs. Clusters with all nodes manually stopped (unsupported) and in "Not Ready" state after 30 days will be stopped accordingly. To re-start your cluster, run a cluster start command. See the complete Support Policy for more information.

Release notes

  • Features
    • Kubernetes 1.25 is now Generally available. 1.25.4 patch version was added
      • Ubuntu 22.04 for AMD and ARM64 architectures will be the default host.
      • Windows Server 2022 will be the default Windows host. Important, old windows 2019 containers will not work on windows server 2022 hosts.
  • Preview Features
    • In Azure CNI powered by Cilium clusters, AKS now sets prometheus.io/port and prometheus.io/scrape annotations on the cilium-operator deployment as well as the prometheus container ports on the cilium and cilium operator manifests.
  • Behavior Changes
    • AKS now provides a kubernetes.azure.com/dedicated-host-group=<HOST GROUP ID> label for nodes in an Azure Dedicated Host Group.
    • App Gateway Ingress Controller (AGIC) addon memory limit increased to 600 Mi to address to adjust for resourcing in clusters with large pod/secret counts.
    • The only allowed operation that can be performed on a stopped cluster is starting the cluster.
  • Bug Fixes
    • Fixed an issue with cluster updates after a failed cluster start getting stuck.
    • AKS will have Accelerated Networking turned off in Azure Dedicated Host nodepools as Azure Dedicated Host placement currently doesn't correctly account for Accelerated Networking capable SKUs at the moment.
    • Fixed IPv6 casing mismatch between azure network provider and AKS.
  • Component Updates
AKS - Release 2022-11-27

Published by kaarthis almost 2 years ago

Release 2022-11-27

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • AKS is retiring v1.22.x on December 4th 2022. Please upgrade your clusters to v1.23 and above.
  • In January 2023, AKS is updating all patch's on supported Kubernetes versions. This means that the oldest patch version on a supported minor version will be deprecated. Read more about AKS versioning and our policy here.
  • Some AKS labels are being deprecated with the Kubernetes 1.26 release. Update your AKS labels to the recommended substitutions. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.
  • AKS begins pod security policy deprecation on 2022-11-01 API. The pod security policy will be removed completely on 2023-06-01 API with AKS 1.25 version or higher. You can migrate pod security policy to pod security admission controller before the deprecation deadline.
  • Azure NAT gateways do not support IPv6 and therefore cannot be used with dual-stack clusters as the cluster would not have a valid IPv6 outbound connection.
  • Starting Kubernetes v1.26 two in-tree driver persistent volumes won't be supported in AKS : kubernetes.io/azure-disk, kubernetes.io/azure-file.

Release notes

  • Behavior Changes
    • Creation, Upgrade operations of PSP-enabled cluster if k8s version is v1.25 or above will no longer be allowed.
    • Updated Calico to v3.23.3 when Kubernetes version is greater than or equal to v1.25.0.
  • Bug Fixes
    • Fixed an issue in Kubernetes 1.24+ with dual-stack clusters causing apiserver to crash if the cluster has IPv6 listed first in the serviceCIDRs property.
  • Component Updates
Related Projects
Bridge-To-Kubernetes

Bridge To Kubernetes (B2K) is development tool to debug microservices, pods which redirects traff...

15 Jul 2022 205
AzureStackHCI-Supportability

Welcome to the Azure Stack HCI Supportability Forum! This is where the HCI team will track troubl...

27 Mar 2024 17
aks-set-context

GitHub Action for setting context (retrieving Kubeconfig) before interacting with Kubernetes cluster

04 Sep 2019 47
k8s-deploy

GitHub Action for deploying to Kubernetes clusters

04 Sep 2019 255
private-aks-cluster-terraform-devops

This sample shows how to create a private AKS cluster using Terraform and Azure DevOps

21 Sep 2021 75
AKS-Performance-and-Scale

02 Nov 2023 5
AML-Kubernetes

AzureML customer managed k8s compute samples

03 Jun 2020 80
aks-engine-azurestack

AKS Engine: Units of Kubernetes on Azure Stack Hub!

24 Aug 2022 15
azure-migrate-export

Azure Migrate Export

15 Nov 2022 11
azure-webjobs-sdk

Azure WebJobs SDK

10 Jul 2014 737
aksArc

# Welcome to the Azure Kubernetes Service enabled by Azure Arc (AKS Arc) repo This is where the A...

27 Aug 2020 111
azure-functions-core-tools

Command line tools for Azure Functions

04 Jan 2017 1,308
sg-aks-workshop

Security + Governance Workshop

07 Oct 2019 191
application-gateway-kubernetes-ingress

This is an ingress controller that can be run on Azure Kubernetes Service (AKS) to allow an Azure...

29 Aug 2018 677
AKS-Edge

Welcome to the Azure Kubernetes Service (AKS) Edge repo.

17 Nov 2022 56