AKS

Azure Kubernetes Service

Stars
2K
Committers
76

Bot releases are visible (Hide)

AKS - Release 2022-06-05

Published by miwithro over 2 years ago

Release 2022-06-05

This release is rolling out to all regions - estimated time for completed roll out is 2022-06-17 for public cloud and 2022-06-20 for sovereign clouds.

Announcements

  • Starting with the June 26th, 2022 AKS release, Azure NPM will increase its pod memory limit from 300 MB to 1 GB for clusters with the uptime SLA enabled. Requests will stay at 300 MB.
  • Starting with Kubernetes 1.24, the following changes will be made:
    • The default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
    • The NodeRestriction Admission Controller will be enabled
    • CoreDNS version 1.9.2 will be default version. With this new version of CoreDNS wildcard queries are no longer allowed.
    • metrics-server version 0.6.1 will be the default version.
  • Konnectivity rollout will continue in May 2022 and is expected to complete by end of June.
  • Update your AKS labels to the recommended substitutions before deprecation after the Kubernetes v1.24 release. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.

Release notes

  • Features
  • Behavioral Changes
    • Set agentPoolProfile default maxPods for new agentpools to align with the expected default maxPods based on the cluster's network configuration.
    • Reverted the changes of request values to api server to reduce churn on Uptime SLA enabled AKS clusters.
    • Konnectivity agent now uses a new Service Account konnectivity-agent, instead of the default Service Account.
  • Bug fixes
  • Component Updates
AKS - Release 2022-05-29

Published by justindavies over 2 years ago

Release 2022-05-29

This release is rolling out to all regions - estimated time for completed roll out is 2022-06-10 for public cloud and 2022-06-13 for sovereign clouds.

Announcements

  • Starting with Kubernetes 1.24, the following changes will be made:
    • The default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
    • The NodeRestriction Admission Controller will be enabled
  • Konnectivity rollout will continue in May 2022 and is expected to complete by end of June.
  • Update your AKS labels to the recommended substitutions before deprecation after the Kubernetes v1.24 release. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.

Release notes

  • Features
    • Azure Key Vault with Private Link with KMS is now supported
    • Preview of Kubernetes 1.24
  • Bug fixes
    • Add extra information in error messages when a subnet is full or drain issues are found
  • Component Updates
AKS - Release 2022-05-22

Published by phealy over 2 years ago

Release 2022-05-22

This release is rolling out to all regions - estimated time for completed roll out is 2022-06-03 for public cloud and 2022-06-06 for sovereign clouds.

Announcements

  • From Kubernetes 1.23, containerd will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here.
  • Starting with Kubernetes 1.24, the following changes will be made:
    • The default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
    • The NodeRestriction Admission Controller will be enabled
  • Konnectivity rollout will continue in May 2022 and is expected to complete by end of May.
  • Update your AKS labels to the recommended substitutions before deprecation after the Kubernetes v1.24 release. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.

Release notes

AKS - Release 2022-05-08

Published by kaarthis over 2 years ago

Release 2022-05-08

This release is rolling out to all regions - estimated time for completed roll out is 2022-05-21 for public cloud and 2022-05-24 for sovereign clouds.

Announcements

  • From Kubernetes 1.23, containerd will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here.
  • Starting with 1.24 the default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
  • Konnectivity rollout will continue in May 2022 and is expected to complete by end of May.
  • Update your AKS labels to the recommended substitutions before deprecation after the Kubernetes v1.24 release. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.

Release notes

  • Public preview
  • Bug Fixes
    • Fixes a bug with the AKS-EnableDualStack preview feature that would delete managed outbound IPv6 IPs if updating the cluster with a version of the API before the dual-stack parameters were added.
    • A validation to prevent adding clusters to a subnet with a NAT Gateway without setting the appropriate outboundType was applied to updates as well as creates, preventing changes to clusters in this situation. The validation has been removed from update calls.
  • Component Updates
AKS - Release 2022-05-01

Published by phealy over 2 years ago

Release 2022-05-01

This release is rolling out to all regions - estimated time for completed roll out is 2022-05-13 for public cloud and 2022-05-16 for sovereign clouds.

Announcements

  • From Kubernetes 1.23, containerd will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here.
  • Starting with 1.24 the default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
  • Konnectivity rollout will continue in May 2022 and is expected to complete by end of May.
  • Update your AKS labels to the recommended substitutions before deprecation after the Kubernetes v1.24 release. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.

Release notes

  • Public preview
  • Behavioral changes
    • Kube-proxy now detects local traffic using the local interface subnet instead of cluster CIDR when using Azure CNI. For clusters that have agent pools in separate subnets, this ensures that kube-proxy NAT rules do not interfere with network policies enforced by Azure NPM. The configuration change applies to clusters running Azure CNI and Kubernetes version 1.23.3 or later.
    • Clusters deployed with outboundType loadBalancer but deployed in a subnet with an attached NAT gateway will be updatable. Deployment of clusters into a bring-your-own-vnet subnet with a NAT Gateway already attached will be blocked unless outboundType userAssignedNATGateway is passed. See NAT Gateway in the AKS Documentation for more details.
  • Component Updates
AKS - Release 2022-04-24

Published by shashankbarsin over 2 years ago

Release 2022-04-24

This release is rolling out to all regions - estimated time for completed roll out is 2022-05-06 for public cloud and 2022-05-09 for sovereign clouds.

Announcements

  • From Kubernetes 1.23, containerd will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here.
  • Starting with 1.24 the default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
  • Konnectivity rollout will continue in May 2022 and is expected to complete by end of May.
  • Update your AKS labels to the recommended substitutions before deprecation after the Kubernetes v1.24 release. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.

Release notes

  • Preview features
  • Bug Fixes
    • Fixed CSI driver version display issue in Azure disk and file CSI Driver objects.
    • Fixed bug where cloud-controller-manager was not deleting Node Object after deletion of VMSS instance.
  • Behavioral changes
    • Taints and labels applied using the AKS nodepool API are not modifiable from the Kubernetes API and vice versa. Also, any modifications to system taints will not be allowed.
  • Component Updates
AKS - Release 2022-04-03

Published by qpetraroia over 2 years ago

Release 2022-04-03

This release is rolling out to all regions - estimated time for completed roll out is 2022-04-15 for public cloud and 2022-04-18 for sovereign clouds.

Announcements

  • From Kubernetes 1.23, containerd will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here.
  • Starting with 1.24 the default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
  • Starting in Kubernetes 1.23 AKS Metrics server deployment will start having 2 pods instead of 1 for HA, which will increase the memory requests of the system by 54Mb.
  • Kubernetes version 1.20 will be deprecated and removed from AKS on April 7th 2022.
  • Update your AKS labels to the recommended substitutions before deprecation after the Kubernetes v1.24 release. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.

Release notes

  • Preview Features
  • Features
  • Bug Fixes
    • Fixed a bug where deployments done via the AKS run command would incorrectly display a server error when pods in a deployment did not become ready in 30s. This is now correctly flagged as a client error and will ask the user to retry or take action to ensure the pods of the deployment become ready within the allocated time.
  • Component Updates
    • Azure Keyvault Secrets Provider has been updated to v1.1.0.
    • Azure Disk CSI driver has been updated to 1.14.
    • Azure File CSI driver has been updated to 1.13.
    • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2022.03.29.
AKS - Release 2022-03-27

Published by palma21 over 2 years ago

This release is rolling out to all regions - estimated time for completed roll out is 2022-04-08 for public cloud and 2022-04-11 for sovereign clouds.

Announcements

  • Upgrade your AKS Ubuntu 18.04 worker nodes to VHD version 2022.03.20 or newer to address CVE-2022-0492 and CVE-2022-23648.
  • From Kubernetes 1.23, containerd will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here.
  • Starting with 1.24 the default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
  • Starting in Kubernetes 1.23 AKS Metrics server deployment will start having 2 pods instead of 1 for HA, which will increase the memory requests of the system by 54Mb.
  • Kubernetes version 1.20 will be deprecated and removed from AKS on April 7th 2022.
  • Update your AKS labels to the recommended substitutions before deprecation after the Kubernetes v1.24 release. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.
  • Node Pool Snapshot CLI experience is changing by April 6, 2022. The current nodepool snapshot commands i.e az aks snapshot will now be az aks nodepool snapshot.

Release notes

  • Preview Features
  • Features
    • Node pool Scale-down Mode is now Generally available and supports Spot Node Pools.
  • Bug Fixes
  • Behavioral changes
    • An AKS API call on the cluster after a control plane upgrade was incorrectly causing many nodepool upgrades. We have amended the
      behavior such that if you dont specify nodepools or specify some nodepools in the call, then the nodepools are not upgraded to the
      control plane version implicitly. In order to upgrade the nodepools following the control plane upgrade, an explicit kubernetes version
      upgrade in the respective nodepool(s) should be added in the request.
  • Component Updates
AKS - Release 2022-03-20

Published by phealy over 2 years ago

Release 2022-03-20

This release is rolling out to all regions - estimated time for completed roll out is 2022-04-03 for public cloud and 2022-04-06 for sovereign clouds. Please note that the AKS release cadence has shifted; new releases will now be cut on Sunday.

Announcements

  • Upgrade your AKS Ubuntu 18.04 worker nodes to VHD version 2022.03.20 or newer to address CVE-2022-23648.
  • From Kubernetes 1.23, containerd will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here.
  • Starting with 1.24 the default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
  • Starting in Kubernetes 1.23 AKS Metrics server deployment will start having 2 pods instead of 1 for HA, which will increase the memory requests of the system by 54Mb.
  • Kubernetes version 1.20 will be deprecated and removed from AKS on April 7th 2022.

Release notes

  • Behavioral changes
    • Accelerated networking will now be enabled by default for newly-created Windows nodepools.
    • The single placement group VMSS flag will now be enabled for newly-created node pools using InfiniBand/RDMA-capable VM sizes. InfiniBand/RDMA-capable SKUs, like most H-series and some N-series sizes, can be identified by the "r" in the additional features section of the size name (e.g. Standard_HB120rs_v3, Standard_ND96asr_v4). Note that the InfiniBand drivers are not currently loaded to nodes. Loading these via a DaemonSet will come in the near future.
  • Bug fixes
    • The 2022.03.20+ AKS Ubuntu 18.04 images fix an issue (present since 2022.02.19) in which an unneeded Azure security agent was installed, leading to higher than expected memory consumption on nodes.
    • Improved error handling to resolve a bug where a cluster stop operation may show an inconsistent state, leading to a cluster that is stuck in the "Stopping" state or moves to the "Failed" state. If a cluster is stuck in this state currently, running az resource update --ids <cluster resource ID> should resolve the issue.
  • Features
  • Component updates
AKS - Release 2022-03-10

Published by sajitsasi over 2 years ago

Release 2022-03-10

This release is rolling out to all regions - estimated time for completed roll out is 2022-03-23 for public cloud and 2022-03-26 for sovereign clouds.

Announcements

  • From Kubernetes 1.23, containerD will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here.
  • Starting with 1.24 the default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
  • Starting in Kubernetes 1.23 AKS Metrics server deployment will start having 2 pods instead of 1 for HA, which will increase the memory requests of the system by 54Mb.
  • Kubernetes version 1.20 will be deprecated and removed from AKS on April 7th 2022.

Release notes

  • Component updates
    • AKS clusters >= 1.19 will now have Application Gateway Ingress Controller (AGIC) version 1.5.1 which adds support for ingress class and path prefix
    • Upgrade Azure disk CSI driver to 1.12.0 on 1.21+ clusters
    • Upgrade Azure Defender pod-collector image to 0.3.19 from 0.3.18
    • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2022.03.07 which was actually hotfixed to AKSUbuntu-1804-2022.03.21. So an upgrade could result in either 2022.03.07 or 2022.03.21 depending on when you did the upgrade.
    • AKS Windows image has been updated to 2019-datacenter-core-smalldisk-17763.2686.220309.
AKS - Release 2022-03-03

Published by kaarthis over 2 years ago

Release 2022-03-03

This release is rolling out to all regions - estimated time for completed roll out is 2022-03-16 for public cloud and 2022-03-19 for sovereign clouds.

Announcements

  • From Kubernetes 1.23, containerD will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here.
  • Starting with 1.24 the default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
  • Starting in Kubernetes 1.23 AKS Metrics server deployment will start having 2 pods instead of 1 for HA, which will increase the memory requests of the system by 54Mb.
  • Kubernetes version 1.20 will be deprecated and removed from AKS on April 7th 2022.
  • AKS x OSS Integration Blog Series: This month’s article highlights how to deploy a highly available Redis Cluster to AKS. Run scalable and resilient Redis with Kubernetes and Azure Kubernetes Service - Microsoft Tech Community. Previous two articles explore storing Prometheus metrics with Thanos/AKS and Cluster monitoring with Prometheus/Grafana/AKS.

Release notes

  • Preview features
    • Associate capacity reservation to node pools is now previewed in all regions. Documentation available here.
  • Component updates
    • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2022.03.03 contains hotfix for containerd-1602.
    • Introducing Prometheus performance metrics, measuring execution time of handling pod/namespace/network policy CRUD events. The pre-existing npm_add_policy_exec_time metric now has an "error" label.
AKS - Releases 2022-02-24

Published by shashankbarsin over 2 years ago

Release 2022-02-24

This release is rolling out to all regions - estimated time for completed roll out is 2022-03-09 for public cloud and 2022-03-12 for sovereign clouds.

Announcements

  • From Kubernetes 1.23, containerD will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here.
  • Starting with 1.24 the default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
  • Starting in Kubernetes 1.23 AKS Metrics server deployment will start having 2 pods instead of 1 for HA, which will increase the memory requests of the system by 54Mb.

Release notes

  • Behavioral changes
    • The default VNET address for managed VNETs will change from 10.0.0.0/8 to 10.224.0.0/12 and the default node subnet address will change from 10.240.0.0/16 to 10.224.0.0/16. New clusters will be required to have service and pod CIDR ranges that do not overlap with these new VNET ranges.
  • Bug fixes
    • Fix azure disk resize timeout issue on aks 1.21+
  • Preview features
    • Associate capacity reservation to node pools. Documentation available here.
  • Component updates
    • Upgrade azure disk and azure file csi drivers to v1.11.0 on aks 1.21+
    • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2022.02.19.
    • Calico updated to v3.21.4 on Windows
    • Azure Policy for AKS updated to Gatekeeper 3.7.1.
AKS - Release 2022-02-10

Published by miwithro over 2 years ago

Release 2022-02-10

This release is rolling out to all regions - estimated time for completed roll out is 2022-02-23 for public cloud and 2022-02-26 for sovereign clouds.

Announcement

  • From Kubernetes 1.23, containerD will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here https://docs.microsoft.com/en-us/azure/aks/windows-container-cli#add-a-windows-server-node-pool-with-containerd-preview.
  • Konnectivity rollout will continue in Feb 2022.
  • Kubernetes 1.19 has been removed.
  • Starting with 1.24 the default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH https://github.com/Azure/kubelogin. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
  • Starting in Kubernetes 1.23 AKS Metrics server deployment will start having 2 pods instead of 1 for HA, which will increase the memory requests of the system by 54Mb.

Release Notes

AKS - Release notes for 2022-02-06

Published by justindavies over 2 years ago

Release 2022-02-06

This release is rolling out to all regions - estimated time for completed roll out is 2022-02-16 for public cloud and 2022-02-19 for sovereign clouds.

Announcement

  • From Kubernetes 1.23, containerD will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here https://docs.microsoft.com/en-us/azure/aks/windows-container-cli#add-a-windows-server-node-pool-with-containerd-preview.
  • Konnectivity rollout will continue in Feb 2022.
  • Kubernetes 1.19 will be removed on the next release.
  • Starting with 1.23 AKS will follow upstream kubernetes and deprecate in-tree azure authentication which is marked for deprecation to be replaced with 'exec'. If you are using Azure CLI or Azure clients, AKS will download kubelogin for users automatically. If outside of Azure CLI, users need to download and install kubelogin in order to continue to use kubectl with AAD authentication. https://github.com/Azure/kubelogin
  • Starting in Kubernetes 1.23 AKS Metrics server deployment will start having 2 pods instead of 1 for HA, which will increase the memory requests of the system by 54Mb.

Release Notes

  • Behavioral changes
    • Increase CPU limit on Windows OMS agent from 200mc to 500mc
    • GA AKS Tags now allows Patch tags to managedCluster which will also patch tags to child ARM resources {NetworkSecurityGroup, LoadBalancer, virtualNetwork}
  • Bug Fixes
    • Fix azure file NFS mount permissions and enable azure file volume stats by default on AKS 1.21+
    • Upgraded Linux version to 5.4.0-1068.70-azure to address CVE-2021-4034
  • Preview Features
    • Kubernetes 1.23.3
    • Enable ephemeral OS on temp disk for v5 VM instances
  • Component Updates
    • Kubernetes 1.20.15, 1.21.9 and 1.22.6 released, 1.20.9, 1.21.2, and 1.22.2 removed
    • Upgraded Linux version to 5.4.0-1068.70-azure to address CVE-2021-4034
    • Containerd registry configuration for Linux nodes - including adding root CAs for containerd via DS.
    • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2022.02.01.
AKS - Release 2022-01-27

Published by kaarthis over 2 years ago

This release is rolling out to all regions - estimated time for completed roll out is 2022-02-07 for public cloud and 2022-02-10 for sovereign clouds.

Announcement

  • From Kubernetes 1.23, containerD will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here https://docs.microsoft.com/en-us/azure/aks/windows-container-cli#add-a-windows-server-node-pool-with-containerd-preview.
  • Konnectivity rollout will continue in Feb 2022.
  • Kubernetes 1.19 will be removed on the next release.
  • Starting with 1.23 AKS will follow upstream kubernetes and deprecate in-tree azure authentication which is marked for deprecation to be replaced with 'exec'. If you are using Azure CLI or Azure clients, AKS will download kubelogin for users automatically. If outside of Azure CLI, users need to download and install kubelogin in order to continue to use kubectl with AAD authentication. https://github.com/Azure/kubelogin
  • Starting in Kubernetes 1.23 AKS Metrics server deployment will start having 2 pods instead of 1 for HA, which will increase the memory requests of the system by 54Mb.

Release Notes

  • Behavioral changes
    • AKS will now create pseudo-random IPv6 address ranges for the Kubernetes pod and service IPs for new dual-stack clusters when --pod-cidrs or --service-cidrs are omitted instead of a default static value. These ranges will be generated with the method suggested in RFC 4193.
    • Removed secret RBAC for azure disk csi driver.
    • Increased csi-resizer timeout from 60s to 120s.
  • Component Updates
AKS - Release 2022-01-20

Published by palma21 over 2 years ago

This release is rolling out to all regions - estimated time for completed roll out is 2022-01-31 for public cloud and 2022-02-03 for sovereign clouds.

Announcement

  • From Kubernetes 1.23, containerD will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here https://docs.microsoft.com/en-us/azure/aks/windows-container-cli#add-a-windows-server-node-pool-with-containerd-preview.
  • Konnectivity rollout will continue in Feb 2022.
  • Client automatic cert rotation is now being enabled on the last set of regions to be completed by end of Feb 2022.
  • Kubernetes 1.19 will be removed on 2022-01-31.
  • Starting with 1.23 AKS will follow upstream kubernetes and deprecate in-tree azure authentication which is marked for deprecation to be replaced with 'exec'. If you are using Azure CLI or Azure clients, AKS will download kubelogin for users automatically. If outside of Azure CLI, users need to download and install kubelogin in order to continue to use kubectl with AAD authentication. https://github.com/Azure/kubelogin
  • Starting in Kubernetes 1.23 AKS Metrics server deployment will start having 2 pods instead of 1 for HA, which will increase the memory requests of the system by 54Mb.

Release Notes

  • Preview Features
  • Bug Fixes
    • Fixed bug where custom in-tree storage classes on 1.21+ were deleted during cluster upgrade by mistake.
    • Ensured Azure Defender pods have affinity for system pools.
    • App GW ingress controller was added the CriticalAddonsOnly toleration as the rest of the addons and system components.
  • Behavioral changes
    • New global policy added to clusters with Calico network policies enabled to allow egress from the konnectivity system component.
    • All AKS system-created tags will have an "aks-managed" prefix and cannot be modified or deleted.
  • Component Updates
    • ip-masq-agent updated to v2.5.0.9.
    • Konnectivity updated to v0.0.27.
    • Azure CNI updated to v0.9.1.
    • Azure Policy addon updated to prod_20220114.1.
    • Windows Pause Image updated to 3.6-hotfix.20220114.
    • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2022.01.19.
AKS - Release 2022-01-13

Published by qpetraroia almost 3 years ago

Release 2022-01-13

This release is rolling out to all regions - estimated time for completed roll out is 2022-01-24 for public cloud and 2022-01-27 for sovereign clouds.

Announcement

  • From Kubernetes 1.23, containerD will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here https://docs.microsoft.com/en-us/azure/aks/windows-container-cli#add-a-windows-server-node-pool-with-containerd-preview.
  • Konnectivity rollout will continue in Feb 2022.
  • AKS is implementing auto-cert rotation slowly over the next few months. We have already enabled the following regions westcentralus, uksouth, eastus, australiacentral, and australiaest. If you have clusters in those regions please run a cluster upgrade in order to have that cluster configured for auto-cert rotation. The following regions brazilsouth, canadacentral, centralindia, and eastasia will be released in January after the holidays as the next group of regions. We will update the release notes will the upcoming schedule going forward until all regions are deployed.
  • Kubernetes 1.19 will be removed on 2022-01-31.
  • Starting with 1.23 AKS will follow upstream kubernetes and deprecate in-tree azure authentication which is marked for deprecation to be replaced with 'exec'. If you are using Azure CLI or Azure clients, AKS will download kubelogin for users automatically. If outside of Azure CLI, users need to download and install kubelogin in order to continue to use kubectl with AAD authentication. https://github.com/Azure/kubelogin

Release Notes

  • Bug Fixes
    • Fixed a bug where if RBAC was disabled on a cluster, the Azure file daemonset would crash on windows nodes.
  • Component Updates
    • Upgrade dns-autoscaler to version 1.8.5 for 1.22+.
    • Azure disk CSI driver updated to v1.10 on AKS versions 1.21+
    • Azure file CSI driver updated to v1.9 on AKS versions 1.21+
    • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2022.01.08.
AKS - Release 2022-01-06

Published by miwithro almost 3 years ago

This release is rolling out to all regions - estimated time for completed roll out is 2022-01-17 for public cloud and 2022-01-20 for sovereign clouds.

Announcement

  • From Kubernetes 1.23, containerD will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here https://docs.microsoft.com/en-us/azure/aks/windows-container-cli#add-a-windows-server-node-pool-with-containerd-preview.
  • Konnectivity rollout will continue in Feb 2022.
  • AKS is implementing auto-cert rotation slowly over the next few months. We have already enabled the following regions westcentralus, uksouth, eastus, australiacentral, and australiaest. If you have clusters in those regions please run a cluster upgrade in order to have that cluster configured for auto-cert rotation. The following regions brazilsouth, canadacentral, centralindia, and eastasia will be released in January after the holidays as the next group of regions. We will update the release notes will the upcoming schedule going forward until all regions are deployed.
  • Kubernetes 1.19 will be removed on 2022-01-31.
  • Starting with 1.23 AKS will follow upstream kubernetes and deprecate in-tree azure authentication which is marked for deprecation to be replaced with 'exec'. If you are using Azure CLI or Azure clients, AKS will download kubelogin for users automatically. If outside of Azure CLI, users need to download and install kubelogin in order to continue to use kubectl with AAD authentication. https://github.com/Azure/kubelogin

Release Notes

  • Features
    • Private DNS Subzone for Private Cluster is now GA.
    • Containerd runtime on Windows is now GA
    • Upgrade events is now GA: We now have introduced some new events that customers can leverage easily to understand and view their upgrade status.
  • Preview Features
    • Kubenet IPv6 support has been enabled all public cloud regions for Public Preview. See https://aka.ms/aks/ipv6 for more details.
  • Bug Fixes
    • Corrected validation that silently ignored updates to HTTP proxy settings.
    • Fixed issue that blocked creation of 0 node nodepools.
  • Behavioral Change
    • Private Cluster now supports cross-subscription VNET for PrivateLink.
    • In 1.21+ existing and newly created clusters, all built-in storage classes will use CSI Driver provisioners disk.csi.azure.com and file.csi.azure.com. There are no in-tree provisioners anymore (kubernetes.io/azure-disk and kubernetes.io/azure-file).
    • CPU limits for CSI drivers have been removed.
    • Azure CNI - won't reserve VNet IP addresses for daemonset pods using hostNetwork: true"
  • Component Updates
    • Cluster Auto Scaler updates:
      • Added support for more SKUs for scaling from zero (including Standard_E2s_v5, Standard_D8s_v5 and Standard_D4s_v5).
      • Fixed an issue with balancing node groups and scaling from zero in clusters with CSI drivers that utilize zonal affinities.
      • Fixed an issue with scaling from zero when pods have a selector on the stable instance type label node.kubernetes.io/instance-type.
      • Improve scale up performance in very large scale-up scenarios
    • Azure Policy for AKS updated to Gatekeeper 3.7.0
    • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.01.07.
    • AKS Windows image has been updated to 2019-datacenter-core-smalldisk-17763.2366.211215.
AKS - Release 2021-12-09

Published by palma21 almost 3 years ago

This release is rolling out to all regions - estimated time for completed roll out is 2021-12-20 for public cloud and 2021-12-23 for sovereign clouds.

Announcement

  • From Kubernetes 1.23, containerD will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here https://docs.microsoft.com/en-us/azure/aks/windows-container-cli#add-a-windows-server-node-pool-with-containerd-preview.
  • Konnectivity rollout has been halted for the rest of the year. We will continue the rollout in the new calendar year.
  • AKS is implementing auto-cert rotation slowly over the next few months. We have already enabled the following regions westcentralus, uksouth, eastus, australiacentral, and australiaest. If you have clusters in those regions please run a cluster upgrade in order to have that cluster configured for auto-cert rotation. The following regions brazilsouth, canadacentral, centralindia, and eastasia will be released in January after the holidays as the next group of regions. We will update the release notes will the upcoming schedule going forward until all regions are deployed.
  • Kubernetes 1.19 will be removed on 2022-01-31.
  • Starting with 1.23 AKS will follow upstream kubernetes and deprecate in-tree azure authentication which is marked for deprecation to be replaced with 'exec'. If you are using Azure CLI or Azure clients, AKS will download kubelogin for users automatically. If outside of Azure CLI, users need to download and install kubelogin in order to continue to use kubectl with AAD authentication. https://github.com/Azure/kubelogin

Release Notes

  • Features
    • Kubernetes 1.22 is now GA. Carefully read the Kubernetes release notes, especially the removed APIs section and any breaking changes.
    • New Kubernetes patch versions released, 1.20.13, 1.21.7, 1.22.4.
  • Preview Features
    • Microsoft Defender for containers is now in Public Preview.
    • AKS GitOps agent extension is now in Public Preview.
  • Bug Fixes
    • Corrected validation that silently ignored updates to HTTP proxy settings.
    • Fixed issue that blocked creation of 0 node nodepools.
    • CSI driver probe timeout increased to 30s avoid driver crashes on small Windows VM sizes.
  • Component Updates
AKS - Release 2021-12-02

Published by Kaarthis-zz almost 3 years ago

Release 2021-12-2

This release is rolling out to all regions - estimated time for completed roll out is 2021-12-13 for public cloud and 2021-12-16 for sovereign clouds.

Announcement

  • From Kubernetes 1.23, containerD will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here https://docs.microsoft.com/en-us/azure/aks/windows-container-cli#add-a-windows-server-node-pool-with-containerd-preview.
  • Konnectivity rollout has been halted for the rest of the year. We will continue the rollout in the new calendar year.
  • AKS is implementing auto-cert rotation slowly over the next few months. We have already enabled the following regions westcentralus, uksouth, eastus, australiacentral, and australiaest. If you have clusters in those regions please run a cluster upgrade in order to have that cluster configured for auto-cert rotation. The following regions brazilsouth, canadacentral, centralindia, and eastasia will be released in January after the holidays as the next group of regions. We will update the release notes will the upcoming schedule going forward until all regions are deployed.
  • AKS and Holiday Season: To ease the burden of upgrade and change during the holiday season, AKS is extending a limited scope of support for all clusters and node pools on 1.19 as a courtesy. Customers with clusters and node pools on 1.19 after the announced deprecation date of 2021-11-30 will be granted an extension of capabilities outside the usual scope of support for deprecated versions.
    The scope of this limited extension is effective from '2021-12-01 to 2022-01-31' and is limited to the following:
    • Creation of new clusters and node pools on 1.19.
    • CRUD operations on 1.19 clusters.
    • Azure Support of non-Kubernetes related, platform issues. Platform issues include trouble with networking, storage, or compute running on Azure. Any support requests for K8s patching and troubleshooting will be requested to upgrade into a supported version.

Release Notes

  • Bug Fixes
    • Fixed a bug such that the nodes on 1.21 wont be able to start with the DelegateFSGroupToCSIDriver feature flag. This feature flag is only introduced to kubelet in 1.22.
    • A WindowsGmsaProfile certificate renewal issue during certificate rotation has been identified and fixed.
    • Added the component=tunnel label to konnectivity-agent pods so they will be matched by any label selectors that previously matched tunnelfront pods. This only applies to clusters that have received the new Konnectivity network tunnel.
  • Behavioral Changes
    • Increased cpu limits of csi driver node daemonsets from 200m to 1cpu in order to prevent cpu throttling.
  • Component Updates