Release 2021-11-18

Announcement

• AKS is implementing auto-cert rotation slowly over the next few months. We have already enabled the following regions westcentralus, uksouth, eastus, australiacentral, and australiaest. If you have clusters in those regions please run a cluster upgrade in order to have that cluster configured for auto-cert rotation. The following regions brazilsouth, canadacentral, centralindia, and eastasia will be released in January after the holidays as the next group of regions. We will update the release notes will the upcoming schedule going forward until all regions are deployed.
• Konnectivity rollout has been halted for the rest of the year. We will continue the rollout in the new calendar year.
• AKS and Holiday Season: To ease the burden of upgrade and change during the holiday season, AKS is extending a limited scope of support for all clusters and node pools on 1.19 as a courtesy. Customers with clusters and node pools on 1.19 after the announced deprecation date of 2021-11-30 will be granted an extension of capabilities outside the usual scope of support for deprecated versions.
  The scope of this limited extension is effective from '2021-12-01 to 2022-01-31' and is limited to the following:
  • Creation of new clusters and node pools on 1.19.
  • CRUD operations on 1.19 clusters.
  • Azure Support of non-Kubernetes related, platform issues. Platform issues include trouble with networking, storage, or compute running on Azure. Any support requests for K8s patching and troubleshooting will be requested to upgrade into a supported version.

Release Notes

• Bug Fixes
  • A bug has been fixed where clusters would come up with incorrect SNAT settings that broke DNS resolution. The following GitHub issues describe the bug, Pods cannot resolve external DNSes and azure-ip-masq-agent-config populated with empty nonMasqueradeCIDRs list for private cluster.

Release 2021-11-11

This release is rolling out to all regions - estimated time for completed roll out is 2021-11-18 for public cloud and 2021-11-25 for sovereign clouds.

Announcement

• AKS is implementing auto-cert rotation slowly over the next few months. We have already enabled the following regions westcentralus, uksouth, eastus, australiacentral, and australiaest. If you have clusters in those regions please run a cluster upgrade in order to have that cluster configured for auto-cert rotation. The following regions brazilsouth, canadacentral, centralindia, and eastasia will be released in January after the holidays as the next group of regions. We will update the release notes will the upcoming schedule going forward until all regions are deployed.
• AKS and Holiday Season: To ease the burden of upgrade and change during the holiday season, AKS is extending a limited scope of support for all clusters and node pools on 1.19 as a courtesy. Customers with clusters and node pools on 1.19 after the announced deprecation date of 2021-11-30 will be granted an extension of capabilities outside the usual scope of support for deprecated versions.
  The scope of this limited extension is effective from '2021-12-01 to 2022-01-31' and is limited to the following:
  • Creation of new clusters and node pools on 1.19.
  • CRUD operations on 1.19 clusters.
  • Azure Support of non-Kubernetes related, platform issues. Platform issues include trouble with networking, storage, or compute running on Azure. Any support requests for K8s patching and troubleshooting will be requested to upgrade into a supported version.

Release Notes

• New Features
  • Auto-Upgrade for AKS is now GA.
• Bug Fixes
  • An Authentication issue related to pulling image secrets has been fixed with a new version of the virtual-kubelet.
• Component Updates
  • Virtual-kubelet has been updated to version 1.4.1.
  • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.11.06 - please refer to the link for package versions in this VHD.
  • AKS Windows image has been updated to 2019-datacenter-core-smalldisk-17763.2300.211110 - please refer to the link for component versions in this VHD.

Release 2021-11-04

This release is rolling out to all regions - estimated time for completed roll out is 2021-11-11 for public cloud and 2021-11-18 for sovereign clouds.

Announcement

• AKS is implementing auto-cert rotation slowly over the next few months. We have already enabled the following regions westcentralus, uksouth, eastus, australiacentral, and australiaest. If you have clusters in those regions please run a cluster upgrade in order to have that cluster configured for auto-cert rotation. The following regions brazilsouth, canadacentral, centralindia, and eastasia will be released in January after the holidays as the next group of regions. We will update the release notes will the upcoming schedule going forward until all regions are deployed.
• Konnectivity - a new version of the AKS tunnel component will replace the aks-link and tunnel-front versions slowly over the rest of the calendar year. The following regions eastus, westcentralus, uksouth, uaenorth already have Konnectivity enabled.

Release Notes

• Preview Features
  • Managed NAT Gateway is now in public preview.
  • Group Managed Service Accounts (GMSA) for your Windows Server nodes is now in public preview.
• Bug Fixes
  • A bug has been fixed in Application Gateway Ingress Controller that previously caused users OOM errors while running a large number of ingress objects.
• Component Updates
  • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.10.30 - please refer to the link for package versions in this VHD.

Release 2021-10-28

This release is rolling out to all regions - estimated time for completed roll out is 2021-11-04 for public cloud and 2021-11-11 for sovereign clouds.

Announcement

• AKS is implementing auto-cert rotation slowly over the next few months. We have already enabled the following regions westcentralus, uksouth, eastus, australiacentral, and australiaest. If you have clusters in those regions please run a cluster upgrade in order to have that cluster configured for auto-cert rotation. The following regions brazilsouth, canadacentral, centralindia, and eastasia will be released in January after the holidays as the next group of regions. We will update the release notes will the upcoming schedule going forward until all regions are deployed.
• Konnectivity - a new version of the AKS tunnel component will replace the aks-link and tunnel-front versions slowly over the rest of the calendar year. The following regions westcentralus, uksouth, uaenorth already have Konnectivity enabled.

Release Notes

• Preview Features
  • Node pool start/stop is now in preview.
  • Node pool snapshots are now supported. Please check the AKS documentation at 5pm Pacific on 11/02/2021 to read more.
• Bug Fixes
  • added missing managed-csi storage class in AKS Kubernetes versions 1.21+.
  • Fixed a bug with the cluster autoscaler nodepool balancing due to a new agentpool label being added "kubernetes.azure.com/agentpool"
  • User manipulation or usage of the system-reserved label prefix "kubernetes.azure.com" is now correctly blocked.
• Component Updates
  • Updated CSI Disk Driver to v1.8. and File Driver to 1.7.
  • Updated omsagent to ciprod10132021 and win-ciprod10132021.
  • Updated Azure CNI to v1.4.13 for Windows.
  • Updated ngnix to 0.4.93 on 1.21 and up clusters.
  • Updated nginx to 1.0.4 for HttpApplicationRouting addon for 1.22 and up clusters.
  • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.10.23 - please refer to the link for package versions in this VHD.

Release 2021-10-15

This release is rolling out to all regions - estimated time for completed roll out is 2021-10-21 for public cloud and 2021-10-28 for sovereign clouds.

Release Notes

• Features
  • General Availability of Disable local Accounts
• Behavioral Changes
  • Add aks-managed-cluster-rg and aks-managed-cluster-name tags to the node resource group
• Bug Fixes
  • Fix issue where Terraform is unable to set a default for the auto upgrade channel preview feature
• Component Updates
  • Update Virtual Kubelet to 1.4.0
  • Use 1.5.0-rc1 of the AGIC Addon for k8s 1.22.0 to support ingress v1 API
  • Update Azure CNI to v1.4.12 for Windows
  • Update AKS base image version for Edge zones to 2021.10.13
  • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.10.13 - please refer to the link for package versions in this VHD.
  • AKS Windows image has been updated to the 10B patch version including KB5004335, KB5004424, KB5006672 & KB5005701 2019-datacenter-core-smalldisk-17763.2237.211014 - please refer to the link for component versions in this VHD.

Release 2021-10-08

This release is rolling out to all regions - estimated time for completed roll out is 2021-10-14 for public cloud and 2021-10-21 for sovereign clouds.

Release Notes

• Features
  • General Availability of Ultra SSD support
• Preview Features
  • Public Preview of Private DNS sub zone support for Private Clusters
  • Public Preview of HTTP Proxy
  • Public Preview of support for WASM/WASI based nodepools
• Behavioral Changes
  • Validation that DNS service IP is not on subnet boundary
  • Improve system pool taints error messages
  • Don't provision network monitor on any clusters >= 1.21 as Azure CNI moved to transparent mode
• Bug Fixes
  • Fix issue where images in China region were pulled from public cloud MCR
• Component Updates
  • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.10.02 - please refer to the link for package versions in this VHD.

Release 2021-09-30

This release is rolling out to all regions - estimated time for completed roll out is 2021-10-07 for public cloud and 2021-10-14 for sovereign clouds.

Release Notes

• Features
  • Ability to tune azuredisk performance parameters
• Preview Features
  • Kubernetes 1.22.1 is now in preview
  • Enable multiple service account issuers for clusters using version >= 1.22, also fixing CNCF Validation issues.
  • Cloud Controller Manager is now default for clusters 1.22+
• Behavioral Changes
  • When turning Cluster Auto Scaler off, you can now specify the requested agent pool node number.
• Bug Fixes
  • Fixed csi driver crash issue on Windows nodes.
• Component Updates
  • Containerd 1.5 is now available to clusters 1.22+, for clusters prior to 1.22 AKS will continue to use and patch containerd 1.4.
    • New patches for containerd released, 1.5.5 and 1.4.9, which address CVE-2021-41103
  • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.09.25 - please refer to the link for package versions in this VHD.
  • AKS Windows image has been updated to the 9C patch version 2019-datacenter-core-smalldisk-17763.2213.210922 - please refer to the link for component versions in this VHD.

Release 2021-09-16

This release is rolling out to all regions - estimated time for completed roll out is 2021-09-23 for public cloud and 2021-09-30 for sovereign clouds.

Announcement

• In order to preserve any deallocated VMs, you must to set Scale-down Mode to Deallocate. That includes VMs that have been deallocated using IaaS APIs (Virtual Machine Scale Set APIs). Setting Scale-down Mode to Delete will remove any deallocated VMs.

Release Notes

• New Features
  • You can now integrate Azure HPC Cache with Azure Kubernetes Service.
• Preview Features
  • Cloud Controller Manager is now in Public Preview in anticipation of moving Azure specific controllers out of tree.
• Component Updates
  • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.09.19 - please refer to the link for package versions in this VHD.
  • Azure Disk CSI driver has been updated to v1.7.0.
  • Azure File CSI driver has been updated to v1.6.0.
• Behavioral Change
  • AKS Private Cluster "none" parameter now defaults to public DNS which means AKS will not create a Private DNS Zone. This changes from the previous behavior of "none" being bring your own Private DNS.

Release 2021-09-09

This release is rolling out to all regions - estimated time for completed roll out is 2021-09-16 for public cloud and 2021-09-25 for sovereign clouds.

Announcement

• In order to preserve any deallocated VMs, you must to set Scale-down Mode to Deallocate. That includes VMs that have been deallocated using IaaS APIs (Virtual Machine Scale Set APIs). Setting Scale-down Mode to Delete will remove any deallocate VMs.

Release Notes

• New Features
  • AKS Run Command is now Generally Available (GA), estimated to roll out the week of 2021-09-13.
• Component Updates
  • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.09.06 - please refer to the link for package versions in this VHD.
• Behavioral Change
  • Azure Confidential Compute has changed the CPU resource request and limits for the device plugin and quote helper daemonset as part of the ACC addon deployments. They are now reduced as the earlier requested amounts were not necessary.
  • AKS Run Command will now be available by default, and customers can now disable when desired through the cli.

Release 2021-09-02

This release is rolling out to all regions - estimated time for completed roll out is 2021-09-09 for public cloud and 2021-09-18 for sovereign clouds.

Announcement

• In order to preserve any deallocated VMs, you must to set Scale-down Mode to Deallocate. That includes VMs that have been deallocated using IaaS APIs (Virtual Machine Scale Set APIs). Setting Scale-down Mode to Delete will remove any deallocate VMs.

Release Notes

• Features

  • Scale-down mode is now in public preview
  • Custom Azure Policy is now in public preview

• Component Updates

  • Update Windows Azure CNI version to v1.4.9. - Azure CNI start time shortened by 500ms
  • Support azure file snapshot for Kubernetes 1.21
  • csi-snapshotter has been updated to v4.2.1 for Kubernetes 1.21
  • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.08.31 - please refer to the link for package versions in this VHD.

• Bug Fixes

  • NPM updated to 1.4.9, fixing https://github.com/Azure/azure-container-networking/issues/851

Release 2021-08-26

This release is rolling out to all regions - estimated time for completed roll out is 2021-09-02 for public cloud and 2021-09-09 for sovereign clouds.

Preannouncement

• AKS will be upgrading to CoreDNS v1.8.4 for k8s 1.20+ clusters in September. Users who are using the rewrite plugin, should upgrade their configuration before 1.8.4 goes live.

Release Notes

• Component Updates
  • Azuredisk and Azurefile CSI drivers upgraded to v1.5.0 in 1.21.0+ clusters.
  • Open Service Mesh (OSM) addon has been updated to v0.9.2.
  • Calico has been updated to v3.20.0 on linux.
  • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.08.21 - please refer to the link for package versions in this VHD.
• Bug Fixes
  • In scenarios where users are creating multiple node pools simultaneously, it is now possible to have the first User node pool in the deployment to have any characteristics so long as there is at least one System pool present in the deployment.

Azure Kubernetes Service Changelog

Release 2021-08-19

This release is rolling out to all regions - estimated time for completed roll out is 2021-08-26 for public cloud and 2021-09-02 for sovereign clouds.

Announcements

• On the next release of the az AKS CLI we will introduce a new subcommand "aks addons" which will have the following commands: disable, enable, list, list-available, show, update.

Release Notes

• Component Updates
  • Kubernetes patch versions: 1.19.13 and 1.20.9 have been onboarded. Versions 1.19.9 and 1.20.5 have been deprecated.
  • Bump Windows containerd to v0.0.42
  • Bump CoreDNS to 1.8.4 for Kubernetes versions above 1.20.0
  • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.08.14 - please refer to the link for package versions in this VHD.
  • AKS Windows image has been updated to 2019-datacenter-core-smalldisk-17763.2114.210811 - please refer to the link for component versions in this VHD.
• Behavioral Changes
  • Stop ability to make changes to the following system labels:
    • beta.kubernetes.io/arch
    • beta.kubernetes.io/instance-type
    • beta.kubernetes.io/os
    • failure-domain.beta.kubernetes.io/region
    • failure-domain.beta.kubernetes.io/zone
    • failure-domain.kubernetes.io/zone
    • failure-domain.kubernetes.io/region
    • kubernetes.io/arch
    • kubernetes.io/hostname
    • kubernetes.io/os
    • kubernetes.io/role
    • kubernetes.io/instance-type
    • node.kubernetes.io/instance-type
    • topology.kubernetes.io/region
    • topology.kubernetes.io/zone
    • kubernetes.azure.com/role=agent
    • node-role.kubernetes.io/agent
    • kubernetes.io/role=agent
    • agentpool
    • storageprofile
    • storagetier
    • accelerator
    • kubernetes.azure.com/fips_enabled
    • kubernetes.azure.com/os-sku
    • kubernetes.azure.com/cluster

Release 2021-08-12

This release is rolling out to all regions - estimated time for completed roll out is 2021-08-19 for public cloud and 2021-08-24 for sovereign clouds.

Release Notes

• Component Updates
  • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.08.07.
  • Addon Resource Limit Update:
    • Set CoreDNS pods CPU limit to 3 cores, memory limit to 500 MiB
    • Set CoreDNS autoscaler pods CPU limit to 20m cores, memory limit to 50 MiB
    • Set metrics-server pod CPU limit to 300m cores, memory limit to 800 MiB
  • Upgrade OMSAgent to ciprod08052021.
    • Increase the memory request to 325 MB from 225 MB
    • Increase the memory limit to 750 MB from 600 MB

Release 2021-08-05

This release is rolling out to all regions - estimated time for completed roll out is 2021-08-12 for public cloud and 2021-08-17 for sovereign clouds.

Release Notes

• Behavioral Changes
  • All regions now use Azure Policy V2 by default.
  • TLS 1.2 is now enabled for in AKS Windows nodes. TLS1.1, TLS1.0, SSL3.0, SSL2.0 are now disabled.
• Component Updates
  • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.07.31.

This release is rolling out to all regions - estimated time for completed roll out is 2021-08-05 for public cloud and 2021-08-10 for sovereign clouds.

Announcements

• As a response to customer feedback and issues with previous Kubernetes version patches that left a lot of users with hard options. The AKS Team is extending a limited scope of support for all clusters and nodepools on 1.18 as a courtesy. Customers with clusters and nodepools on 1.18 after the announced deprecation date of 2021-06-30 will be granted an extension of capabilities outside the usual scope of support for deprecated versions .The scope of this limited extension is effective from '2021-06-30 to 2021-07-31' and is limited to the following:
  • Creation of new clusters and nodepools on 1.18.
  • CRUD operations on 1.18 clusters.
  • Azure Support of non-Kubernetes related, platform issues. Platform issues include trouble with networking, storage, or compute running on Azure. Any support requests for K8s patching and troubleshooting will be requested to upgrade into a supported version.

Release Notes

• Bug Fixes
  • Added missing tolerations to Pod Identity Pods. Closes #2146.
• Component Updates
  • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.07.25.

Release 2021-07-22

This release is rolling out to all regions - estimated time for completed roll out is 2021-07-29 for public cloud and 2021-08-03 for sovereign clouds.

Announcements

• Azure Kubernetes Service (AKS) will stop publishing Ubuntu 16.04 image change moving forward.
• As a response to customer feedback and issues with previous Kubernetes version patches that left a lot of users with hard options. The AKS Team is extending a limited scope of support for all clusters and nodepools on 1.18 as a courtesy. Customers with clusters and nodepools on 1.18 after the announced deprecation date of 2021-06-30 will be granted an extension of capabilities outside the usual scope of support for deprecated versions .The scope of this limited extension is effective from '2021-06-30 to 2021-07-31' and is limited to the following:
  • Creation of new clusters and nodepools on 1.18.
  • CRUD operations on 1.18 clusters.
  • Azure Support of non-Kubernetes related, platform issues. Platform issues include trouble with networking, storage, or compute running on Azure. Any support requests for K8s patching and troubleshooting will be requested to upgrade into a supported version.
• Previous pod security policy (preview) deprecation was June 30th 2021. To better align with Kubernetes Upstream pod security policy (preview) deprecation will begin with Kubernetes version 1.21, with its removal in version 1.25. As Kubernetes Upstream approaches that milestone, the Kubernetes community will be working to document viable alternatives.

Release Notes

• Features
  • New Kubernetes patch version available, v.1.21.2.
• Preview Features
  • Upgrade your Windows nodepool from Docker to Containerd by the following two methods. Note that the Kubernetes version should be > 1.20.0 and the feature flag UseCustomizedWindowsContainerRuntime should be registered under your current Azure subscription. Reminder that Docker is removed in Kubernetes 1.24 completely, use the following commands to move your workload from Docker to Containerd now.
    • To upgrade a specific nodepool to use containerd: az aks nodepool upgrade --cluster-name $CLUSTERNAME --name $NODEPOOLNAME --resource-group $RGNAME --kubernetes-version 1.21.1 --aks-custom-headers WindowsContainerRuntime=containerd
    • To upgrade the cluster to use containerd for all Windows nodepools: az aks upgrade --cluster-name $CLUSTERNAME --resource-group $RGNAME --kubernetes-version 1.21.1 --aks-custom-headers WindowsContainerRuntime=containerd
• Behavioral Changes
  • Cluster autoscaler will now enforce the minimum count in cases where the actual count drops below that. For example, Spot eviction or changing the minimum count value from the AKS API. In the past, the autoscaler operated and respected the minimum count but never interfered to enforce it if external factors affect it.
• Component Updates
  • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.07.17.
  • AKS Windows image has been updated to 2019-datacenter-core-smalldisk-17763.2061.210714.

Release 2021-07-15

This release is rolling out to all regions - estimated time for completed roll out is 2021-07-27 for public cloud and 2021-07-31 for sovereign clouds.

Announcements

• Azure Kubernetes Service (AKS) will stop publishing Ubuntu 16.04 image change moving forward.
• As a response to customer feedback and issues with previous Kubernetes version patches that left a lot of users with hard options. The AKS Team is extending a limited scope of support for all clusters and nodepools on 1.18 as a courtesy. Customers with clusters and nodepools on 1.18 after the announced deprecation date of 2021-06-30 will be granted an extension of capabilities outside the usual scope of support for deprecated versions .The scope of this limited extension is effective from '2021-06-30 to 2021-07-31' and is limited to the following:
  • Creation of new clusters and nodepools on 1.18.
  • CRUD operations on 1.18 clusters.
  • Azure Support of non-Kubernetes related, platform issues. Platform issues include trouble with networking, storage, or compute running on Azure. Any support requests for K8s patching and troubleshooting will be requested to upgrade into a supported version.
• Previous pod security policy (preview) deprecation was June 30th 2021. To better align with Kubernetes Upstream pod security policy (preview) deprecation will begin with Kubernetes version 1.21, with its removal in version 1.25. As Kubernetes Upstream approaches that milestone, the Kubernetes community will be working to document viable alternatives.

Release Notes

• New Features
  • Kubernetes 1.21 is now Generally Available (GA), estimated to roll out the week of 2021-07-19.
  • Container Storage Interface (CSI) drivers for Azure disks and Azure files on Azure Kubernetes Service (AKS) is now Generally Available (GA) in Kubernetes version 1.21+. Azure Disk CSI migration is turned on for 1.21.0+ clusters.
• Bug Fixes
  • Fix external-dns 0.8.0 for HTTP application routing addon for 1.21+ clusters.
• Behavioral Changes
  • Azure Kubernetes Service (AKS) will now rotate your intermediate certificates during a version upgrade operation.
• Preview Features
  • Windows containerd support on AKS is now available in all sovereign clouds.
• Component Updates
  • Azuredisk and Azurefile CSI drivers upgraded to v1.4.0 in 1.20.0+ clusters.
  • Windows image update for omsagent for Windows mdm by setting the NODE_IP environment variable for 'machine' as required by Windows in non-sidecar enabled mode.
  • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.07.10.

Release 2021-07-08

This release is rolling out to all regions - estimated time for completed roll out is 2021-07-15 for public cloud and 2021-07-21 for sovereign clouds.

Announcements

• As a response to customer feedback and issues with previous Kubernetes version patches that left a lot of users with hard options. The AKS Team is extending a limited scope of support for all clusters and nodepools on 1.18 as a courtesy. Customers with clusters and nodepools on 1.18 after the announced deprecation date of 2021-06-30 will be granted an extension of capabilities outside the usual scope of support for deprecated versions .The scope of this limited extension is effective from '2021-06-30 to 2021-07-31' and is limited to the following:
  • Creation of new clusters and nodepools on 1.18.
  • CRUD operations on 1.18 clusters.
  • Azure Support of non-Kubernetes related, platform issues. Platform issues include trouble with networking, storage, or compute running on Azure. Any support requests for K8s patching and troubleshooting will be requested to upgrade into a supported version.
• Previous pod security policy (preview) deprecation was June 30th 2021. To better align with Kubernetes Upstream pod security policy (preview) deprecation will begin with Kubernetes version 1.21, with its removal in version 1.25. As Kubernetes Upstream approaches that milestone, the Kubernetes community will be working to document viable alternatives.

Release Notes

• New Features
  • Bring your own Managed Identity is now GA. Allowing you to bring your own control plane MI and Kubelet MI.
• Preview Features
  • Public DNS for private clusters is now in preview. Read more here.
• Component Updates
  • AKS Ubuntu 16.04 image updated to AKSUbuntu-1604-2021.07.03.
  • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.07.03.
  • AKS Windows image has been updated to 2019-datacenter-core-smalldisk-17763.1999.210609.

Release 2021-07-03

This release is rolling out to all regions - estimated time for completed roll out is 2021-07-08 for public cloud and 2021-07-14 for sovereign clouds.

Announcements

• As a response to customer feedback and issues with previous Kubernetes version patches that left a lot of users with hard options. The AKS Team is extending a limited scope of support for all clusters and nodepools on 1.18 as a courtesy. Customers with clusters and nodepools on 1.18 after the announced deprecation date of 2021-06-30 will be granted an extension of capabilities outside the usual scope of support for deprecated versions .The scope of this limited extension is effective from '2021-06-30 to 2021-07-31' and is limited to the following:
  • Creation of new clusters and nodepools on 1.18.
  • CRUD operations on 1.18 clusters.
  • Azure Support of non-Kubernetes related, platform issues. Platform issues include trouble with networking, storage, or compute running on Azure. Any support requests for K8s patching and troubleshooting will be requested to upgrade into a supported version.
• Previous pod security policy (preview) deprecation was June 30th 2021. To better align with Kubernetes Upstream pod security policy (preview) deprecation will begin with Kubernetes version 1.21, with its removal in version 1.25. As Kubernetes Upstream approaches that milestone, the Kubernetes community will be working to document viable alternatives.

Release Notes

• Bug Fixes
  • Resolved "TO/FROM rule and port rule on same PodSelector in multiple policies", https://github.com/Azure/azure-container-networking/issues/870
• Component Updates
  • Block enabling autoupgrade for unsupported k8s versions (less than lowest minor version by one)
  • AKS Ubuntu 16.04 image updated to AKSUbuntu-1604-2021.06.19.
  • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.06.19.

Release 2021-06-17

This release is rolling out to all regions - estimated time for completed roll out is 2021-06-24 for public cloud and 2021-06-28 for sovereign clouds.

Announcements

• As a response to customer feedback and issues with previous Kubernetes version patches that left a lot of users with hard options. The AKS Team is extending a limited scope of support for all clusters and nodepools on 1.18 as a courtesy. Customers with clusters and nodepools on 1.18 after the announced deprecation date of 2021-06-30 will be granted an extension of capabilities outside the usual scope of support for deprecated versions .The scope of this limited extension is effective from '2021-06-30 to 2021-07-31' and is limited to the following:
  • Creation of new clusters and nodepools on 1.18.
  • CRUD operations on 1.18 clusters.
  • Azure Support of non-Kubernetes related, platform issues. Platform issues include trouble with networking, storage, or compute running on Azure. Any support requests for K8s patching and troubleshooting will be requested to upgrade into a supported version.
• Previous pod security policy (preview) deprecation was June 30th 2021. To better align with Kubernetes Upstream pod security policy (preview) deprecation will begin with Kubernetes version 1.21, with its removal in version 1.25. As Kubernetes Upstream approaches that milestone, the Kubernetes community will be working to document viable alternatives.
• AKS tunneled secure communication between the nodes and the control plane will be delivered by a new component starting on next week's release. The new component will be name konnectivity, replacing the existing tunnelfront and aks-link tunnel components. No disruption is expected or changes required.

Release Notes

• Component Updates
  • Omsagent updated to 06112021. Read more here.
  • Windows Azure CNI updated to version 1.4.0.
  • HTTP Application Routing addon has been updated to support Kubernetes version >= 1.21.
  • AKS Ubuntu 16.04 image updated to AKSUbuntu-1604-2021.06.12.
  • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.06.12.
  • AKS Windows image has been updated to 2019-datacenter-core-smalldisk-17763.1999.210609.