AKS

Azure Kubernetes Service

Stars
2K
Committers
76

Bot releases are visible (Hide)

AKS - Release 2021-06-10

Published by miwithro over 3 years ago

Release 2021-06-10

This release is rolling out to all regions - ETA for conclusion 2021-06-17 for public cloud and 2021-06-21 for sovereign clouds.

Announcements

  • As a response to customer feedback and issues with previous Kubernetes version patches that left a lot of users with hard options. The AKS Team is extending a limited scope of support for all clusters and nodepools on 1.18 as a courtesy. Customers with clusters and nodepools on 1.18 after the announced deprecation date of 2021-06-30 will be granted an extension of capabilities outside the usual scope of support for deprecated versions .The scope of this limited extension is effective from '2021-06-30 to 2021-07-31' and is limited to the following:
    • Creation of new clusters and nodepools on 1.18.
    • CRUD operations on 1.18 clusters.
    • Azure Support of non-Kubernetes related, platform issues. Platform issues include trouble with networking, storage, or compute running on Azure. Any support requests for K8s patching and troubleshooting will be requested to upgrade into a supported version.
  • Previous pod security policy (preview) deprecation was June 30th 2021. To better align with Kubernetes Upstream pod security policy (preview) deprecation will begin with Kubernetes version 1.21, with its removal in version 1.25. As Kubernetes Upstream approaches that milestone, the Kubernetes community will be working to document viable alternatives.

Release Notes

  • Preview Features
    • Public DNS support for Private Clusters using the Private cluster endpoint.
  • Bug Fixes
    • Released runc r95 to address a vulnerability to symlink-exchange attack.
  • Component Updates
AKS - Release 2021-06-03

Published by qpetraroia over 3 years ago

Release 2021-06-03

This release is rolling out to all regions - ETA for conclusion 2021-06-10 for public cloud and 2021-06-14 for sovereign clouds.

Announcements

  • As a response to customer feedback and issues with previous Kubernetes version patches that left a lot of users with hard options. The AKS Team is extending a limited scope of support for all clusters and nodepools on 1.18 as a courtesy. Customers with clusters and nodepools on 1.18 after the announced deprecation date of 2021-06-30 will be granted an extension of capabilities outside the usual scope of support for deprecated versions .The scope of this limited extension is effective from '2021-06-30 to 2021-07-31' and is limited to the following:
    • Creation of new clusters and nodepools on 1.18.
    • CRUD operations on 1.18 clusters.
    • Azure Support of non-Kubernetes related, platform issues. Platform issues include trouble with networking, storage, or compute running on Azure. Any support requests for K8s patching and troubleshooting will be requested to upgrade into a supported version.
  • Previous pod security policy (preview) deprecation was June 30th 2021. To better align with Kubernetes Upstream pod security policy (preview) deprecation will begin with Kubernetes version 1.21, with its removal in version 1.25. As Kubernetes Upstream approaches that milestone, the Kubernetes community will be working to document viable alternatives.

Release Notes

  • Preview Features
    • Windows containerd support on AKS is now available in all regions. Read more here.
  • Bug Fixes
    • Fix priority expander in cluster autoscaler falling back to a random choice when a higher priority exists. To read more about this bug, click here.
    • Fix a regression where users with > 200 group memberships may fail to authenticate to AAD enabled AKS clusters in Azure public cloud.
  • Component Updates
AKS - Release 2021-05-20

Published by miwithro over 3 years ago

Release 2021-05-20

This release is rolling out to all regions - ETA for conclusion 2021-06-03 for public cloud and 2021-06-07 for sovereign clouds.

Announcements

  • Previous pod security policy (preview)](https://docs.microsoft.com/azure/aks/use-pod-security-policies) deprecation was June 30th 2021. To better align with Kubernetes Upstream pod security policy (preview) deprecation will begin with Kubernetes version 1.21, with its removal in version 1.25. As Kubernetes Upstream approaches that milestone, the Kubernetes community will be working to document viable alternatives.

Release Notes

  • Features
    • Use Set-TimeZone now with Windows Containers to change timezones.
    • New Kubernetes patch versions available, v1.18.19, 1.19.11, v1.20.7.
    • Encryption at Host is now GA
  • Preview Features
    • Kubernetes 1.21.1
    • Disable local accounts in now in preview here.
    • Windows containerd support on AKS are available in 3 regions (eastus, uksouth, and westcentralus) today. If you registered the containerd public preview feature flag and add node pool on a cluster below k8s 1.20 version in other regions than mentioned above, the windows nodepool creation will fail. If you are using k8s version 1.20 and register the containerd feature flag in the available regions, this will only add containerd node pool instead of docker. You can unregister the feature flag to use docker node pool. Please note that we are working towards releasing the fix in other regions in few days.
  • Bug Fixes
    • Reverting Container Insights agent to March release [ciprod03262021] in response to failing liveness probes.
  • Component Updates
AKS - Release 2021-05-13

Published by qpetraroia over 3 years ago

Release 2021-05-13

This release is rolling out to all regions - ETA for conclusion 2021-05-20 for public cloud and 2021-05-24 for sovereign clouds.

Announcements

  • Previous pod security policy (preview) deprecation was June 30th 2021. To better align with Kubernetes Upstream pod security policy (preview) deprecation will begin with Kubernetes version 1.21, with its removal in version 1.25. As Kubernetes Upstream approaches that milestone, the Kubernetes community will be working to document viable alternatives.

Release Notes

  • Preview Features
    • The CSI Secret Store AKS Addon is now in Public Preview. See more here.
  • Component Updates
AKS - Release 2021-05-06

Published by miwithro over 3 years ago

Release 2021-05-06

This release is rolling out to all regions - ETA for conclusion 2021-05-13 for public cloud and 2021-05-17 for sovereign clouds.

Announcements

  • Previous pod security policy (preview) deprecation was June 30th 2021. To better align with Kubernetes Upstream pod security policy (preview) deprecation will begin with Kubernetes version 1.21, with its removal in version 1.25. As Kubernetes Upstream approaches that milestone, the Kubernetes community will be working to document viable alternatives.

Release Notes

  • Preview Features
    • FIPS compliant nodes
  • Bug Fixes
    • Fix a bug that different users could not reset service principal using same Azure Active Directory Client ID.
  • Component Updates
AKS - Release 2021-04-29

Published by qpetraroia over 3 years ago

Release 2021-04-29

This release is rolling out to all regions - ETA for conclusion 2021-05-03 for public cloud and 2021-05-10 for sovereign clouds.

Announcements

  • Previous pod security policy (preview) deprecation was June 30th 2021. To better align with Kubernetes Upstream pod security policy (preview) deprecation will begin with Kubernetes version 1.21, with its removal in version 1.25. As Kubernetes Upstream approaches that milestone, the Kubernetes community will be working to document viable alternatives.

Release Notes

  • Preview Features
    • Autoupgrade will now respect customer's default maintenance configuration settings.
  • Bug Fixes
    • Customers trying to use the RunCommand on clusters with both PrivateLink and AAD enabled will now see a NotSupportedSetup message.
  • Component Updates
AKS - Release 2021-04-22

Published by miwithro over 3 years ago

Azure Kubernetes Service Changelog

Release 2021-04-22

This release is rolling out to all regions - ETA for conclusion 2021-04-26 for public cloud and 2021-05-03 for sovereign clouds.

Announcements

  • From April 26th to May 3rd Azure-NPM is upgrading from 1.1.8 to 1.3.1
  • Kubernetes version 1.17 has now been deprecated since March 31st.
  • CSI Drivers will become default for Kubernetes versions 1.21+.
  • Previous pod security policy (preview) deprecation was June 30th 2021. To better align with Kubernetes Upstream pod security policy (preview) deprecation will begin with Kubernetes version 1.21, with its removal in version 1.25. As Kubernetes Upstream approaches that milestone, the Kubernetes community will be working to document viable alternatives.
  • For all AKS clusters using Kubernetes v1.20+, CoreDNS will be upgraded to version 1.8.3. This will remove resyncperiod and upstreamfrom the Kubernetes plugin.

Release Notes

  • New Features
    • You can now update Windows passwords via Azure cli.
  • Bug Fixes
    • Fixed a bug with Cert Rotation trying to call windows agentpools, this is a linux only function.
    • Fixed a bug that if a customer uses "[]" as "AvailabilityZones" for both create and update, their update will be blocked incorrectly.
  • Behavioral Changes
    • Node pool limit has increased from 10 to 100.
  • Component Updates
    • Linux Pause container image has been updated to [3.5] from 1.3.1
    • Dns-autoscaler image has been updated to [mcr.microsoft.com/oss/kubernetes/autoscaler/cluster-proportional-autoscaler:1.8.3] for 1.18 and above cluster. 1.8.3 uses non-root user.
    • Pod Identity nmi image has been updated to [1.7.5] and set critical addon torelations.
    • OSM has been updated to [v0.8.3]
    • The OSM Envoy image has been updated to [1.17.2]
    • AKS Windows image has been updated to 2019-datacenter-core-smalldisk-17763.1879.210414.
    • AKS Ubuntu 16.04 image updated to AKSUbuntu-1604-2021.04.20.
    • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.04.20.
AKS - Release 2021-04-05

Published by miwithro over 3 years ago

This release is rolling out to all regions - ETA for conclusion 2021-04-14 for public cloud.

Announcements

  • From April 26th to May 3rd Azure-NPM is upgrading from 1.1.8 to 1.3.1
  • Once GA AKS will default to its new GPU specialized image as the supported option for GPU-capable agent nodes.
  • Kubernetes version 1.17 has now been deprecated since March 31st.
  • Before k8s 1.20 a bug would allow exec probes to run indefinitely, ignoring any timeoutSeconds configuration value. The previous buggy behavior has been fixed, and timeouts are now enforced. Additionally, this change introduces a new default timeout of 1 second. Please audit all your existing exec probes to make sure that it is appropriate to enforce a 1 second timeout. If not, please provide an explicit timeoutSeconds value that is appropriate for each exec probe.
  • CSI Drivers will become default for Kubernetes versions 1.21+.
  • Previous pod security policy (preview) deprecation was June 30th 2021. To better align with Kubernetes Upstream pod security policy (preview) deprecation will begin with Kubernetes version 1.21, with its removal in version 1.25. As Kubernetes Upstream approaches that milestone, the Kubernetes community will be working to document viable alternatives.
  • For all AKS clusters using Kubernetes v1.20+, CoreDNS will be upgraded to version 1.8.3. This will remove resyncperiod and upstreamfrom the Kubernetes plugin.

Release Notes

  • Features

    • New Kubernetes patch versions available, v1.18.17, v1.19.9 and v1.20.5.
  • Bug Fixes

    • Fixed a bug in runc that caused pods to be stuck in container creation in containerd 1.4.3 and 1.4.4.
    • Fixed a bug in VMAS that accidently enabled VMAS to be scaled down to 0.
    • NPM does not exclude host network Pods from the network policies resulting in blocking of traffic and disruption in system functions such as collection of kubectl logs.
    • NPM now supports Namespace label updates
  • Behavioral Changes

    • NPM changed the rule evaluation behavior to (INGRESS and EGRESS). Before this change, NPM would have also allowed traffic if there is a single Allow rule in either ingress (or egress) and Deny rule in egress (or ingress). With this change, NPM evaluates both ingress and egress rules to take a decision on the packet. If there are no rules in EGRESS or INGRESS or both, NPM allows the traffic by default in that direction.
    • Increased nslookup/nc timeout to 10s for Provisioning CSE in nodes.
    • NPM periodic reconciliation of AZURE-NPM base chains every 5 mins.
    • NPM will now maintain a cache of resources it has operated on resulting in reduced churn for duplicate events.
    • NPM re-sync period for shared informer reduced from 24hrs to 15 mins. This helps reduce the possibility of missing resource events (Add, update or Delete)
  • Component Updates

    • Removed Cross-namespace owner references in Azure Policy on AKS v1.20+.
    • Updated omsagent to ciprod03262021.
    • Updated Azure Confidential Compute Image to 1.16 with updated webhook and plugin version, to include a liveness probe.
    • Calico will upgrade to 3.18.1 to correct the policy for Tigera operator which requires hostPath. For the base Calico on linux, we will automatically upgrade cluster with Calico 3.17.2. For the Windows node pools, calico will be upgraded to v3.18.1 in any agent pool update/upgrade operations, for example, upgrade the cluster, update the node image, or upgrade the node pool. For detailed updates on Calico, please read more here.
    • AKS Windows image has been updated to 2019-datacenter-core-smalldisk-17763.1817.210330.
    • AKS Ubuntu 16.04 image updated to AKSUbuntu-1604-2021.03.31.
    • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.03.31.
AKS - Release 2021-03-29

Published by qpetraroia over 3 years ago

This release is rolling out to all regions - ETA for conclusion 2021-04-07 for public cloud.

Announcements

  • Once GA AKS will default to its new GPU specialized image as the supported option for GPU-capable agent nodes.
  • Kubernetes version 1.17 has now been deprecated since March 31st.
  • Before k8s 1.20 a bug would allow exec probes to run indefinitely, ignoring any timeoutSeconds configuration value. The previous buggy behavior has been fixed, and timeouts are now enforced. Additionally, this change introduces a new default timeout of 1 second. Please audit all your existing exec probes to make sure that it is appropriate to enforce a 1 second timeout. If not, please provide an explicit timeoutSeconds value that is appropriate for each exec probe.
  • CSI Drivers will become default for Kubernetes versions 1.21+.
  • Previous pod security policy (preview) deprecation was June 30th 2021. To better align with Kubernetes Upstream pod security policy (preview) deprecation will begin with Kubernetes version 1.21, with its removal in version 1.25. As Kubernetes Upstream approaches that milestone, the Kubernetes community will be working to document viable alternatives.
  • For all AKS clusters using Kubernetes v1.20+, CoreDNS will be upgraded to version 1.8.3. This will remove resyncperiod and upstreamfrom the Kubernetes plugin.

Release Notes

  • New Features
    • brazilsouth, centralindia, eastasia and francecentral are all new supported regions for Virtual Node. The southindia region has been removed from the supported region list.
  • Preview Features
    • Open Service Mesh (OSM), as a managed AKS add-on, is now in public preview.
  • Component Updates
    • Calico will upgrade to 3.18.1 to correct the policy for Tigera operator which requires hostPath. For the base Calico on linux, we will automatically upgrade cluster with Calico 3.17.2. For the Windows node pools, calico will be upgraded to v3.18.1 in any agent pool update/upgrade operations, for example, upgrade the cluster, update the node image, or upgrade the node pool. For detailed updates on Calico, please read more here.
AKS - Release 2021-03-22

Published by qpetraroia over 3 years ago

This release is rolling out to all regions - ETA for conclusion 2021-03-31 for public cloud.

Announcements

  • Once GA AKS will default to its new GPU specialized image as the supported option for GPU-capable agent nodes.
  • Next week, Kubernetes version 1.17 will be deprecated on March 31st.
  • Before k8s 1.20 a bug would allow exec probes to run indefinitely, ignoring any timeoutSeconds configuration value. The previous buggy behavior has been fixed, and timeouts are now enforced. Additionally, this change introduces a new default timeout of 1 second. Please audit all your existing exec probes to make sure that it is appropriate to enforce a 1 second timeout. If not, please provide an explicit timeoutSeconds value that is appropriate for each exec probe.
  • CSI Drivers will become default for Kubernetes versions 1.21+.
  • Previous pod security policy (preview) deprecation was June 30th 2021. To better align with Kubernetes Upstream pod security policy (preview) deprecation will begin with Kubernetes version 1.21, with its removal in version 1.25. As Kubernetes Upstream approaches that milestone, the Kubernetes community will be working to document viable alternatives.
  • For all AKS clusters using Kubernetes v1.20+, CoreDNS will be upgraded to version 1.8.3. This will remove resyncperiod and upstreamfrom the Kubernetes plugin.

Release Notes

AKS - Release 2021-03-15

Published by miwithro over 3 years ago

This release is rolling out to all regions - ETA for conclusion 2021-03-24 for public cloud.

Announcements

  • The Azure Kubernetes Service pod security policy (preview) feature will be retired on June 30th, 2021.
  • Once GA AKS will default to its new GPU specialized image as the supported option for GPU-capable agent nodes.
  • Kubernetes version 1.17 will be deprecated in the last week of March 2021.
  • Before k8s 1.20 a bug would allow exec probes to run indefinitely, ignoring any timeoutSeconds configuration value. The previous buggy behavior has been fixed, and timeouts are now enforced. Additionally, this change introduces a new default timeout of 1 second. Please audit all your existing exec probes to make sure that it is appropriate to enforce a 1 second timeout. If not, please provide an explicit timeoutSeconds value that is appropriate for each exec probe.
  • CSI Drivers will become default for Kubernetes versions 1.21+.

Release Notes

  • Bug Fixes
    • Fixed an issue with using a managed identity created in a different subscription from the cluster while using pod identity github.
  • Behavioral Changes
    • Made improvements to Cluster AutoScaler for ignoring pods that are stuck in Terminating state to be considered for scale down after exhausting their grace period.
    • WinDSR is enabled by default for [Kubernetes versions 1.20+]
  • Component Updates
AKS - Release 2021-03-08

Published by qpetraroia over 3 years ago

This release is rolling out to all regions - ETA for conclusion 2021-03-17 for public cloud.

Announcements

  • The Azure Kubernetes Service pod security policy (preview) feature will be retired on June 30th, 2021.
  • Once GA AKS will default to its new GPU specialized image as the supported option for GPU-capable agent nodes.
  • Kubernetes version 1.17 will be deprecated in the last week of March 2021.
  • Before k8s 1.20 a bug would allow exec probes to run indefinitely, ignoring any timeoutSeconds configuration value. The previous buggy behavior has been fixed, and timeouts are now enforced. Additionally, this change introduces a new default timeout of 1 second. Please audit all your existing exec probes to make sure that it is appropriate to enforce a 1 second timeout. If not, please provide an explicit timeoutSeconds value that is appropriate for each exec probe.

Release Notes

  • Features
    • Azure monitor for containers now supports Pods & Replica set live logs in AKS resource view. Read more here
    • Confidential computing addon for confidential computing nodes (DCSv2) on AKS is updated to align with Intel SGX's future initiatives.
  • Bug Fixes
    • The latest Windows image fixes a bug where Windows could break nodes at the CNI level and cause all pods scheduled on that node to be permanently stuck, or blocked during deployment. If you have questions about this fix, please contact the Windows Container Team.
    • Fixed an issue where duplicate packets were sent for kubenet on clusters with k8s 1.19+ and containerd-based clusters. This was cased when the traffic is sent to another pod on the same node over cluster service IP."
    • Fixed bug in the addon profile API that caused crashes on build using Terraform in sov clouds.
  • Behavioral Change
    • The maximum number of managed identities for the Pod Identity addon was increased from 50 to 200.
    • Systemd-resolved will no longer be used in AKS Ubuntu 18.04 images. This weeks image, AKSUbuntu-1804-2021.03.09 resolves past issues regarding private DNS with .local entries not working with Kubernetes 1.18 and Ubuntu 18.04.
  • Preview Features
    • Kubenet support for Pod Identity.
  • Component Updates
AKS - Release 2021-03-01

Published by miwithro over 3 years ago

This release is rolling out to all regions - ETA for conclusion 2021-03-10 for public cloud.

Announcements

  • The Azure Kubernetes Service pod security policy (preview) feature will be retired on June 30th, 2021.
  • Once GA AKS will default to its new GPU specialized image as the supported option for GPU-capable agent nodes.
  • Starting last week, the week of Feb 22nd (Azure China Cloud and Azure Government Cloud users will get this update in the following weeks), we will upgrade AKS clusters Calico network policy from Calico version v3.8.9 to v3.17.2 for cluster 1.20.2 and above. This upgrade will cause a breaking change to the default behavior of all-interfaces Host Endpoints. For customers that use Host Endpoints, and only these, this version brings a change. Please follow our guidance to apply the appropriate label and Global Network Policy if you want to keep the v3.8.9 default behavior of all-interfaces Host Endpoints.
  • Systemd-resolved will no longer be used in AKS Ubuntu 18.04 images starting on next week's release. This resolves past issues regarding private DNS with .local entries not working with Kubernetes 1.18 and Ubuntu 18.04.

Release Notes

  • Features
  • Preview Features
    • Calico Windows support in AKS 1.20 for new clusters.
    • Planned Maintenance Windows in AKS.
    • Dynamic IP allocation & enhanced subnet support in AKS.
    • Containerize and migrate apps to Azure Kubernetes Service with Azure Migrate: App Containerization. Read More Here.
  • Behavioral Change
    • Windows Containers may fail to resolve DNS names in ~1 seconds after it is created successfully and the status is showing running. This may not affect all customers but only those with applications that requires FQDN resolution when starting up the container. The workaround is retry or sleep ~1 seconds. For feedback, please go to Windows Container GitHub.
  • Component Updates
AKS - Release 2021-02-22

Published by qpetraroia over 3 years ago

This release is rolling out to all regions - ETA for conclusion 2021-03-03 for public cloud.

Announcements

  • The Azure Kubernetes Service pod security policy (preview) feature will be retired on June 30th, 2021.
  • Once GA AKS will default to its new GPU specialized image as the supported option for GPU-capable agent nodes.
  • Starting this week (Azure China Cloud and Azure Government Cloud users will get this update in the following weeks), we will upgrade AKS clusters Calico network policy from Calico version v3.8.9 to v3.17.2 for cluster 1.20.2 and above. This upgrade will cause a breaking change to the default behavior of all-interfaces Host Endpoints. For customers that use Host Endpoints, and only these, this version brings a change. Please follow our guidance to apply the appropriate label and Global Network Policy if you want to keep the v3.8.9 default behavior of all-interfaces Host Endpoints.
  • Systemd-resolved will no longer be used in AKS Ubuntu 18.04 images starting on next week's release. This resolves past issues regarding private DNS with .local entries not working with Kubernetes 1.18 and Ubuntu 18.04.
  • CSI Drivers will become default for Kubernetes versions 1.21+.

Release Notes

AKS - Release 2021-02-15

Published by qpetraroia over 3 years ago

This release is rolling out to all regions - ETA for conclusion 2021-02-24 for public cloud.

Announcements

  • The Azure Kubernetes Service pod security policy (preview) feature will be retired on June 30th, 2021.
  • Once GA AKS will default to its new GPU specialized image as the supported option for GPU-capable agent nodes.
  • Starting this week on 22 February 2021 (Azure China Cloud and Azure Government Cloud users will get this update in the following weeks), we will upgrade AKS clusters Calico network policy from Calico version v3.8.9 to v3.17.2 for cluster 1.20.2 and above. This upgrade will cause a breaking change to the default behavior of all-interfaces Host Endpoints. For customers that use Host Endpoints, and only these, this version brings a change. Please follow our guidance to apply the appropriate label and Global Network Policy if you want to keep the v3.8.9 default behavior of all-interfaces Host Endpoints.

Release Notes

  • Behavioral Change

    • Date/Time removed from tunnel-front log entries. Timestamps can still be viewed by adding --timestamps to your kubectl logs command.
  • Bug Fixes

    • Fixed Auto Scaling issues with 1.19 Preview Clusters where no image is found for a distro to scale from.
    • A previous release defaulted to Gen2 VHDs for Kubernetes versions below 1.18.0. This implicitly changed the Ubuntu version from 16.04 to 18.04 for users still below 1.18.0. This has been fixed and users will only receive Gen2 VHDs for Kubernetes versions greater than or equal to 1.18.0.
    • Fixed AuthorizationFailed errors on cluster deletion operations to better expose to users.
    • Fixed case sensivity problem when specifying "--os-type"
    • Fixed an Error Handling issue when provisioning node pools with Ephemeral OS and a VM size with no cache disk.
    • Fixed an issue with Azure Policy pods not getting scheduled with CriticalAddonsOnly taint GithubIssue
  • Component Updates

AKS - Release 2021-02-08

Published by qpetraroia over 3 years ago

This release is rolling out to all regions - ETA for conclusion 2021-02-17 for public cloud.

Announcements

  • The Azure Kubernetes Service pod security policy (preview) feature will be retired on May 31st, 2021.
  • Once GA AKS will default to its new GPU specialized image as the supported option for GPU-capable agent nodes.
  • Starting on the week of 15 February 2021 (Azure China Cloud and Azure Government Cloud users will get this update in the following weeks), we will upgrade AKS clusters Calico network policy from Calico version v3.8.9 to v3.17.1. This upgrade will cause a breaking change to the default behavior of all-interfaces Host Endpoints. For customers that use Host Endpoints, and only these, this version brings a change. Please follow our guidance to apply the appropriate label and Global Network Policy if you want to keep the v3.8.9 default behavior of all-interfaces Host Endpoints.

Release Notes

  • Features
    • Cluster Start/Stop is now GA.
  • Preview Features
    • AKS now supports Private Clusters created with a custom DNS zone (BYO DNS zone). Read more here.
    • AKS now allows you to re-use your standard LoadBalancer outbound IP (created by AKS) as Inbound IP to your services (and vice-versa) from Kubernetes v1.20+.
    • AKS now supports re-using the same Load Balancer IP across multiple services from Kubernetes v1.20+.
  • Behavioral Change
    • The AKS default storage class behavior now will be to delay the creation of a Persistent Volume until a pod is created. Allowing the Persistent Volume to be created in the same zone as the pod. Read more here.
  • Component Updates
AKS - Release 2021-02-01

Published by miwithro over 3 years ago

This release is rolling out to all regions - ETA for conclusion 2021-02-12 for public cloud.

Announcements

  • Kubernetes 1.16 is officially deprecated in AKS
  • The Azure Kubernetes Service pod security policy (preview) feature will be retired on May 31st, 2021.
  • Once GA AKS will default to its new GPU specialized image as the supported option for GPU-capable agent nodes.
  • Starting on the week of 15 February 2021 (Azure China Cloud and Azure Government Cloud users will get this update in the following weeks), we will upgrade AKS clusters Calico network policy from Calico version v3.8.9 to v3.17.1. This upgrade will cause a breaking change to the default behavior of all-interfaces Host Endpoints. For customers that use Host Endpoints, and only these, this version brings a change. Please follow our guidance to apply the appropriate label and Global Network Policy if you want to keep the v3.8.9 default behavior of all-interfaces Host Endpoints.

Release Notes

AKS - Release 2021-01-25

Published by qpetraroia over 3 years ago

This release is rolling out to all regions - ETA for conclusion 2021-02-03 for public cloud.

Announcements

  • The Azure Kubernetes Service pod security policy (preview) feature will be retired on May 31st, 2021.
  • Once GA AKS will default to its new GPU specialized image as the supported option for GPU-capable agent nodes.
  • As previously announced, with the Holiday Season ending AKS will deprecate Kubernetes v1.16, completing the extension given after the GA of v1.19 for the holiday season and returning to the regular 3 supported versions window. After the week of January 31st, 2021 you will no longer be able to create v1.16.x based clusters or node pools.

Release Notes

  • Features
  • Preview Features
    • AKS now supports WinDSR in AKS Windows nodes in preview by registering the Microsoft.ContainerService/EnableAKSWindowsDSR feature flag.
    • New options for Custom node Configuration: ContainerLogMaxSizeMB, ContainerLogMaxFiles, PodMaxPids.
    • AKS now supports Auto-Upgrade channels. https://aka.ms/aks/autoupgrade
  • Bug Fixes
    • When clusters that are using bring your own subnet and route table with kubenet are deleted, they will now clean up any routes set by Kubernetes/AKS.
    • Added new IP availability validation for cluster upgrade of kubenet clusters.
    • Fixed bug where Standard_DC2s_v2, Standard_DC4s_v2, Standard_DC8_v2 were incorrectly listed as supporting Accelerated Networking resulting in creation failures.
  • Behavioral Change
    • The Reset Service Principal operation will now perform a node image upgrade in-order to update the configuration of each agent node.
  • Component Updates
AKS - Release 2021-01-04

Published by palma21 almost 4 years ago

This release is rolling out to all regions - ETA for conclusion 2021-01-13 for public cloud.

Announcements

  • The Azure Kubernetes Service pod security policy (preview) feature will be retired on May 31st, 2021.
  • Once GA AKS will default to its new GPU specialized image as the supported option for GPU-capable agent nodes.
  • AKS has defaulted Azure CNI to transparent mode (from its previous default of bridge mode). This should bring no impact and carries several benefits, read more about it here
  • As previously announced, with the Holiday Season ending AKS will deprecate Kubernetes v1.16, completing the extension given after the GA of v1.19 for the holiday season and returning to the regular 3 supported versions window. After the week of January 31st, 2021 you will no longer be able to create v1.16.x based clusters or node pools.

Release Notes

  • Features
    • AKS now supports every CPU-based SKU dynamically. This means that every new CPU-based SKU is automatically supported by AKS so long they're not on the restrictions list. GPU-based SKUs and other specialty SKUs still require additional validation before being enabled
    • AKS Cluster Auto-Scaler now exposes the max-node-provision-time and priority properties as part of the Cluster Auto-Scaler profile.
  • Bug Fixes
    • Fixed edge case on Bring your own subnet + kubenet network plugin scenarios where the route table was not correctly associated before the nodes started being created.
    • Better handling of race condition with liveness probes of the aks-link component.
    • Cluster Auto-Scaler bug fix for incorrectly reading the value of new-pod-scale-up and improvements to CA liveness probe.
    • Case insensitivity fix for networkPlugin, networkPolicyandloadbalancerSku`.
    • Bug fixed on BYO Route Table kubenet scenarios where the cluster deletion didn't correctly clean up the route table rules created by kubernetes.
  • Preview Features
    • Cluster Start/Stop now works in clusters with Cluster Auto-Scaler enabled and Private clusters.
  • Component Updates
AKS - Release 2020-11-30

Published by palma21 almost 4 years ago

This release is rolling out to all regions - ETA for conclusion 2020-12-11 for public cloud.

Announcements

  • The Azure Kubernetes Service pod security policy (preview) feature will be retired on May 31st, 2021.
  • Once GA AKS will default to its new GPU specialized image as the supported option for GPU-capable agent nodes.
  • AKS will be defaulting Azure CNI to transparent mode (from its current default of bridge mode) on the next release. This should bring no impact and carries several benefits, read more about it here.

Release Notes

  • Features
    • Bring your Own (BYO) Control Plane Managed Identity is Now Generally Available.
    • You may now update your Uptime SLA clusters to Free.
  • Behavioral Changes
    • AKS Clusters will from now on choose to fail the upgrade if the drain/evict operation doesn't succeed instead of timing out. This means that users must ensure their PodDisruptionBudgets (PDBs) allow their pods to be successfully moved. To see if you have any incorrect PDB check AKS Diagnostics and search for PDBs and Node Drain Failures to see if you have any problematic PDBs in your cluster.
  • Preview Features
    • AKS now supports Custom Node Configuration in Public Preview.
    • AKS now supports Private Clusters created with no Private DNS zone, deferring all DNS to an enterprise-managed DNS server.
      • You can create a cluster like this by using --private-dns-zone none, and making sure your custom DNS server is on the cluster subnet and contains all necessary entries including the API server endpoint IP (you can add after the cluster is created).
    • Azure AD Pod Identity Add-on is now in public preview.