Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

release-notes-2023-08-07 #3837

Merged
merged 4 commits into from
Aug 8, 2023
Merged

release-notes-2023-08-07 #3837

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
e6a38ea
release-notes-2023-08-07
allyford Aug 7, 2023
8f5d491
updated based on comments
allyford Aug 7, 2023
d1acaf6
Remove api structure change, for next week release
allyford Aug 8, 2023
81f39cc
remove kappie, add network obs, add new policy
allyford Aug 8, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
37 changes: 36 additions & 1 deletion CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,41 @@
# Azure Kubernetes Service Changelog

## Release 2023-08-06

Monitor the release status by regions at [AKS-Release-Tracker](https://releases.aks.azure.com/).

### Announcements

* For AKS clusters built at version v1.27+ and enable KMS, KMS v2 is configured by default. However, for clusters with KMS enabled at versions below v1.27, upgrading to v1.27 will be blocked. To upgrade, follow the steps outlined in this [documentation](https://learn.microsoft.com/azure/aks/use-kms-etcd-encryption#migration-to-kms-v2) for migrating from KMS v1 to v2, and then proceed with upgrading the cluster to version v1.27.
allyford marked this conversation as resolved.
Show resolved Hide resolved
* The pod security policy feature was deprecated on 1st August 2023 and removed since AKS version 1.25. We recommend you migrate to [pod security admission controller](https://learn.microsoft.com/azure/aks/use-psa) or [Azure Policy](https://learn.microsoft.com/azure/aks/policy-reference) to stay within Azure support.

### Release notes

* Behavioral changes
allyford marked this conversation as resolved.
Show resolved Hide resolved
* API structure for AutoscalerProfile has been updated.
allyford marked this conversation as resolved.
Show resolved Hide resolved
* Customers will now be able to use node public IP with authorized IP ranges and APIservervnet integration. Previously this functionality was blocked.
* Customers can now install Azure Service Mesh with on AKS clusters with Cilium.
* Configure exponential backoff in calls from the Cilium daemonset to the Kubernetes apiserver in Azure CNI Powered by Cilium to improve recovery from OOM kills.
allyford marked this conversation as resolved.
Show resolved Hide resolved

* Bug Fixes
allyford marked this conversation as resolved.
Show resolved Hide resolved
* Fixed a bug where the addon-token-adapter may get a staled long connection to apiserver causing network connection errors.
* Added validation to check if pobSubnet is associated with NAT Gateway when cluster outbound type is userAssignedNATGateway and pobSubnet in agentpoolProfile is not empty.
* Azure CNS will write the CNI conflict on the VM only after the networking goal state has been programmed for that VM. This means that Nodes will stay in a NotReady state with status "network plugin not initialized" until after DNC has created the NC and the Azure host has programmed it.

* Component Updates
* Windows CNS updated to v1.4.44.4
* Envoy Proxy (part of OSM and Istio) has been updated to 1.26.4 to fix CVE-2023-35941 and CVE-2023-35944.
* OMSAgent for Azure monitor updated to 3.1.11
* Cluster Autoscaler images are releasing new versions for 1.25.x, 1.26.x, 1.27.x.
allyford marked this conversation as resolved.
Show resolved Hide resolved
* Azure File CSI Driver has been updated to [v1.28.1](https://github.com/kubernetes-sigs/azurefile-csi-driver/releases/tag/v1.28.1) on AKS 1.27.
* Updated wasm containerd shims to v0.8.0, and added wasm worker server shim.
* Kappie agent updated to v0.0.9.1
allyford marked this conversation as resolved.
Show resolved Hide resolved
* Cloud provider Azure versions are bumped to [v1.25.17](https://github.com/kubernetes-sigs/cloud-provider-azure/releases/tag/v1.25.17), [v1.26.13](https://github.com/kubernetes-sigs/cloud-provider-azure/releases/tag/v1.26.13), [v1.27.7](https://github.com/kubernetes-sigs/cloud-provider-azure/releases/tag/v1.27.7) for the corresponding patch versions with the following changes: Health probe port can be any port assigned by customer, Increase limit for TCP Idle Timeout to 100 minutes, Virtual node will always exists.
* Azure Monitor Metrics addon image updated in [07-28-2023](https://github.com/Azure/prometheus-collector/blob/main/RELEASENOTES.md#release-07-28-2023) release
* AKS Ubuntu 18.04 image has been updated to [AKSUbuntu-1804-202308.01.0](vhd-notes/aks-ubuntu/AKSUbuntu-1804/202308.01.0.txt).
allyford marked this conversation as resolved.
Show resolved Hide resolved
* AKS Ubuntu 22.04 image has been updated to [AKSUbuntu-2204-202308.01.0](vhd-notes/aks-ubuntu/AKSUbuntu-2204/202308.01.0.txt).
* Azure Linux image has been updated to [AzureLinux-202308.01.0](vhd-notes/AzureLinux/202308.01.0.txt).

## Release 2023-07-30

Monitor the release status by regions at [AKS-Release-Tracker](https://releases.aks.azure.com/).
Expand All @@ -10,7 +46,6 @@ Monitor the release status by regions at [AKS-Release-Tracker](https://releases.
* For AKS clusters built at version v1.27+ and enable KMS, KMS v2 is configured by default. However, for clusters with KMS enabled at versions below v1.27, upgrading to v1.27 will be blocked. To upgrade, follow the steps outlined in this [documentation](https://learn.microsoft.com/azure/aks/use-kms-etcd-encryption#migration-to-kms-v2) for migrating from KMS v1 to v2, and then proceed with upgrading the cluster to version v1.27.
* The pod security policy feature was deprecated on 1st August 2023 and removed since AKS version 1.25. We recommend you migrate to [pod security admission controller](https://learn.microsoft.com/azure/aks/use-psa) or [Azure Policy](https://learn.microsoft.com/azure/aks/policy-reference) to stay within Azure support.


### Release notes

* Features
Expand Down
Loading
Loading