Fixed unauth client action enum.

linter_exclusions.yml

@@ -482,6 +482,26 @@ datafactory pipeline create-run:
     reference_pipeline_run_id:
       rule_exclusions:
       - option_length_too_long
+dataprotection backup-instance restore initialize-for-data-recovery-as-files:
+  parameters:
+    target_blob_container_url:
+      rule_exclusions:
+      - option_length_too_long
+dataprotection backup-vault create:
+  parameters:
+    alerts_for_all_job_failures:
+      rule_exclusions:
+      - option_length_too_long
+dataprotection backup-vault update:
+  parameters:
+    alerts_for_all_job_failures:
+      rule_exclusions:
+      - option_length_too_long
+dataprotection resource-guard update:
+  parameters:
+    critical_operation_exclusion_list:
+      rule_exclusions:
+      - option_length_too_long
 datashare consumer dataset-mapping create:
   parameters:
     share_subscription_name:

src/aks-preview/HISTORY.rst

@@ -12,6 +12,35 @@ To release a new version, please select a new version number (usually plus 1 to
 Pending
 +++++++
 
+* Fix `az aks addon list`, `az aks addon list-available` and `az aks addon show` commands when dealing with the web application routing addon.
+* Update to use 2022-05-02-preview api version.
+
+0.5.78
+++++++
+
+* Prompt when disabling CSI Drivers.
+
+0.5.77
+++++++
+
+* Add support to pass csi `disk-driver-version` for `az aks create` and `az aks update`.
+
+0.5.76
+++++++
+
+* Add support for Custom CA Trust in `az aks create`, `az aks nodepool add`, `az aks nodepool update`.
+
+0.5.75
+++++++
+
+* Add support for web application routing.
+* Refactor: Removed redundant `--disable-workload-identity` flag. User can disable the workload identity feature by using `--enable-workload-identity False`.
+
+0.5.74
+++++++
+
+* Add command `aks trustedaccess role list`.
+
 0.5.73
 ++++++
 
@@ -85,7 +114,7 @@ Pending
 ++++++
 
 * Update to use 2022-03-02-preview api version.
-* Add support for `--format` parameter in `az aks get-credentials` command.  
+* Add support for `--format` parameter in `az aks get-credentials` command.
 
 0.5.60
 ++++++

src/aks-preview/azcli_aks_live_test/configs/ext_matrix_default.json

@@ -25,8 +25,15 @@
             "test_aks_create_with_crg_id",
             "test_aks_create_and_update_with_http_proxy_config",
             "test_aks_snapshot",
-            "test_aks_custom_kubelet_identity",
-            "test_aks_nodepool_add_with_ossku_windows2022"
+            "test_aks_nodepool_add_with_ossku_windows2022",
+            "test_list_trustedaccess_roles",
+            "test_aks_custom_ca_trust_flow",
+            "test_aks_create_with_csi_driver_v2",
+            "test_aks_create_and_update_csi_driver_to_v2"
+        ],
+        "fixed, waiting for rp rollout": [
+            "test_aks_create_with_azurekeyvaultkms",
+            "test_aks_update_with_azurekeyvaultkms"
         ]
     }
 }

src/aks-preview/azext_aks_preview/__init__.py

@@ -16,7 +16,7 @@ def register_aks_preview_resource_type():
     register_resource_type(
         "latest",
         CUSTOM_MGMT_AKS_PREVIEW,
-        SDKProfile("2022-04-02-preview", {"container_services": "2017-07-01"}),
+        SDKProfile("2022-05-02-preview", {"container_services": "2017-07-01"}),
     )
 
 

src/aks-preview/azext_aks_preview/_client_factory.py

@@ -18,6 +18,10 @@ def get_container_service_client(cli_ctx, **_):
     return get_mgmt_service_client(cli_ctx, CUSTOM_MGMT_AKS_PREVIEW)
 
 
+def cf_trustedaccess_role(cli_ctx, *_):
+    return get_container_service_client(cli_ctx).trusted_access_roles
+
+
 def cf_container_services(cli_ctx, *_):
     return get_container_service_client(cli_ctx).container_services
 

src/aks-preview/azext_aks_preview/_consts.py

@@ -83,6 +83,10 @@
 CONST_NETWORK_PLUGIN_AZURE = "azure"
 CONST_NETWORK_PLUGIN_NONE = "none"
 
+# disk driver versions
+CONST_DISK_DRIVER_V1 = "v1"
+CONST_DISK_DRIVER_V2 = "v2"
+
 # consts for addons
 # http application routing
 CONST_HTTP_APPLICATION_ROUTING_ADDON_NAME = "httpApplicationRouting"
@@ -125,6 +129,11 @@
 # gitops
 CONST_GITOPS_ADDON_NAME = "gitops"
 
+# web application routing
+# only used as the key of the corresponding description, not to map to the key name in addonProfiles,
+# since its configuration is actually stored in a separate ingress profile
+CONST_WEB_APPLICATION_ROUTING_KEY_NAME = "ingress/webApplicationRouting"
+
 # all supported addons
 ADDONS = {
     'http_application_routing': CONST_HTTP_APPLICATION_ROUTING_ADDON_NAME,
@@ -136,7 +145,8 @@
     "confcom": CONST_CONFCOM_ADDON_NAME,
     'open-service-mesh': CONST_OPEN_SERVICE_MESH_ADDON_NAME,
     'azure-keyvault-secrets-provider': CONST_AZURE_KEYVAULT_SECRETS_PROVIDER_ADDON_NAME,
-    'gitops': CONST_GITOPS_ADDON_NAME
+    'gitops': CONST_GITOPS_ADDON_NAME,
+    'web_application_routing': CONST_WEB_APPLICATION_ROUTING_KEY_NAME
 }
 
 ADDONS_DESCRIPTIONS = {
@@ -149,7 +159,8 @@
     CONST_CONFCOM_ADDON_NAME: '- enable confcom addon, this will enable SGX device plugin by default (PREVIEW).',
     CONST_OPEN_SERVICE_MESH_ADDON_NAME: '- enable Open Service Mesh addon (PREVIEW).',
     CONST_AZURE_KEYVAULT_SECRETS_PROVIDER_ADDON_NAME: '- enable Azure Keyvault Secrets Provider addon (PREVIEW).',
-    CONST_GITOPS_ADDON_NAME: '- enable GitOps (PREVIEW).'
+    CONST_GITOPS_ADDON_NAME: '- enable GitOps (PREVIEW).',
+    CONST_WEB_APPLICATION_ROUTING_KEY_NAME: '- enable web application routing (PREVIEW).'
 }
 
 # consts for credential
@@ -160,3 +171,9 @@
 # refer https://docs.microsoft.com/en-us/rest/api/storageservices/
 # naming-and-referencing-containers--blobs--and-metadata#container-names
 CONST_CONTAINER_NAME_MAX_LENGTH = 63
+
+CONST_PERISCOPE_REPO_ORG = "azure"
+CONST_PERISCOPE_CONTAINER_REGISTRY = "mcr.microsoft.com"
+CONST_PERISCOPE_RELEASE_TAG = "v0.9"
+CONST_PERISCOPE_IMAGE_VERSION = "0.0.9"
+CONST_PERISCOPE_NAMESPACE = "aks-periscope"