v1.11.0

Headline Features

• Installing CAPZ now also installs Azure Service Operator and uses ASO to manage resource groups. See the docs for more details.
• CAPZ has now moved off of the deprecated version of Azure SDK for Go to the newer "track 2" variant with updated API versions for many Azure services, including managed clusters.

Changes by Kind

Feature

• Add ARM64 support for CAPZ Bootstrapping Extension (#3741, @willie-yao)
• Add support for Azure authentication in ASO (#3698, @adriananeci)
• Added spec.networkPluginMode to AzureManagedControlPlane (#3988, @nojnhuh)
• Added spec.oidcIssuerProfile to AzureManagedControlPlane (#3973, @nojnhuh)
• Added priorityClassName for capz-nmi (#3729, @Dhairya-Arora01)
• Adding HTTP proxy support for managed cluster (#3847, @mjnovice)
• Allow setting ScaleDownMode and SpotMaxPrice for AzureManagedMachinePool (#3672, @maciaszczykm)
• Allow skipping Linux profile on managed clusters (#3677, @maciaszczykm)
• Azure Service Operator is now installed alongside CAPZ and manages resource groups (#3723, @nojnhuh)
• Make scalesets reconcile/delete async (#3111, @Jont828)
• Make scalesetvms delete async (#3799, @Jont828)
• Proposal for Node OS image caching feature (#3624, @bennycortese)
• Update loadbalancers service to use Azure SDK v2 (#3969, @nawazkh)
• Update publicips service to use Azure SDK v2 (#3972, @nawazkh)
• Users can add Deny security rules. Security Rules are defaulted to "Allow" if unspecified. (#3878, @nawazkh)
• Adding EnableFIPS flag in ManageMachinePool struct (#3759, @mjnovice)

Documentation

• Adds documentation on using Azure CNI v1 with CAPZ using one NIC per node. (#3627, @nawazkh)
• Document using a Mariner Linux custom image (#3746, @mboersma)
• Updated wasm docs to include wasm workers server (#3728, @ogghead)

Bug or Regression

• Authorized IP ranges will be set to []string then to nil upon deletion (#3653, @nawazkh)
• Fixed a bug causing AzureManagedControlPlanes with spec.identity.type set to UserAssigned to needlessly reconcile constantly. (#3962, @nojnhuh)
• Fixed a bug causing Cluster events not to re-reconcile AzureManagedMachinePools (#3809, @nojnhuh)
• Fixed a bug preventing azure.json Secrets from being reconciled (#3811, @nojnhuh)
• Fixed a bug where AzureManagedMachinePools using Spot instances would endlessly reconcile without any user-specified node labels (#3975, @nojnhuh)
• Remove control-plane-azure-json before creation. If the secret exists, the script to create will fail. (#3872, @lzhecheng)
• Validate DNS Service IP to be a .10 IP belonging to Service CIDR (#3826, @nawazkh)

Other (Cleanup or Flake)

• Bump CAPI to v1.5.0 (#3707, @mboersma)
• Developer UX: Expand on the pre-commit workflow. (#3724, @nawazkh)
• Require AzureClusterIdentity for auth (#3793, @willie-yao)
• Update CAPI to v1.4.5 (#3756, @mboersma)
• Update CAPI to v1.5.1 (#3908, @mboersma)
• Update virtualmachineimages service to SDK v2 (#3843, @willie-yao)
• Upgrading otel and related packages (#3803, @mjnovice)

Dependencies

Added

• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/authorization/armauthorization/v2: v2.1.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5: v5.1.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v4: v4.3.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal: v1.1.2
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/iothub/armiothub: v1.1.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault: v1.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/managementgroups/armmanagementgroups: v1.0.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/msi/armmsi: v1.1.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4: v4.1.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/privatedns/armprivatedns: v1.1.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resourcehealth/armresourcehealth: v1.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources: v1.1.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/search/armsearch: v1.1.0
• github.com/adrg/xdg: v0.4.0
• github.com/golang-jwt/jwt/v5: v5.0.0
• github.com/google/s2a-go: v0.1.3
• github.com/samber/lo: v1.37.0
• go.uber.org/mock: v0.2.0
• sigs.k8s.io/kustomize/kustomize/v5: v5.0.1

Changed

• github.com/Azure/azure-kusto-go: v0.10.2 → v0.11.3
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.6.1 → v1.7.2
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.3.0 → v1.3.1
• github.com/Azure/azure-sdk-for-go/sdk/storage/azblob: v0.6.1 → v1.0.0
• github.com/Azure/azure-service-operator/v2: v2.1.0 → v2.3.0
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.0.0 → v1.1.1
• github.com/Masterminds/semver/v3: v3.2.0 → v3.2.1
• github.com/coreos/go-systemd/v22: v22.3.2 → v22.4.0
• github.com/emicklei/go-restful/v3: v3.10.1 → v3.10.2
• github.com/frankban/quicktest: v1.14.3 → v1.14.4
• github.com/go-errors/errors: v1.0.1 → v1.4.2
• github.com/go-logr/zapr: v1.2.3 → v1.2.4
• github.com/go-openapi/jsonpointer: v0.19.5 → v0.19.6
• github.com/go-openapi/jsonreference: v0.20.0 → v0.20.1
• github.com/google/pprof: 94a9f03 → 4bb14d4
• github.com/google/uuid: v1.3.0 → v1.3.1
• github.com/googleapis/enterprise-certificate-proxy: v0.2.1 → v0.2.3
• github.com/googleapis/gax-go/v2: v2.7.0 → v2.8.0
• github.com/hashicorp/consul/api: v1.18.0 → v1.20.0
• github.com/hashicorp/golang-lru: v0.5.4 → v1.0.2
• github.com/inconshreveable/mousetrap: v1.0.1 → v1.1.0
• github.com/onsi/ginkgo/v2: v2.11.0 → v2.12.0
• github.com/onsi/gomega: v1.27.8 → v1.27.10
• github.com/pelletier/go-toml/v2: v2.0.6 → v2.0.8
• github.com/pkg/sftp: v1.13.5 → v1.13.6
• github.com/sagikazarmark/crypt: v0.9.0 → v0.10.0
• github.com/sirupsen/logrus: v1.8.1 → v1.9.0
• github.com/spf13/afero: v1.9.3 → v1.9.5
• github.com/spf13/cast: v1.5.0 → v1.5.1
• github.com/spf13/cobra: v1.6.1 → v1.7.0
• github.com/spf13/viper: v1.15.0 → v1.16.0
• github.com/stretchr/testify: v1.8.3 → v1.8.4
• github.com/tmc/grpc-websocket-proxy: e5319fd → 673ab2c
• go.etcd.io/etcd/api/v3: v3.5.6 → v3.5.9
• go.etcd.io/etcd/client/pkg/v3: v3.5.6 → v3.5.9
• go.etcd.io/etcd/client/v2: v2.305.6 → v2.305.7
• go.etcd.io/etcd/client/v3: v3.5.6 → v3.5.9
• go.etcd.io/etcd/pkg/v3: v3.5.5 → v3.5.7
• go.etcd.io/etcd/raft/v3: v3.5.5 → v3.5.7
• go.etcd.io/etcd/server/v3: v3.5.5 → v3.5.7
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.42.0 → v0.43.0
• go.opentelemetry.io/otel/exporters/otlp/internal/retry: v1.16.0 → v1.10.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.16.0 → v1.17.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.16.0 → v1.17.0
• go.opentelemetry.io/otel/exporters/prometheus: v0.39.0 → v0.40.0
• go.opentelemetry.io/otel/metric: v1.16.0 → v1.17.0
• go.opentelemetry.io/otel/sdk/metric: v0.39.0 → v0.40.0
• go.opentelemetry.io/otel/sdk: v1.16.0 → v1.17.0
• go.opentelemetry.io/otel/trace: v1.16.0 → v1.17.0
• go.opentelemetry.io/otel: v1.16.0 → v1.17.0
• golang.org/x/crypto: v0.11.0 → v0.13.0
• golang.org/x/net: v0.13.0 → v0.14.0
• golang.org/x/sys: v0.10.0 → v0.12.0
• golang.org/x/term: v0.10.0 → v0.12.0
• golang.org/x/text: v0.12.0 → v0.13.0
• golang.org/x/tools: v0.9.3 → v0.12.0
• gomodules.xyz/jsonpatch/v2: v2.2.0 → v2.3.0
• google.golang.org/api: v0.107.0 → v0.122.0
• gopkg.in/square/go-jose.v2: v2.2.2 → v2.6.0
• gotest.tools/v3: v3.0.3 → v3.4.0
• k8s.io/api: v0.26.2 → v0.27.2
• k8s.io/apiextensions-apiserver: v0.26.1 → v0.27.2
• k8s.io/apimachinery: v0.26.2 → v0.27.2
• k8s.io/apiserver: v0.26.2 → v0.27.2
• k8s.io/cli-runtime: v0.26.1 → v0.27.2
• k8s.io/client-go: v0.26.2 → v0.27.2
• k8s.io/cloud-provider: v0.26.2 → v0.27.1
• k8s.io/cluster-bootstrap: v0.25.0 → v0.27.2
• k8s.io/code-generator: v0.26.1 → v0.27.2
• k8s.io/component-base: v0.26.2 → v0.27.2
• k8s.io/component-helpers: v0.26.2 → v0.27.2
• k8s.io/controller-manager: v0.26.2 → v0.27.1
• k8s.io/kms: v0.26.2 → v0.27.2
• k8s.io/kube-openapi: 172d655 → 8b0f38b
• k8s.io/kubectl: v0.26.1 → v0.27.2
• k8s.io/kubelet: v0.26.2 → v0.27.1
• k8s.io/metrics: v0.26.1 → v0.27.2
• k8s.io/utils: a5ecb01 → 3b25d92
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.35 → v0.1.2
• sigs.k8s.io/cloud-provider-azure: v1.26.7 → v1.27.7
• sigs.k8s.io/cluster-api/test: v1.4.6 → v1.5.1
• sigs.k8s.io/cluster-api: v1.4.6 → v1.5.1
• sigs.k8s.io/controller-runtime: v0.14.5 → v0.15.1
• sigs.k8s.io/json: f223a00 → bc3834c
• sigs.k8s.io/kustomize/api: v0.12.1 → v0.13.2
• sigs.k8s.io/kustomize/kyaml: v0.13.9 → v0.14.1

Removed

• github.com/PuerkitoBio/purell: v1.1.1
• github.com/PuerkitoBio/urlesc: de5bf2a
• github.com/elazarl/goproxy: 947c36d
• github.com/form3tech-oss/jwt-go: v3.2.3+incompatible
• sigs.k8s.io/kustomize/kustomize/v4: v4.5.7