Skip to content

v1.7.0

Compare
Choose a tag to compare
@github-actions github-actions released this 12 Jan 17:06
· 2509 commits to main since this release
v1.7.0
df02fc3

Urgent Upgrade Notes

(No, really, you MUST read this before you upgrade)

  • Replace deprecated ADAL authentication with MSAL.

    For users relying on certificate authentication, the environment variables used by the libraries changed from AZURE_CERTIFICATE_ to AZURE_CLIENT_CERTIFICATE_ (#2748, @r4f4)

  • Don’t default to AKS networkPolicy=calico (#2999, @jackfrancis)

    This change removes a default configuration for AKS NetworkPolicy=calico. Going forward, CAPZ will not express a default opinion. Users will declare NetworkPolicy=calico or NetworkPolicy=azure in the AzureManagedControlPlane's Spec.NetworkPolicy configuration.

Changes by Kind

API Change

  • Add AdditionalTags property to AzureManagedMachinePool (#2745, @zioproto)
  • Prefer CAPI replicas-managed-by annotation for AKS autoscaler (#2996, @jackfrancis)

Feature

  • AKS resource health added to AzureManagedControlPlane status (#2738, @nojnhuh)
  • Add "VMIdentitiesReadyCondition" AzureMachine condition (#2743, @willie-yao)
  • Add support for configurable VM Diagnostics (#2528, @damdo)
  • Add support for kubeletDiskType (#2938, @willie-yao)
  • Adds additional fields for AzureMachine, AzureMachineTemplate, and AzureMachinePool to configure multiple NetworkInterfaces. An example configuration:
  networkInterfaces:
    - subnetName: control-plane-subnet
       acceleratedNetworking: false
    - subnetName: node-subnet
       acceleratedNetworking: true
       privateIPConfigs: 2
       publicIPConfigs: 1

will create two interfaces, with the node-subnet interface having two additional private IP addresses, and one additional public IP address (#2411, @brianlieberman)

  • Adds the ability to annotate a MachinePool with cluster.x-k8s.io/replicas-managed-by-autoscaler to synchronize VMSS capacity with MachinePool replicas automatically. (#2588, @mweibel)

  • Allow setting custom backend pool names for load balancers (#2714, @Fedosin)

  • AzureManagedCluster: Full support for AKS Cluster Autoscaler (#2838, @mtougeron)

  • Default Ubuntu to 22.04 for new k8s versions (#2807, @mboersma)

  • Enable AKS node pool KubeletConfig (#2781, @jackfrancis)

  • Feat : dependabot workflow automation for updating dependency (#2752, @Rajpratik71)

  • Make resourceID required for AzureClusterIdentity when using UserAssignedMSI (#2862, @willie-yao)

  • The age of all Azure resources is now printed by running kubectl get (e.g. kubectl get azurecluster) and kubectl get azureclusteridentity now prints the type of the Azure Identity. (#2960, @bavarianbidi)

  • Update node pool names in AKS flavor templates to include the cluster's name

    Update AzureManagedMachinePool reconciler to use spec.name to find the matching node pool VMSS (#2846, @AAkindele)

  • VMSS Flex support for MachinePools (#2813, @mboersma)

Documentation

  • Add documentation on how to specify managed cluster addons (#2964, @dtzar)

Bug or Regression

  • Add tolerations to aad pod identity (#2816, @sonasingh46)

  • AzureManagedCluster spec.controlPlaneEndpoint is immutable (#2711, @jackfrancis)

  • AzureManagedMachinePool spec.name is now immutable (#2990, @nojnhuh)

  • Cleanup remote peerings when resource group is deleted (#2767, @willie-yao)

  • Ensure AKS immutable configuration has webhook enforcement (#2795, @jackfrancis)

  • Fix machinepool reconciliation by converting the resourceGroup name in the AzureMachinePoolMachine object providerID to lowercase to match the providerID defined in the kubernetes Node Object on the workload cluster.

    This fix only apply to new azuremachinepoolmachine objects so if any existing machine pool with resource group name with a capital letter already exist , the controller with this patch will not manage to fix the azuremachinepoolmachines in it and it will still fail to reconcile the pool until the pool is deleted. (#2894, @primeroz)

  • Fixed a bug preventing spec.additionalTags from being deleted entirely on AzureManagedControlPlane (#2916, @nojnhuh)

  • Fixed tags converters function MapToTags and TagsToMap to return nil on nil input. Added unit tests for tag converters. (#2802, @zioproto)

Other (Cleanup or Flake)

Dependencies

Added

  • github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.2.0
  • github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.2.0
  • github.com/Azure/azure-sdk-for-go/sdk/internal: v1.0.0
  • github.com/AzureAD/microsoft-authentication-library-for-go: v0.7.0
  • github.com/buger/jsonparser: v1.1.1
  • github.com/dnaeon/go-vcr: v1.1.0
  • github.com/emicklei/go-restful/v3: v3.9.0
  • github.com/flowstack/go-jsonschema: v0.1.1
  • github.com/golang-jwt/jwt: v3.2.1+incompatible
  • github.com/google/safetext: b49f7bc
  • github.com/joho/godotenv: v1.3.0
  • github.com/jongio/azidext/go/azidext: v0.4.0
  • github.com/kylelemons/godebug: v1.1.0
  • github.com/montanaflynn/stats: v0.6.6
  • github.com/pkg/browser: ce105d0
  • k8s.io/cloud-provider: v0.25.1-rc.0
  • k8s.io/controller-manager: v0.25.1-rc.0
  • k8s.io/kubelet: v0.25.1-rc.0
  • sigs.k8s.io/cloud-provider-azure: v1.25.5

Changed

Removed

  • github.com/certifi/gocertifi: 2c3bb06
  • github.com/cockroachdb/datadriven: bf6692d
  • github.com/cockroachdb/errors: v1.2.4
  • github.com/cockroachdb/logtags: eb05cc2
  • github.com/getsentry/raven-go: v0.2.0
  • github.com/golangplus/testing: af21d9c
  • github.com/google/cel-spec: v0.6.0
  • github.com/hpcloud/tail: v1.0.0
  • github.com/opentracing/opentracing-go: v1.1.0
  • go.opentelemetry.io/otel/oteltest: v0.20.0
  • go4.org/intern: ae77deb
  • go4.org/unsafe/assume-no-moving-gc: 928513b
  • gopkg.in/fsnotify.v1: v1.4.7
  • inet.af/netaddr: 0970063
  • sigs.k8s.io/kustomize/cmd/config: v0.10.6