Skip to content

Releases: Azure/AKS

Release 2022-07-10

16 Jul 05:02
8a9c2a7
Compare
Choose a tag to compare

Release 2022-07-10

This release is rolling out to all regions - estimated time for completed roll out is 2022-07-22 for public cloud and 2022-07-25 for sovereign clouds.
Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • Starting with Kubernetes 1.24, the following changes will be made default:
    • The default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
    • The NodeRestriction Admission Controller will be enabled. This will allow users to enable/disable node restriction.
    • CoreDNS version 1.9.2 will be default version. With this new version of CoreDNS wildcard queries are no longer allowed.
    • metrics-server version 0.6.1 will be the default version.
    • metrics-server vertical pod autoscaler will be enabled.
  • Kubernetes 1.21 version deprecation will start taking effect from July 31st, 2022.
  • Update your AKS labels to the recommended substitutions before deprecation after the Kubernetes v1.24 release. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.
  • Konnectivity rollout is finished in global and started in Sovereign (China, USGov).

Release notes

Release 2022-07-03

07 Jul 06:19
9c0e5eb
Compare
Choose a tag to compare

Release 2022-07-03

This release is rolling out to all regions - estimated time for completed roll out is 2022-07-15 for public cloud and 2022-07-18 for sovereign clouds.
Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • Starting with this release, the pod memory limit for Azure NPM has been increased from 300 MB to 1 GB for clusters with the uptime SLA enabled. Requests will stay at 300 MB.
  • Starting with Kubernetes 1.24, the following changes will be made default:
    • The default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
    • The NodeRestriction Admission Controller will be enabled. This will allow users to enable/disable node restriction.
    • CoreDNS version 1.9.2 will be default version. With this new version of CoreDNS wildcard queries are no longer allowed.
    • metrics-server version 0.6.1 will be the default version.
    • metrics-server vertical pod autoscaler will be enabled.
  • Kubernetes 1.21 version deprecation will start taking effect from July 31st, 2022.
  • Update your AKS labels to the recommended substitutions before deprecation after the Kubernetes v1.24 release. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.
  • Kubernetes patch versions 1.21.14, 1.22.11, and 1.23.8 are now available; Kubernetes patch versions 1.21.7, 1.22.4, and 1.23.3 are deprecated and removed. Learn more about Kubernetes version support policy followed by AKS here.
  • Konnectivity rollout is done for most regions. Targeting end of this week for completion of rollout to the remaining regions - centralus, westus, germanynorth, westeurope, australiacentral2, australiasoutheast, brazilsoutheast, canadaeast, francesouth, japanwest, jioindiacentral, koreasouth, norwaywest, southafricawest, southcentralus, southeastasia, southindia, swedensouth, switzerlandwest, uaecentral, westus3.

Release notes

  • Features
  • Bug Fixes
  • Fixed issue on 1.24+ clusters with Windows node pools and Calico as network policy to automatically create the service account required for installing Calico.
  • Set priorityClassName to system-node-critical for Azure Key Vault Provider for Secrets Store CSI Driver addon to prevent scheduling issues arising from saturation by non-critical workloads.
  • Component Updates

Release 2022-06-26

01 Jul 19:47
5878cf6
Compare
Choose a tag to compare

Release 2022-06-26

This release is rolling out to all regions - estimated time for completed roll out is 2022-07-08 for public cloud and 2022-07-11 for sovereign clouds.
Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • Starting with the July 3rd, 2022 AKS release, Azure NPM will increase its pod memory limit from 300 MB to 1 GB for clusters with the uptime SLA enabled. Requests will stay at 300 MB.
  • Starting with Kubernetes 1.24, the following changes will be made default:
    • The default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
    • The NodeRestriction Admission Controller will be enabled. This will allow users to enable/disable node restriction.
    • CoreDNS version 1.9.2 will be default version. With this new version of CoreDNS wildcard queries are no longer allowed.
    • metrics-server version 0.6.1 will be the default version.
    • metrics-server vertical pod autoscaler will be enabled.
  • Kubernetes 1.21 version deprecation will start taking effect from July 31st, 2022.
  • Konnectivity rollout will continue in May 2022 and is expected to complete by end of June.
  • Update your AKS labels to the recommended substitutions before deprecation after the Kubernetes v1.24 release. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.

Release notes

Release 2022-06-19

23 Jun 22:28
70f8e83
Compare
Choose a tag to compare

Release 2022-06-19

This release is rolling out to all regions - estimated time for completed roll out is 2022-07-01 for public cloud and 2022-07-04 for sovereign clouds.
Monitor the release status by regions at AKS-Release-Tracker.

Announcements

  • Starting with the June 26th, 2022 AKS release, Azure NPM will increase its pod memory limit from 300 MB to 1 GB for clusters with the uptime SLA enabled. Requests will stay at 300 MB.
  • Starting with Kubernetes 1.24, the following changes will be made default:
    • The default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
    • The NodeRestriction Admission Controller will be enabled. This will allow users to enable/disable node restriction.
    • CoreDNS version 1.9.2 will be default version. With this new version of CoreDNS wildcard queries are no longer allowed.
    • metrics-server version 0.6.1 will be the default version.
  • Kubernetes 1.21 version deprecation will start taking effect from July 31st, 2022.
  • Konnectivity rollout will continue in May 2022 and is expected to complete by end of June.
  • Update your AKS labels to the recommended substitutions before deprecation after the Kubernetes v1.24 release. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.

Release notes

  • Preview Features
  • Behavioral Changes
    • Nodepool snapshots will only allow taking snapshots from Nodepools with provisioning status as Succeeded.
  • Bug Fixes
    • Fixed issue that prevented KEDA from scaling workloads. This could be observed previously as following status condition when describing the HorizontalPodAutoscaler for the KEDA scaled object: Cannot list resource "<external-metric-name>" in API group "external.metrics.k8s.io " in the namespace "<namespace-name>": RBAC: clusterrole.rbac.authorization.k8s.io "keda-operator-external-metrics-reader" not found
    • Update cloud-controller-manager versions to v1.24.2, v1.23.14, v1.1.17, v1.0.21 for Kubernetes 1.24, 1.23, 1.22, and 1.21 -
      • A new annotation is added in order to specify the PublicIP Prefix for creating IP of LB-service.beta. kubernetes.io/azure-pip-prefix-id: "/subscriptions/8ecadfc9-ffff-4ea4-ffff-0d9f87e4d7c8/resourceGroups/lodrem/providers/Microsoft.Network/publicIPPrefixes/bb" #1848.
      • Fix unexpected managed PLS deletion issue when ILB subnet is specified. #1835
      • Fix: avoid unnessary NSG updating on service reconciling #1850
      • Fix: panic when create private endpoint using azurefile NFS [#1816] (kubernetes-sigs/cloud-provider-azure#1816)
      • Remove redundant restriction on pls autoApproval and visibility.User can specify a list of subscriptions for visibility (e.g. "sub1 sub2") and a subset of this list for autoApproval (e.g. "sub1"). #1867
  • Component Updates

Release 2022-06-12

21 Jun 21:33
4d38c90
Compare
Choose a tag to compare

Release 2022-06-12

This release is rolling out to all regions - estimated time for completed roll out is 2022-06-24 for public cloud and 2022-06-27 for sovereign clouds.

Announcements

  • Starting with the June 26th, 2022 AKS release, Azure NPM will increase its pod memory limit from 300 MB to 1 GB for clusters with the uptime SLA enabled. Requests will stay at 300 MB.
  • Starting with Kubernetes 1.24, the following changes will be made:
    • The default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
    • The NodeRestriction Admission Controller will be enabled
    • CoreDNS version 1.9.2 will be default version. With this new version of CoreDNS wildcard queries are no longer allowed.
    • metrics-server version 0.6.1 will be the default version.
  • Konnectivity rollout will continue in May 2022 and is expected to complete by end of June.
  • Update your AKS labels to the recommended substitutions before deprecation after the Kubernetes v1.24 release. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.

Release notes

  • Behavioral Changes
    • Upgrades for Spot Nodepools is now available starting this week : This will involve a cordon and an eviction notice. There is no Drain or Surge nodes available for the Spot nodepool upgrades.
  • Component Updates
    • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2022.06.08.
    • Upgrade Azure File CSI driver to v1.19.0
    • Upgrade Azure Disk CSI driver to v1.19.0
    • Cloud-controller-manager, azure SDK, & API version has been updated for v1.21.7 and v1.21.9 (see the version matrix to see which CCM version maps to which AKS version.

Release 2022-06-05

10 Jun 18:00
4f202bf
Compare
Choose a tag to compare

Release 2022-06-05

This release is rolling out to all regions - estimated time for completed roll out is 2022-06-17 for public cloud and 2022-06-20 for sovereign clouds.

Announcements

  • Starting with the June 26th, 2022 AKS release, Azure NPM will increase its pod memory limit from 300 MB to 1 GB for clusters with the uptime SLA enabled. Requests will stay at 300 MB.
  • Starting with Kubernetes 1.24, the following changes will be made:
    • The default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
    • The NodeRestriction Admission Controller will be enabled
    • CoreDNS version 1.9.2 will be default version. With this new version of CoreDNS wildcard queries are no longer allowed.
    • metrics-server version 0.6.1 will be the default version.
  • Konnectivity rollout will continue in May 2022 and is expected to complete by end of June.
  • Update your AKS labels to the recommended substitutions before deprecation after the Kubernetes v1.24 release. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.

Release notes

  • Features
  • Behavioral Changes
    • Set agentPoolProfile default maxPods for new agentpools to align with the expected default maxPods based on the cluster's network configuration.
    • Reverted the changes of request values to api server to reduce churn on Uptime SLA enabled AKS clusters.
    • Konnectivity agent now uses a new Service Account konnectivity-agent, instead of the default Service Account.
  • Bug fixes
    • CSI Secret Store removed limit of node-driver-registrar to address #2972
  • Component Updates

Release 2022-05-29

07 Jun 13:30
0ea18fc
Compare
Choose a tag to compare

Release 2022-05-29

This release is rolling out to all regions - estimated time for completed roll out is 2022-06-10 for public cloud and 2022-06-13 for sovereign clouds.

Announcements

  • Starting with Kubernetes 1.24, the following changes will be made:
    • The default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
    • The NodeRestriction Admission Controller will be enabled
  • Konnectivity rollout will continue in May 2022 and is expected to complete by end of June.
  • Update your AKS labels to the recommended substitutions before deprecation after the Kubernetes v1.24 release. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.

Release notes

  • Features
    • Azure Key Vault with Private Link with KMS is now supported
    • Preview of Kubernetes 1.24
  • Bug fixes
    • Add extra information in error messages when a subnet is full or drain issues are found
  • Component Updates

Release 2022-05-22

25 May 00:04
4544a1f
Compare
Choose a tag to compare

Release 2022-05-22

This release is rolling out to all regions - estimated time for completed roll out is 2022-06-03 for public cloud and 2022-06-06 for sovereign clouds.

Announcements

  • From Kubernetes 1.23, containerd will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here.
  • Starting with Kubernetes 1.24, the following changes will be made:
    • The default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
    • The NodeRestriction Admission Controller will be enabled
  • Konnectivity rollout will continue in May 2022 and is expected to complete by end of May.
  • Update your AKS labels to the recommended substitutions before deprecation after the Kubernetes v1.24 release. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.

Release notes

Release 2022-05-08

10 May 18:29
e0a4786
Compare
Choose a tag to compare

Release 2022-05-08

This release is rolling out to all regions - estimated time for completed roll out is 2022-05-21 for public cloud and 2022-05-24 for sovereign clouds.

Announcements

  • From Kubernetes 1.23, containerd will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here.
  • Starting with 1.24 the default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
  • Konnectivity rollout will continue in May 2022 and is expected to complete by end of May.
  • Update your AKS labels to the recommended substitutions before deprecation after the Kubernetes v1.24 release. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.

Release notes

  • Public preview
  • Bug Fixes
    • Fixes a bug with the AKS-EnableDualStack preview feature that would delete managed outbound IPv6 IPs if updating the cluster with a version of the API before the dual-stack parameters were added.
    • A validation to prevent adding clusters to a subnet with a NAT Gateway without setting the appropriate outboundType was applied to updates as well as creates, preventing changes to clusters in this situation. The validation has been removed from update calls.
  • Component Updates

Release 2022-05-01

06 May 22:13
0be51de
Compare
Choose a tag to compare

Release 2022-05-01

This release is rolling out to all regions - estimated time for completed roll out is 2022-05-13 for public cloud and 2022-05-16 for sovereign clouds.

Announcements

  • From Kubernetes 1.23, containerd will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here.
  • Starting with 1.24 the default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
  • Konnectivity rollout will continue in May 2022 and is expected to complete by end of May.
  • Update your AKS labels to the recommended substitutions before deprecation after the Kubernetes v1.24 release. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.

Release notes

  • Public preview
  • Behavioral changes
    • Kube-proxy now detects local traffic using the local interface subnet instead of cluster CIDR when using Azure CNI. For clusters that have agent pools in separate subnets, this ensures that kube-proxy NAT rules do not interfere with network policies enforced by Azure NPM. The configuration change applies to clusters running Azure CNI and Kubernetes version 1.23.3 or later.
    • Clusters deployed with outboundType loadBalancer but deployed in a subnet with an attached NAT gateway will be updatable. Deployment of clusters into a bring-your-own-vnet subnet with a NAT Gateway already attached will be blocked unless outboundType userAssignedNATGateway is passed. See NAT Gateway in the AKS Documentation for more details.
  • Component Updates