v1.13.0

Changes by Kind

Feature

• Add ability to specify multiple sources for a security rule (#3961, @nawazkh)
• Add support for joining clusters to AKS Fleet (#4316, @willie-yao)
• CAPZ now adds the clusterctl.cluster.x-k8s.io/block-move annotation during clusterctl move to better synchronize pause operations (#4213, @nojnhuh)
• Migrate Private Endpoints Service to use ASO Framework (#4108, @nawazkh)
• Make all reconcile timeouts configurable (#4406, @CecileRobertMichon)

Documentation

• Reorganized the disk pages into their own section and added a new documentation section discussing disk encryption options. (#4415, @bryan-cox)

Bug or Regression

• ASO environment variables can now be set to refer to a non-public (e.g. government) cloud instance and set ASO's periodic resync interval: https://azure.github.io/azure-service-operator/guide/aso-controller-settings-options/ (#4390, @nojnhuh)
• AzureManagedMachinePool will check its annotations for DeleteForMoveAnnotation during clusterctl move operation (#4392, @nawazkh)
• Fix: DNSPrefix error on existing tenant cluster (#4308, @mihaiandreiratoiu)
• Fix: Spot machines failing to provision on regions without availability zones due to use of AvailabilitySets (#4453, @RadekManak)
• Propagate error affecting ASO resources' Ready conditions when tags cannot yet be reconciled. (#4371, @nojnhuh)
• Revert 'Use clusterctl move annotation on last system pool validation' (#4387, @nawazkh)
• Support AKS BYOCNI by allowing networkPlugin: none (#4307, @illrill)

Other (Cleanup or Flake)

• Bump CAPI to v1.6.0 (#4182, @mboersma)
• Bump CAPI to v1.6.1 (#4463, @mboersma)
• CAPZ now depends on ASO v2.5.0. (#4345, @nojnhuh)
• Convert bastionhosts to ASO (#4143, @willie-yao)
• Remove deprecated kubelet credential provider flag (#4436, @CecileRobertMichon)
• Remove support for AAD Pod Identity (#4424, @mboersma)
• Subnets and virtualnetworks are now managed with ASO (#4300, @nojnhuh)
• Update AzCNI to v1.5.16 (#4315, @rbtr)
• Use CAAPH to install cloud-provider-azure in tests (#4413, @CecileRobertMichon)

Dependencies

Added

• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservicefleet/armcontainerservicefleet: v1.1.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/eventgrid/armeventgrid: v1.0.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v2: v2.0.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor: v0.11.0
• github.com/ProtonMail/go-crypto: 7d5c6f0
• github.com/bwesterb/go-ristretto: v1.2.3
• github.com/cloudflare/circl: v1.3.7
• github.com/distribution/reference: v0.5.0
• github.com/google/go-github/v53: v53.2.0
• github.com/klauspost/compress: v1.17.0
• github.com/minio/highwayhash: v1.0.2
• github.com/nats-io/jwt/v2: v2.4.1
• github.com/nats-io/nats.go: v1.30.2
• github.com/nats-io/nkeys: v0.4.5
• github.com/nats-io/nuid: v1.0.1
• github.com/sagikazarmark/locafero: v0.3.0
• github.com/sagikazarmark/slog-shim: v0.1.0
• github.com/sourcegraph/conc: v0.3.0

Changed

• cloud.google.com/go/firestore: v1.12.0 → v1.13.0
• github.com/Azure/azure-kusto-go: v0.11.3 → v0.14.0
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.9.0 → v1.9.1
• github.com/Azure/azure-sdk-for-go/sdk/internal: v1.5.0 → v1.5.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/authorization/armauthorization/v2: v2.1.1 → v2.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5: v5.2.0 → v5.4.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v4: v4.4.0 → v4.6.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/iothub/armiothub: v1.2.0 → v1.3.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault: v1.3.0 → v1.4.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/msi/armmsi: v1.1.0 → v1.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4: v4.2.0 → v4.3.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/privatedns/armprivatedns: v1.1.0 → v1.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resourcehealth/armresourcehealth: v1.2.0 → v1.3.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources: v1.1.1 → v1.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/search/armsearch: v1.2.0 → v1.3.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/servicebus/armservicebus: v1.1.1 → v1.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage: v1.4.0 → v1.5.0
• github.com/Azure/azure-service-operator/v2: v2.4.0 → v2.5.0
• github.com/armon/go-metrics: v0.4.0 → v0.4.1
• github.com/coreos/go-oidc: v2.1.0+incompatible → v2.2.1+incompatible
• github.com/davecgh/go-spew: v1.1.1 → d8f796a
• github.com/docker/distribution: v2.8.2+incompatible → v2.8.3+incompatible
• github.com/dustin/go-humanize: v1.0.0 → v1.0.1
• github.com/fatih/color: v1.15.0 → v1.16.0
• github.com/felixge/httpsnoop: v1.0.3 → v1.0.4
• github.com/fvbommel/sortorder: v1.0.1 → v1.1.0
• github.com/go-logr/logr: v1.3.0 → v1.4.1
• github.com/google/s2a-go: v0.1.3 → v0.1.7
• github.com/google/uuid: v1.4.0 → v1.5.0
• github.com/googleapis/enterprise-certificate-proxy: v0.2.3 → v0.3.1
• github.com/googleapis/gax-go/v2: v2.8.0 → v2.12.0
• github.com/hashicorp/consul/api: v1.20.0 → v1.25.1
• github.com/hashicorp/go-hclog: v1.2.0 → v1.5.0
• github.com/mattn/go-isatty: v0.0.17 → v0.0.20
• github.com/mitchellh/go-wordwrap: v1.0.0 → v1.0.1
• github.com/onsi/ginkgo/v2: v2.13.1 → v2.14.0
• github.com/pelletier/go-toml/v2: v2.0.8 → v2.1.0
• github.com/pmezard/go-difflib: v1.0.0 → 5d4384e
• github.com/prometheus/client_golang: v1.17.0 → v1.18.0
• github.com/sagikazarmark/crypt: v0.10.0 → v0.15.0
• github.com/spf13/afero: v1.9.5 → v1.10.0
• github.com/spf13/viper: v1.16.0 → v1.17.0
• github.com/subosito/gotenv: v1.4.2 → v1.6.0
• github.com/xlab/treeprint: v1.1.0 → v1.2.0
• go.etcd.io/bbolt: v1.3.6 → v1.3.7
• go.etcd.io/etcd/api/v3: v3.5.9 → v3.5.10
• go.etcd.io/etcd/client/pkg/v3: v3.5.9 → v3.5.10
• go.etcd.io/etcd/client/v2: v2.305.7 → v2.305.9
• go.etcd.io/etcd/client/v3: v3.5.9 → v3.5.10
• go.etcd.io/etcd/pkg/v3: v3.5.7 → v3.5.9
• go.etcd.io/etcd/raft/v3: v3.5.7 → v3.5.9
• go.etcd.io/etcd/server/v3: v3.5.7 → v3.5.9
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.44.0 → v0.46.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.20.0 → v1.21.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.20.0 → v1.21.0
• go.opentelemetry.io/otel/exporters/prometheus: v0.43.0 → v0.44.0
• go.opentelemetry.io/otel/metric: v1.20.0 → v1.21.0
• go.opentelemetry.io/otel/sdk/metric: v1.20.0 → v1.21.0
• go.opentelemetry.io/otel/sdk: v1.20.0 → v1.21.0
• go.opentelemetry.io/otel/trace: v1.20.0 → v1.21.0
• go.opentelemetry.io/otel: v1.20.0 → v1.21.0
• go.starlark.net: 8dd3e2e → a134d8f
• go.uber.org/mock: v0.3.0 → v0.4.0
• golang.org/x/crypto: v0.15.0 → v0.18.0
• golang.org/x/net: v0.17.0 → v0.19.0
• golang.org/x/oauth2: v0.13.0 → v0.14.0
• golang.org/x/sync: v0.4.0 → v0.5.0
• golang.org/x/sys: v0.14.0 → v0.16.0
• golang.org/x/term: v0.14.0 → v0.16.0
• golang.org/x/time: v0.4.0 → v0.5.0
• golang.org/x/tools: v0.14.0 → v0.16.1
• google.golang.org/api: v0.122.0 → v0.143.0
• google.golang.org/genproto/googleapis/api: b8732ec → 007df8e
• google.golang.org/genproto/googleapis/rpc: b8732ec → e6e6cda
• google.golang.org/genproto: b8732ec → 007df8e
• k8s.io/api: v0.27.2 → v0.28.4
• k8s.io/apiextensions-apiserver: v0.27.2 → v0.28.4
• k8s.io/apimachinery: v0.28.3 → v0.28.4
• k8s.io/apiserver: v0.27.2 → v0.28.4
• k8s.io/cli-runtime: v0.27.2 → v0.28.4
• k8s.io/client-go: v0.27.2 → v0.28.4
• k8s.io/cloud-provider: v0.27.1 → v0.28.4
• k8s.io/cluster-bootstrap: v0.27.2 → v0.28.4
• k8s.io/code-generator: v0.27.2 → v0.28.4
• k8s.io/component-base: v0.28.3 → v0.28.4
• k8s.io/component-helpers: v0.27.2 → v0.28.4
• k8s.io/controller-manager: v0.27.1 → v0.28.4
• k8s.io/kms: v0.28.3 → v0.28.4
• k8s.io/kube-openapi: 8b0f38b → 2695361
• k8s.io/kubectl: v0.27.2 → v0.28.4
• k8s.io/kubelet: v0.27.1 → v0.28.4
• k8s.io/metrics: v0.27.2 → v0.28.4
• sigs.k8s.io/cloud-provider-azure: v1.27.7 → v1.28.4
• sigs.k8s.io/cluster-api/test: v1.5.3 → v1.6.1
• sigs.k8s.io/cluster-api: v1.5.3 → v1.6.1
• sigs.k8s.io/kustomize/api: v0.13.2 → 6ce0bf3
• sigs.k8s.io/kustomize/kustomize/v5: v5.0.1 → 6ce0bf3
• sigs.k8s.io/kustomize/kyaml: v0.14.1 → 6ce0bf3

Removed

• contrib.go.opencensus.io/exporter/prometheus: v0.1.0
• github.com/Azure/aad-pod-identity: v1.8.17
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal: v1.1.2
• github.com/OneOfOne/xxhash: v1.2.2
• github.com/alecthomas/template: a0175ee
• github.com/antlr/antlr4/runtime/Go/antlr: v1.4.10
• github.com/armon/circbuf: bbbad09
• github.com/armon/go-radix: 7fddfc3
• github.com/bgentry/speakeasy: v0.1.0
• github.com/bketelsen/crypt: 5cbc8cc
• github.com/buger/jsonparser: v1.1.1
• github.com/cespare/xxhash: v1.1.0
• github.com/coreos/bbolt: v1.3.2
• github.com/coreos/etcd: v3.3.13+incompatible
• github.com/coreos/go-iptables: v0.3.0
• github.com/coreos/pkg: 399ea9e
• github.com/dgrijalva/jwt-go: v3.2.0+incompatible
• github.com/dgryski/go-sip13: e10d5fe
• github.com/docopt/docopt-go: ee0de3b
• github.com/flowstack/go-jsonschema: v0.1.1
• github.com/flynn/go-shlex: 3f9db97
• github.com/ghodss/yaml: v1.0.0
• github.com/go-kit/kit: v0.8.0
• github.com/go-stack/stack: v1.8.0
• github.com/google/gnostic: v0.6.9
• github.com/google/go-github/v48: v48.2.0
• github.com/googleapis/gnostic: v0.5.5
• github.com/gopherjs/gopherjs: 0766667
• github.com/gorilla/mux: v1.8.0
• github.com/hashicorp/consul/sdk: v0.1.1
• github.com/hashicorp/errwrap: v1.0.0
• github.com/hashicorp/go-msgpack: v0.5.3
• github.com/hashicorp/go-multierror: v1.0.0
• github.com/hashicorp/go-sockaddr: v1.0.0
• github.com/hashicorp/go-syslog: v1.0.0
• github.com/hashicorp/go-uuid: v1.0.1
• github.com/hashicorp/go.net: v0.0.1
• github.com/hashicorp/logutils: v1.0.0
• github.com/hashicorp/mdns: v1.0.0
• github.com/hashicorp/memberlist: v0.1.3
• github.com/jtolds/gls: v4.20.0+incompatible
• github.com/konsorten/go-windows-terminal-sequences: v1.0.1
• github.com/kr/logfmt: b84e30a
• github.com/miekg/dns: v1.0.14
• github.com/mitchellh/cli: v1.0.0
• github.com/mitchellh/go-testing-interface: v1.0.0
• github.com/mitchellh/gox: v0.4.0
• github.com/mitchellh/iochan: v1.0.0
• github.com/oklog/ulid: v1.3.1
• github.com/pascaldekloe/goe: 57f6aae
• github.com/posener/complete: v1.1.1
• github.com/prometheus/tsdb: v0.7.1
• github.com/ryanuber/columnize: 9b3edd6
• github.com/sean-/seed: e2103e2
• github.com/shurcooL/sanitized_anchor_name: v1.0.0
• github.com/smartystreets/assertions: b2de0cb
• github.com/smartystreets/goconvey: v1.6.4
• github.com/spaolacci/murmur3: f09979e
• github.com/spf13/jwalterweatherman: v1.1.0
• github.com/vishvananda/netlink: e5fd1f8
• github.com/vishvananda/netns: db3c7e5
• gopkg.in/alecthomas/kingpin.v2: v2.2.6
• gopkg.in/resty.v1: v1.12.0