v1.13.4

Changes by Kind

Bug or Regression

• Enable per-sub msi client (#4716, @jackfrancis)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v1.14.1

Changes by Kind

Bug Fix or Regression

• Make AKS extension.Plan optional (#4683, @willie-yao)
• Set PrincipalType in RoleAssignment creation API call when using SystemAssigned identity. (#4663, @whites11)

Other (Cleanup or Flake)

• Bump CAPI to v1.6.3 (#4644, @mboersma)

Dependencies

Added

Nothing has changed.

Changed

• google.golang.org/protobuf: v1.32.0 → v1.33.0
• sigs.k8s.io/cluster-api/test: v1.6.2 → v1.6.3
• sigs.k8s.io/cluster-api: v1.6.2 → v1.6.3

Removed

Nothing has changed.

Details

v1.14.0...v1.14.1

v1.13.3

Changes by Kind

Bug Fix or Regression

• Set PrincipalType in RoleAssignment creation API call when using SystemAssigned identity. (#4664, @whites11)

Other (Cleanup or Flake)

• Bump CAPI to v1.6.3 (#4645, @mboersma)

Dependencies

Added

Nothing has changed.

Changed

• google.golang.org/protobuf: v1.31.0 → v1.33.0
• sigs.k8s.io/cluster-api/test: v1.6.2 → v1.6.3
• sigs.k8s.io/cluster-api: v1.6.2 → v1.6.3

Removed

Nothing has changed.

Details

v1.13.2...v1.13.3

v1.14.0

Changes by Kind

Feature

• Add additional Printer Columns like "Ready", "Severity", "Reason" and "Message" to CAPZ resources (#4442, @prashantrewar)
• Add support for AKS Extensions and Marketplace Offers (#4360, @willie-yao)
• Add support for Azure CNI Powered by Cilium (#4522, @willie-yao)
• Allow ASO to install other CRDs (#4547, @nawazkh)
• Allow adding pre-existing privateDNSZone to AKS clusters (#4572, @nawazkh)
• CAPZ now uses metadata.ownerReferences instead of the sigs.k8s.io_cluster-api-provider-azure_owned label to track ownership of ASO resources (#4499, @nojnhuh)
• EXPERIMENTAL: Added fields to AzureManagedControlPlane and AzureManagedMachinePool to supply arbitrary JSON merge patches to underlying ASO resources (#4527, @nojnhuh)
• Enable ASO in creating configMap for OIDC Issuer URL (#4551, @nawazkh)
• Expose AKS preview features (#4617, @willie-yao)
• Support for AKS Security Profile (#4245, @LochanRn)
• Support for Auto upgrade channels in AKS. (#4129, @LochanRn)
• Support to deploy infra clusters using a single subnet for both control plane and worker nodes. (#4253, @LochanRn)
• Use existing virtualNetwork from a different rg (#4606, @nawazkh)

Bug or Regression

• CAPZ now deletes ASO resources it manages if references to them are removed from CAPZ resource specs (#4506, @nojnhuh)
• Correcting AzureManagedMachinePool subnet name validation webhook to match Azure subnet naming rules. (#4511, @MagnusRef)
• Fixed a bug where tags applied by Azure Policy were keeping CAPZ from reconciling ASO ResourceGroups and ManagedClusters (#4531, @nojnhuh)
• Make PlatformFaultDomainCount & ZoneBalance configurable on AzureMachinePools (#4554, @willie-yao)
• Service CIDR addition to AKS Cluster should be independent of DNS Service IP (#4503, @nawazkh)

Other (Cleanup or Flake)

• Bump CAPI to v1.6.2 (#4585, @mboersma)

Dependencies

Added

• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/kubernetesconfiguration/armkubernetesconfiguration: v1.1.1

Changed

• cloud.google.com/go/accessapproval: v1.7.1 → v1.7.4
• cloud.google.com/go/accesscontextmanager: v1.8.1 → v1.8.4
• cloud.google.com/go/aiplatform: v1.48.0 → v1.57.0
• cloud.google.com/go/analytics: v0.21.3 → v0.21.6
• cloud.google.com/go/apigateway: v1.6.1 → v1.6.4
• cloud.google.com/go/apigeeconnect: v1.6.1 → v1.6.4
• cloud.google.com/go/apigeeregistry: v0.7.1 → v0.8.2
• cloud.google.com/go/appengine: v1.8.1 → v1.8.4
• cloud.google.com/go/area120: v0.8.1 → v0.8.4
• cloud.google.com/go/artifactregistry: v1.14.1 → v1.14.6
• cloud.google.com/go/asset: v1.14.1 → v1.15.3
• cloud.google.com/go/assuredworkloads: v1.11.1 → v1.11.4
• cloud.google.com/go/automl: v1.13.1 → v1.13.4
• cloud.google.com/go/baremetalsolution: v1.1.1 → v1.2.3
• cloud.google.com/go/batch: v1.3.1 → v1.7.0
• cloud.google.com/go/beyondcorp: v1.0.0 → v1.0.3
• cloud.google.com/go/bigquery: v1.53.0 → v1.57.1
• cloud.google.com/go/billing: v1.16.0 → v1.18.0
• cloud.google.com/go/binaryauthorization: v1.6.1 → v1.8.0
• cloud.google.com/go/certificatemanager: v1.7.1 → v1.7.4
• cloud.google.com/go/channel: v1.16.0 → v1.17.3
• cloud.google.com/go/cloudbuild: v1.13.0 → v1.15.0
• cloud.google.com/go/clouddms: v1.6.1 → v1.7.3
• cloud.google.com/go/cloudtasks: v1.12.1 → v1.12.4
• cloud.google.com/go/compute: v1.23.0 → v1.23.3
• cloud.google.com/go/contactcenterinsights: v1.10.0 → v1.12.1
• cloud.google.com/go/container: v1.24.0 → v1.29.0
• cloud.google.com/go/containeranalysis: v0.10.1 → v0.11.3
• cloud.google.com/go/datacatalog: v1.16.0 → v1.19.0
• cloud.google.com/go/dataflow: v0.9.1 → v0.9.4
• cloud.google.com/go/dataform: v0.8.1 → v0.9.1
• cloud.google.com/go/datafusion: v1.7.1 → v1.7.4
• cloud.google.com/go/datalabeling: v0.8.1 → v0.8.4
• cloud.google.com/go/dataplex: v1.9.0 → v1.13.0
• cloud.google.com/go/dataproc/v2: v2.0.1 → v2.3.0
• cloud.google.com/go/dataqna: v0.8.1 → v0.8.4
• cloud.google.com/go/datastore: v1.13.0 → v1.15.0
• cloud.google.com/go/datastream: v1.10.0 → v1.10.3
• cloud.google.com/go/deploy: v1.13.0 → v1.16.0
• cloud.google.com/go/dialogflow: v1.40.0 → v1.47.0
• cloud.google.com/go/dlp: v1.10.1 → v1.11.1
• cloud.google.com/go/documentai: v1.22.0 → v1.23.6
• cloud.google.com/go/domains: v0.9.1 → v0.9.4
• cloud.google.com/go/edgecontainer: v1.1.1 → v1.1.4
• cloud.google.com/go/essentialcontacts: v1.6.2 → v1.6.5
• cloud.google.com/go/eventarc: v1.13.0 → v1.13.3
• cloud.google.com/go/filestore: v1.7.1 → v1.8.0
• cloud.google.com/go/firestore: v1.13.0 → v1.14.0
• cloud.google.com/go/functions: v1.15.1 → v1.15.4
• cloud.google.com/go/gkebackup: v1.3.0 → v1.3.4
• cloud.google.com/go/gkeconnect: v0.8.1 → v0.8.4
• cloud.google.com/go/gkehub: v0.14.1 → v0.14.4
• cloud.google.com/go/gkemulticloud: v1.0.0 → v1.0.3
• cloud.google.com/go/gsuiteaddons: v1.6.1 → v1.6.4
• cloud.google.com/go/iam: v1.1.1 → v1.1.5
• cloud.google.com/go/iap: v1.8.1 → v1.9.3
• cloud.google.com/go/ids: v1.4.1 → v1.4.4
• cloud.google.com/go/iot: v1.7.1 → v1.7.4
• cloud.google.com/go/kms: v1.15.0 → v1.15.5
• cloud.google.com/go/language: v1.10.1 → v1.12.2
• cloud.google.com/go/lifesciences: v0.9.1 → v0.9.4
• cloud.google.com/go/logging: v1.7.0 → v1.8.1
• cloud.google.com/go/longrunning: v0.5.1 → v0.5.4
• cloud.google.com/go/managedidentities: v1.6.1 → v1.6.4
• cloud.google.com/go/maps: v1.4.0 → v1.6.2
• cloud.google.com/go/mediatranslation: v0.8.1 → v0.8.4
• cloud.google.com/go/memcache: v1.10.1 → v1.10.4
• cloud.google.com/go/metastore: v1.12.0 → v1.13.3
• cloud.google.com/go/monitoring: v1.15.1 → v1.16.3
• cloud.google.com/go/networkconnectivity: v1.12.1 → v1.14.3
• cloud.google.com/go/networkmanagement: v1.8.0 → v1.9.3
• cloud.google.com/go/networksecurity: v0.9.1 → v0.9.4
• cloud.google.com/go/notebooks: v1.9.1 → v1.11.2
• cloud.google.com/go/optimization: v1.4.1 → v1.6.2
• cloud.google.com/go/orchestration: v1.8.1 → v1.8.4
• cloud.google.com/go/orgpolicy: v1.11.1 → v1.11.4
• cloud.google.com/go/osconfig: v1.12.1 → v1.12.4
• cloud.google.com/go/oslogin: v1.10.1 → v1.12.2
• cloud.google.com/go/phishingprotection: v0.8.1 → v0.8.4
• cloud.google.com/go/policytroubleshooter: v1.8.0 → v1.10.2
• cloud.google.com/go/privatecatalog: v0.9.1 → v0.9.4
• cloud.google.com/go/recaptchaenterprise/v2: v2.7.2 → v2.9.0
• cloud.google.com/go/recommendationengine: v0.8.1 → v0.8.4
• cloud.google.com/go/recommender: v1.10.1 → v1.11.3
• cloud.google.com/go/redis: v1.13.1 → v1.14.1
• cloud.google.com/go/resourcemanager: v1.9.1 → v1.9.4
• cloud.google.com/go/resourcesettings: v1.6.1 → v1.6.4
• cloud.google.com/go/retail: v1.14.1 → v1.14.4
• cloud.google.com/go/run: v1.2.0 → v1.3.3
• cloud.google.com/go/scheduler: v1.10.1 → v1.10.5
• cloud.google.com/go/secretmanager: v1.11.1 → v1.11.4
• cloud.google.com/go/security: v1.15.1 → v1.15.4
• cloud.google.com/go/securitycenter: v1.23.0 → v1.24.3
• cloud.google.com/go/servicedirectory: v1.11.0 → v1.11.3
• cloud.google.com/go/shell: v1.7.1 → v1.7.4
• cloud.google.com/go/spanner: v1.47.0 → v1.53.1
• cloud.google.com/go/speech: v1.19.0 → v1.21.0
• cloud.google.com/go/storagetransfer: v1.10.0 → v1.10.3
• cloud.google.com/go/talent: v1.6.2 → v1.6.5
• cloud.google.com/go/texttospeech: v1.7.1 → v1.7.4
• cloud.google.com/go/tpu: v1.6.1 → v1.6.4
• cloud.google.com/go/trace: v1.10.1 → v1.10.4
• cloud.google.com/go/translate: v1.8.2 → v1.9.3
• cloud.google.com/go/video: v1.19.0 → v1.20.3
• cloud.google.com/go/videointelligence: v1.11.1 → v1.11.4
• cloud.google.com/go/vision/v2: v2.7.2 → v2.7.5
• cloud.google.com/go/vmmigration: v1.7.1 → v1.7.4
• cloud.google.com/go/vmwareengine: v1.0.0 → v1.0.3
• cloud.google.com/go/vpcaccess: v1.7.1 → v1.7.4
• cloud.google.com/go/webrisk: v1.9.1 → v1.9.4
• cloud.google.com/go/websecuri...

v1.13.2

Changes by Kind

Bug or Regression

• Service CIDR addition to AKS Cluster should be independent of DNS Service IP (#4549, @nawazkh)

Other (Cleanup or Flake)

• Bump CAPI to v1.6.2 (#4590, @mboersma)

Dependencies

Added

Nothing has changed.

Changed

• sigs.k8s.io/cluster-api/test: v1.6.1 → v1.6.2
• sigs.k8s.io/cluster-api: v1.6.1 → v1.6.2
• sigs.k8s.io/controller-runtime: v0.16.3 → v0.16.5
• sigs.k8s.io/kind: v0.20.0 → v0.22.0

Removed

Nothing has changed.

v1.12.4

Changes by Kind

Bug or Regression

• Service CIDR addition to AKS Cluster should be independent of DNS Service IP (#4550, @nawazkh)

Other (Cleanup or Flake)

• Bump CAPI to v1.5.6 (#4586, @mboersma)

Dependencies

Added

Nothing has changed.

Changed

• sigs.k8s.io/cluster-api/test: v1.5.5 → v1.5.6
• sigs.k8s.io/cluster-api: v1.5.5 → v1.5.6

Removed

Nothing has changed.

v1.13.1

Changes by Kind

Bug or Regression

• Fixed a bug where tags applied by Azure Policy were keeping CAPZ from reconciling ASO ResourceGroups and ManagedClusters (#4541, @nojnhuh)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v1.12.3

Changes by Kind

Bug or Regression

• Fixed a bug where tags applied by Azure Policy were keeping CAPZ from reconciling ASO ResourceGroups and ManagedClusters (#4540, @nojnhuh)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v1.13.0

Changes by Kind

Feature

• Add ability to specify multiple sources for a security rule (#3961, @nawazkh)
• Add support for joining clusters to AKS Fleet (#4316, @willie-yao)
• CAPZ now adds the clusterctl.cluster.x-k8s.io/block-move annotation during clusterctl move to better synchronize pause operations (#4213, @nojnhuh)
• Migrate Private Endpoints Service to use ASO Framework (#4108, @nawazkh)
• Make all reconcile timeouts configurable (#4406, @CecileRobertMichon)

Documentation

• Reorganized the disk pages into their own section and added a new documentation section discussing disk encryption options. (#4415, @bryan-cox)

Bug or Regression

• ASO environment variables can now be set to refer to a non-public (e.g. government) cloud instance and set ASO's periodic resync interval: https://azure.github.io/azure-service-operator/guide/aso-controller-settings-options/ (#4390, @nojnhuh)
• AzureManagedMachinePool will check its annotations for DeleteForMoveAnnotation during clusterctl move operation (#4392, @nawazkh)
• Fix: DNSPrefix error on existing tenant cluster (#4308, @mihaiandreiratoiu)
• Fix: Spot machines failing to provision on regions without availability zones due to use of AvailabilitySets (#4453, @RadekManak)
• Propagate error affecting ASO resources' Ready conditions when tags cannot yet be reconciled. (#4371, @nojnhuh)
• Revert 'Use clusterctl move annotation on last system pool validation' (#4387, @nawazkh)
• Support AKS BYOCNI by allowing networkPlugin: none (#4307, @illrill)

Other (Cleanup or Flake)

• Bump CAPI to v1.6.0 (#4182, @mboersma)
• Bump CAPI to v1.6.1 (#4463, @mboersma)
• CAPZ now depends on ASO v2.5.0. (#4345, @nojnhuh)
• Convert bastionhosts to ASO (#4143, @willie-yao)
• Remove deprecated kubelet credential provider flag (#4436, @CecileRobertMichon)
• Remove support for AAD Pod Identity (#4424, @mboersma)
• Subnets and virtualnetworks are now managed with ASO (#4300, @nojnhuh)
• Update AzCNI to v1.5.16 (#4315, @rbtr)
• Use CAAPH to install cloud-provider-azure in tests (#4413, @CecileRobertMichon)

Dependencies

Added

• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservicefleet/armcontainerservicefleet: v1.1.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/eventgrid/armeventgrid: v1.0.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v2: v2.0.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor: v0.11.0
• github.com/ProtonMail/go-crypto: 7d5c6f0
• github.com/bwesterb/go-ristretto: v1.2.3
• github.com/cloudflare/circl: v1.3.7
• github.com/distribution/reference: v0.5.0
• github.com/google/go-github/v53: v53.2.0
• github.com/klauspost/compress: v1.17.0
• github.com/minio/highwayhash: v1.0.2
• github.com/nats-io/jwt/v2: v2.4.1
• github.com/nats-io/nats.go: v1.30.2
• github.com/nats-io/nkeys: v0.4.5
• github.com/nats-io/nuid: v1.0.1
• github.com/sagikazarmark/locafero: v0.3.0
• github.com/sagikazarmark/slog-shim: v0.1.0
• github.com/sourcegraph/conc: v0.3.0

Changed

• cloud.google.com/go/firestore: v1.12.0 → v1.13.0
• github.com/Azure/azure-kusto-go: v0.11.3 → v0.14.0
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.9.0 → v1.9.1
• github.com/Azure/azure-sdk-for-go/sdk/internal: v1.5.0 → v1.5.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/authorization/armauthorization/v2: v2.1.1 → v2.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5: v5.2.0 → v5.4.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v4: v4.4.0 → v4.6.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/iothub/armiothub: v1.2.0 → v1.3.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault: v1.3.0 → v1.4.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/msi/armmsi: v1.1.0 → v1.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4: v4.2.0 → v4.3.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/privatedns/armprivatedns: v1.1.0 → v1.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resourcehealth/armresourcehealth: v1.2.0 → v1.3.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources: v1.1.1 → v1.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/search/armsearch: v1.2.0 → v1.3.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/servicebus/armservicebus: [v1.1.1 → v1.2.0](htt...

v1.12.2

Changes by Kind

Bug or Regression

• ASO environment variables can now be set to refer to a non-public (e.g. government) cloud instance and set ASO's periodic resync interval: https://azure.github.io/azure-service-operator/guide/aso-controller-settings-options/ (#4411, @nojnhuh)
• AzureManagedMachinePool will check its annotations for DeleteForMoveAnnotation during clusterctl move operation (#4396, @nawazkh)
• Propagate error affecting ASO resources' Ready conditions when tags cannot yet be reconciled. (#4379, @nojnhuh)
• Revert 'Use clusterctl move annotation on last system pool validation' (#4389, @nawazkh)

Other (Cleanup or Flake)

• Bump CAPI to v1.5.5 (#4464, @mboersma)
• Remove deprecated kubelet credential provider flag (#4437, @CecileRobertMichon)

Dependencies

Changed

• golang.org/x/crypto: v0.15.0 → v0.17.0
• golang.org/x/sys: v0.14.0 → v0.15.0
• golang.org/x/term: v0.14.0 → v0.15.0
• sigs.k8s.io/cluster-api/test: v1.5.4 → v1.5.5
• sigs.k8s.io/cluster-api: v1.5.4 → v1.5.5