v0.20250509.0

What's Changed

Changes

• enable shellspec running in a container by @Devinwong in #6239
• chore: consolidate helpers used in long running operations in cse by @UtheMan in #6280
• test(abe2e): ensure aks-log-collector status within common linux validation by @cameronmeissner in #6209
• feat: return early from retrycmd_if_failure/retrycmd_silent when global CSE timeout is approaching by @UtheMan in #6301
• feat: install dm-multipath package in Azure Linux by @NedAnd1 in #6314
• fix: bump linux VHD build image pull timeout to 5 minutes by @cameronmeissner in #6320
• fix extension by @yagmurbaydogan in #6321
• feat: use verified commits in auto-tidy workflow by @cameronmeissner in #6323
• feat: add Copilot settings for commit message and code generation ins… by @bravebeaver in #6327
• feat: add early exit and consolidate retry to curl helpers by @UtheMan in #6329
• Add GRID GPU container image to renovate and automerging it by @ganeshkumarashok in #6333
• docs: update windows release notes for 2025-04B by @aks-node-assistant in #6220
• Creating a symlink of crictl in the old location by @Devinwong in #6336
• feat: migrate build performance to TME from corp by @zachary-bailey in #6344
• refactor: run kubelet credential validation in main process of kubelet.service by @cameronmeissner in #6328
• update makefile shellspec command by @Devinwong in #6345
• disable windows e2e by @timmy-wright in #6351
• Revert "refactor: run kubelet credential validation in main process of kubelet.service (#6328)" by @cameronmeissner in #6353
• chore: update CODEOWNERS by @cameronmeissner in #6354
• refactor: don't block on pre-start script termination when starting kubelet.service by @cameronmeissner in #6318
• chore: enable systemd watchdog for kubelet on k8s >=1.32 by @djsly in #6343
• removing git and kernel-devel from Ubuntu/AzLinux by @djsly in #6115
• fix: ua attach timeout bug by @zachary-bailey in #6356
• fix: download dialog and readline-common for 18.04 by @zachary-bailey in #6357
• fix(vhdbuilder): Pass DEBIAN_FRONTEND when installing git during test by @jepio in #6358

Dependabot Updates

• chore(deps): bump golangci/golangci-lint-action from 7 to 8 by @dependabot in #6338

VHD Component Updates

• chore(deps): update acr-credential-provider (patch) by @renovate in #6250
• chore: upgrade Azure Disk CSI driver versions by @andyzhangx in #6241
• chore(deps): update kube-components (patch) by @renovate in #6208
• chore: bump gatekeeper version 3.19.1 by @kevinhwangkr-msft in #6319
• chore(deps): update aks/aks-gpu-grid docker tag to v550 by @renovate in #6334
• Revert "chore(deps): update aks/aks-gpu-grid docker tag to v550 (#6334)" by @ganeshkumarashok in #6340
• chore: cache secrets-store-csi-driver v1.5.0 and secrets-store-provider-azure v1.7.0 by @jiashun0011 in #6249
• chore: Migrate acs-mirror to packages.aks.azure.com by @smith1511 in #6260
• chore(deps): update kube-components for 1.33.0 by @wenhug in #6317
• feat(stls): install aks-secure-tls-bootstrap-client binary on linux VHDs by @cameronmeissner in #6332
• chore: upgrade Azure CSI driver versions by @andyzhangx in #6355

New Contributors

• @NedAnd1 made their first contribution in #6314

Full Changelog: v0.20250428.0...v0.20250509.0

v0.20250428.0

What's Changed

Changes

• feat: update live patching scripts to support custom repo service by @YaoC in #6139
• fix: prevent bootstrap token exposure in provisioning logs and simplify kubelet bootstrap logic by @cameronmeissner in #6243
• update Renovate to support auto-updating kubernetes-cri-tools for Ubuntu by @Devinwong in #6234
• fix: apiserver-network-proxy by @ipochi in #6238
• Adding back windows 2025 release note by @zylxjtu in #6237
• fix: downgrade az cli to 2.70.0 due to az compute bug by @zachary-bailey in #6252
• fix: remove bcc log from VHD by @zachary-bailey in #6262
• Immediate exit with error during VHD build time by @Devinwong in #6248
• fix: correctly check exit code returned from retry operations by @UtheMan in #6251
• feat: add labeler workflow by @cameronmeissner in #6275
• cleanup: remove old codeowners by @cameronmeissner in #6292
• fix: exclude components label from the Changes category of official release notes by @cameronmeissner in #6294
• enforce shellcheck SC3010 and SC3014 for provisioning scripts by @Devinwong in #6223
• applying -ne and -eq to numerical values comparison by @Devinwong in #6295

VHD Component Updates

• chore(deps): update azure-cns (patch) by @renovate in #6145
• chore: bump addon 1.11.1 by @kevinhwangkr-msft in #6266

New Contributors

• @YaoC made their first contribution in #6139

Full Changelog: v0.20250422.0...v0.20250428.0

v0.20250422.0

What's Changed

Changes

• Changing [[ ]] to [] for POSIX compliant - for build scripts only by @Devinwong in #6222
• Dont enable LocalDNS for ContainerdAirgappedK8sNotCached and PrivateKube by @SriHarsha001 in #6230
• update readme image and path by @Devinwong in #6232
• chore: update windows scripts to 0.0.52 by @timmy-wright in #6226

Dependabot Updates

• chore(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 by @dependabot in #6225
• chore(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 in /vhdbuilder/lister by @dependabot in #6224

VHD Component Updates

• chore(deps): update oss/kubernetes-csi/azuredisk-csi docker tag to v1.32.3 by @renovate in #6236
• chore: bump addon and gatekeeper 3.19.0 by @kevinhwangkr-msft in #6235
• chore: managed prometheus addon release april 2025 by @bragi92 in #6231

Full Changelog: v0.20250416.0...v0.20250422.0

v0.20250416.0

What's Changed

Changes

• chore(securitypatch): automated PR to add release notes for 20250404T000000Z by @aks-node-sig-release-assistant in #6158
• Add localdns related files to VHDs by @SriHarsha001 in #6110
• test: add shellspec report by @Devinwong in #6163
• feat: add GitHub release config file and modify dependabot labels by @cameronmeissner in #6159
• chore: automated PR to update VHDVersion for 202504.06.0 VHD by @aks-node-sig-release-assistant in #6156
• chore: automated PR to update ReleaseNotes for 202504.06.0 VHD by @aks-node-sig-release-assistant in #6157
• Add types and tests for localdns by @SriHarsha001 in #6164
• Add validation function and checks for artifact streaming systemd units by @ganeshkumarashok in #6171
• Fine tuning the localdns UT timeout and max attempt for shorter test time by @Devinwong in #6172
• chore: replace ciprod with latest and latest-1 of servercore by @timmy-wright in #6173
• fix: handle curl exit code 000 in validate-kubelet-credentials.sh by @cameronmeissner in #6182
• chore: exclude PRs labeled with ignore-for-release from release notes by @cameronmeissner in #6195
• Add code to generate corefile by @SriHarsha001 in #6174
• cleanup: remove unneeded linux VHD automation tooling by @cameronmeissner in #6198
• Update cse_config for localdns by @SriHarsha001 in #6184
• Add 2025 4B non-sec keys by @zylxjtu in #6192
• fix: migrate to packages.aks.azure.com for package downloads by @zachary-bailey in #6088
• Update coredns image v1.11.3-6 revision to v1.11.3-7 by @SriHarsha001 in #6204
• fix: syntax errors in aks-log-collector.sh by @cameronmeissner in #6207
• CSE: throw tar error on failure by @mainred in #6200
• Add e2e test validations for localdns by @SriHarsha001 in #6205
• feat: Migrated cri-tools to PMC as packages by @Devinwong in #6150
• chore(securitypatch): automated PR to add release notes for 20250413T000000Z by @aks-node-sig-release-assistant in #6213
• bug: better catch in windows cse by @timmy-wright in #6212
• chore: upgrade Azure Disk CSI driver versions by @andyzhangx in #6165
• cleanup: remove kata containers image files from cvm vhd-image-builde… by @pineapplethevoyager in #6206
• chore: add packer timestamps by @timmy-wright in #6214
• feat: bump windows image version for 2025-04B by @aks-node-sig-release-assistant in #6215
• test: add spec for shellspec tests, checking exit codes for helper commands used in long running operations by @UtheMan in #6216
• Update mirror version 0.2.11 with fixes for artifact streaming (race condition during installation) by @ganeshkumarashok in #6221

Dependabot Updates

• chore(deps): bump actions/create-github-app-token from 1 to 2 by @dependabot in #6153

VHD Component Updates

• chore(deps): update containernetworking/azure-npm docker tag to v1.5.45 by @renovate in #6146

Full Changelog: v0.20250406.2...v0.20250416.0

v0.20250406.2

What's Changed

• chore: automated PR to update ReleaseNotes for 202504.02.0 VHD by @aks-node-sig-release-assistant in #6149
• chore: upgrade blob csi driver to v1.24.9 by @andyzhangx in #6144
• chore: automated PR to update VHDVersion for 202504.02.0 VHD by @aks-node-sig-release-assistant in #6148
• chore(deps): bump github.com/onsi/gomega from 1.36.3 to 1.37.0 by @dependabot in #6152
• Add latest coredns image 1.12.1-1 to VHD used in 1.33 AKS clusters by @SriHarsha001 in #6151
• fix: handle curl exit code 000 in validate-kubelet-credentials.sh by @UtheMan in #6201

Full Changelog: v0.20250402.0...v0.20250406.2

v0.20250402.0

What's Changed

• chore: bump go version for node-controller by @UtheMan in #6070
• chore(deps): update csi (patch) by @renovate in #6066
• feat: fail vhd-scanning on cve check by @jason1028kr in #6058
• chore: automated PR to update ReleaseNotes for 202503.21.0 VHD by @aks-node-sig-release-assistant in #6069
• chore: automated PR to update VHDVersion for 202503.21.0 VHD by @aks-node-sig-release-assistant in #6068
• chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 in /e2e by @dependabot in #6071
• chore: bump go for node-controller to 1.23 by @UtheMan in #6072
• test: validate windows image binary signature by @mainred in #6073
• Add support kubelet config file in scritpless by @Devinwong in #6065
• chore(deps): update csi (patch) by @renovate in #6078
• chore(deps): bump github.com/spf13/cobra from 1.6.1 to 1.9.1 by @dependabot in #6074
• chore(securitypatch): automated PR to add release notes for 20250318T000000Z by @aks-node-sig-release-assistant in #6085
• chore: bump crictl-tools 1.32.0 by @AlisonB319 in #6079
• chore: fix go mod by @timmy-wright in #6083
• feat: update apserver-network-proxy agent image by @ipochi in #6077
• Add license and GRID driver validation, move nvidia systemd service files by @ganeshkumarashok in #6067
• chore: automated PR to update ReleaseNotes for 202503.26.0 VHD by @aks-node-sig-release-assistant in #6091
• feat: add auto-tidy workflow to support dependabot PRs by @cameronmeissner in #6089
• Purge asc-baseline after execution by @jepio in #6095
• fix: make auto-tidy workflow usable by dependabot by @cameronmeissner in #6096
• feat: more explicitly warn/error on mismatching image versions during VHD automation by @cameronmeissner in #6099
• chore(deps): bump github.com/gorilla/handlers from 1.5.1 to 1.5.2 by @dependabot in #4308
• chore(deps): bump github.com/Azure/go-autorest/autorest/to from 0.4.0 to 0.4.1 by @dependabot in #6093
• chore(deps): bump golang.org/x/net from 0.33.0 to 0.36.0 by @dependabot in #6086
• Add function to extract and cache CoreDNS Binary in VHD for localdns by @SriHarsha001 in #6082
• chore: automated PR to update ReleaseNotes for 202503.27.0 VHD by @aks-node-sig-release-assistant in #6102
• chore(deps): bump golangci/golangci-lint-action from 4 to 6 by @dependabot in #4375
• test: update e2e config to match evictionHard default value to 100Mi by @bravebeaver in #6094
• chore: github action updated to v7 and golangci-lint version v2.0 is … by @bravebeaver in #6109
• fix: remove toolchain line from go.mod via auto-tidy by @cameronmeissner in #6111
• chore: fix typo by @UtheMan in #6116
• chore(deps): update azure-policy/policy-kubernetes-webhook docker tag to v1.10.1 by @renovate in #6108
• chore(deps): update azure-policy/policy-kubernetes-addon-prod docker tag to v1.10.1 by @renovate in #6107
• Revert e2e config: update e2e config to match evictionHard default value to 100Mi (#6094) by @ganeshkumarashok in #6119
• bug: fix get kubelet identity not retrying when imds has temp 400 response by @fseldow in #6087
• chore(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @dependabot in #6106
• Enable fabric manager for H200 GPUs by @ganeshkumarashok in #6118
• fix for H200: update 550 CUDA driver with fabric manager topology fix by @ganeshkumarashok in #6120
• feat: set SDNRemoteArpMacAddress for HNS during AzCNI setup by @rbtr in #6062
• chore: predefine write-log by @timmy-wright in #6135
• chore(deps): update csi (patch) by @renovate in #6136
• chore(securitypatch): automated PR to add release notes for 20250328T000000Z by @aks-node-sig-release-assistant in #6137
• chore(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @dependabot in #6105
• fix: don't source provision_source.sh in validate-kubelet-credentials.sh by @cameronmeissner in #6138
• chore(deps): bump github.com/onsi/gomega from 1.33.1 to 1.36.3 by @dependabot in #6104
• chore(deps): bump github.com/Masterminds/semver/v3 from 3.2.1 to 3.3.1 by @dependabot in #5580
• chore(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 by @dependabot in #4309
• chore(deps): bump go version in setup-go actions by @cameronmeissner in #6098
• chore: revert release notes for 202503.27.0 VHD by @AlisonB319 in #6142
• test: refactor extractKubeBinaries and add unit test by @Devinwong in #6117
• chore(deps): update containernetworking/azure-cns docker tag to v1.6.23 by @renovate in #6129

New Contributors

• @jepio made their first contribution in #6095

Full Changelog: v0.20250321.1...v0.20250402.0

v0.20230313.1

What's Changed

• refactor: increase nvidia-smi timeout and relax gpu validation timeout to 5 minutes by @alexeldeib in #2910

Full Changelog: v0.20230313.0...v0.20230313.1

v0.20230306.3

What's Changed

• refactor: increase nvidia-smi timeout and relax gpu validation timeout to 5 minutes by @alexeldeib in #2911

Full Changelog: v0.20230306.2...v0.20230306.3

v0.20230306.2

What's Changed

• Revert "refactor: move custom sysctls to cse" (#2863) by @alexeldeib in #2865

Full Changelog: v0.20230306.1...v0.20230306.2

v0.20230216.7

What's Changed

• Revert "refactor: move custom sysctls to cse" (#2863) by @alexeldeib in #2864

Full Changelog: v0.20230216.6...v0.20230216.7