`az command aks`: Add KataVmIsolation workload runtime #9104

Bickor · 2025-08-28T20:25:34Z

This checklist is used to make sure that common guidelines for a pull request are followed.

Related command

az aks

az aks nodepool add --cluster-name myAKSCluster --resource-group myResourceGroup --name nodepool2 --os-sku AzureLinux --workload-runtime KataVmIsolation --node-vm-size Standard_D4s_v3

az aks create --name myAKSCluster --resource-group myResourceGroup --os-sku AzureLinux --workload-runtime KataVmIsolation --node-vm-size Standard_D4s_v3 --node-count 1 --generate-ssh-keys

General Guidelines

Have you run azdev style <YOUR_EXT> locally? (pip install azdev required)
Have you run python scripts/ci/test_index.py -q locally? (pip install wheel==0.30.0 required)
My extension version conforms to the Extension version schema

For new extensions:

My extension description/summary conforms to the Extension Summary Guidelines.

About Extension Publish

There is a pipeline to automatically build, upload and publish extension wheels.
Once your pull request is merged into main branch, a new pull request will be created to update src/index.json automatically.
You only need to update the version information in file setup.py and historical information in file HISTORY.rst in your PR but do not modify src/index.json.

azure-client-tools-bot-prd · 2025-08-28T20:25:37Z

❌Azure CLI Extensions Breaking Change Test

❌aks-preview

rule cmd_name rule_message suggest_message

❌ 1010 - ParaPropUpdate aks nodepool add cmd aks nodepool add update parameter spot_max_price: updated property default from nan to nan please change property default from nan to nan for parameter spot_max_price of cmd aks nodepool add

⚠️ 1010 - ParaPropUpdate aks create cmd aks create update parameter workload_runtime: updated property choices from ['KataCcIsolation', 'KataMshvVmIsolation', 'OCIContainer', 'WasmWasi'] to ['KataCcIsolation', 'KataMshvVmIsolation', 'KataVmIsolation', 'OCIContainer', 'WasmWasi']

⚠️ 1010 - ParaPropUpdate aks nodepool add cmd aks nodepool add update parameter workload_runtime: updated property choices from ['KataCcIsolation', 'KataMshvVmIsolation', 'OCIContainer', 'WasmWasi'] to ['KataCcIsolation', 'KataMshvVmIsolation', 'KataVmIsolation', 'OCIContainer', 'WasmWasi']

azure-client-tools-bot-prd · 2025-08-28T20:25:40Z

Hi @Bickor,
Please write the description of changes which can be perceived by customers into HISTORY.rst.
If you want to release a new extension version, please update the version in setup.py as well.

yonzhan · 2025-08-28T20:25:56Z

Thank you for your contribution! We will review the pull request and get back to you soon.

github-actions · 2025-08-28T20:25:59Z

The git hooks are available for azure-cli and azure-cli-extensions repos. They could help you run required checks before creating the PR.

Please sync the latest code with latest dev branch (for azure-cli) or main branch (for azure-cli-extensions).
After that please run the following commands to enable git hooks:

pip install azdev --upgrade
azdev setup -c <your azure-cli repo path> -r <your azure-cli-extensions repo path>

github-actions · 2025-08-28T20:30:27Z

For more info about extension versioning, please refer to Extension version schema

Copilot

Pull Request Overview

This PR renames the Kata VM isolation workload runtime constant from KataMshvVmIsolation to KataVmIsolation while maintaining backward compatibility with the old name. The version is bumped to 19.0.0b10.

Introduced KataVmIsolation as the new preferred workload runtime value
Kept KataMshvVmIsolation as OLD_KATA_VM_ISOLATION for backward compatibility
Updated SDK enums and constants to support both values

Reviewed Changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
setup.py	Version bump to 19.0.0b10
_container_service_client_enums.py	Reordered enum values to prioritize new `KataVmIsolation` and renamed old value with updated documentation
test_agentpool_decorator.py	Added test methods for the new Kata VM isolation workload runtime
_params.py	Updated imports and workload runtime list to include both new and old constants
_consts.py	Added new constant for `KataVmIsolation` and renamed old constant to `OLD_KATA_VM_ISOLATION`
HISTORY.rst	Added changelog entry for 19.0.0b10

src/aks-preview/azext_aks_preview/tests/latest/test_agentpool_decorator.py

FumingZhang · 2025-11-04T04:40:23Z

/azp run

azure-pipelines · 2025-11-04T04:40:36Z

Azure Pipelines successfully started running 2 pipeline(s).

FumingZhang · 2025-11-04T04:44:30Z

...t_aks_preview/vendored_sdks/azure_mgmt_preview_aks/models/_container_service_client_enums.py

    WASM_WASI = "WasmWasi"
    """Nodes will use Krustlet to run WASM workloads using the WASI provider (Preview)."""
-    KATA_MSHV_VM_ISOLATION = "KataMshvVmIsolation"
+    KATA_VM_ISOLATION = "KataVmIsolation"


no need to update the SDK, it's auto generated

Removed change.

FumingZhang

Is there a need to update the live test case to ensure that both the old and new enums function correctly?

Bickor · 2025-11-04T05:35:16Z

Is there a need to update the live test case to ensure that both the old and new enums function correctly?

Added a test case for the old enum as well.

FumingZhang · 2025-11-04T09:09:04Z

/azp run

azure-pipelines · 2025-11-04T09:09:18Z

Azure Pipelines successfully started running 2 pipeline(s).

src/aks-preview/azext_aks_preview/tests/latest/test_agentpool_decorator.py

src/aks-preview/azext_aks_preview/_consts.py

FumingZhang · 2025-11-05T00:36:57Z

/azp run

azure-pipelines · 2025-11-05T00:37:11Z

Azure Pipelines successfully started running 2 pipeline(s).

FumingZhang · 2025-11-05T00:40:00Z

src/aks-preview/azext_aks_preview/tests/latest/test_aks_commands.py

+    @AKSCustomResourceGroupPreparer(
+        random_name_length=17, name_prefix="clitest", location="westus2"
+    )
+    def test_aks_cluster_kata(


Queued live test to validate the change.

Live test failed with following error

raise CLIError('An RSA key file or key value must be supplied to SSH Key Value. '

'You can use --generate-ssh-keys to let CLI generate one for you')

E knack.util.CLIError: An RSA key file or key value must be supplied to SSH Key Value. You can use --generate-ssh-keys to let CLI generate one for you

https://dev.azure.com/msazure/CloudNativeCompute/CloudNativeCompute%20Team/_build/results?buildId=142667237&view=logs&j=b162b355-d59d-5864-ce0f-0a70f12dd28b&t=a26fe913-e2be-5062-b08e-d15f1acc7ea2&l=3967

Please follow other cases as exmaples, and add "ssh_key_value": self.generate_ssh_keys(), to self.kwargs.update(, then create cluster with --ssh-key-value={ssh_key_value}

Re-queued live test, test passed!

FumingZhang · 2025-11-05T02:45:44Z

/azp run

azure-pipelines · 2025-11-05T02:45:57Z

Azure Pipelines successfully started running 2 pipeline(s).

FumingZhang

lgtm

but I think you'll need to commit the recording files for the newly added test cases to pass CI checks. You can find recordings generated by the live test from pipeline artifacts

FumingZhang · 2025-11-05T23:05:28Z

/azp run

azure-pipelines · 2025-11-05T23:05:41Z

Azure Pipelines successfully started running 2 pipeline(s).

FumingZhang · 2025-11-06T04:16:30Z

src/aks-preview/HISTORY.rst


 Pending

+19.0.0b11


could you please rebase from main and choose a new version?

FumingZhang · 2025-11-06T23:53:15Z

/azp run

azure-pipelines · 2025-11-06T23:53:29Z

Azure Pipelines successfully started running 2 pipeline(s).

azclibot · 2025-11-07T04:43:11Z

[Release] Update index.json for extension [ aks-preview-19.0.0b12 ] : https://dev.azure.com/msazure/One/_build/results?buildId=142976980&view=results

azure-client-tools-bot-prd bot added this to the October 2025 (2025-10-07) milestone Aug 28, 2025

yonzhan requested review from yanzhudd and zhoxing-ms August 29, 2025 00:17

yonzhan assigned zhoxing-ms Aug 29, 2025

Bickor force-pushed the mheberling/kataNameChange branch 2 times, most recently from c17f249 to c8d8eb5 Compare November 4, 2025 02:46

Bickor marked this pull request as ready for review November 4, 2025 02:54

Bickor requested review from FumingZhang and andyliuliming as code owners November 4, 2025 02:54

Copilot AI review requested due to automatic review settings November 4, 2025 02:54

Bickor changed the title ~~Modified kata to use new katavmisolation name.~~ az command aks: Add KataVmIsolation workload runtime Nov 4, 2025

Copilot AI reviewed Nov 4, 2025

View reviewed changes

src/aks-preview/azext_aks_preview/tests/latest/test_agentpool_decorator.py Outdated Show resolved Hide resolved

src/aks-preview/azext_aks_preview/tests/latest/test_agentpool_decorator.py Outdated Show resolved Hide resolved

FumingZhang reviewed Nov 4, 2025

View reviewed changes

src/aks-preview/azext_aks_preview/tests/latest/test_agentpool_decorator.py Outdated Show resolved Hide resolved

fangluguomsft reviewed Nov 4, 2025

View reviewed changes

src/aks-preview/azext_aks_preview/_consts.py Show resolved Hide resolved

src/aks-preview/azext_aks_preview/_consts.py Show resolved Hide resolved

github-actions bot added the release-version-block Updates do not qualify release version rules. NOTE: please do not edit it manually. label Nov 5, 2025

Bickor force-pushed the mheberling/kataNameChange branch from 2a67f58 to 59bf2fd Compare November 5, 2025 00:20

github-actions bot removed the release-version-block Updates do not qualify release version rules. NOTE: please do not edit it manually. label Nov 5, 2025

FumingZhang reviewed Nov 5, 2025

View reviewed changes

Bickor force-pushed the mheberling/kataNameChange branch from 100dc0b to c561da8 Compare November 5, 2025 02:25

FumingZhang reviewed Nov 5, 2025

View reviewed changes

FumingZhang previously approved these changes Nov 5, 2025

View reviewed changes

FumingZhang reviewed Nov 6, 2025

View reviewed changes

Bickor added 11 commits November 5, 2025 21:44

Modified kata to use new katavmisolation name.

5f8bb14

Added test and using both katavmisolation and katamshvvmisolation names.

4d8d385

Updated version information.

e46bd17

Minor correction to kata tests.

ec0ccfa

Auto update sdk.

d02fbdf

Improved testing for fips, and added aks_command tests.

988f5fd

Updated history.

21b9cf0

Added --ssh-key-value to tests.

9a41aa1

nit: changed workload runtime name to variable instead of string.

10ad9b1

Adding recordings.

da58497

Updated version.

4a90d93

Bickor dismissed FumingZhang’s stale review via 4a90d93 November 6, 2025 05:45

Bickor force-pushed the mheberling/kataNameChange branch from dab3ad4 to 4a90d93 Compare November 6, 2025 05:45

fangluguomsft approved these changes Nov 7, 2025

View reviewed changes

yanzhudd approved these changes Nov 7, 2025

View reviewed changes

yanzhudd merged commit 8775a88 into Azure:main Nov 7, 2025
25 checks passed

Bickor deleted the mheberling/kataNameChange branch November 7, 2025 19:17


		Pending

		19.0.0b11

az command aks: Add KataVmIsolation workload runtime #9104

az command aks: Add KataVmIsolation workload runtime #9104

Uh oh!

Conversation

Bickor commented Aug 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Related command

General Guidelines

About Extension Publish

Uh oh!

azure-client-tools-bot-prd bot commented Aug 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

azure-client-tools-bot-prd bot commented Aug 28, 2025

Uh oh!

yonzhan commented Aug 28, 2025

Uh oh!

github-actions bot commented Aug 28, 2025

Uh oh!

github-actions bot commented Aug 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Reviewed Changes

Uh oh!

Uh oh!

Uh oh!

FumingZhang commented Nov 4, 2025

Uh oh!

azure-pipelines bot commented Nov 4, 2025

Uh oh!

FumingZhang Nov 4, 2025

Choose a reason for hiding this comment

Uh oh!

Bickor Nov 4, 2025

Choose a reason for hiding this comment

Uh oh!

FumingZhang left a comment

Choose a reason for hiding this comment

Uh oh!

Bickor commented Nov 4, 2025

Uh oh!

FumingZhang commented Nov 4, 2025

Uh oh!

azure-pipelines bot commented Nov 4, 2025

Uh oh!

Uh oh!

Uh oh!

Uh oh!

FumingZhang commented Nov 5, 2025

Uh oh!

azure-pipelines bot commented Nov 5, 2025

Uh oh!

FumingZhang Nov 5, 2025

Choose a reason for hiding this comment

Uh oh!

FumingZhang Nov 5, 2025

Choose a reason for hiding this comment

Uh oh!

Bickor Nov 5, 2025

Choose a reason for hiding this comment

Uh oh!

FumingZhang Nov 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

FumingZhang commented Nov 5, 2025

Uh oh!

azure-pipelines bot commented Nov 5, 2025

Uh oh!

FumingZhang left a comment

Choose a reason for hiding this comment

Uh oh!

FumingZhang commented Nov 5, 2025

Uh oh!

azure-pipelines bot commented Nov 5, 2025

Uh oh!

FumingZhang Nov 6, 2025

`az command aks`: Add KataVmIsolation workload runtime #9104

`az command aks`: Add KataVmIsolation workload runtime #9104

Bickor commented Aug 28, 2025 •

edited

Loading

azure-client-tools-bot-prd bot commented Aug 28, 2025 •

edited

Loading

github-actions bot commented Aug 28, 2025 •

edited

Loading

FumingZhang Nov 5, 2025 •

edited

Loading