v1.20.4

Changes by Kind

Bug or Regression

• Fixed a regression where user-assigned identities with IDs prefixed with azure:// for AzureMachines were misidentified as missing. (#5937, @nojnhuh)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Details

v1.20.3...v1.20.4

v1.21.1

Changes by Kind

Bug or Regression

• Fixed a regression where user-assigned identities with IDs prefixed with azure:// for AzureMachines were misidentified as missing. (#5932, @nojnhuh)

Other (Cleanup or Flake)

• Bump CAPI to v1.10.7 (#5913, @mboersma)
• Update azidentity to v1.12.0 (#5888, @jackfrancis)

Dependencies

Added

Nothing has changed.

Changed

• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.18.2 → v1.19.1
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.11.0 → v1.12.0
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.4.2 → v1.5.0
• github.com/coredns/corefile-migration: v1.0.26 → v1.0.28
• github.com/go-viper/mapstructure/v2: v2.3.0 → v2.4.0
• github.com/stretchr/testify: v1.10.0 → v1.11.1
• golang.org/x/net: v0.42.0 → v0.43.0
• sigs.k8s.io/cluster-api/test: v1.10.4 → v1.10.7
• sigs.k8s.io/cluster-api: v1.10.4 → v1.10.7

Removed

Nothing has changed.

Details

v1.21.0...v1.21.1

v1.20.3

Known Issues

• User-assigned identity IDs prefixed with azure:// on AzureMachines are misidentified as missing: #5929

Changes by Kind

Other (Cleanup or Flake)

• Bump CAPI to v1.10.7 (#5914, @mboersma)
• Update azidentity to v1.12.0 (#5889, @jackfrancis)

Dependencies

Added

Nothing has changed.

Changed

• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.18.0 → v1.19.1
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.10.0 → v1.12.0
• github.com/Azure/azure-sdk-for-go/sdk/internal: v1.11.1 → v1.11.2
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.4.2 → v1.5.0
• github.com/coredns/corefile-migration: v1.0.26 → v1.0.28
• github.com/go-viper/mapstructure/v2: v2.3.0 → v2.4.0
• github.com/golang-jwt/jwt/v5: v5.2.2 → v5.3.0
• github.com/stretchr/testify: v1.10.0 → v1.11.1
• golang.org/x/crypto: v0.39.0 → v0.41.0
• golang.org/x/mod: v0.25.0 → v0.26.0
• golang.org/x/net: v0.40.0 → v0.43.0
• golang.org/x/sync: v0.15.0 → v0.16.0
• golang.org/x/sys: v0.33.0 → v0.35.0
• golang.org/x/telemetry: bda5523 → 8d8967a
• golang.org/x/term: v0.32.0 → v0.34.0
• golang.org/x/text: v0.26.0 → v0.28.0
• golang.org/x/tools: v0.33.0 → v0.35.0
• sigs.k8s.io/cluster-api/test: v1.10.4 → v1.10.7
• sigs.k8s.io/cluster-api: v1.10.4 → v1.10.7

Removed

• github.com/dgryski/go-rendezvous: 9f7001d
• github.com/redis/go-redis/v9: v9.8.0

Details

v1.20.2...v1.20.3

v1.21.0

Changes by Kind

Deprecation

• Warning messages added for deprecation of AzureManaged API (#5699, @alimaazamat)

Feature

• Add ability to optionally create the Private DNS Zone for unmanaged clusters instead of always creating one. Setting PrivateDNSZone within the NetworkSpec to PrivateDNSZoneiCreationModeNone will skip creating the Private DNS zone. (#5666, @sadasu)

Bug or Regression

• ASOAPI: Fixed a possible bug that could leave ASO resources dangling when they should be deleted. (#5571, @nojnhuh)
• Adds the ability to disable CAPZ components through a manager flag. Flags added for disabling ASO Secret Controller and disabling Azure JSON Machine Controller. (#5552, @bryan-cox)
• Dont give contributor access to byo identity in aks mgmt cluster creation (#5802, @willie-yao)
• Fixes disabling NAT gateway for cluster role subnets (#5816, @cPu1)

Other (Cleanup or Flake)

• Bump CAPI to v1.10.3 (#5712, @mboersma)
• Bump CAPI to v1.10.4 (#5761, @mboersma)

Dependencies

Added

Nothing has changed.

Changed

• cel.dev/expr: v0.22.1 → v0.23.0
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.18.0 → v1.18.2
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.10.0 → v1.11.0
• github.com/Azure/azure-sdk-for-go/sdk/internal: v1.11.1 → v1.11.2
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/msi/armmsi: v1.2.0 → v1.3.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.26.0 → v1.27.0
• github.com/cloudflare/circl: v1.3.7 → v1.6.1
• github.com/cncf/xds/go: 2f00578 → ae57f3c
• github.com/go-jose/go-jose/v4: v4.0.4 → v4.0.5
• github.com/go-viper/mapstructure/v2: v2.2.1 → v2.3.0
• github.com/golang-jwt/jwt/v5: v5.2.2 → v5.3.0
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.26.3 → v2.27.1
• github.com/hashicorp/go-retryablehttp: v0.7.7 → v0.7.8
• github.com/onsi/gomega: v1.37.0 → v1.38.0
• github.com/prometheus/common: v0.64.0 → v0.65.0
• github.com/spf13/pflag: v1.0.6 → v1.0.7
• go.opentelemetry.io/contrib/detectors/gcp: v1.34.0 → v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.36.0 → v1.37.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.36.0 → v1.37.0
• go.opentelemetry.io/otel/exporters/prometheus: v0.58.0 → v0.59.0
• go.opentelemetry.io/otel/metric: v1.36.0 → v1.37.0
• go.opentelemetry.io/otel/sdk/metric: v1.36.0 → v1.37.0
• go.opentelemetry.io/otel/sdk: v1.36.0 → v1.37.0
• go.opentelemetry.io/otel/trace: v1.36.0 → v1.37.0
• go.opentelemetry.io/otel: v1.36.0 → v1.37.0
• go.opentelemetry.io/proto/otlp: v1.6.0 → v1.7.0
• golang.org/x/crypto: v0.39.0 → v0.41.0
• golang.org/x/mod: v0.25.0 → v0.27.0
• golang.org/x/net: v0.40.0 → v0.42.0
• golang.org/x/sync: v0.15.0 → v0.16.0
• golang.org/x/sys: v0.33.0 → v0.35.0
• golang.org/x/telemetry: bda5523 → 8d8967a
• golang.org/x/term: v0.32.0 → v0.34.0
• golang.org/x/text: v0.26.0 → v0.28.0
• golang.org/x/tools: v0.33.0 → v0.35.0
• google.golang.org/genproto/googleapis/api: 55703ea → 513f239
• google.golang.org/genproto/googleapis/rpc: 55703ea → 513f239
• google.golang.org/grpc: v1.72.1 → v1.73.0
• sigs.k8s.io/cluster-api/test: v1.10.2 → v1.10.4
• sigs.k8s.io/cluster-api: v1.10.2 → v1.10.4

Removed

• github.com/dgryski/go-rendezvous: 9f7001d
• github.com/redis/go-redis/v9: v9.8.0

Details

v1.20.0...v1.21.0

v1.20.2

Changes by Kind

Bug or Regression

• Adds the ability to disable CAPZ components through a manager flag. Flags added for disabling ASO Secret Controller and disabling Azure JSON Machine Controller. (#5758, @bryan-cox)

Other (Cleanup or Flake)

• Bump CAPI to v1.10.4 (#5771, @mboersma)

Dependencies

Added

Nothing has changed.

Changed

• github.com/go-viper/mapstructure/v2: v2.2.1 → v2.3.0
• sigs.k8s.io/cluster-api/test: v1.10.3 → v1.10.4
• sigs.k8s.io/cluster-api: v1.10.3 → v1.10.4

Removed

Nothing has changed.

Details

v1.20.1...v1.20.2

v1.19.6

Changes by Kind

Bug or Regression

• Adds the ability to disable CAPZ components through a manager flag. Flags added for disabling ASO Secret Controller and disabling Azure JSON Machine Controller. (#5759, @bryan-cox)

Other (Cleanup or Flake)

• Bump CAPI to v1.9.10 (#5762, @mboersma)
• Update default Kubernetes version to 1.32 (#5764, @jsturtevant)

Dependencies

Added

Nothing has changed.

Changed

• sigs.k8s.io/cluster-api/test: v1.9.9 → v1.9.10
• sigs.k8s.io/cluster-api: v1.9.9 → v1.9.10

Removed

Nothing has changed.

Details

v1.19.5...v1.19.6

v1.20.1

Changes by Kind

Other (Cleanup or Flake)

• Bump CAPI to v1.10.3 (#5729, @mboersma)

Dependencies

Added

Nothing has changed.

Changed

• github.com/cloudflare/circl: v1.3.7 → v1.6.1
• sigs.k8s.io/cluster-api/test: v1.10.2 → v1.10.3
• sigs.k8s.io/cluster-api: v1.10.2 → v1.10.3

Removed

Nothing has changed.

Details

v1.20.0...v1.20.1

v1.19.5

Changes by Kind

Other (Cleanup or Flake)

• Bump CAPI to v1.9.8 (#5675, @mboersma)
• Bump CAPI to v1.9.9 (#5713, @mboersma)
• Remove community AKS marketplace extension from e2e tests because no longer valid (#5647, @alimaazamat)

Dependencies

Nothing has changed.

Added

Nothing has changed.

Changed

• github.com/cloudflare/circl: v1.3.7 → v1.6.1
• github.com/coredns/corefile-migration: v1.0.25 → v1.0.26
• sigs.k8s.io/cluster-api/test: v1.9.6 → v1.9.9
• sigs.k8s.io/cluster-api: v1.9.6 → v1.9.9

Removed

Nothing has changed.

Details

v1.19.4...v1.19.5

v1.20.0

Changes by Kind

Feature

• Add additionalCapabilities spec field to AzureMachinePool.Spec.Template.AdditionalCapabilities, allowing users to create MachinePools with UltraSSD capabilities (#5628, @w21froster)
• Add documentation on running e2e tests locally (#5489, @nawazkh)
• Add flag to disable bootstrap extension and improve error message (#5509, @willie-yao)
• Add make aks-delete target to clean up AKS clusters listed under allowed_contexts in tilt-settings.yaml (#5576, @Nitesh703)
• Added AdditionalAPIServerLBPorts field for the additional inbound control-plane load balancer port configuration, allowing to access user specified ports on the CP machines.
• Improved securityRules selection for the RKE2 provider. Defaulting now checks for ports 6443 and 22 in the existing list and appends them if missing, allowing users to specify only additional rules instead of the full set, when an additional rule is needed. (#5525, @Danil-Grigorev)
• Moved AzureASOManaged API to v1beta1 (#5660, @alimaazamat)

Documentation

• Added FAQ to documentation describing why kubectl get for an ASO resource shows a different API version than what CAPZ used to create it. (#5527, @nojnhuh)
• Cleaned up Tilt with AKS as management Cluster with Internal Load Balancer docs. (#5522, @alimaazamat)
• Updating the roadmap to align with our current timeline and future milestones (#5513, @mbrow137)

Bug or Regression

• Avoids marking an AzureMachinePoolMachine as terminal failure on provisioning failure. This ensures potential recovery from provisioning failure is handled correctly. (#5558, @mweibel)
• Fix GO-2025-3488 security vulnerability by updating golang.org/x/oauth2: v0.25.0 => v0.27.0 (#5638, @nawazkh)
• Fixed a bug causing an unnecessary update to an AKS agent pool after its managed cluster is created when certain fields are defined. (#5521, @nojnhuh)
• Fixes manager deployment to enable cluster cache tracker (#5556, @mweibel)
• Fixes potential OOM due to tracing (even if tracing not enabled) (#5540, @mweibel)
• Fixes potential nil pointer when deleting MachinePool (#5670, @mweibel)
• Fixes ready state of AzureMachinePool to avoid failing to reconcile a working VMSS. This improves reconciliation of MachinePools especially during scale up/down operations. (#5537, @mweibel)
• NIC should be try to fix itself when in ProvisioningFailed State (#5569, @nawazkh)
• Subnet spec should not be updated if status ASO CIDRs are empty. (#5584, @alimaazamat)
• Update ASO CRDs to v2.11.0 (#5512, @willie-yao)
• Upgraded aks-aso and aks-aso-clusterclass flavor templates to use the new API version. (#5622, @alimaazamat)

Other (Cleanup or Flake)

• Bump CAPI to v1.9.6 (#5530, @mboersma)
• Deprecated field NumberOfProbes has been replaced with ProbeThreshold (#5562, @jhixson74)
• Update Calico to 3.29 (#5523, @jsturtevant)
• Update default Kubernetes version to 1.32 (#5528, @jsturtevant)
• Bump CAPI to v1.10.2 (#5517, @tamalsaha)

Dependencies

Added

• cloud.google.com/go/auth/oauth2adapt: v0.2.6
• cloud.google.com/go/auth: v0.13.0
• cloud.google.com/go/monitoring: v1.21.2
• github.com/Azure/azure-kusto-go/azkustodata: 5
• github.com/Azure/azure-kusto-go/azkustoingest: 5
• github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry: v0.2.2
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/apimanagement/armapimanagement/v2: v2.1.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v6: v6.3.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v5: v5.0.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v6: v6.4.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal: v1.1.2
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v6: v6.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/notificationhubs/armnotificationhubs: v1.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/redhatopenshift/armredhatopenshift: v1.6.0
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets: v1.3.1
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal: v1.1.1
• github.com/Azure/azure-sdk-for-go/sdk/storage/azqueue: v1.0.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric: v0.48.1
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping: v0.48.1
• github.com/cenkalti/backoff/v5: v5.0.2
• github.com/go-jose/go-jose/v4: v4.0.4
• github.com/go-viper/mapstructure/v2: v2.2.1
• github.com/prashantv/gostub: v1.1.0
• github.com/rotisserie/eris: v0.5.4
• github.com/spiffe/go-spiffe/v2: v2.5.0
• github.com/zeebo/errs: v1.4.0
• go.uber.org/automaxprocs: v1.6.0
• sigs.k8s.io/cloud-provider-azure/pkg/azclient/cache: v0.4.0
• sigs.k8s.io/randfill: v1.0.0

Changed

• cel.dev/expr: v0.19.1 → v0.22.1
• cloud.google.com/go/iam: v1.1.5 → v1.2.2
• cloud.google.com/go/storage: v1.35.1 → v1.49.0
• cloud.google.com/go: v0.112.1 → v0.116.0
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.17.0 → v1.18.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: [v1.8.2 → v1.10.0](Azure/azure-sdk-for-go@sdk/azidentity/v1.8.2...sdk/azident...

v1.19.4

Changes by Kind

Bugs and Regressions

• Upgraded aks-aso and aks-aso-clusterclass flavor templates to use the new API version. (#5626, @alimaazamat)
• fix AzCluster_default and AzCluster_validation webhooks (#5617, @nawazkh)

Dependencies

Added

Nothing has changed.

Changed

• Bump Cert-manager to v1.17.2 (#5623, @mboersma)

Removed

Nothing has changed.

Details

v1.19.3...v1.19.4