v1.17.4

Changes by Kind

Bugs or Regression

• Fixes a possible nil pointer deference when returning the name of the API Server LoadBalancer. In some cases like externally managed infrastructure, there might not be an API Server LoadBalancer in the AzureCluster CR (#5458, @nawazkh)

• Improves state update handling when running long operations on VMSS (#5327, @k8s-infra-cherrypick-robot)

Other (Cleanup or Flake)

• Bump CAPI to v1.8.10 (#5437, @mboersma)
• Update CAPZ rel-1.7 with CAPI-1.8.8 (#5376, @nawazkh)

Dependencies

Added

Nothing has changed.

Changed

• github.com/coredns/corefile-migration: v1.0.23 → v1.0.25
• golang.org/x/crypto: v0.27.0 → v0.31.0
• golang.org/x/net: v0.28.0 → v0.33.0
• golang.org/x/sync: v0.8.0 → v0.10.0
• golang.org/x/sys: v0.25.0 → v0.28.0
• golang.org/x/term: v0.24.0 → v0.27.0
• golang.org/x/text: v0.18.0 → v0.21.0
• sigs.k8s.io/cluster-api/test: v1.8.5 → v1.8.10
• sigs.k8s.io/cluster-api: v1.8.5 → v1.8.10
• sigs.k8s.io/controller-runtime: v0.18.5 → v0.18.7

Removed

Nothing has changed.

Details

v1.17.3...v1.17.4

v1.18.0

Changes by Kind

Feature

• Add new flavor flatcar-sysext for Flatcar Container Linux cluster deployments. (#4575, @sayanchowdhury)
• Allows Service Principal with Certificate authentication to work with a path to the certificate. (#5200, @bryan-cox)
• CAPZ now caches credentials to reduce the number of authentication requests it makes to Entra (#5283, @nojnhuh)
• Enable Tilt development for apiserver-ilb templates (#5288, @nawazkh)
• Enable the use of an external control plane (#4611, @rpahli)
• Feat APIServerILB: create ILB when feature flag APIServerILB is enabled (#5311, @nawazkh)
• Feat APIServerILB: private IP of the internal LB can be customized (#5332, @nawazkh)
• Private IP of the Internal LB of the API Server will be configurable (#5274, @nawazkh)
• Use community gallery for default VM images (#5167, @mboersma)
• Use internal LB's IP for intra-node communication (#5209, @nawazkh)

Documentation

• Added docs describing how to migrate existing AKS clusters managed by CAPZ to the new ASO-based API (#5305, @nojnhuh)
• Overhaul Quickstart UX using AzureASOManagedCluster (#5319, @willie-yao)

Failing Test

• Bump CAPI to v1.8.8 (#5371, @willie-yao)
• Custom build templates to use curl when az login fails (#5109, @nawazkh)
• Default to Marketplace images for old Kubernetes versions (#5266, @mboersma)

Bug or Regression

• Refactor(manager): set machinepool true as default (#5146, @KOREAN139)
• AKS extensions removed from an AzureManagedControlPlane's spec.extensions will now be deleted. (#5139, @nojnhuh)
• Fixed a bug preventing Cluster API from authenticating to ASOAPI Managed Clusters with local accounts disabled. (#5211, @nojnhuh)
• Fixed an issue where CAPZ was accumulating memory over time that could never be garbage collected. (#5284, @nojnhuh)
• Improves MachinePool scale up/down to avoid unnecessary VMSS VM model updates (#5164, @mweibel)
• Improves state update handling when running long operations on VMSS (#5292, @mweibel)
• Moves webhook registration behind feature gate flags like controller registration already does. (#5099, @bryan-cox)
• Perform nil check on private lb (#5378, @nawazkh)

Other (Cleanup or Flake)

• Bump CAPI to v1.8.4 (#5186, @mboersma)
• Bump CAPI to v1.8.5 (#5255, @mboersma)
• Bump CAPI to v1.9.4 (#5316, @mboersma)
• CAPZ now installs Azure Service Operator v2.9.0. (#5170, @nojnhuh)
• Removes default values previously set in webhooks and adds the default values directly in the API through the kubebuilder annotation, kubebuilder:default. (#5111, @bryan-cox)
• Update Golangci-lint to v1.60.2 and add golangci-lint PR GitHub workflow (#5158, @nawazkh)
• Update pre-commit hooks (#5213, @nawazkh)
• Update self-managed templates to use internal LB for node-to-node communication (#5210, @nawazkh)
• Use regular Flatcar images from Azure marketplace for flatcar-sysext template (#5263, @tormath1)

Dependencies

Added

• cel.dev/expr: v0.16.1
• dario.cat/mergo: v1.0.1
• github.com/Azure/azure-sdk-for-go/sdk/azidentity/cache: v0.3.1
• github.com/Azure/azure-sdk-for-go/sdk/tracing/azotel: v0.4.0
• github.com/AzureAD/microsoft-authentication-extensions-for-go/cache: v0.1.1
• github.com/antlr4-go/antlr/v4: v4.13.0
• github.com/dgryski/go-rendezvous: 9f7001d
• github.com/keybase/go-keychain: 57a3676
• github.com/planetscale/vtprotobuf: 0393e58
• github.com/redis/go-redis/v9: v9.7.0
• go.opentelemetry.io/auto/sdk: v1.1.0
• go.opentelemetry.io/otel/exporters/jaeger: v1.16.0
• gopkg.in/evanphx/json-patch.v4: v4.12.0

Changed

• cloud.google.com/go/compute/metadata: v0.3.0 → v0.5.0
• cloud.google.com/go/compute: v1.25.1 → v1.24.0
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.14.0 → v1.17.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.7.0 → v1.8.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/dataprotection/armdataprotection/v3: v3.0.0 → v3.1.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v3: v3.0.0 → v3.1.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/privatedns/armprivatedns: v1.2.0 → v1.3.0
• github.com/Azure/azure-service-operator/v2: v2.8.0 → v2.9.0
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.2.2 → v1.3.2
• github.com/Masterminds/semver/v3: v3.2.1 → v3.3.0
• github.com/Masterminds/sprig/v3: v3.2.3 → v3.3.0
• github.com/adrg/xdg: v0.5.0 → v0.5.3
• github.com/cncf/xds/go: 8a4994d → b4127c9
• github.com/coredns/corefile-migration: v1.0.23 → v1.0.25
• github.com/docker/docker: v27.1.1+incompatible → v27.3.1+incompatible
• github.com/envoyproxy/go-control-plane: v0.12.0 → v0.13.0
• github.com/envoyproxy/protoc-gen-validate: [v1.0.4 → v1.1.0](bufbuild/protoc-gen-validate@v1.0.4...v1....

v1.17.3

Changes by Kind

Other (Cleanup or Flake)

• Update CAPZ rel-1.7 with CAPI-1.8.8 (#5376, @nawazkh)
• Improves state update handling when running long operations on VMSS (#5327, @mweibel)

Dependencies

Added

Nothing has changed.

Changed

• github.com/coredns/corefile-migration: v1.0.23 → v1.0.24
• golang.org/x/crypto: v0.27.0 → v0.31.0
• golang.org/x/net: v0.28.0 → v0.33.0
• golang.org/x/sync: v0.8.0 → v0.10.0
• golang.org/x/sys: v0.25.0 → v0.28.0
• golang.org/x/term: v0.24.0 → v0.27.0
• golang.org/x/text: v0.18.0 → v0.21.0
• sigs.k8s.io/cluster-api/test: v1.8.5 → v1.8.8
• sigs.k8s.io/cluster-api: v1.8.5 → v1.8.8
• sigs.k8s.io/controller-runtime: v0.18.5 → v0.18.6

Removed

Nothing has changed.

Details

v1.17.2...v1.17.3

v1.16.5

Changes by Kind

Other (Cleanup or Flake)

• Bump CAPI to v1.7.9 (#5330, @mboersma)
• Improves state update handling when running long operations on VMSS (#5328, @mweibel)

Dependencies

Added

Nothing has changed.

Changed

• github.com/coredns/caddy: v1.1.0 → v1.1.1
• github.com/coredns/corefile-migration: v1.0.21 → v1.0.24
• sigs.k8s.io/cluster-api/test: v1.7.8 → v1.7.9
• sigs.k8s.io/cluster-api: v1.7.8 → v1.7.9

Removed

Nothing has changed.

Details

v1.16.4...v1.16.5

v1.17.2

Changes by Kind

Bug or Regression

• Fixed an issue where CAPZ was accumulating memory over time that could never be garbage collected. (#5286, @k8s-infra-cherrypick-robot)

Other (Cleanup or Flake)

• Bump CAPI to v1.8.5 (#5276, @mboersma)

Dependencies

Added

Nothing has changed.

Changed

• sigs.k8s.io/cluster-api/test: v1.8.4 → v1.8.5
• sigs.k8s.io/cluster-api: v1.8.4 → v1.8.5

Removed

Nothing has changed.

Details

v1.17.1...v1.17.2

v1.16.4

Changes by Kind

Bug or Regression

• Fixed an issue where CAPZ was accumulating memory over time that could never be garbage collected. (#5285, @k8s-infra-cherrypick-robot)

Other (Cleanup or Flake)

• Bump CAPI to v1.7.8 (#5256, @mboersma)

Dependencies

Added

Nothing has changed.

Changed

• sigs.k8s.io/cluster-api/test: v1.7.7 → v1.7.8
• sigs.k8s.io/cluster-api: v1.7.7 → v1.7.8

Removed

Nothing has changed.

Details

v1.16.3...v1.16.4

v1.17.1

Changes by Kind

Bug or Regression

• Improves MachinePool scale up/down to avoid unnecessary VMSS VM model updates (#5203, @mweibel)

Other (Cleanup or Flake)

• Bump CAPI to v1.8.4 (#5190, @mboersma)

Uncategorized

• Custom build templates to use curl when az login fails (#5173, @nawazkh)

Dependencies

Added

Nothing has changed.

Changed

• sigs.k8s.io/cluster-api/test: v1.8.3 → v1.8.4
• sigs.k8s.io/cluster-api: v1.8.3 → v1.8.4

Removed

Nothing has changed.

Details

v1.17.0...v1.17.1

v1.16.3

Changes by Kind

Bug or Regression

• Improves MachinePool scale up/down to avoid unnecessary VMSS VM model updates (#5204, @mweibel)

Other (Cleanup or Flake)

• Bump CAPI to v1.7.7 (#5185, @mboersma)

Dependencies

Added

Nothing has changed.

Changed

• sigs.k8s.io/cluster-api/test: v1.7.5 → v1.7.7
• sigs.k8s.io/cluster-api: v1.7.5 → v1.7.7

Removed

Nothing has changed.

Details

v1.16.2...v1.16.3

v1.16.2

Changes by Kind

Other (Cleanup or Flake)

• Bump CAPI to v1.7.6 (#5129, @mboersma)

Bug or Regression

• Add "cluster" type to subnet role validation (#5134, @mboersma)
• Fix documentation links hard-coded to capz.k8s.io (#5125, @willie-yao)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Details

v1.16.1...v1.16.2

v1.17.0

Changes by Kind

Feature

• Flavor templates may now set the AzureClusterIdentity's spec.type with the CLUSTER_IDENTITY_TYPE variable. (#5059, @nojnhuh)
• Use make aks-create tilt-up to use aks cluster as management cluster (#5064, @nawazkh)

Documentation

• Fix documentation links hard-coded to capz.k8s.io (#5123, @willie-yao)
• Refactor documentation (#5088, @dtzar)
• Update roadmap (#5085, @dtzar)

Bug or Regression

• Add "cluster" type to subnet role validation (#5133, @mboersma)
• Ensure Machines with delete-machine annotation are deleted first (#4949, @mweibel)
• Fixed a bug causing AzureMachinePool to endlessly reconcile when a tag is applied to a VMSS by an external actor like Azure Policy (#5020, @nojnhuh)
• Fixed a bug causing unnecessary updates to tags to VMSS resources. (#5054, @nojnhuh)
• Fixed a bug preventing the ASOAPI feature flag from being enabled by default. (#5093, @nojnhuh)
• Fixed a bug with AzureASOManagedMachinePools preventing it from mapping Nodes when the AKS node resource group is more than 63 characters long. (#5055, @nojnhuh)
• Fixed an issue preventing CAPZ from reconciling non-ServicePrincipal-authenticated, AAD-enabled AKS clusters. (#5071, @nojnhuh)
• Fixes a few edge cases related to deleting a MachinePool (#4959, @mweibel)
• Identity type is required to be 'UserAssigned' when using user-assigned identities. (#5102, @bryan-cox)
• Refactor method for checking if a virtual network is managed (#5012, @hrbasic)
• If a FailureDomain is set in a Machine, an availability set won't be created for it even if cluster.status.failureDomains is empty (#5098, @enxebre)

Other (Cleanup or Flake)

• Bump CAPI to v1.7.5 (#5072, @mboersma)
• Bump CAPI to v1.8.1 (#5057, @mboersma)
• Bump CAPI to v1.8.3 (#5128, @mboersma)
• Drop LOCAL_ONLY env var from the test scripts. (#4998, @nawazkh)
• Update mdbook website dependencies (#5083, @dtzar)

Dependencies

Added

• github.com/Azure/azure-sdk-for-go/sdk/keyvault/azsecrets: v0.12.0
• github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal: v0.7.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v3: v3.0.0
• github.com/fxamacker/cbor/v2: v2.6.0
• github.com/golang-jwt/jwt: v3.2.1+incompatible
• github.com/hashicorp/errwrap: v1.1.0
• github.com/hashicorp/go-multierror: v1.1.1
• github.com/moby/docker-image-spec: v1.3.1
• github.com/x448/float16: v0.8.4
• k8s.io/gengo/v2: 51d4e06

Changed

• cloud.google.com/go/firestore: v1.14.0 → v1.15.0
• cloud.google.com/go/longrunning: v0.5.4 → v0.5.5
• cloud.google.com/go: v0.110.10 → v0.112.1
• github.com/Azure/azure-kusto-go: v0.15.1 → v0.15.3
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.12.0 → v1.14.0
• github.com/Azure/azure-sdk-for-go/sdk/internal: v1.9.0 → v1.10.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage: v1.5.0 → v1.6.0
• github.com/Azure/go-autorest/autorest/adal: v0.9.23 → v0.9.24
• github.com/BurntSushi/toml: v1.2.1 → v1.4.0
• github.com/adrg/xdg: v0.4.0 → v0.5.0
• github.com/alessio/shellescape: v1.4.1 → v1.4.2
• github.com/coredns/caddy: v1.1.0 → v1.1.1
• github.com/coredns/corefile-migration: v1.0.21 → v1.0.23
• github.com/distribution/reference: v0.5.0 → v0.6.0
• github.com/docker/docker: v25.0.5+incompatible → v27.1.1+incompatible
• github.com/fatih/color: v1.16.0 → v1.17.0
• github.com/google/pprof: a892ee0 → fa2c70b
• github.com/googleapis/gax-go/v2: v2.12.0 → v2.12.3
• github.com/hashicorp/consul/api: v1.25.1 → v1.28.2
• github.com/klauspost/compress: v1.17.0 → v1.17.2
• github.com/nats-io/nats.go: v1.31.0 → v1.34.0
• github.com/nats-io/nkeys: v0.4.6 → v0.4.7
• github.com/onsi/ginkgo/v2: v2.19.0 → v2.20.2
• github.com/onsi/gomega: v1.33.1 → v1.34.2
• github.com/pelletier/go-toml/v2: v2.1.0 → v2.2.2
• github.com/sagikazarmark/crypt: v0.17.0 → v0.19.0
• github.com/spf13/viper: v1.18.2 → v1.19.0
• github.com/stretchr/objx: v0.5.0 → v0.5.2
• go.etcd.io/etcd/api/v3: v3.5.13 → v3.5.15
• go.etcd.io/etcd/client/pkg/v3: v3.5.13 → v3.5.15
• go.etcd.io/etcd/client/v2: v2.305.10 → v2.305.12
• go.etcd.io/etcd/client/v3: v3.5.13 → v3.5.15
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.46.0 → v0.49.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.46.0 → v0.52.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.24.0 → v1.27.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.24.0 → v1.27.0
• go.opentelemetry.io/otel/metric: v1.24.0 → v1.27.0
• go.opentelemetry.io/otel/sdk/metric: v1.24.0 → v1.27.0
• go.opentelemetry.io/otel/sdk: v1.24.0 → v1.27.0
• go.opentelemetry.io/otel/trace: v1.24.0 → v1.27.0
• go.opentelemetry.io/otel: v1.24.0 → v1.27.0
• go.opentelemetry.io/proto/otlp: v1.1.0 → v1.3.1
• go.uber.org/atomic: v1.10.0 → v1.9.0
• go.uber.org/zap: v1.26.0 → v1.27.0
• golang.org/x/crypto: v0.25.0 → v0.27.0
• golang.org/x/exp: 7f521ea → 8a7402a
• golang.org/x/mod: v0.19.0 → v0.21.0
• golang.org/x/net: v0.26.0 → v0.28.0
• golang.org/x/sync: v0.7.0 → v0.8.0
• golang.org/x/sys: v0.22.0 → v0.25.0
• golang.org/x/term: v0.22.0 → v0.24.0
• golang.org/x/text: v0.16.0 → v0.18.0
• golang.org/x/tools: v0.22.0 → v0.24.0
• google.golang.org/api: v0.153.0 → v0.171.0
• google.golang.org/genproto: bbf56f3 → 012b6fc
• k8s.io/api: v0.29.3 → v0.30.3
• k8s.io/apiextensions-apiserver: v0.29.3 → v0.30.3
• ...