Azure/AKS 2020-07-27

Release 2020-07-27

on GitHub

This release is rolling out to all regions - ETA for conclusion 2020-08-07

Important Service Updates

• AKS will default to AKS ubuntu 18.04 in upcoming GA of kubernetes v1.18 which marks the GA of AKS Ubuntu 18.04 as well. We recommend testing existing workloads on AKS Ubuntu 18.04 nodepools prior to GA. See how here: https://aka.ms/aks/Ubuntu1804
• AKS will default to containerd as the default runtime in kubernetes v1.19. During preview we encourage to create nodepools with the new container runtime to validate workloads still work as expected. And do check the containerd differences and limitations. After GA of kubernetes v1.19, containerd will be served by default for all new clusters or cluster that upgrade to v1.19.
• AKS has removed the custom "high-priority" and "addon-priority" Priority Classes which are no longer used by the service.
• The Azure Kubernetes Service pod security policy (preview) feature will be retired on 15 October 2020.
• Kubernetes version 1.18 will GA on the week of August 31st and you will no longer be able to create 1.15.x based clusters or nodepools.

Release Notes

• Features
  • AKS-managed Azure AD integration (v2) is now generally available: https://docs.microsoft.com/en-us/azure/aks/managed-aad
    • You can now upgrade non-AzureAD clusters to AD-integrated clusters.
    • You can now upgrade clusters with the previous iteration of the AzureAD integration (v1) into AKS-managed AzureAD clusters (v2)
    • Closes: #1489
  • AKS is now supported on the following regions:
    • UAE Central - Closes #1693
    • West Central US - Closes #998
  • New Kubernetes patch versions available v1.16.13, v1.17.9
    • This patch versions respond the following CVEs:
      • #1724
      • #1731
      • #1732
    • We've heard your feedback and we will not be removing all the previous versions affected by these vulnerabilities. Instead we've patched all the latest GA ones (v1.15.11, v1.15.12, v1.16.10, v1.17.7) and you can still mitigate the vulnerabilities in any of these GA versions by leveraging https://aka.ms/aks/node-image-upgrade or upgrading to the latest patch.
• Bug fixes
  • AKS has added the ready and health plugins to coredns. Closes #1676
  • We've added additional validations to prevent the creation of multiple node pool clusters with Basic Load Balancer which isn't supported.
• Preview features
  • AKS now supports Bring Your Own (BYO) control plane managed identity: https://aka.ms/aks/byo-mi
  • New Kubernetes patch versions are available for preview, v1.18.6.
• Behavior changes
  • After API version 2020-07-01 the node image upgrade operation will only allow POST and not PUT. CLI versions won't be affected.
  • A default load balancer is not longer created in UDR OutboundType clusters. The LB can be automatically created later if a public service of type LoadBalancer is created.
• Component Updates
  • Calico updated to v3.8.0
  • AKS Windows image has been updated to 2019-datacenter-core-smalldisk-17763.1339.200716
  • AKS Ubuntu 16.04 image updated to AKSUbuntu-1604-2020.07.16.
  • AKS Ubuntu 18.04 image release notes: AKSUbuntu-1804-2020.07.16.