Release 2021-05-20
This release is rolling out to all regions - ETA for conclusion 2021-06-03 for public cloud and 2021-06-07 for sovereign clouds.
Announcements
- Previous pod security policy (preview)](https://docs.microsoft.com/azure/aks/use-pod-security-policies) deprecation was June 30th 2021. To better align with Kubernetes Upstream pod security policy (preview) deprecation will begin with Kubernetes version 1.21, with its removal in version 1.25. As Kubernetes Upstream approaches that milestone, the Kubernetes community will be working to document viable alternatives.
Release Notes
- Features
- Use Set-TimeZone now with Windows Containers to change timezones.
- New Kubernetes patch versions available, v1.18.19, 1.19.11, v1.20.7.
- Encryption at Host is now GA
- Preview Features
- Kubernetes 1.21.1
- Disable local accounts in now in preview here.
- Windows containerd support on AKS are available in 3 regions (eastus, uksouth, and westcentralus) today. If you registered the containerd public preview feature flag and add node pool on a cluster below k8s 1.20 version in other regions than mentioned above, the windows nodepool creation will fail. If you are using k8s version 1.20 and register the containerd feature flag in the available regions, this will only add containerd node pool instead of docker. You can unregister the feature flag to use docker node pool. Please note that we are working towards releasing the fix in other regions in few days.
- Bug Fixes
- Reverting Container Insights agent to March release [ciprod03262021] in response to failing liveness probes.
- Component Updates
- Upgraded calico to v3.19. The newest Calico update includes this fix for customers that were experiencing upgrade problems.
- AKS Ubuntu 16.04 image updated to AKSUbuntu-1604-2021.05.19.
- AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2021.05.19.
- AKS Windows image has been updated to 2019-datacenter-core-smalldisk-17763.1911.210513.