Azure/AKS 2022-08-14

on GitHub

Release 2022-08-14

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

• Starting with Kubernetes 1.25, the following changes will be made default:
  • Ubuntu 22.04 for x86, AMD and ARM64 architectures will be the default host.
  • Windows Server 2022 will be the default Windows host. Important, old windows 2019 containers will not work on windows server 2022 hosts.
• Starting with Kubernetes 1.24, the following changes will be made default:
  • The default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
  • The NodeRestriction Admission Controller will be enabled. This will allow users to enable/disable node restriction.
  • CoreDNS version 1.9.2 will be default version. With this new version of CoreDNS wildcard queries are no longer allowed.
  • metrics-server version 0.6.1 will be the default version.
  • metrics-server vertical pod autoscaler will be enabled.
• Update your AKS labels to the recommended substitutions before deprecation after the Kubernetes v1.24 release. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.
• Konnectivity rollout is finished in global and started in Sovereign (China, USGov).
• Docker will no longer be supported as a container runtime on Windows after September 1, 2022. Follow these steps in our documentation to upgrade your Kubernetes cluster to change your container runtime to containerd.

Release notes

• Features
  • GA of Kubernetes 1.24
• Behavioral Changes
  • Deprecation of Kubernetes 1.21
  • Increased memory request (20Mi -> 40Mi) for azuredisk and node-driver-registrar containers in azurediskcsi-azuredisk-v2-node
  • Remove responseObject from kube-audit logs when its size is reaching log analytics column size limit (32K) and customer enables kube-audit/kube-audit-admin diagnostics.
• Bug fixes
  • Fix bug in processing fractional memory limits on Windows Nodes
  • Fix log loss due to inode reuse on Windows Nodes
  • Fix issue with cert rotation on Windows nodes that caused VMSS inconsistency
  • Removed Microsoft.Resources/deployments/write, Microsoft.Insights/alertRules/*, and Microsoft.Support/* from the built-in Azure RBAC data plane roles for AKS.
• Component Updates
  • Calico is updated to v3.21.6
  • CSI Secret Store now supports Windows Server 2022
  • Microsoft Defender for Containers images updated 1.0.67
  • Azure Monitor for container insights addon updated for Windows to win-ciprod08102022
  • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2022.08.10
  • AKS Windows 2019 image has been updated to 17763.3287.220810
  • AKS Windows 2022 image has been updated to 20348.887.220810