Monitor the release status by regions at AKS-Release-Tracker.
Announcements
- Asia East has now been changed to the 2nd release region. New release changes will reach to Asia East after US West Central, and before UK South. Follow this via AKS-Release-Tracker.
- No new clusters can be created with Azure AD Integration (legacy). Existing AKS clusters with Azure Active Directory integration will keep working. All Azure AD Integration (legacy) AKS clusters will be migrated to AKS-managed Azure AD automatically starting from 1st Dec. 2023. We recommend updating your cluster with AKS-managed Azure AD before 1 Dec 2023. This way you can manage the API server downtime during non-business hours.
- To avoid disruptions stemming from unmanaged Canonical nightly security updates, AKS will disable unmanaged Canonical nightly updates by 2 September 2023, on clusters that haven’t specified an update option explicitly, mapping to the option
Nonein the node OS upgrade channel feature. AKS strongly recommends proactively moving to auto-upgrade node-image or node OS upgrade channel - SecurityPatch or NodeImage options; you can set maintenance windows for these channels.
Release notes
- Preview Features
- AKS 1.28 version is now available in preview.
- Now customers can disable OutboundNAT for Windows nodes as long as the cluster's outbound type is not Load Balancer. This change enables customers to disable OutboundNAT in conjunction with User Defined Routes (UDR) and Azure firewall. Before the modification, customers could only disable OutboundNAT for Windows nodes when the cluster's outbound type was NAT Gateway.
- Features
- Node OS Upgrade Channel - NodeImage is now generally available.
- Outbound IP can now be a combination of ip/ipprefix and managed ones.
- Behavioral changes
- The taint added by AKS node auto repair will change from
remediator.aks.microsoft.com/unschedulabletoremediator.kubernetes.azure.com/unschedulable. - After you update SSH key, AKS doesn't automatically reimage your node pool, you can choose anytime to perform the reimage operation . Only after reimage is complete, does the update SSH key operation take effect.
- The taint added by AKS node auto repair will change from
- Component Updates
- Image Cleaner now has eraser version bumped to v1.2.1.
- Updated Windows gmsa webhook to v0.7.1 which supports multi-arch (amd64 and arm64).
- Bumped version of Azure Workload Identity to 1.1.0.
- AKS Ubuntu 18.04 image has been updated to AKSUbuntu-1804-202308.28.0.
- AKS Ubuntu 22.04 image has been updated to AKSUbuntu-2204-202308.28.0.
- Azure Linux image has been updated to AzureLinux-202308.28.0.