Azure/AKS 2023-10-01

Release 2023-10-01

on GitHub

Release 2023-10-01

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

• No new clusters can be created with Azure AD Integration (legacy). Existing AKS clusters with Azure Active Directory integration will keep working. All Azure AD Integration (legacy) AKS clusters will be migrated to AKS-managed Azure AD automatically starting from 1st Dec. 2023. We recommend updating your cluster with AKS-managed Azure AD before 1 Dec 2023. This way you can manage the API server downtime during non-business hours.

Release notes

• Features

  • Support for IP address changes for Azure Blob NFS mounts on AKS 1.27+.
  • Configurable resource group for the Private Link Service (PLS) creation using the "ServiceAnnotationPLSResourceGroup = "service.beta.kubernetes.io/azure-pls-resource-group" annotation.
  • The vertical pod autoscaling (VPA) add-on for AKS is now generally available.
  • Bring your own keys (BYOK) support to encrypt Azure Ephemeral disks is now generally available in AKS.

• Bug Fixes

  • Fix for some events during an upgrade such as "Deleting node" not appearing in kubectl get events.
  • Fix for metricDefinitions operation not exposed in Azure China.
  • Fix for Cluster Autoscaler condition where nodes that VPA pods are scheduled to could not be evicted.

• Behavioral Changes

  • The pod CPU request from ama-metrics daemonsets will be reduced in Windows from 500m to 150m and in Linux from 75m to 50m.
  • AKS will now validate, and block if necessary, service CIDRs placed in public and multicast IP address ranges.
  • If the ama-logs add-on is enabled, host port 28330 will be mounted to the ama-logs daemonset in order to facilitate syslog collection.
  • To reduce vertical pod autoscaling (VPA) out of memory (OOM) errors, the vpa-recommender CPU limit will increase to 1000m, memory limit to 2000Mi, and memory request to 800Mi from 200m, 1000m, and 500Mi respectively.
  • The default max surge value during upgrades will be changed from 1 to 10% for AKS 1.28+ on new clusters to improve upgrade latency.

• Component Updates

  • Linux Network Policy Manager (NPM) version has been rebuilt to v1.4.45.2, containing patches for Ubuntu CVEs.
  • ip-masq-agent-v2 onboarded to semantic versioning and has been updated to v0.1.8.
  • Upgraded Azure File CSI driver to v1.24.10 on AKS 1.25, v1.26.8 on AKS 1.26, and v1.28.5 on AKS 1.27.
  • Blob CSI driver upgraded to v1.22.2 on AKS 1.27+ to support AZNFS mount helper.