Azure/AKS 2024-03-31

Release 2024-03-31

on GitHub

Monitor the release status by regions at AKS-Release-Tracker.

Announcements

• Support upgrade version skew policy between core node and control plane components from n-2 to n-3 to match related upstream policy change starting Kubernetes version 1.28 AKS docs available here.
• Starting 1.30 Kubernetes version and 1.27 LTS versions, beta apis will be disabled by default, when you upgrade to them. There will be an option provided to explicitly enable beta apis closer to the 1.30 release.
• On 15 March 2027, Windows Server 2022 will be retired when Kubernetes 1.34 reaches the end of platform support. You won't be able to create new Windows Server 2022 node pools on Kubernetes 1.35 and above. We encourage you to make the switch before 15 March 2027 to gain the richer benefits of Windows Server 2025 or Windows Server Annual Channel. These new Windows OS versions will be supported on AKS before Windows Server 2022 is retired. For more updates, see our AKS public roadmap.

Release Notes

• Features:

  • AKS Cost Analysis is now generally available. View the aggregated costs for all your AKS clusters and namespaces in a subscription and drill into infrastructure and namespaces costs of a cluster directly in Azure Portal.
  • Trusted Access on AKS cluster is generally available now.

• Preview Features:

  • Disable SSH is in preview now. Users can disable/enable the SSH access on nodepool level.
  • Calico can now be disabled for an AKS cluster through the update operation. More info here.

• Behavioral Changes:

  • Customizations to HorizontalPodAutoscaler (HPA) for istiod and Istio ingress gateways are now allowed. User can directly edit the HPAs in aks-istio-system and aks-istio-ingress namespaces to customize the HPA. Note that HPA changes that violate minReplicas specified in the existing PDB will be rejected/reset.

• Bug Fixes:

  • Fixed missing CalicoBlockSize when uninstalling Calico. This fixes a bug that can cause the disablement of Calico Network Policies to fail.
  • Fixed an issue where node image upgrade or nodepool deletion might result in node auto provisioning to stop provisioning new nodes.
  • Fixed bug where the RP would sometimes normalize the case of networkProfile.loadBalancerSku from the case the user input, such as 'standard' to 'Standard', which may have caused diffs in Terraform state files or other client tools that perform diffs.

• Component Updates:

  • Upgraded secrets-store-csi-driver to version 1.4.2.
  • Upgraded azure-cloud-controller-manager to version 1.29.3, 1.28.8, 1.27.16, 1.26.22.
  • Azure Linux image has been updated to Azure Linux - 202403.25.0.
  • AKS Ubuntu 18.04 image has been updated to AKSUbuntu-1804-202403.25.0.
  • AKS Ubuntu 22.04 image has been updated to AKSUbuntu-2204-202403.25.0.