Features in progress
- Extensions and Agent signature
- Extensions policy
- Parse the ga signatures from the goal state #3519
- Set separate CPU quota for extension signature validation #3488
- Delay extension signature validation after agent start #3552
- Error out only when signatureRequired is True on unsupported VMs #3585
- Self-update should attempt next highest version on download/package version #3584
- Disable signature validation if timeout period exceeded #3572
Bug Fixes and improvements
- Decouple initialization of the Transport certificate from protocol detection #3534
- Remove more instances of calls to WireClient.get_goal_state() #3539
- Use passlib module instead of crypt on Python >= 3.13 #3542
- Cgroup2fs filesystem detection in cgroups api check #3548
- Define 'backslashreplace' error handler for Python <= 3.4 #3553
- Update local log message to include extension name #3554
- Improve artifact download failure telemetry #3550
- Improve retry strategy for artifact download #3561
- Improve SAS redaction regex #3560
- Remove CPU and memory accounting enablement in CgroupV2 #3564
- Add IsCVM value to KeywordName column in events #3575
- Initialize cvm info in log collector for common telemetry parameters #3583
- IsCVM telemetry field should only be initialized on ExtHandler #3587
- Set a limit on firewall reports when the state of the firewall changes continuously #3574
- add support for Azure container linux #3577
Tests bug fixes and improvements
- Fix CVM unit tests failures #3538
- Fix flakiness in publish_hostname e2e test #3544
- Increase timeout for rsm checks in e2e tests #3543
- Add Oracle 10 to end-to-end test run #3546
- Fixing the timeout check that was added in rsm e2e updates previously #3549
- Add Python 3.13 and 3.14 to the unit test run #3556
- Exclude rocky_9_cvm from e2e tests #3555
- Move FIPS test to West US 2 #3558
- Add Oracle Linux 9.5 to FIPS test #3559
- Fixing test test_agent_enforcement_enabled_in_v2 #3563
- Update publisher for Rocky Linux #3565
- Update the ext_handler process name in pkill cmd #3579
- Add check for get_nm_controlled before invoking it #3580
- Skip tests requiring a scale set when using a VHD #3582
- Remove CentOS 8.2 from test suite #3586
- Move signature validation tests to production region #358
- Cleaning up CODEOWNERS #3590
- Disable signature validation in common test setup #3592