Azure/azure-service-operator v2.16.0

on GitHub

Feature Highlight

When creating a RoleAssignment, you can use the well-known name of any built-in Azure RoleDefinition (e.g. contributor or owner) instead of constructing the usual ARM ID with a published GUID (#4923)

What's Changed

Breaking changes

• Removed containerservice v1api20210501 v1api20231102preview api verisons. This was required to fit the new versions in the CRD. See number of versions supported in a CRD. If you allow the operator to manage its own CRDs via --crd-pattern, no action is needed the operator will take care of removing these versions. If you manage the CRD versions yourself, you'll need to run asoctl clean crds before upgrading.

Upcoming breaking changes

• Will remove containerservice fleet API version v1api20230315preview in the next release of ASO (v2.17)

New resources

• Add support for new cache API version v1api20241101 (#4875)
• Add support for new network NetworkWatcher resource (#4960)
• Add support for new network NetworkWatchersFlowLog resource (#4960)
• Add support for new apimanagement API version v1api20240501 (#4909)
• Add support for new containerservice fleet API version v1api20250301 (#4952)
• Add support for new containerservice FleetsUpdateStrategy resource (#4952)
• Add support for new containerservice FleetsAutoUpgradeProfile resource (#4952)
• Add support for new containerservice API version v1api20250801 (#4951)
• Add support for new compute CapacityReservationGroup resource (#4980)
• Add support for new quota GroupQuota resource (#4979)

Features

• Extend ResourceReferences to support WellKnown names and backward compatibility (#4922)
• Allow specifying system for Identity references in app resources (#4924)
• Add config map support for UserAssignedIdentity in containerservice identityProfile (#4940)
• Allow specifying Role Assignment by using the well-known name of a RoleDefinition (#4923)
• Add PreReconcileOwnerCheck and implement for Kusto Databases (#4976)
• Updated numerous dependencies (#4901, #4912, #4930, #4938, #4932, #4950, #4963, #4984, #4983)
• Update to latest cert-manager 1.18.2 (#4977)

Bug fixes

• Add "UnsupportedResourceType" to asoctl exclusions for extension resources (#4934)
• Make NetcfgSubnetRangeOutsideVnet error retryable for VirtualNetworksSubnet (#4931)
• Fix bug preventing resource reconciliation due to "Secret not cached" (#4966)
• Fix select annotation changed predicate which could cause excess reconciliations (#4967)
• Fix up broken ResourceReferenceProperties (#4925)

Documentation

• Improve documentation comments in arm packages (#4914)
• Move completed ADRs to separate section (#4908)
• Move more ADRs to the completed section (#4955)
• Consolidate open ADRs into a single table (#4961)