v1.19.1

Changes by Kind

Bug Fix

• Update ASO CRDs to v2.11.0 (#5516, @k8s-infra-cherrypick-robot)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Details

v1.19.0...v1.19.1

v1.19.0

⚠️ Users need manually install ASO CRDs v2.11.0 to be able to use CAPZ v1.19.0. CAPZ v1.19.1 automates installation of ASO v2.11.0 CRDs.

Changes by Kind

Deprecation

• Action required
  The bootstrap-config-gvk controller argument has been deprecated. The controller is now able to work with all bootstrap providers. (#5416, @anmazzotti)

Feature

• Adds a new authentication type for 1st party Microsoft applications - UserAssignedIdentityCredentials (#5421, @bryan-cox)
• Increase Kubeadm Verbosity across self-managed templates for better debugging during kubeadm init/join failures (#5496, @nawazkh)
• Support for Azure Private DNS Zone to be present in any resource group (#5452, @vishu2498)
• Update Tiltfile and add documentation on using AKS as mgmt cluster (#5451, @nawazkh)

Documentation

• Updated documentation pertaining to the cert-manager installation. (#5422, @junkiebev)

Bug or Regression

• Fixes a possible nil pointer deference when returning the name of the API Server LoadBalancer. In some cases like externally managed infrastructure, there might not be an API Server LoadBalancer in the AzureCluster CR (#5453, @bryan-cox)
• Update handling of AzureMachine's VMSize Capabilities that have a float value (#5481, @sadasu)

Other

• Bump CAPI to v1.9.5 (#5438, @mboersma)
• Bumps ASO from v2.9.0 to v2.11.0 (#5428, @bryan-cox)
• Update Otel and related dependencies to v1.35.0 (#5479, @nawazkh)

Dependencies

Added

• al.essio.dev/pkg/shellescape: v1.5.1
• github.com/Azure/msi-dataplane: v0.4.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.25.0
• github.com/asaskevich/govalidator/v11: e113478
• github.com/envoyproxy/go-control-plane/envoy: v1.32.4
• github.com/envoyproxy/go-control-plane/ratelimit: v0.1.0
• github.com/jellydator/ttlcache/v3: v3.3.0
• go.opentelemetry.io/contrib/detectors/gcp: v1.34.0

Changed

• cel.dev/expr: v0.16.1 → v0.19.1
• cloud.google.com/go/compute/metadata: v0.5.0 → v0.6.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity/cache: v0.3.1 → v0.3.2
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.8.1 → v1.8.2
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/eventhub/armeventhub: v1.2.0 → v1.3.0
• github.com/Azure/azure-service-operator/v2: v2.9.0 → v2.11.0
• github.com/Azure/go-autorest/autorest: v0.11.29 → v0.11.30
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.3.2 → v1.3.3
• github.com/antlr4-go/antlr/v4: v4.13.0 → v4.13.1
• github.com/asaskevich/govalidator: f21760c → a9d515a
• github.com/census-instrumentation/opencensus-proto: v0.4.1 → v0.2.1
• github.com/cncf/xds/go: b4127c9 → cff3c89
• github.com/envoyproxy/go-control-plane: v0.13.0 → v0.13.4
• github.com/envoyproxy/protoc-gen-validate: v1.1.0 → v1.2.1
• github.com/evanphx/json-patch/v5: v5.9.0 → v5.9.11
• github.com/fsnotify/fsnotify: v1.7.0 → v1.8.0
• github.com/golang-jwt/jwt/v5: v5.2.1 → v5.2.2
• github.com/golang/glog: v1.2.2 → v1.2.4
• github.com/google/cel-go: v0.20.1 → v0.22.0
• github.com/google/go-cmp: v0.6.0 → v0.7.0
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.24.0 → v2.26.1
• github.com/jackc/pgx/v5: v5.6.0 → v5.7.1
• github.com/jackc/puddle/v2: v2.2.1 → v2.2.2
• github.com/jessevdk/go-flags: v1.4.0 → v1.6.1
• github.com/prometheus/common: v0.61.0 → v0.62.0
• github.com/samber/lo: v1.38.1 → v1.47.0
• github.com/spf13/pflag: v1.0.5 → v1.0.6
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.53.0 → v0.54.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.33.0 → v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.33.0 → v1.35.0
• go.opentelemetry.io/otel/exporters/prometheus: v0.55.0 → v0.57.0
• go.opentelemetry.io/otel/metric: v1.33.0 → v1.35.0
• go.opentelemetry.io/otel/sdk/metric: v1.33.0 → v1.35.0
• go.opentelemetry.io/otel/sdk: v1.33.0 → v1.35.0
• go.opentelemetry.io/otel/trace: v1.33.0 → v1.35.0
• go.opentelemetry.io/otel: v1.33.0 → v1.35.0
• go.opentelemetry.io/proto/otlp: v1.4.0 → v1.5.0
• golang.org/x/crypto: v0.32.0 → v0.33.0
• golang.org/x/exp: 8a7402a → 939b2ce
• golang.org/x/mod: v0.22.0 → v0.23.0
• golang.org/x/net: v0.34.0 → v0.35.0
• golang.org/x/oauth2: v0.24.0 → v0.26.0
• golang.org/x/sync: v0.10.0 → v0.11.0
• golang.org/x/sys: v0.29.0 → v0.30.0
• golang.org/x/term: v0.28.0 → v0.29.0
• golang.org/x/text: v0.21.0 → v0.22.0
• golang.org/x/time: v0.6.0 → v0.8.0
• golang.org/x/tools: v0.28.0 → v0.30.0
• google.golang.org/genproto/googleapis/api: e6fa225 → 56aae31
• google.golang.org/genproto/googleapis/rpc: e6fa225 → 56aae31
• google.golang.org/grpc: v1.68.1 → v1.71.0
• google.golang.org/protobuf: v1.36.1 → v1.36.5
• k8s.io/gengo/v2: 51d4e06 → a7b603a
• k8s.io/kube-openapi: 835d969 → f7e401e
• k8s.io/utils: 18e509b → f90d014
• sigs.k8s.io/cluster-api/test: v1.9.4 → v1.9.5
• sigs.k8s.io/cluster-api: v1.9.4 → v1.9.5
• sigs.k8s.io/controller-runtime: v0.19.4 → v0.19.6
• sigs.k8s.io/kind: v0.26.0 → v0.27.0

Removed

• github.com/go-kit/log: v0.2.1
• github.com/go-logfmt/logfmt: v0.5.1

Details

v1.18.0...v1.19.0

v1.18.2

Changes by Kind

Bug Fixes

• Update handling of AzureMachine's VMSize Capabilities that have a float value (#5493, @sadasu)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Details

v1.18.1...v1.18.2

v1.17.5

Changes by Kind

Bug Fixes

• Update handling of AzureMachine's VMSize Capabilities that have a float value (#5497, @sadasu)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Details

v1.17.4...v1.17.5

v1.18.1

Changes by Kind

Feature

• Update Tiltfile and add documentation on using AKS as mgmt cluster (#5463, @k8s-infra-cherrypick-robot)

Bugs or Regression

• Fixes a possible nil pointer deference when returning the name of the API Server LoadBalancer. In some cases like externally managed infrastructure, there might not be an API Server LoadBalancer in the AzureCluster CR (#5457, @k8s-infra-cherrypick-robot)

Other (Cleanup or Flake)

• Bump CAPI to v1.9.5 (#5459, @mboersma)

Dependencies

Added

Nothing has changed.

Changed

• sigs.k8s.io/cluster-api/test: v1.9.4 → v1.9.5
• sigs.k8s.io/cluster-api: v1.9.4 → v1.9.5
• sigs.k8s.io/controller-runtime: v0.19.4 → v0.19.6

Removed

Nothing has changed.

Details

v1.18.0...v1.18.1

v1.17.4

Changes by Kind

Bugs or Regression

• Fixes a possible nil pointer deference when returning the name of the API Server LoadBalancer. In some cases like externally managed infrastructure, there might not be an API Server LoadBalancer in the AzureCluster CR (#5458, @nawazkh)

• Improves state update handling when running long operations on VMSS (#5327, @k8s-infra-cherrypick-robot)

Other (Cleanup or Flake)

• Bump CAPI to v1.8.10 (#5437, @mboersma)
• Update CAPZ rel-1.7 with CAPI-1.8.8 (#5376, @nawazkh)

Dependencies

Added

Nothing has changed.

Changed

• github.com/coredns/corefile-migration: v1.0.23 → v1.0.25
• golang.org/x/crypto: v0.27.0 → v0.31.0
• golang.org/x/net: v0.28.0 → v0.33.0
• golang.org/x/sync: v0.8.0 → v0.10.0
• golang.org/x/sys: v0.25.0 → v0.28.0
• golang.org/x/term: v0.24.0 → v0.27.0
• golang.org/x/text: v0.18.0 → v0.21.0
• sigs.k8s.io/cluster-api/test: v1.8.5 → v1.8.10
• sigs.k8s.io/cluster-api: v1.8.5 → v1.8.10
• sigs.k8s.io/controller-runtime: v0.18.5 → v0.18.7

Removed

Nothing has changed.

Details

v1.17.3...v1.17.4

v1.18.0

Changes by Kind

Feature

• Add new flavor flatcar-sysext for Flatcar Container Linux cluster deployments. (#4575, @sayanchowdhury)
• Allows Service Principal with Certificate authentication to work with a path to the certificate. (#5200, @bryan-cox)
• CAPZ now caches credentials to reduce the number of authentication requests it makes to Entra (#5283, @nojnhuh)
• Enable Tilt development for apiserver-ilb templates (#5288, @nawazkh)
• Enable the use of an external control plane (#4611, @rpahli)
• Feat APIServerILB: create ILB when feature flag APIServerILB is enabled (#5311, @nawazkh)
• Feat APIServerILB: private IP of the internal LB can be customized (#5332, @nawazkh)
• Private IP of the Internal LB of the API Server will be configurable (#5274, @nawazkh)
• Use community gallery for default VM images (#5167, @mboersma)
• Use internal LB's IP for intra-node communication (#5209, @nawazkh)

Documentation

• Added docs describing how to migrate existing AKS clusters managed by CAPZ to the new ASO-based API (#5305, @nojnhuh)
• Overhaul Quickstart UX using AzureASOManagedCluster (#5319, @willie-yao)

Failing Test

• Bump CAPI to v1.8.8 (#5371, @willie-yao)
• Custom build templates to use curl when az login fails (#5109, @nawazkh)
• Default to Marketplace images for old Kubernetes versions (#5266, @mboersma)

Bug or Regression

• Refactor(manager): set machinepool true as default (#5146, @KOREAN139)
• AKS extensions removed from an AzureManagedControlPlane's spec.extensions will now be deleted. (#5139, @nojnhuh)
• Fixed a bug preventing Cluster API from authenticating to ASOAPI Managed Clusters with local accounts disabled. (#5211, @nojnhuh)
• Fixed an issue where CAPZ was accumulating memory over time that could never be garbage collected. (#5284, @nojnhuh)
• Improves MachinePool scale up/down to avoid unnecessary VMSS VM model updates (#5164, @mweibel)
• Improves state update handling when running long operations on VMSS (#5292, @mweibel)
• Moves webhook registration behind feature gate flags like controller registration already does. (#5099, @bryan-cox)
• Perform nil check on private lb (#5378, @nawazkh)

Other (Cleanup or Flake)

• Bump CAPI to v1.8.4 (#5186, @mboersma)
• Bump CAPI to v1.8.5 (#5255, @mboersma)
• Bump CAPI to v1.9.4 (#5316, @mboersma)
• CAPZ now installs Azure Service Operator v2.9.0. (#5170, @nojnhuh)
• Removes default values previously set in webhooks and adds the default values directly in the API through the kubebuilder annotation, kubebuilder:default. (#5111, @bryan-cox)
• Update Golangci-lint to v1.60.2 and add golangci-lint PR GitHub workflow (#5158, @nawazkh)
• Update pre-commit hooks (#5213, @nawazkh)
• Update self-managed templates to use internal LB for node-to-node communication (#5210, @nawazkh)
• Use regular Flatcar images from Azure marketplace for flatcar-sysext template (#5263, @tormath1)

Dependencies

Added

• cel.dev/expr: v0.16.1
• dario.cat/mergo: v1.0.1
• github.com/Azure/azure-sdk-for-go/sdk/azidentity/cache: v0.3.1
• github.com/Azure/azure-sdk-for-go/sdk/tracing/azotel: v0.4.0
• github.com/AzureAD/microsoft-authentication-extensions-for-go/cache: v0.1.1
• github.com/antlr4-go/antlr/v4: v4.13.0
• github.com/dgryski/go-rendezvous: 9f7001d
• github.com/keybase/go-keychain: 57a3676
• github.com/planetscale/vtprotobuf: 0393e58
• github.com/redis/go-redis/v9: v9.7.0
• go.opentelemetry.io/auto/sdk: v1.1.0
• go.opentelemetry.io/otel/exporters/jaeger: v1.16.0
• gopkg.in/evanphx/json-patch.v4: v4.12.0

Changed

• cloud.google.com/go/compute/metadata: v0.3.0 → v0.5.0
• cloud.google.com/go/compute: v1.25.1 → v1.24.0
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.14.0 → v1.17.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.7.0 → v1.8.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/dataprotection/armdataprotection/v3: v3.0.0 → v3.1.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v3: v3.0.0 → v3.1.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/privatedns/armprivatedns: v1.2.0 → v1.3.0
• github.com/Azure/azure-service-operator/v2: v2.8.0 → v2.9.0
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.2.2 → v1.3.2
• github.com/Masterminds/semver/v3: v3.2.1 → v3.3.0
• github.com/Masterminds/sprig/v3: v3.2.3 → v3.3.0
• github.com/adrg/xdg: v0.5.0 → v0.5.3
• github.com/cncf/xds/go: 8a4994d → b4127c9
• github.com/coredns/corefile-migration: v1.0.23 → v1.0.25
• github.com/docker/docker: v27.1.1+incompatible → v27.3.1+incompatible
• github.com/envoyproxy/go-control-plane: v0.12.0 → v0.13.0
• github.com/envoyproxy/protoc-gen-validate: [v1.0.4 → v1.1.0](bufbuild/protoc-gen-validate@v1.0.4...v1....

v1.17.3

Changes by Kind

Other (Cleanup or Flake)

• Update CAPZ rel-1.7 with CAPI-1.8.8 (#5376, @nawazkh)
• Improves state update handling when running long operations on VMSS (#5327, @mweibel)

Dependencies

Added

Nothing has changed.

Changed

• github.com/coredns/corefile-migration: v1.0.23 → v1.0.24
• golang.org/x/crypto: v0.27.0 → v0.31.0
• golang.org/x/net: v0.28.0 → v0.33.0
• golang.org/x/sync: v0.8.0 → v0.10.0
• golang.org/x/sys: v0.25.0 → v0.28.0
• golang.org/x/term: v0.24.0 → v0.27.0
• golang.org/x/text: v0.18.0 → v0.21.0
• sigs.k8s.io/cluster-api/test: v1.8.5 → v1.8.8
• sigs.k8s.io/cluster-api: v1.8.5 → v1.8.8
• sigs.k8s.io/controller-runtime: v0.18.5 → v0.18.6

Removed

Nothing has changed.

Details

v1.17.2...v1.17.3

v1.16.5

Changes by Kind

Other (Cleanup or Flake)

• Bump CAPI to v1.7.9 (#5330, @mboersma)
• Improves state update handling when running long operations on VMSS (#5328, @mweibel)

Dependencies

Added

Nothing has changed.

Changed

• github.com/coredns/caddy: v1.1.0 → v1.1.1
• github.com/coredns/corefile-migration: v1.0.21 → v1.0.24
• sigs.k8s.io/cluster-api/test: v1.7.8 → v1.7.9
• sigs.k8s.io/cluster-api: v1.7.8 → v1.7.9

Removed

Nothing has changed.

Details

v1.16.4...v1.16.5

v1.17.2

Changes by Kind

Bug or Regression

• Fixed an issue where CAPZ was accumulating memory over time that could never be garbage collected. (#5286, @k8s-infra-cherrypick-robot)

Other (Cleanup or Flake)

• Bump CAPI to v1.8.5 (#5276, @mboersma)

Dependencies

Added

Nothing has changed.

Changed

• sigs.k8s.io/cluster-api/test: v1.8.4 → v1.8.5
• sigs.k8s.io/cluster-api: v1.8.4 → v1.8.5

Removed

Nothing has changed.

Details

v1.17.1...v1.17.2