2509 Update

AIO2509 (v1.2.72) Public Preview Release Notes

Summary

The 2509 release introduces several enhancements now available in public preview, focused on simplifying deployment and improving edge-to-cloud observability. Key updates include:

• Secret Management: Integrated Secret Picker with Azure Key Vault for secure, in-portal secret selection.
• Telemetry Connectors: New connectors stream HTTP events and OTEL telemetry to MQTT/state stores and Azure Monitor.
• Modular Dataflows: Dataflow graphs and import/export capabilities streamline edge automation and configuration.
• CLI Improvements: Deprecated extensions removed, asset migration command added, and Python 3.13 proxy compatibility patched.

Server-Sent Events (SSE) Connector

Introducing the Server-Sent Events (SSE) connector, now in public preview. This connector enables integration with HTTP(S) endpoints that expose SSE streams, allowing real-time event ingestion into Azure IoT Operations.

Key Features:

• Samples SSE events from configured HTTP(S) endpoints.
• Automatically generates message schemas for each dataset/event and registers them with Schema Registry and Azure Device Registry.
• Forwards event data to designated destinations.
• Implements automatic retries on sampling failures.
• Integrates with OpenTelemetry for enhanced observability.
• Supports device endpoints and namespace assets.
• Infers schema from JSON payloads.
• Offers multiple authentication methods:
  • Username/password
  • x.509 certificates
  • Anonymous access
  • Certificate trust list/bundle

OPC UA Connector

Introducing enhancements to the OPC UA Connector, now available in public preview. These updates expand integration capabilities with shop floor systems and improve semantic data synchronization for edge intelligence.

Key Features:

• OPC UA Call Support: Define management actions of type Call and Write, and invoke them via the MQTT RPC API: <AioNamespace>/asset-operations/<AssetName>/<ManagementGroupName>/<ManagementActionName>. The connector auto-generates JSON Schema Draft 7 definitions for request and response messages, simplifying interaction with OPC UA assets.

• Property Synchronization to DSS: Semantic properties modeled in the OPC UA address space (e.g., metadata on variable nodes) are now synchronized into the AIO MQTT Distributed State Store (DSS). Properties are added under the ID: {AioNamespace}.{AssetName}.{DatasetName}.{DataPointName}.{PropertyName}. This enables enriched dataflows and dynamic routing based on asset metadata.

Breaking Changes:

• MQTT Path for Dataset Write: Updated from: <AioNamespace>/asset-operations/<AssetName>/<DatasetName> to: <AioNamespace>/asset-operations/<AssetName>/builtin/<DatasetName>. This aligns with management group conventions.

• MQTT Path for Dataset Telemetry: Updated from: <AioNamespace>/data/<AssetName>/ to: <AioNamespace>/data/<AssetName>/<DatasetName>. This change supports more granular dataflow definitions.

Fixed Bugs:

• Support for multiple inbound endpoints of type Microsoft.OpcUa within a single device.
• Custom MQTT destinations per dataset now function as expected.
• Resolved Invalid Cast Exception during asset discovery when OPC UA address space browsing fails.

Azure Portal Enhancements

• Secret Picker Integration: The Azure IoT Operations instance blade now features a streamlined Secret Picker experience, enabling secure browsing, selection, and management of secrets directly from Azure Key Vault.
• Server-Side Events Connector: Supports real-time streaming of HTTP events to MQTT or state stores, simplifying integration with edge systems.

Azure IoT Operations Experience

• OTEL Connector: Streams structured telemetry (logs, metrics, traces) from edge assets to observability platforms like Azure Monitor for real-time diagnostics and fleet-wide insights.
• Modular Dataflow Graphs: Enables OT teams to build resilient, near real-time edge intelligence workflows.
• Import/Export Capabilities: Facilitates seamless migration and scaling by allowing import/export of tags, datapoints, events, and management actions.
• Server-Side Events Connector: Also available within the operations experience for HTTP-to-MQTT/state store streaming.

Azure IoT Operations CLI Updates

• Deployment Changes:
  • Updated arc extension versions for ops init and ops create.
  • ops init no longer deploys the ACSA extension or supports extension config.
  • ops upgrade excludes the ACSA extension.
  • ops init skips AIO Platform extension deployment when --user-trust is specified.
• Deprecated Parameters:
  • Removed from ops create: --enable-rsync, --runtime-socket, and --kubernetes-distro.
  • Removed from ops broker persist update: --user-key and --user-value.
• New Command:
  • az iot ops migrate-assets: Migrates root assets to namespace assets.
• Python 3.13 Compatibility Patch:
  • Applied to cluster-side commands (ops check, ops init --check-cluster, ops support create-bundle) to address proxy certificate issues with connectedk8s on Python 3.13 (non-conformance to RFC 5280).