v1.34.1

Full Changelog: v1.34.0..v1.34.1

Changes by Kind

Bug or Regression

• Clean backend pool node destination while reconciling security group (#9417, @zarvd)
• Fix: China cloud endpoints (#9451, @andyzhangx)

Dependencies

Added

Nothing has changed.

Changed

• github.com/AzureAD/microsoft-authentication-library-for-go: v1.4.2 → v1.5.0

Removed

Nothing has changed.

v1.30.15

Full Changelog: v1.30.14..v1.30.15

Changes by Kind

Feature

• New Feature: Node Filtering for Cloud Controller Manager
  Added --node-filter-requirements flag to selectively manage nodes using Kubernetes label selectors.

  Usage examples:
  --node-filter-requirements="environment=production"
  --node-filter-requirements="environment in (production,staging),!maintenance" (#9405, @k8s-infra-cherrypick-robot)

Bug or Regression

• Fix: Do not return early when pip.publicIPAddress is empty when checking the ownership (#9388, @nilo19)

Other (Cleanup or Flake)

• Chore: bump Go version to 1.24.6/1.23.12 for CVEs (#9415, @feiskyer)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v1.33.3

Full Changelog: v1.33.2..v1.33.3

Changes by Kind

Feature

• Chore: add option to list vmss vms without instance view (#9340, @k8s-infra-cherrypick-robot)

• New Feature: Node Filtering for Cloud Controller Manager
  Added --node-filter-requirements flag to selectively manage nodes using Kubernetes label selectors.

  Usage examples:
  --node-filter-requirements="environment=production"
  --node-filter-requirements="environment in (production,staging),!maintenance" (#9408, @k8s-infra-cherrypick-robot)

Bug or Regression

• Chore: fix typo in vmss controller (#9272, @k8s-infra-cherrypick-robot)
• Clean backend pool node destination while reconciling security group (#9417, @zarvd)
• Fix: China cloud endpoints (#9425, @andyzhangx)
• Fix: Do not return early when pip.publicIPAddress is empty when checking the ownership (#9385, @k8s-infra-cherrypick-robot)

Other (Cleanup or Flake)

• Chore: bump Go version to 1.24.6 for CVEs (#9413, @feiskyer)

Dependencies

Added

• github.com/grafana/regexp: a468a5b
• github.com/prometheus/otlptranslator: 8549f4a

Changed

• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.18.1 → v1.19.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.10.1 → v1.11.0
• github.com/Azure/azure-sdk-for-go/sdk/internal: v1.11.1 → v1.11.2
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.4.2 → v1.5.0
• github.com/golang-jwt/jwt/v5: v5.2.2 → v5.3.0
• github.com/onsi/gomega: v1.37.0 → v1.38.0
• github.com/prometheus/client_golang: v1.22.0 → v1.23.0
• github.com/prometheus/procfs: v0.16.1 → v0.17.0
• github.com/spf13/pflag: v1.0.6 → v1.0.7
• github.com/stretchr/testify: v1.10.0 → v1.11.0
• go.opentelemetry.io/otel/exporters/prometheus: v0.59.0 → v0.59.1
• go.uber.org/mock: v0.5.2 → v0.6.0
• golang.org/x/crypto: v0.39.0 → v0.41.0
• golang.org/x/mod: v0.25.0 → v0.27.0
• golang.org/x/net: v0.41.0 → v0.43.0
• golang.org/x/sys: v0.34.0 → v0.35.0
• golang.org/x/term: v0.32.0 → v0.34.0
• golang.org/x/text: v0.27.0 → v0.28.0
• golang.org/x/tools: v0.34.0 → v0.36.0
• k8s.io/api: v0.33.2 → v0.33.4
• k8s.io/apimachinery: v0.33.2 → v0.33.4
• k8s.io/apiserver: v0.33.2 → v0.33.4
• k8s.io/client-go: v0.33.2 → v0.33.4
• k8s.io/cloud-provider: v0.33.2 → v0.33.4
• k8s.io/component-base: v0.33.2 → v0.33.4
• k8s.io/component-helpers: v0.33.2 → v0.33.4
• k8s.io/controller-manager: v0.33.2 → v0.33.4
• k8s.io/cri-api: v0.33.2 → v0.33.4
• k8s.io/kms: v0.33.2 → v0.33.4
• k8s.io/kubelet: v0.33.2 → v0.33.4
• sigs.k8s.io/cloud-provider-azure/pkg/azclient/cache: v0.7.3 → v0.8.1
• sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader: v0.7.2 → v0.8.2
• sigs.k8s.io/cloud-provider-azure/pkg/azclient: v0.8.5 → v0.9.1
• sigs.k8s.io/yaml: v1.5.0 → v1.6.0

Removed

• github.com/dgryski/go-rendezvous: 9f7001d
• github.com/redis/go-redis/v9: v9.8.0

v1.32.8

Full Changelog: v1.32.7..v1.32.8

Changes by Kind

Feature

• Chore: add option to list vmss vms without instance view (#9341, @k8s-infra-cherrypick-robot)

• New Feature: Node Filtering for Cloud Controller Manager
  Added --node-filter-requirements flag to selectively manage nodes using Kubernetes label selectors.

  Usage examples:
  --node-filter-requirements="environment=production"
  --node-filter-requirements="environment in (production,staging),!maintenance" (#9407, @k8s-infra-cherrypick-robot)

Bug or Regression

• Chore: fix typo in vmss controller (#9273, @k8s-infra-cherrypick-robot)
• Clean backend pool node destination while reconciling security group (#9417, @zarvd)
• Fix CVE-2024-51744 CVE-2025-30204 (#9424, @mainred)
• Fix: China cloud endpoints (#9426, @andyzhangx)
• Fix: Do not return early when pip.publicIPAddress is empty when checking the ownership (#9386, @k8s-infra-cherrypick-robot)
• Fix: fix error evaluation in azure_controller_vmssflex.AttachDisk (#9232, @k8s-infra-cherrypick-robot)

Other (Cleanup or Flake)

• Chore: bump Go version to 1.24.6/1.23.12 for CVEs (#9414, @feiskyer)

Dependencies

Added

Nothing has changed.

Changed

• github.com/AzureAD/microsoft-authentication-library-for-go: v1.4.2 → v1.5.0
• github.com/golang-jwt/jwt/v4: v4.5.1 → v4.5.2
• github.com/golang-jwt/jwt/v5: v5.2.2 → v5.3.0

Removed

Nothing has changed.

v1.31.9

Full Changelog: v1.31.8..v1.31.9

Changes by Kind

Feature

• New Feature: Node Filtering for Cloud Controller Manager
  Added --node-filter-requirements flag to selectively manage nodes using Kubernetes label selectors.

  Usage examples:
  --node-filter-requirements="environment=production"
  --node-filter-requirements="environment in (production,staging),!maintenance" (#9406, @k8s-infra-cherrypick-robot)

Bug or Regression

• Clean backend pool node destination while reconciling security group (#9417, @zarvd)
• Fix CVE-2024-51744 and CVE-2025-30204 (#9419, @mainred)
• Fix: China cloud endpoints (#9428, @andyzhangx)
• Fix: Do not return early when pip.publicIPAddress is empty when checking the ownership (#9387, @nilo19)

Other (Cleanup or Flake)

• Chore: bump Go version to 1.24.6/1.23.12 for CVEs (#9416, @feiskyer)

Dependencies

Added

Nothing has changed.

Changed

• github.com/AzureAD/microsoft-authentication-library-for-go: v1.4.2 → v1.5.0
• github.com/golang-jwt/jwt/v4: v4.5.0 → v4.5.2
• github.com/golang-jwt/jwt/v5: v5.2.2 → v5.3.0

Removed

Nothing has changed.

v1.34.0

Full Changelog: v1.33.0..v1.34.0

Changes by Kind

Feature

• New Feature: Node Filtering for Cloud Controller Manager
  Added --node-filter-requirements flag to selectively manage nodes using Kubernetes label selectors.

  Usage examples:
  --node-filter-requirements="environment=production"
  --node-filter-requirements="environment in (production,staging),!maintenance" (#9270, @Xinyue-Wang)

Bug or Regression

• Chore: add option to list vmss vms without instance view (#9339, @landreasyan)
• Chore: bump lbclient to latest API version for AzureStackCloud (#9308, @tyler-lloyd)
• Chore: fix typo in vmss controller (#9252, @hccheng72)
• Fix: Do not return early when pip.publicIPAddress is empty when checking the ownership (#9363, @nilo19)
• Fix: Retry reconcileLoadBalancer after removing PLS (#9127, @nilo19)
• Fix: Set default ipfamilies to ipv4 if the field is empty (#9112, @nilo19)
• Fix: don't change subnet.PrivateEndpointNetworkPolicies setting if it's already set (#9227, @andyzhangx)
• Fix: fix error evaluation in azure_controller_vmssflex.AttachDisk (#9040, @sunpa93)
• Fix: migrate interface client operations from NetworkClientFactory to ComputeClientFactory (#9250, @nilo19)

Other (Cleanup or Flake)

• Bump kubernetes dependencies to v1.34.0 (#9384, @feiskyer)
• Chore: bump Go version to 1.24.6 (#9380, @feiskyer)
• Skip adding Internet service tag if IP ranges allow all (#9208, @zarvd)

Dependencies

Added

• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.29.0
• github.com/Masterminds/semver/v3: v3.4.0
• github.com/cenkalti/backoff/v5: v5.0.3
• github.com/envoyproxy/go-control-plane/envoy: v1.32.4
• github.com/envoyproxy/go-control-plane/ratelimit: v0.1.0
• github.com/go-jose/go-jose/v4: v4.1.1
• github.com/grafana/regexp: a468a5b
• github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus: v1.0.1
• github.com/grpc-ecosystem/go-grpc-middleware/v2: v2.3.0
• github.com/prometheus/otlptranslator: 8549f4a
• github.com/spiffe/go-spiffe/v2: v2.5.0
• github.com/zeebo/errs: v1.4.0
• go.etcd.io/raft/v3: v3.6.0
• go.opentelemetry.io/contrib/detectors/gcp: v1.36.0
• go.yaml.in/yaml/v2: v2.4.2
• go.yaml.in/yaml/v3: v3.0.4
• golang.org/x/tools/go/expect: v0.1.1-deprecated
• golang.org/x/tools/go/packages/packagestest: v0.1.1-deprecated
• gonum.org/v1/gonum: v0.16.0
• sigs.k8s.io/structured-merge-diff/v6: v6.3.0

Changed

• cel.dev/expr: v0.19.1 → v0.24.0
• cloud.google.com/go/compute/metadata: v0.5.0 → v0.7.0
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.18.0 → v1.19.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.9.0 → v1.11.0
• github.com/Azure/azure-sdk-for-go/sdk/internal: v1.11.1 → v1.11.2
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v6: v6.4.0 → v6.6.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault: v1.4.0 → v1.5.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/msi/armmsi: v1.2.0 → v1.3.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage: v1.8.0 → v1.8.1
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets: v1.3.1 → v1.4.0
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal: v1.1.1 → v1.2.0
• github.com/Azure/go-ansiterm: 306776e → faa5f7b
• github.com/cncf/xds/go: b4127c9 → 2ac532f
• github.com/coreos/go-systemd/v22: v22.5.0 → v22.6.0
• github.com/emicklei/go-restful/v3: v3.12.1 → v3.13.0
• github.com/envoyproxy/go-control-plane: v0.13.0 → v0.13.4
• github.com/envoyproxy/protoc-gen-validate: v1.1.0 → v1.2.1
• github.com/fxamacker/cbor/v2: v2.7.0 → v2.9.0
• github.com/go-faker/faker/v4: v4.6.0 → v4.6.1
• github.com/go-logr/logr: v1.4.2 → v1.4.3
• github.com/go-openapi/jsonpointer: v0.21.0 → v0.21.2
• github.com/go-openapi/swag: v0.23.0 → v0.23.1
• github.com/godbus/dbus/v5: v5.0.4 → v5.1.0
• github.com/golang-jwt/jwt/v5: v5.2.2 → v5.3.0
• github.com/golang/glog: v1.2.2 → v1.2.5
• github.com/google/cel-go: v0.23.2 → v0.26.1
• github.com/google/gnostic-models: v0.6.9 → v0.7.0
• github.com/google/gofuzz: v1.2.0 → v1.0.0
• github.com/google/pprof: 27863c8 → f64d9cf
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.24.0 → v2.27.2
• github.com/jonboulle/clockwork: v0.4.0 → v0.5.0
• github.com/mailru/easyjson: v0.7.7 → v0.9.0
• github.com/moby/term: v0.5.0 → v0.5.2
• github.com/modern-go/reflect2: v1.0.2 → 35a7c28
• github.com/onsi/ginkgo/v2: v2.23.4 → v2.25.1
• github.com/onsi/gomega: v1.37.0 → v1.38.1
• github.com/prometheus/client_golang: v1.22.0 → v1.23.0
• github.com/prometheus/client_model: v0.6.1 → v0.6.2
• github.com/prometheus/common: v0.62.0 → v0.65.0
• github.com/prometheus/procfs: v0.15.1 → v0.17.0
• github.c...

v1.33.2

Full Changelog: v1.33.1..v1.33.2

Changes by Kind

Bug or Regression

• Fix: don't change subnet.PrivateEndpointNetworkPolicies setting if it's already set (#9229, @k8s-infra-cherrypick-robot)
• Fix: fix error evaluation in azure_controller_vmssflex.AttachDisk (#9231, @k8s-infra-cherrypick-robot)
• Fix: migrate interface client operations from NetworkClientFactory to ComputeClientFactory (#9268, @k8s-infra-cherrypick-robot)

Other (Cleanup or Flake)

• Skip adding Internet service tag if IP ranges allow all (#9208, @zarvd)

Dependencies

Added

• go.yaml.in/yaml/v2: v2.4.2
• go.yaml.in/yaml/v3: v3.0.3

Changed

• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.18.0 → v1.18.1
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.9.0 → v1.10.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v6: v6.4.0 → v6.6.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault: v1.4.0 → v1.5.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage: v1.8.0 → v1.8.1
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets: v1.3.1 → v1.4.0
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal: v1.1.1 → v1.2.0
• github.com/go-faker/faker/v4: v4.6.0 → v4.6.1
• github.com/go-logr/logr: v1.4.2 → v1.4.3
• github.com/google/gofuzz: v1.2.0 → v1.0.0
• github.com/prometheus/client_model: v0.6.1 → v0.6.2
• github.com/prometheus/common: v0.62.0 → v0.65.0
• github.com/prometheus/procfs: v0.15.1 → v0.16.1
• github.com/redis/go-redis/v9: v9.7.3 → v9.8.0
• github.com/samber/lo: v1.50.0 → v1.51.0
• go.opentelemetry.io/otel/exporters/prometheus: v0.57.0 → v0.59.0
• go.opentelemetry.io/otel/metric: v1.35.0 → v1.37.0
• go.opentelemetry.io/otel/sdk/metric: v1.35.0 → v1.37.0
• go.opentelemetry.io/otel/sdk: v1.35.0 → v1.37.0
• go.opentelemetry.io/otel/trace: v1.35.0 → v1.37.0
• go.opentelemetry.io/otel: v1.35.0 → v1.37.0
• golang.org/x/crypto: v0.36.0 → v0.39.0
• golang.org/x/mod: v0.24.0 → v0.25.0
• golang.org/x/net: v0.38.0 → v0.41.0
• golang.org/x/oauth2: v0.27.0 → v0.30.0
• golang.org/x/sync: v0.14.0 → v0.16.0
• golang.org/x/sys: v0.33.0 → v0.34.0
• golang.org/x/term: v0.30.0 → v0.32.0
• golang.org/x/text: v0.25.0 → v0.27.0
• golang.org/x/time: v0.11.0 → v0.12.0
• golang.org/x/tools: v0.31.0 → v0.34.0
• google.golang.org/protobuf: v1.36.5 → v1.36.6
• k8s.io/api: v0.33.0 → v0.33.2
• k8s.io/apimachinery: v0.33.0 → v0.33.2
• k8s.io/apiserver: v0.33.0 → v0.33.2
• k8s.io/client-go: v0.33.0 → v0.33.2
• k8s.io/cloud-provider: v0.33.0 → v0.33.2
• k8s.io/component-base: v0.33.0 → v0.33.2
• k8s.io/component-helpers: v0.33.0 → v0.33.2
• k8s.io/controller-manager: v0.33.0 → v0.33.2
• k8s.io/cri-api: v0.33.0 → v0.33.2
• k8s.io/kms: v0.33.0 → v0.33.2
• k8s.io/kubelet: v0.33.0 → v0.33.2
• sigs.k8s.io/cloud-provider-azure/pkg/azclient/cache: v0.6.1 → v0.7.3
• sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader: v0.6.1 → v0.7.2
• sigs.k8s.io/cloud-provider-azure/pkg/azclient: v0.8.0 → v0.8.5
• sigs.k8s.io/yaml: v1.4.0 → v1.5.0

Removed

• github.com/niemeyer/pretty: a10e7ca

v1.32.7

Full Changelog: v1.32.6..v1.32.7

Changes by Kind

Bug or Regression

• Fix: don't change subnet.PrivateEndpointNetworkPolicies setting if it's already set (#9230, @k8s-infra-cherrypick-robot)
• Fix: migrate interface client operations from NetworkClientFactory to ComputeClientFactory (#9267, @k8s-infra-cherrypick-robot)

Other (Cleanup or Flake)

• Skip adding Internet service tag if IP ranges allow all (#9208, @zarvd)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v1.31.8

Full Changelog: v1.31.7..v1.31.8

Changes by Kind

Other (Cleanup or Flake)

• Skip adding Internet service tag if IP ranges allow all (#9208, @zarvd)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v1.30.14

Full Changelog: v1.30.13..v1.30.14

Changes by Kind

Other (Cleanup or Flake)

• Skip adding Internet service tag if IP ranges allow all (#9208, @zarvd)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.