v1.20.0

Changes by Kind

Feature

• Add additionalCapabilities spec field to AzureMachinePool.Spec.Template.AdditionalCapabilities, allowing users to create MachinePools with UltraSSD capabilities (#5628, @w21froster)
• Add documentation on running e2e tests locally (#5489, @nawazkh)
• Add flag to disable bootstrap extension and improve error message (#5509, @willie-yao)
• Add make aks-delete target to clean up AKS clusters listed under allowed_contexts in tilt-settings.yaml (#5576, @Nitesh703)
• Added AdditionalAPIServerLBPorts field for the additional inbound control-plane load balancer port configuration, allowing to access user specified ports on the CP machines.
• Improved securityRules selection for the RKE2 provider. Defaulting now checks for ports 6443 and 22 in the existing list and appends them if missing, allowing users to specify only additional rules instead of the full set, when an additional rule is needed. (#5525, @Danil-Grigorev)
• Moved AzureASOManaged API to v1beta1 (#5660, @alimaazamat)

Documentation

• Added FAQ to documentation describing why kubectl get for an ASO resource shows a different API version than what CAPZ used to create it. (#5527, @nojnhuh)
• Cleaned up Tilt with AKS as management Cluster with Internal Load Balancer docs. (#5522, @alimaazamat)
• Updating the roadmap to align with our current timeline and future milestones (#5513, @mbrow137)

Bug or Regression

• Avoids marking an AzureMachinePoolMachine as terminal failure on provisioning failure. This ensures potential recovery from provisioning failure is handled correctly. (#5558, @mweibel)
• Fix GO-2025-3488 security vulnerability by updating golang.org/x/oauth2: v0.25.0 => v0.27.0 (#5638, @nawazkh)
• Fixed a bug causing an unnecessary update to an AKS agent pool after its managed cluster is created when certain fields are defined. (#5521, @nojnhuh)
• Fixes manager deployment to enable cluster cache tracker (#5556, @mweibel)
• Fixes potential OOM due to tracing (even if tracing not enabled) (#5540, @mweibel)
• Fixes potential nil pointer when deleting MachinePool (#5670, @mweibel)
• Fixes ready state of AzureMachinePool to avoid failing to reconcile a working VMSS. This improves reconciliation of MachinePools especially during scale up/down operations. (#5537, @mweibel)
• NIC should be try to fix itself when in ProvisioningFailed State (#5569, @nawazkh)
• Subnet spec should not be updated if status ASO CIDRs are empty. (#5584, @alimaazamat)
• Update ASO CRDs to v2.11.0 (#5512, @willie-yao)
• Upgraded aks-aso and aks-aso-clusterclass flavor templates to use the new API version. (#5622, @alimaazamat)

Other (Cleanup or Flake)

• Bump CAPI to v1.9.6 (#5530, @mboersma)
• Deprecated field NumberOfProbes has been replaced with ProbeThreshold (#5562, @jhixson74)
• Update Calico to 3.29 (#5523, @jsturtevant)
• Update default Kubernetes version to 1.32 (#5528, @jsturtevant)
• Bump CAPI to v1.10.2 (#5517, @tamalsaha)

Dependencies

Added

• cloud.google.com/go/auth/oauth2adapt: v0.2.6
• cloud.google.com/go/auth: v0.13.0
• cloud.google.com/go/monitoring: v1.21.2
• github.com/Azure/azure-kusto-go/azkustodata: 5
• github.com/Azure/azure-kusto-go/azkustoingest: 5
• github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry: v0.2.2
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/apimanagement/armapimanagement/v2: v2.1.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v6: v6.3.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v5: v5.0.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v6: v6.4.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal: v1.1.2
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v6: v6.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/notificationhubs/armnotificationhubs: v1.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/redhatopenshift/armredhatopenshift: v1.6.0
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets: v1.3.1
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal: v1.1.1
• github.com/Azure/azure-sdk-for-go/sdk/storage/azqueue: v1.0.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric: v0.48.1
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping: v0.48.1
• github.com/cenkalti/backoff/v5: v5.0.2
• github.com/go-jose/go-jose/v4: v4.0.4
• github.com/go-viper/mapstructure/v2: v2.2.1
• github.com/prashantv/gostub: v1.1.0
• github.com/rotisserie/eris: v0.5.4
• github.com/spiffe/go-spiffe/v2: v2.5.0
• github.com/zeebo/errs: v1.4.0
• go.uber.org/automaxprocs: v1.6.0
• sigs.k8s.io/cloud-provider-azure/pkg/azclient/cache: v0.4.0
• sigs.k8s.io/randfill: v1.0.0

Changed

• cel.dev/expr: v0.19.1 → v0.22.1
• cloud.google.com/go/iam: v1.1.5 → v1.2.2
• cloud.google.com/go/storage: v1.35.1 → v1.49.0
• cloud.google.com/go: v0.112.1 → v0.116.0
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.17.0 → v1.18.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: [v1.8.2 → v1.10.0](Azure/azure-sdk-for-go@sdk/azidentity/v1.8.2...sdk/azident...

v1.19.4

Changes by Kind

Bugs and Regressions

• Upgraded aks-aso and aks-aso-clusterclass flavor templates to use the new API version. (#5626, @alimaazamat)
• fix AzCluster_default and AzCluster_validation webhooks (#5617, @nawazkh)

Dependencies

Added

Nothing has changed.

Changed

• Bump Cert-manager to v1.17.2 (#5623, @mboersma)

Removed

Nothing has changed.

Details

v1.19.3...v1.19.4

v1.18.5

Changes by Kind

Bug or Regression

• fix AzCluster_default and AzCluster_validation webhooks (#5616, @nawazkh)

Dependencies

Added

Nothing has changed.

Changed

• Bump Cert-manager to v1.17.2 (#5624, @mboersma)

Removed

Nothing has changed.

Details

v1.18.4...v1.18.5

v1.19.3

Changes by Kind

Bug or Regression

• Subnet spec should not be updated if status ASO CIDRs are empty. (#5591, @k8s-infra-cherrypick-robot)
• Fixes manager deployment to enable cluster cache tracker (#5573, @k8s-infra-cherrypick-robot)
• NIC should be try to fix itself when in ProvisioningFailed State (#5575, @k8s-infra-cherrypick-robot)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Details

v1.19.2...v1.19.3

v1.18.4

Changes by Kind

Bug or Regression

• Subnet spec should not be updated if status ASO CIDRs are empty. (#5597, @alimaazamat)
• Fixes manager deployment to enable cluster cache tracker (#5572, @k8s-infra-cherrypick-robot)
• NIC should be try to fix itself when in ProvisioningFailed State (#5574, @k8s-infra-cherrypick-robot)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Details

v1.18.3...v1.18.4

v1.19.2

Changes by Kind

Bug or Regression

• Fixed a bug causing an unnecessary update to an AKS agent pool after its managed cluster is created when certain fields are defined. (#5524, @nojnhuh)
• Fixes potential OOM due to tracing (even if tracing not enabled) @mweibel)

Other (Cleanup or Flake)

• Bump CAPI to v1.9.6 (#5554, @mboersma)

Dependencies

Added

Nothing has changed.

Changed

• sigs.k8s.io/cluster-api/test: v1.9.5 → v1.9.6
• sigs.k8s.io/cluster-api: v1.9.5 → v1.9.6

Removed

Nothing has changed.

Details

v1.19.1...v1.19.2

v1.18.3

Changes by Kind

Bug or Regression

• Fixes potential OOM due to tracing (even if tracing not enabled) (#5544, @mweibel)

Other (Cleanup or Flake)

• Bump CAPI to v1.9.6 (#5553, @mboersma)

Dependencies

Added

Nothing has changed.

Changed

• sigs.k8s.io/cluster-api/test: v1.9.5 → v1.9.6
• sigs.k8s.io/cluster-api: v1.9.5 → v1.9.6

Removed

Nothing has changed.

Details

v1.18.2...v1.18.3

v1.19.1

Changes by Kind

Bug Fix

• Update ASO CRDs to v2.11.0 (#5516, @k8s-infra-cherrypick-robot)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Details

v1.19.0...v1.19.1

v1.19.0

⚠️ Users need manually install ASO CRDs v2.11.0 to be able to use CAPZ v1.19.0. CAPZ v1.19.1 automates installation of ASO v2.11.0 CRDs.

Changes by Kind

Deprecation

• Action required
  The bootstrap-config-gvk controller argument has been deprecated. The controller is now able to work with all bootstrap providers. (#5416, @anmazzotti)

Feature

• Adds a new authentication type for 1st party Microsoft applications - UserAssignedIdentityCredentials (#5421, @bryan-cox)
• Increase Kubeadm Verbosity across self-managed templates for better debugging during kubeadm init/join failures (#5496, @nawazkh)
• Support for Azure Private DNS Zone to be present in any resource group (#5452, @vishu2498)
• Update Tiltfile and add documentation on using AKS as mgmt cluster (#5451, @nawazkh)

Documentation

• Updated documentation pertaining to the cert-manager installation. (#5422, @junkiebev)

Bug or Regression

• Fixes a possible nil pointer deference when returning the name of the API Server LoadBalancer. In some cases like externally managed infrastructure, there might not be an API Server LoadBalancer in the AzureCluster CR (#5453, @bryan-cox)
• Update handling of AzureMachine's VMSize Capabilities that have a float value (#5481, @sadasu)

Other

• Bump CAPI to v1.9.5 (#5438, @mboersma)
• Bumps ASO from v2.9.0 to v2.11.0 (#5428, @bryan-cox)
• Update Otel and related dependencies to v1.35.0 (#5479, @nawazkh)

Dependencies

Added

• al.essio.dev/pkg/shellescape: v1.5.1
• github.com/Azure/msi-dataplane: v0.4.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.25.0
• github.com/asaskevich/govalidator/v11: e113478
• github.com/envoyproxy/go-control-plane/envoy: v1.32.4
• github.com/envoyproxy/go-control-plane/ratelimit: v0.1.0
• github.com/jellydator/ttlcache/v3: v3.3.0
• go.opentelemetry.io/contrib/detectors/gcp: v1.34.0

Changed

• cel.dev/expr: v0.16.1 → v0.19.1
• cloud.google.com/go/compute/metadata: v0.5.0 → v0.6.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity/cache: v0.3.1 → v0.3.2
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.8.1 → v1.8.2
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/eventhub/armeventhub: v1.2.0 → v1.3.0
• github.com/Azure/azure-service-operator/v2: v2.9.0 → v2.11.0
• github.com/Azure/go-autorest/autorest: v0.11.29 → v0.11.30
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.3.2 → v1.3.3
• github.com/antlr4-go/antlr/v4: v4.13.0 → v4.13.1
• github.com/asaskevich/govalidator: f21760c → a9d515a
• github.com/census-instrumentation/opencensus-proto: v0.4.1 → v0.2.1
• github.com/cncf/xds/go: b4127c9 → cff3c89
• github.com/envoyproxy/go-control-plane: v0.13.0 → v0.13.4
• github.com/envoyproxy/protoc-gen-validate: v1.1.0 → v1.2.1
• github.com/evanphx/json-patch/v5: v5.9.0 → v5.9.11
• github.com/fsnotify/fsnotify: v1.7.0 → v1.8.0
• github.com/golang-jwt/jwt/v5: v5.2.1 → v5.2.2
• github.com/golang/glog: v1.2.2 → v1.2.4
• github.com/google/cel-go: v0.20.1 → v0.22.0
• github.com/google/go-cmp: v0.6.0 → v0.7.0
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.24.0 → v2.26.1
• github.com/jackc/pgx/v5: v5.6.0 → v5.7.1
• github.com/jackc/puddle/v2: v2.2.1 → v2.2.2
• github.com/jessevdk/go-flags: v1.4.0 → v1.6.1
• github.com/prometheus/common: v0.61.0 → v0.62.0
• github.com/samber/lo: v1.38.1 → v1.47.0
• github.com/spf13/pflag: v1.0.5 → v1.0.6
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.53.0 → v0.54.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.33.0 → v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.33.0 → v1.35.0
• go.opentelemetry.io/otel/exporters/prometheus: v0.55.0 → v0.57.0
• go.opentelemetry.io/otel/metric: v1.33.0 → v1.35.0
• go.opentelemetry.io/otel/sdk/metric: v1.33.0 → v1.35.0
• go.opentelemetry.io/otel/sdk: v1.33.0 → v1.35.0
• go.opentelemetry.io/otel/trace: v1.33.0 → v1.35.0
• go.opentelemetry.io/otel: v1.33.0 → v1.35.0
• go.opentelemetry.io/proto/otlp: v1.4.0 → v1.5.0
• golang.org/x/crypto: v0.32.0 → v0.33.0
• golang.org/x/exp: 8a7402a → 939b2ce
• golang.org/x/mod: v0.22.0 → v0.23.0
• golang.org/x/net: v0.34.0 → v0.35.0
• golang.org/x/oauth2: v0.24.0 → v0.26.0
• golang.org/x/sync: v0.10.0 → v0.11.0
• golang.org/x/sys: v0.29.0 → v0.30.0
• golang.org/x/term: v0.28.0 → v0.29.0
• golang.org/x/text: v0.21.0 → v0.22.0
• golang.org/x/time: v0.6.0 → v0.8.0
• golang.org/x/tools: v0.28.0 → v0.30.0
• google.golang.org/genproto/googleapis/api: e6fa225 → 56aae31
• google.golang.org/genproto/googleapis/rpc: e6fa225 → 56aae31
• google.golang.org/grpc: v1.68.1 → v1.71.0
• google.golang.org/protobuf: v1.36.1 → v1.36.5
• k8s.io/gengo/v2: 51d4e06 → a7b603a
• k8s.io/kube-openapi: 835d969 → f7e401e
• k8s.io/utils: 18e509b → f90d014
• sigs.k8s.io/cluster-api/test: v1.9.4 → v1.9.5
• sigs.k8s.io/cluster-api: v1.9.4 → v1.9.5
• sigs.k8s.io/controller-runtime: v0.19.4 → v0.19.6
• sigs.k8s.io/kind: v0.26.0 → v0.27.0

Removed

• github.com/go-kit/log: v0.2.1
• github.com/go-logfmt/logfmt: v0.5.1

Details

v1.18.0...v1.19.0

v1.18.2

Changes by Kind

Bug Fixes

• Update handling of AzureMachine's VMSize Capabilities that have a float value (#5493, @sadasu)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Details

v1.18.1...v1.18.2