Azure AKS (changelog)

azure/aks last check 242 releases
Notes
no notes yet
Release notes
view on github
2020-08-31 · Release 2020-08-31 · 1y+

This release is rolling out to all regions - ETA for conclusion 2020-09-18

  • AKS will default to containerd as the default runtime in kubernetes v1.19. During preview we encourage to create nodepools with the new container runtime to validate workloads still work as expected. And do check the containerd differences and limitations. After GA of kubernetes v1.19, containerd will be served by default for all new clusters or cluster that upgrade to v1.19. If you are doing container builds in cluster please use the recommended docker buildx.
  • [New Date] We heard your feedback and as such, the Azure Kubernetes Service pod security policy (preview) feature will be retired on February 1st 2021.
  • Once GA AKS will default to its new GPU specialized image as the supported option for GPU-capable agent nodes.

Release Notes

  • Features
    • Kubernetes version 1.18 is now Generally Available (GA) on AKS. (1.15 is being retired as this release progressively reaches all regions, as previously communicated). Check the release calendar for future version release and GA date.
    • New Kubernetes patch versions available, v1.18.8.
    • The AKS Kubernetes Audit logs are now split in 2 categories to allow you granularly subscribe and save costs.
      • kube-audit-admin: This category contains only audit events that include write verbs (create,update,delete,patch,post)
      • kube-audit: This category contains all remaining audit events.
    • AKS Ubuntu 18.04 is now Generally Available and will be the default agent node base image on k8s v1.18 and onward.
  • Preview Features
  • AKS now supports Azure disk and Azure files CSI storage drivers in Public preview.
  • Bug Fix
    • Fixed an issue where non-AKS managed identities (eg. from Pod Identity) would be lost after an AKS upgrade.
    • Fixed bug where the VMSS backend pool was removed after a Service Principal reset operation.
  • Behavior Changes
    • Ensure all components use only strong ciphers (matching the AKS API server). Metrics server now only allows the following cipher suites:
      • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
      • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
      • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
      • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
  • Component Updates