If there is no rush to release a new version, please just add a description of the modification under the Pending section.
To release a new version, please select a new version number (usually plus 1 to last patch version, X.Y.Z -> Major.Minor.Patch, more details in doc), and then add a new section named as the new version number in this file, the content should include the new modifications and everything from the Pending section. Finally, update the VERSION variable in setup.py with this new version number.
- Add --enable-cilium-dataplane flag for creating a cluster that uses Cilium as the networking dataplane.
- Update to use 2022-09-02-preview api version.
- Add --disable-windows-outbound-nat for az aks nodepool add to add a Windows agent pool which the Windows OutboundNAT is disabled.
- Add support for AzureMonitorMetrics Addon (managed prometheus metrics in public preview) for AKS
- Add support to create cluster with kube-proxy configuration via az aks create --kube-proxy-config file.json
- Update to use 2022-08-03-preview api version.
- Add support to upgrade or update cluster with managed cluster snapshot. Command is
- az aks upgrade --cluster-snapshot-id <snapshot-id>
- az aks update --cluster-snapshot-id <snapshot-id>
- Add load-balancer-backend-pool-type to create and update api.
- Add --enable-vpa/--disable-vpa to enable/disable vertical pod autoscaler feature.
- Fix az aks draft command crashed on windows during binary check, see issue #5336.
- Update to use 2022-08-02-preview api version.
- Remove unused import to avoid failure in Python3.6, see issue #5303.
- Fix DRAFT CLI to 0.0.22.
- Fix the URL for Download.
- Fix auto download issue for Draft CLI.
- Remove host and certificates as draft tools update command no longer uses it.
- Add support for apiserver vnet integration public cluster.
- Add support for enabling ImageCleaner with --enable-image-cleaner flag.
- Add sub-command operation-abort for az aks and az aks nodepool to support canceling the previous operation.
- Add --enable-node-restriction/--disable-node-restriction to enable/disable node restriction feature
- Update the minimum required cli core version to 2.38.0 (actually since 0.5.92).
- Add new value Mariner for option --os-sku in az aks create and az aks nodepool add.
- [BREAKING CHANGE] Since the service no longer supports updating source resource id for role binding, so remove --source-resource-id of aks trustedaccess rolebinding update command.
- Change the acceptable values of the --roles option to comma-seperated.
- az aks trustedaccess rolebinding create
- az aks trustedaccess rolebinding update
- Upgrade az aks kollect command to use Periscope version 0.0.10 supporting enhanced Windows log collection.
- Update to use 2022-07-02-preview api version.
- Fix for "'Namespace' object has no attribute 'nodepool_name' error" in command az aks nodepool wait, see issue #23468.
- Move Azure KeyVault KMS to GA.
- Support disabling Azure KeyVault KMS.
- Update to use 2022-06-02-preview api version.
- Fix compatibility issue when enabling Microsoft Defender via aks-preview.
- az aks create
- az aks update
- Skip this version due to conflict.
- Fix for the az aks addon list command to return enable:true, if virtual-node addon is enabled for the AKS cluster.
- AKS Monitoring MSI Auth related code imported from Azure CLI to reuse the code between aks-preview and Azure CLI.
- Fix snapshot not resolved according to the subscriptions field in the --snapshot-id` option.
- Support network plugin mode for enabling Azure CNI Overlay preview feature.
- Add support for Blob csi driver.
- Skip this version due to conflict.
- Update the minimum required cli core version to 2.37.0.
- Enable v2 decorator pattern.
- Fix container name inconsistency for private clusters in kollect command.
- Temp fix for properties missing in KMS profile in update scenario.
- Support Key Vault with private link when enabling Azure KeyVault KMS.
- Add Trusted Access Role Binding commands
- az aks trustedaccess rolebinding create
- az aks trustedaccess rolebinding update
- az aks trustedaccess rolebinding list
- az aks trustedaccess rolebinding show
- az aks trustedaccess rolebinding delete
- Fix: Remove permission prompt when saving config file to symlink with az aks get-credentials.
- Fix the value of option --zones not being transmitted correctly for az aks nodepool add, see issue #4953.
- Add support for KEDA workload auto-scaler.
- Fix az aks addon list, az aks addon list-available and az aks addon show commands when dealing with the web application routing addon.
- Update to use 2022-05-02-preview api version.
- Prompt when disabling CSI Drivers.
- Add support to pass csi disk-driver-version for az aks create and az aks update.
- Add support for Custom CA Trust in az aks create, az aks nodepool add, az aks nodepool update.
- Add support for web application routing.
- Refactor: Removed redundant --disable-workload-identity flag. User can disable the workload identity feature by using --enable-workload-identity False.
- Add command aks trustedaccess role list.
- Fix import issues with command group az aks draft
- First public release for az aks draft
- Fix: Updated validators for options --min-count and --max-count to support specifying values greater than 100. Related commands are
- az aks create
- az aks update
- az aks nodepool add
- az aks nodepool update
- Fix: Don't update storageProfile if not set.
- Fix: Raise error when user provides invalid value for --os-sku.
- Add option Windows2019, Windows2022 to --os-sku for az aks nodepool add.
- Update the minimum required cli core version to 2.35.0.
- Update to use 2022-04-02-preview api version.
- Add support for csi drivers extensibility.
- Add support for apiserver vnet integration.
- Prompt when no arguments are given to update and nodepool update to see if the customer wants to try goal seek to current settings.
- Add --ignore-pod-disruption-budget flag for az aks nodepool delete for ignoring PodDisruptionBudget.
- Add support for updating kubelet identity. Command is
- az aks update --assign-kubelet-identity <kubelelt-identity-resource-id>
- Add support to create cluster with managed cluster snapshot. Command is
- az aks create --cluster-snapshot-id <snapshot-id>
- Add support for managing workload identity feature.
- Update to use 2022-03-02-preview api version.
- Add support for --format parameter in az aks get-credentials command.
- BugFix: Keep aad profile in PUT request of ManagedCluster. Modified commands are
- az aks scale
- az aks upgrade
- az aks enable-addons
- az aks disable-addons
- az aks addon enable
- az aks addon disable
- az aks addon update
Add support for managed cluster snapshot commands and modify current nodepool snapshot commands.
Breaking Change: az aks nodepool snapshot will be the command to manage nodepool snapshot. az aks snapshot is used for managed cluster snapshot instead.
More specifically, for managed cluster snapshot, it will be
- az aks snapshot create
- az aks snapshot delete
- az aks snapshot list
- az aks snapshot show
For nodepool snapshot, it will be
- az aks nodepool snapshot create
- az aks nodepool snapshot delete
- az aks nodepool snapshot list
- az aks nodepool snapshot show
- Update to use 2022-02-02-preview api version.
- Add support for enabling Azure KeyVault KMS with --enable-azure-keyvault-kms flag.
- Add support for updating HTTP proxy configuration via az aks update --http-proxy-config file.json.
- Add --message-of-the-day flag for az aks create and az aks nodepool add for Linux message of the day.
- Add option none to --network-plugin parameter to skip CNI installation during cluster creation.
- Add --host-group-id to az aks create and az aks nodepool add commands to support Azure Dedicated Host Group, which requires registering the feature flag "Microsoft.ContainerService/DedicatedHostGroupPreview".
- az aks create --host-group-id
- az aks nodepool add --host-group-id
- Update the minimum required cli core version to 2.32.0.
- Update to use 2022-01-02-preview api version.
- Add support for cluster creating with Capacity Reservation Group.
- az aks create --crg-id
- Add support for nodepool adding with Capacity Reservation Group.
- az aks nodepool add --crg-id
- Add yaml template files to package data to fix issue #148.
- Add support for using empty string to remove existing nodepool label by az aks update --nodepool-labels or az aks nodepool update --labels.
- Add support for using empty string to remove existing node taints by az nodepool update --node-taints.
- Correct the option for time control in maintenanceconfiguration series commands to hourSlot.
- GA (General Availability) for the snapshot feature.
- Add currentKubernetesVersion column for az aks show --output table.
- Add support for enabling OIDC issuer with --enable-oidc-issuer flag.
- Update the minimum required cli core version to 2.31.0.
- Add support for Alias Minor Version.
- Fix: aks update issue with load balancer profile defaults being set when CLI arguments only include outbound IPs or outbound prefixes.
- Add support for IPv4/IPv6 dual-stack networking AKS clusters. Commands is
- az aks create --pod-cidrs --service-cidrs --ip-families --load-balancer-managed-outbound-ipv6-count.
- Update to use 2021-10-01 api-version.
- Update the minimum required cli core version to 2.30.0.
- Remove the snapshot name trimming in az aks snapshot create command.
- In AKS Monitoring addon, fix DCR resource naming convention from DCR-<workspaceName> to MSCI-<workspaceName> to make consistent naming across.
- Enable the new implementation in command aks create.
- Update the minimum required cli core version to 2.27.0.
- Fix default value behavior for pod identity exception pod labels in upgrade/scale calls.
- Fix default value behavior for pod identity exception pod labels.
- Update the minimum required cli core version to 2.23.0.
- Add support for new snapshot commands.
- az aks snapshot create
- az aks snapshot delete
- az aks snapshot list
- az aks snapshot show
- Add --snapshot-id to creating/upgrading commands.
- az aks create --snapshot-id
- az aks nodepool add --snapshot-id
- az aks nodepool upgrade --snapshot-id
- Add commands for agentpool start stop feature.
- Add parameter --rotation-poll-interval for Azure Keyvault Secrets Provider Addon.
- Add Windows gMSA v2 support. Add parameters --enable-windows-gmsa, --gmsa-dns-server and --gmsa-root-domain-name.
- Update to use 2021-09-01 api-version.
- Add support for multi-instance GPU configuration (--gpu_instance_profile) in az aks create and az aks nodepool add.
- Add support for WASM nodepools (--workload-runtime WasmWasi) in az aks create and az aks nodepool add.
- Add support for new addon commands
- az aks addon list
- az aks addon list-available
- az aks addon show
- az aks addon enable
- az aks addon disable
- az aks addon update
- Refactored code to bring addon specific functionality into a separate file.
- Update to use 2021-08-01 api-version.
- Add support for new outbound types: 'managedNATGateway' and 'userAssignedNATGateway'.
- Add preview support for setting scaleDownMode field on nodepools. Requires registering the feature flag "Microsoft.ContainerService/AKS-ScaleDownModePreview" for setting the value to "Deallocate".
- Fix update (failed due to "ERROR: (BadRequest) Feature Microsoft.ContainerService/AutoUpgradePreview is not enabled" even when autoupgrade was not specified).
- Add podMaxPids argument for kubelet-config.
- Update to adopt 2021-07-01 api-version.
- GA private cluster public FQDN feature, breaking change to replace create parameter --enable-public-fqdn with --disable-public-fqdn since now it's enabled by default for private cluster during cluster creation.
- Correct containerLogMaxSizeMb to containerLogMaxSizeMB in customized kubelet config.
- Add support for http proxy.
- Add "--aks-custom-headers" for "az aks nodepool upgrade".
- Fix issue that maintenanceconfiguration add subcommand cannot work.
- Fix issue in dcr template.
- Fix issue when disable monitoring on an AKS cluster would fail in regions where Data Collection Rules are not enabled
- Support enabling monitoring on AKS clusters with msi auth
- Add --enable-msi-auth-for-monitoring option in aks create and aks enable-addons
- Remove azure-defender from list of available addons to install via az aks enable-addons command
- Fix issue with node config not consuming logging settings
- Add parameter '--enable-ultra-ssd' to enable UltraSSD on agent node pool
- Vendor SDK using latest swagger with optional query parameter added
- Support private cluster public fqdn feature
- Update to use 2021-05-01 api-version.
- Add os-sku argument for cluster and nodepool creation
- Add compatible logic for the track 2 migration of resource dependence
- Add --enable-azure-rbac and --disable-azure-rbac in aks update
- Support disabling local accounts
- Add addon azure-defender to list of available addons under az aks enable-addons command
- Add get OS options support
- Fix wrong behavior when enabling pod identity addon for cluster with addon enabled
- Add --binding-selector to AAD pod identity add sub command
- Support using custom kubelet identity
- Support updating Windows password
- Add FIPS support to CLI extension
- Display result better for az aks command invoke, while still honor output option
- Fix the bug that checking the addon profile whether it exists
- Update to use 2021-03-01 api-version
- Add command invoke for run-command feature
- Fix issue that assigning identity in another subscription will fail
- Add support for Azure KeyVault Secrets Provider as an AKS addon
- Add operations of maintenance configuration
- Add --enable-pod-identity-with-kubenet for enabling AAD Pod Identity in Kubenet cluster
- Add --fqdn-subdomain parameter to create private cluster with custom private dns zone scenario
- Add support for node public IP prefix ID '--node-public-ip-prefix-id'
- Update to use 2021-02-01 api-version
- Modify addon confcom behavior to only enable SGX device plugin by default.
- Introducte argument '--enable-sgx-quotehelper'
- Breaking Change: remove argument '--diable-sgx-quotehelper'.
- Update to use 2020-12-01 api-version
- Add argument '--enable-encryption-at-host'
- Add --no-uptime-sla
- Create MSI clusters by default.
- Add support using custom private dns zone resource id for parameter '--private-dns-zone'
- Revert to use CLIError to be compatible with azure cli versions < 2.15.0
- Add argument 'subnetCIDR' to replace 'subnetPrefix' when using ingress-azure addon.
- Add support for AAD Pod Identity resources configuration in Azure CLI.
- Add support for node configuration when creating cluster or agent pool.
- Support private DNS zone for AKS private cluster.
- Add support for GitOps as an AKS addon
- Update standard load balancer (SLB) max idle timeout from 120 to 100 minutes
- Honor addon names defined in Azure CLI
- Add LicenseType support for Windows
- Remove patterns for adminUsername and adminPassword in WindowsProfile
- Add support for Open Service Mesh as an AKS addon
- Add support to get available upgrade versions for an agent pool in AKS
- Enable the September (2020-09-01) for use with the AKS commands
- Support Start/Stop cluster feature in preview
- Support ephemeral OS functionality
- Add new properties to the autoscaler profile: max-empty-bulk-delete, skip-nodes-with-local-storage, skip-nodes-with-system-pods, expander, max-total-unready-percentage, ok-total-unready-count and new-pod-scale-up-delay
- Fix case sensitive issue for AKS dashboard addon
- Remove PREVIEW from azure policy addon
- Add support for enable/disable confcom (sgx) addon.
- Fix AGIC typo and remove preview label from VN #2141
- Set network profile when using basic load balancer. #2137
- Fix bug that compare float number with 0 #2213
- Fix regression due to a change in the azure-mgmt-resource APIs in CLI 2.10.0
- Support bring-your-own VNET scenario for MSI clusters which use user assigned identity in control plane.
- Added clearer error message for invalid addon names
- Support "--assign-identity" for specifying an existing user assigned identity for control plane's usage in MSI clusters.
- Support "--enable-aad" for "az aks update" to update an existing RBAC-enabled non-AAD cluster to the new AKS-managed AAD experience
- Add "--enable-azure-rbac" for enabling Azure RBAC for Kubernetes authorization
- Support "--enable-aad" for "az aks update" to update an existing AAD-Integrated cluster to the new AKS-managed AAD experience
- Add --ppg for "az aks create" and "az aks nodepool add"
- Add --uptime-sla for az aks update
- Remove --appgw-shared flag from AGIC addon
- Handle role assignments for AGIC addon post-cluster creation
- Support --yes for "az aks upgrade"
- Revert default VM SKU to Standard_DS2_v2
- Add "--max-surge" for az aks nodepool add/update/upgrade
- Fix break in get-versions since container service needs to stay on old api.
- Fix issues of storage account name for az aks kollect
- Add "--node-image-only" for "az aks nodepool upgrade" and "az aks upgrade"".
- Fix issues for az aks kollect on private clusters
- Add "--aks-custom-headers" for "az aks nodepool add" and "az aks update"
- Fix issues with monitoring addon enabling with CLI versions 2.4.0+
- Add support for VMSS node public IP.
- Add support for AAD V2.
- Added slb outbound ip fix
- Added --uptime-sla for paid service
- Added support for creation time node labels
- Remove preview flag for private cluster feature.
- Adding az aks get-credentials --context argument
- Adding support for user assigned msi for monitoring addon.
- Fixed a regular agent pool creation bug.
- Remove "Low" option from --priority
- Add "Spot" option to --priority
- Add float value option "--spot-max-price" for Spot Pool
- Add "--cluster-autoscaler-profile" for configuring autoscaler settings
- Add option '--nodepool-tags for create cluster'
- Add option '--tags' for add or update node pool
- Add option '--outbound-type' for create
- Add options '--load-balancer-outbound-ports' and '--load-balancer-idle-timeout' for create and update
- Fixed aks cluster creation error
- Update to use 2020-01-01 api-version
- Support cluster creation with server side encryption using customer managed key
- List credentials for different users via parameter --user
- added custom header support
- Enable GA support of apiserver authorized IP ranges via parameter --api-server-authorized-ip-ranges in az aks create and az aks update
- Support cluster certificate rotation operation using az aks rotate-certs
- Add support for az aks kanalyze
- Add commands '--zones' and '-z' for availability zones in aks
- Refactor and remove a custom way of getting subscriptions
- Update to use 2019-10-01 api-version
- Add support for public IP per node during node pool creation
- Add support for taints during node pool creation
- Add support for low priority node pool
- Add support for az aks kollect
- Add support for az aks upgrade --control-plane-only
- Set default cluster creation to SLB and VMSS
- Add support for using managed identity to manage cluster resource group
- Rename a few options for ACR integration, which includes * Rename --attach-acr <acr-name-or-resource-id> in az aks create command, which allows for attach the ACR to AKS cluster. * Rename --attach-acr <acr-name-or-resource-id> and --detach-acr <acr-name-or-resource-id> in az aks update command, which allows to attach or detach the ACR from AKS cluster.
- Add "--enable-private-cluster" flag for enabling private cluster on creation.
- Bring back "enable-vmss" flag for backward compatibility
- Revert "Set default availability type to VMSS" for backward compatibility
- Revert "Set default load balancer SKU to Standard" for backward compatibility
- Add support for load-balancer-profile
- Set default availability type to VMSS
- Set default load balancer SKU to Standard
- Add support for az aks update --disable-acr --acr <name-or-id>
- Use https if dashboard container port is using https
- Add update support for --enable-acr together with --acr <name-or-id>
- Merge az aks create --acr-name into az aks create --acr <name-or-id>
- Add support for --enable-acr and --acr-name
- Add support for per node pool auto scaler settings.
- Add az aks nodepool update to allow users to change auto scaler settings per node pool.
- Add support for Standard sku load balancer.
- Add az aks get-versions -l location to allow users to see all managed cluster versions.
- Add az aks get-upgrades to get all available versions to upgrade.
- Add '(preview)' suffix if kubernetes version is preview when using get-versions and get-upgrades
- Add support for Azure policy add-on.
- Add support of customizing node resource group
- Add support of pod security policy.
- Add support of feature --node-zones
- az aks create/scale --nodepool-name configures nodepool name, truncated to 12 characters, default - nodepool1
- Don't require --nodepool-name in "az aks scale" if there's only one nodepool
- Add support of Network Policy when creating new AKS clusters
- add support of apiserver authorized IP ranges
- Breaking Change: Set default agentType to VMAS
- opt-in VMSS by --enable-VMSS when creating AKS
- new feature enable-cluster-autoscaler
- default agentType is VMSS