Release 2020-09-21

Azure · Sep 22, 2020 · 977eecf
1 parent 0bf26fa
commit 977eecf
Show file tree

Hide file tree

Showing 3 changed files with 429 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,33 @@
 # Azure Kubernetes Service Changelog
 
+## Release 2020-09-21
+**This release is rolling out to all regions - ETA for conclusion 2020-09-30**
+
+* AKS will default to containerd as the default runtime in kubernetes v1.19. During preview we encourage to create nodepools with the new container runtime to validate workloads still work as expected. And do check the [containerd differences and limitations](https://docs.microsoft.com/azure/aks/cluster-configuration#containerd-limitationsdifferences). After GA of kubernetes v1.19, containerd will be served by default for all new clusters or cluster that upgrade to v1.19. If you are doing container builds in cluster please use the recommended [docker buildx](https://github.com/docker/buildx).
+* [New Date] We heard your feedback and as such, the Azure Kubernetes Service [pod security policy (preview)](https://docs.microsoft.com/azure/aks/use-pod-security-policies) feature will be retired on February 1st 2021.
+* Once GA AKS will default to its new [GPU specialized image](https://aka.ms/aks/specialized-gpu-image) as the supported option for GPU-capable agent nodes.
+
+### Release Notes
+
+* Features
+ * Azure Policy Addon is now Generally Available, see <https://azure.microsoft.com/updates/ga-policy-addon-for-azure-kubernetes-service>
+ * New Kubernetes patches available. v1.16.15 and v1.17.11
+* Preview features
+ * AKS now supports the ability to completely stop and start clusters on demand. A great option for times your cluster might be idle. Start here: <https://aka.ms/aks/stop-cluster>
+ * Ephemeral OS is now part of the 2020-09-01 AKS API and can be enabled through ARM. This will also allow you to in the future keep using managed network-attached disk if you want. <https://github.com/Azure/azure-rest-api-specs/blob/master/specification/containerservice/resource-manager/Microsoft.ContainerService/stable/2020-09-01/examples/AgentPoolsCreate_Ephemeral.json>
+ * Azure RBAC for Kubernetes Authorization is now in Public Preview and open to anyone to test (no form required): <https://docs.microsoft.com/azure/aks/manage-azure-rbac>
+ * Kubernetes v1.19 is now in public preview
+ * Azure Confidential Compute addon for AKS is not in public preview providing you with confidential nodes: <https://docs.microsoft.com/azure/confidential-computing/confidential-nodes-aks-get-started>
+ * AKS now integrates with Azure Files NFS shares on its CSI storage drivers. See more here: <https://docs.microsoft.com/azure/aks/azure-files-csi#nfs-file-shares>
+* Bug fix
+ * Issue where addon names where not accepted with any casing fixed.
+* Component updates
+ * AKS Windows image has been updated to [2019-datacenter-core-smalldisk-17763.1397.200904](https://github.com/Azure/aks-engine/blob/master/vhd/release-notes/aks-windows/2019-datacenter-core-smalldisk-17763.1397.200904.txt)
+ * AKS Ubuntu 16.04 image updated to [AKSUbuntu-1604-2020.09.17](vhd-notes/aks-ubuntu/AKSUbuntu-1604/2020.09.17.txt).
+ * AKS Ubuntu 18.04 image release notes: [AKSUbuntu-1804-2020.09.17](vhd-notes/aks-ubuntu/AKSUbuntu-1804/2020.09.17.txt).
+* Behavior Change
+ * AKS is now validating/blocking labels that are [disallowed upstream](https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/0000-20170814-bounding-self-labeling-kubelets.md#proposal).
+
 ## Release 2020-08-31
 
 **This release is rolling out to all regions - ETA for conclusion 2020-09-18**

diff --git a/vhd-notes/aks-ubuntu/AKSUbuntu-1604/2020.09.17.txt b/vhd-notes/aks-ubuntu/AKSUbuntu-1604/2020.09.17.txt
@@ -0,0 +1,198 @@
+Components downloaded in this VHD build (some of the below components might get deleted during cluster provisioning if they are not needed):
+ - apache2-utils
+ - apt-transport-https
+ - auditd
+ - blobfuse=1.1.1
+ - ca-certificates
+ - ceph-common
+ - cgroup-lite
+ - cifs-utils
+ - conntrack
+ - cracklib-runtime
+ - ebtables
+ - ethtool
+ - fuse
+ - git
+ - glusterfs-client
+ - init-system-helpers
+ - iproute2
+ - ipset
+ - iptables
+ - jq
+ - libpam-pwquality
+ - libpwquality-tools
+ - mount
+ - nfs-common
+ - pigz socat
+ - traceroute
+ - util-linux
+ - xz-utils
+ - zip
+ - bpftrace
+ - moby v19.03.12
+ - nvidia-docker2 nvidia-container-runtime
+ - nvidia-container-runtime=2.0.0+docker18.09.2-1
+ - bcc-tools
+ - libbcc-examples
+ - Azure CNI version 1.1.6
+ - Azure CNI version 1.1.3
+ - Azure CNI version 1.0.33
+ - CNI plugin version 0.7.6
+ - CNI plugin version 0.7.5
+ - CNI plugin version 0.7.1
+ - CNI plugin version 0.8.6
+ - img
+Docker images pre-pulled:
+ - mcr.microsoft.com/oss/kubernetes/kubernetes-dashboard:v1.10.1
+ - mcr.microsoft.com/oss/kubernetes/dashboard:v2.0.0-beta8
+ - mcr.microsoft.com/oss/kubernetes/dashboard:v2.0.0-rc3
+ - mcr.microsoft.com/oss/kubernetes/dashboard:v2.0.0-rc7
+ - mcr.microsoft.com/oss/kubernetes/dashboard:v2.0.1
+ - mcr.microsoft.com/oss/kubernetes/metrics-scraper:v1.0.2
+ - mcr.microsoft.com/oss/kubernetes/metrics-scraper:v1.0.3
+ - mcr.microsoft.com/oss/kubernetes/metrics-scraper:v1.0.4
+ - mcr.microsoft.com/oss/kubernetes/exechealthz:1.2
+ - mcr.microsoft.com/oss/kubernetes/autoscaler/addon-resizer:1.8.5
+ - mcr.microsoft.com/oss/kubernetes/autoscaler/addon-resizer:1.8.4
+ - mcr.microsoft.com/oss/kubernetes/autoscaler/addon-resizer:1.8.1
+ - mcr.microsoft.com/oss/kubernetes/autoscaler/addon-resizer:1.7
+ - mcr.microsoft.com/oss/kubernetes/metrics-server:v0.3.6
+ - mcr.microsoft.com/oss/kubernetes/metrics-server:v0.3.5
+ - mcr.microsoft.com/k8s/core/pause:1.2.0
+ - mcr.microsoft.com/oss/kubernetes/pause:1.2.0
+ - mcr.microsoft.com/oss/kubernetes/pause:1.3.1
+ - mcr.microsoft.com/oss/kubernetes/pause:1.4.0
+ - mcr.microsoft.com/oss/kubernetes/coredns:1.6.6
+ - mcr.microsoft.com/oss/kubernetes/coredns:1.6.5
+ - mcr.microsoft.com/oss/kubernetes/coredns:1.5.0
+ - mcr.microsoft.com/oss/kubernetes/coredns:1.3.1
+ - mcr.microsoft.com/oss/kubernetes/coredns:1.2.6
+ - mcr.microsoft.com/containernetworking/networkmonitor:v0.0.7
+ - mcr.microsoft.com/containernetworking/networkmonitor:v0.0.6
+ - mcr.microsoft.com/containernetworking/azure-npm:v1.1.7
+ - mcr.microsoft.com/containernetworking/azure-npm:v1.1.5
+ - mcr.microsoft.com/containernetworking/azure-npm:v1.1.4
+ - mcr.microsoft.com/containernetworking/azure-vnet-telemetry:v1.0.30
+ - nvidia/k8s-device-plugin:1.11
+ - nvidia/k8s-device-plugin:1.10
+ - mcr.microsoft.com/aks/hcp/hcp-tunnel-front:v1.9.2-v3.0.14
+ - mcr.microsoft.com/aks/hcp/hcp-tunnel-front:v1.9.2-v3.0.17
+ - mcr.microsoft.com/aks/hcp/hcp-tunnel-front:v1.9.2-v4.0.13
+ - mcr.microsoft.com/aks/hcp/hcp-tunnel-front:v1.9.2-v4.0.15
+ - mcr.microsoft.com/aks/hcp/tunnel-openvpn:1.0.8
+ - mcr.microsoft.com/aks/hcp/tunnel-openvpn:1.0.9
+ - mcr.microsoft.com/aks/hcp/tunnel-openvpn:1.0.10
+ - mcr.microsoft.com/aks/hcp/kube-svc-redirect:v1.0.7
+ - mcr.microsoft.com/azuremonitor/containerinsights/ciprod:ciprod07152020
+ - mcr.microsoft.com/azuremonitor/containerinsights/ciprod:ciprod08072020
+ - mcr.microsoft.com/oss/calico/cni:v3.5.0
+ - mcr.microsoft.com/oss/calico/cni:v3.8.0
+ - mcr.microsoft.com/oss/calico/node:v3.5.0
+ - mcr.microsoft.com/oss/calico/node:v3.8.0
+ - mcr.microsoft.com/oss/calico/typha:v3.5.0
+ - mcr.microsoft.com/oss/calico/typha:v3.8.0
+ - mcr.microsoft.com/oss/calico/pod2daemon-flexvol:v3.8.0
+ - mcr.microsoft.com/oss/kubernetes/autoscaler/cluster-proportional-autoscaler:1.3.0_v0.0.5
+ - mcr.microsoft.com/oss/kubernetes/autoscaler/cluster-proportional-autoscaler:1.7.1
+ - mcr.microsoft.com/oss/kubernetes/autoscaler/cluster-proportional-autoscaler:1.7.1-hotfix.20200403
+ - mcr.microsoft.com/k8s/flexvolume/keyvault-flexvolume:v0.0.13
+ - mcr.microsoft.com/k8s/flexvolume/blobfuse-flexvolume:1.0.13
+ - mcr.microsoft.com/oss/kubernetes/ip-masq-agent:v2.5.0
+ - mcr.microsoft.com/oss/kubernetes/ip-masq-agent:v2.5.0.1
+ - nginx:1.13.12-alpine
+ - mcr.microsoft.com/k8s/kms/keyvault:v0.0.9
+-rwxr-xr-x 1 root root 150582248 Jun 1 21:00 /usr/local/bin/kubelet-1.17.3
+-rwxr-xr-x 1 root root 59364111 Jun 1 21:00 /usr/local/bin/kubectl-1.17.3
+-rwxr-xr-x 1 root root 113103592 Jun 24 20:02 /usr/local/bin/kubelet-1.18.2
+-rwxr-xr-x 1 root root 43954176 Jun 24 20:02 /usr/local/bin/kubectl-1.18.2
+-rwxr-xr-x 1 root root 113124072 Jun 26 18:47 /usr/local/bin/kubelet-1.18.4
+-rwxr-xr-x 1 root root 43954176 Jun 26 18:47 /usr/local/bin/kubectl-1.18.4
+-rwxr-xr-x 1 root root 113128200 Jul 23 22:11 /usr/local/bin/kubelet-1.18.6
+-rwxr-xr-x 1 root root 43958272 Jul 23 22:11 /usr/local/bin/kubectl-1.18.6
+-rwxr-xr-x 1 root root 152695784 Aug 14 00:28 /usr/local/bin/kubelet-1.18.8
+-rwxr-xr-x 1 root root 60077962 Aug 14 00:28 /usr/local/bin/kubectl-1.18.8
+-rwxr-xr-x 1 root root 150656520 Aug 17 06:21 /usr/local/bin/kubelet-1.17.7
+-rwxr-xr-x 1 root root 59369310 Aug 17 06:21 /usr/local/bin/kubectl-1.17.7
+-rwxr-xr-x 1 root root 150655728 Aug 24 19:00 /usr/local/bin/kubelet-1.17.9
+-rwxr-xr-x 1 root root 59369310 Aug 24 19:00 /usr/local/bin/kubectl-1.17.9
+-rwxr-xr-x 1 root root 151168400 Aug 26 19:09 /usr/local/bin/kubelet-1.19.0
+-rwxr-xr-x 1 root root 60373229 Aug 26 19:09 /usr/local/bin/kubectl-1.19.0
+-rwxr-xr-x 1 root root 150682912 Sep 2 07:06 /usr/local/bin/kubelet-1.17.11
+-rwxr-xr-x 1 root root 59403188 Sep 2 07:06 /usr/local/bin/kubectl-1.17.11
+-r-xr--r-- 1 root root 2237 Sep 17 16:24 /usr/local/bin/health-monitor.sh
+-rwxr-xr-x 1 root root 35384960 Sep 17 16:27 /usr/local/bin/bpftrace
+-rwxr-xr-x 1 root root 25700016 Sep 17 16:30 /usr/local/bin/img
+-rwxr-xr-x 1 root root 250267632 Sep 17 16:35 /usr/local/bin/kubelet-1.15.7
+-rwxr-xr-x 1 root root 250267632 Sep 17 16:35 /usr/local/bin/kubectl-1.15.7
+-rwxr-xr-x 1 root root 250320176 Sep 17 16:36 /usr/local/bin/kubelet-1.15.10
+-rwxr-xr-x 1 root root 250320176 Sep 17 16:36 /usr/local/bin/kubectl-1.15.10
+-rwxr-xr-x 1 root root 250381624 Sep 17 16:37 /usr/local/bin/kubelet-1.15.11
+-rwxr-xr-x 1 root root 250381624 Sep 17 16:37 /usr/local/bin/kubectl-1.15.11
+-rwxr-xr-x 1 root root 250471792 Sep 17 16:38 /usr/local/bin/kubelet-1.15.12
+-rwxr-xr-x 1 root root 250471792 Sep 17 16:38 /usr/local/bin/kubectl-1.15.12
+-rwxr-xr-x 1 root root 203802912 Sep 17 16:39 /usr/local/bin/kubelet-1.16.9
+-rwxr-xr-x 1 root root 203802912 Sep 17 16:39 /usr/local/bin/kubectl-1.16.9
+-rwxr-xr-x 1 root root 203833416 Sep 17 16:39 /usr/local/bin/kubelet-1.16.10
+-rwxr-xr-x 1 root root 203833416 Sep 17 16:39 /usr/local/bin/kubectl-1.16.10
+-rwxr-xr-x 1 root root 203854928 Sep 17 16:40 /usr/local/bin/kubelet-1.16.13
+-rwxr-xr-x 1 root root 203854928 Sep 17 16:40 /usr/local/bin/kubectl-1.16.13
+-rwxr-xr-x 1 root root 203885576 Sep 17 16:41 /usr/local/bin/kubelet-1.16.15
+-rwxr-xr-x 1 root root 203885576 Sep 17 16:41 /usr/local/bin/kubectl-1.16.15
+ - mcr.microsoft.com/oss/kubernetes/hyperkube:v1.15.11-hotfix.20200529.1
+ - mcr.microsoft.com/oss/kubernetes/hyperkube:v1.15.12-hotfix.20200623.1
+ - mcr.microsoft.com/oss/kubernetes/hyperkube:v1.15.12-hotfix.20200714.1
+ - mcr.microsoft.com/oss/kubernetes/hyperkube:v1.16.9-hotfix.20200529.1
+ - mcr.microsoft.com/oss/kubernetes/hyperkube:v1.16.10-hotfix.20200623.1
+ - mcr.microsoft.com/oss/kubernetes/hyperkube:v1.16.10-hotfix.20200714.1
+ - mcr.microsoft.com/oss/kubernetes/hyperkube:v1.16.10-hotfix.20200817.1
+ - mcr.microsoft.com/oss/kubernetes/hyperkube:v1.16.10-hotfix.20200824.1
+ - mcr.microsoft.com/oss/kubernetes/hyperkube:v1.16.13-hotfix.20200714.1
+ - mcr.microsoft.com/oss/kubernetes/hyperkube:v1.16.13-hotfix.20200817.1
+ - mcr.microsoft.com/oss/kubernetes/hyperkube:v1.16.13-hotfix.20200824.1
+ - mcr.microsoft.com/oss/kubernetes/hyperkube:v1.16.15-hotfix.20200903
+ - mcr.microsoft.com/oss/kubernetes/hyperkube:v1.17.3-hotfix.20200601.1
+ - mcr.microsoft.com/oss/kubernetes/kube-proxy:v1.17.3-hotfix.20200601
+ - mcr.microsoft.com/oss/kubernetes/hyperkube:v1.17.7-hotfix.20200624
+ - mcr.microsoft.com/oss/kubernetes/kube-proxy:v1.17.7-hotfix.20200624
+ - mcr.microsoft.com/oss/kubernetes/hyperkube:v1.17.7-hotfix.20200714.1
+ - mcr.microsoft.com/oss/kubernetes/kube-proxy:v1.17.7-hotfix.20200714
+ - mcr.microsoft.com/oss/kubernetes/hyperkube:v1.17.7-hotfix.20200714.2
+ - mcr.microsoft.com/oss/kubernetes/kube-proxy:v1.17.7-hotfix.20200714
+ - mcr.microsoft.com/oss/kubernetes/hyperkube:v1.17.9-hotfix.20200714.1
+ - mcr.microsoft.com/oss/kubernetes/kube-proxy:v1.17.9-hotfix.20200714
+ - mcr.microsoft.com/oss/kubernetes/hyperkube:v1.17.9-hotfix.20200817.1
+ - mcr.microsoft.com/oss/kubernetes/kube-proxy:v1.17.9-hotfix.20200817
+ - mcr.microsoft.com/oss/kubernetes/hyperkube:v1.17.9-hotfix.20200824.1
+ - mcr.microsoft.com/oss/kubernetes/kube-proxy:v1.17.9-hotfix.20200824
+ - mcr.microsoft.com/oss/kubernetes/hyperkube:v1.17.11-hotfix.20200901
+ - mcr.microsoft.com/oss/kubernetes/kube-proxy:v1.17.11-hotfix.20200901