[AKS] Release 2022-04-24

[github-actions]

Release 2022-04-24

This release is rolling out to all regions - estimated time for completed roll out is 2022-05-06 for public cloud and 2022-05-09 for sovereign clouds.

Announcements

• From Kubernetes 1.23, containerd will be the default container runtime for Windows node pools. Docker support will be deprecated in Kubernetes 1.24. You are advised to test your workloads before Docker deprecation happens by following the documentation here.
• Starting with 1.24 the default format of clusterUser credential for AAD enabled clusters will be ‘exec’, which requires kubelogin binary in the execution PATH. If you are using Azure CLI, it will prompt users to download kubelogin. There will be no behavior change for non-AAD clusters, or AAD clusters whose version is older than 1.24. Existing downloaded kubeconfig will still work. We provide an optional query parameter ‘format’ when getting clusterUser credential to overwrite the default behavior change, you can explicitly specify format to ‘azure’ to get old format kubeconfig.
• Konnectivity rollout will continue in May 2022 and is expected to complete by end of May.
• Update your AKS labels to the recommended substitutions before deprecation after the Kubernetes v1.24 release. See more information on label deprecations and how to update your labels in the Use labels in an AKS cluster documentation.

Release notes

• Preview features

  • AKS now supports enabling encryption at rest for data in etcd using Azure Key Vault with Key Management Service (KMS) plugin.

• Bug Fixes

  • Fixed CSI driver version display issue in Azure disk and file CSI Driver objects.
  • Fixed bug where cloud-controller-manager was not deleting Node Object after deletion of VMSS instance.

• Behavioral changes

  • Taints and labels applied using the AKS nodepool API are not modifiable from the Kubernetes API and vice versa.

• Component Updates

  • Azure Disk CSI driver has been updated to 1.16.
  • Azure File CSI driver has been rolled back to 1.12 to avoid storage account creation every time when a new Azure file share volume is created.
  • On AKS clusters of versions >= 1.22, nginx-ingress-controller images are updated from 1.0.5 to 1.2.0 to address CVE-2021-25745 and CVE-2021-25746 vulnerabilities.
  • AKS Ubuntu 18.04 image updated to AKSUbuntu-1804-2022.04.27.
  • AKS Windows image has been updated to 2019-datacenter-core-smalldisk-17763.2803.220413.