Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
637 commits
Select commit Hold shift + click to select a range
6059feb
chore(deps): update oss/v2/kubernetes/kubelet-sysext docker tag to v1…
renovate[bot] Mar 18, 2026
b8324a9
chore(deps): bump azure/login from 2 to 3 (#8116)
dependabot[bot] Mar 18, 2026
b2f53a3
feat: add Azure Container Linux ARM64 VHD build target (#8102)
aadhar-agarwal Mar 18, 2026
7fb7acf
chore: add cloud-node-manager v1.35.0 entry (#8048)
anndono Mar 18, 2026
0bc245a
chore: add cloud-node-manager 1.30.15 and 1.31.12 entries (#8097)
anndono Mar 19, 2026
728d320
feat: network isolated cluster skip cse download (#8077)
fseldow Mar 19, 2026
aaabe1f
fix: skip certificate error E2E failure caused by vmss bug (#8122)
mxj220 Mar 19, 2026
5a6b409
feat: unblock artifact streaming for arm64 nodes and remove support o…
KananMehta Mar 19, 2026
045eba1
chore(deps): update containernetworking/azure-npm docker tag to v1.6.…
renovate[bot] Mar 19, 2026
5189021
chore(deps): update containernetworking/azure-cns docker tag to v1.7.…
renovate[bot] Mar 19, 2026
ab8d614
fix: disable nvidia-fabricmanager on single-GPU VMs with MIG (#8049)
ganeshkumarashok Mar 19, 2026
18e654b
fix: disable automatic e2e pipeline triggers (#8135)
awesomenix Mar 19, 2026
13a936b
fix(windows): remove Windows snapshot test cases and testdata (#8136)
timmy-wright Mar 19, 2026
b950d9c
fix: restrict e2e pipeline triggers to e2e and go changes (#8137)
awesomenix Mar 19, 2026
9f0a7cd
fix: add daily schedules for e2e pipelines on main (#8140)
awesomenix Mar 19, 2026
fb4ab18
fix: stagger nightly e2e schedules to reduce API throttling (#8141)
ganeshkumarashok Mar 20, 2026
5acbc4d
fix: remove Linux snapshot test cases and testdata (#8139)
timmy-wright Mar 20, 2026
8b53e66
feat: download kubelet with oras in network isolated windows cluster …
jiashun0011 Mar 20, 2026
89a8999
fix(windows): move add kubelet failure restart code (#8142)
timmy-wright Mar 20, 2026
38c720e
chore: update containernetworking/azure-cni docker tag to v1.7.15 (#8…
csfmomo Mar 20, 2026
f453cb6
feat: add hotfix auto-tagging and template generation workflows (#8131)
Devinwong Mar 20, 2026
81684c9
feat: support new ACL os-release (ID=azurelinux, VARIANT_ID=azurecont…
aadhar-agarwal Mar 20, 2026
13584c3
fix: revert "feat: add scripts hotfix pipeline for test (#8046)" (#8150)
Devinwong Mar 23, 2026
3b7d213
feat: onboard NVIDIA GPU support for ACL (#8112)
henryli001 Mar 23, 2026
7f08f18
feat: run aks node controller at boot time faster by 15s (#8082)
awesomenix Mar 23, 2026
d79cdc5
feat: log scriptless cmd mode for easier logging and debugging (#8155)
awesomenix Mar 23, 2026
f5a3ad2
chore: deprecate acr teleport (#8052)
calvin197 Mar 24, 2026
04ed332
chore(deps): bump google.golang.org/grpc from 1.72.2 to 1.79.3 in /im…
dependabot[bot] Mar 24, 2026
d704b5c
chore(deps): bump google.golang.org/grpc from 1.59.0 to 1.79.3 in /vh…
dependabot[bot] Mar 24, 2026
db51cc6
test: add hotfix e2e test for scriptless CSE command scripts hotfix d…
Devinwong Mar 24, 2026
00b942a
fix: remove teleport references from ACL ARM64 packer template and ad…
cameronmeissner Mar 24, 2026
8fe25ef
fix: adjust node exporter tls to match what was default behavior in e…
chmill-zz Mar 24, 2026
b32827d
feat: improve cse bootstrap latency by deferring non-critical work (#…
awesomenix Mar 25, 2026
d48a82e
fix: temporary disable checking for cse-overrides until ACL is fixed …
awesomenix Mar 25, 2026
5c0b26e
fix: acl and flatcar skip oras repo tag when it is network isolated c…
fseldow Mar 25, 2026
9a00dd0
fix: correctly determine compatibility with prefetch optimization in …
cameronmeissner Mar 25, 2026
44542c8
chore: automated PR to update ReleaseNotes for 202603.18.0 VHD (#8121)
aks-node-assistant[bot] Mar 25, 2026
727e77e
chore: automated PR to update VHDVersion for 202603.18.0 VHD (#8120)
aks-node-assistant[bot] Mar 25, 2026
b66f502
fix: stabilize flaky cse_timeout shellspec test (#8166)
ganeshkumarashok Mar 25, 2026
392e779
chore: add @SriHarsha001 to CODEOWNERS (#8167)
ganeshkumarashok Mar 26, 2026
d73581c
chore(deps): bump actions/create-github-app-token from 2 to 3 (#8094)
dependabot[bot] Mar 26, 2026
90ba540
fix: use reinstall command to download packages (#8176)
YaoC Mar 26, 2026
c9fac4a
refactor: move acr-mirror version to components.json (#8160)
ganeshkumarashok Mar 26, 2026
b8e7d95
fix: set SecurityType=TrustedLaunch in ACL ARM64 image def (#8187)
aadhar-agarwal Mar 26, 2026
280c8f4
test: convert Test_ACL_GPUNC to scriptless e2e (#8179)
ganeshkumarashok Mar 27, 2026
cd02f0d
feat: download azure acr credential provider via oras in network isol…
fseldow Mar 27, 2026
c05ce7d
fix: gracefully restart containerd instead of killing it (#8184)
awesomenix Mar 27, 2026
a3dca21
fix: set RemainAfterExit=yes so resolv-uplink-override.service (#8177)
aadhar-agarwal Mar 27, 2026
5afead0
chore: automated PR to update ReleaseNotes for 202603.12.1 VHD (#8191)
aks-node-assistant[bot] Mar 27, 2026
3929b3c
chore: remove deprecated Azure Linux and Mariner VHD definitions (#8180)
Devinwong Mar 27, 2026
47ef4aa
chore(deps): update dependency dcgm-exporter (#8143)
renovate[bot] Mar 27, 2026
8c49e0c
fix(e2e): explicitly validate `--rotate-certificates` is true true wi…
cameronmeissner Mar 27, 2026
1d2fc13
chore: minor comment change (#8202)
calvin197 Mar 28, 2026
9f74e23
chore: bump ACR credential provider for service account image pull (#…
qweeah Mar 31, 2026
529d09d
chore: automated PR to update ReleaseNotes for 202603.18.1 VHD (#8198)
aks-node-assistant[bot] Mar 31, 2026
78c6457
fix: change minimum tls version to 1.2 (#8208)
awesomenix Mar 31, 2026
c76a30e
ci: add --min-tls-version TLS1_2 to storage account creation in VHD b…
Copilot Mar 31, 2026
0746fd9
feat(e2e): dynamically fetch VM extension version with caching, timeo…
surajssd Apr 1, 2026
3215165
feat: log collector updates (#8218)
timmy-wright Apr 2, 2026
d8c866e
fix(e2e): improve node-exporter validator diagnostics (#8193)
chmill-zz Apr 2, 2026
048fc0d
fix(e2e): improveV2 node-exporter validator diagnostics (#8234)
chmill-zz Apr 3, 2026
d3ea8ad
chore(securitypatch/ubuntu): automated PR to add release notes for 20…
aks-node-assistant[bot] Apr 3, 2026
55b6288
chore(securitypatch/azurelinux): automated PR to add release notes fo…
aks-node-assistant[bot] Apr 3, 2026
b1e975f
chore(securitypatch/ubuntu2404): automated PR to add release notes fo…
aks-node-assistant[bot] Apr 3, 2026
b97dbde
chore: automated PR to update VHDVersion for 202603.30.0 VHD (#8223)
aks-node-assistant[bot] Apr 3, 2026
2e4c9fe
fix(e2e): retry VMSS creation on `GalleryImageNotFound` error (#8239)
surajssd Apr 3, 2026
6403863
chore: add Artifact Streaming E2Es for ARM64 (#8232)
mxj220 Apr 6, 2026
0c3f51b
fix(cse): resolve error code collisions and add missing definition (#…
surajssd Apr 6, 2026
1a17b28
chore(securitypatch/azurelinux): automated PR to add release notes fo…
aks-node-assistant[bot] Apr 6, 2026
eb57287
chore(deps): update nvidia-device-plugin (minor) (#8129)
renovate[bot] Apr 6, 2026
9bec2e1
chore(deps): update dependency dcgm-exporter (#8238)
renovate[bot] Apr 6, 2026
8e610a1
test: fix time dependency and add artifact streaming e2e for azure li…
ganeshkumarashok Apr 6, 2026
26ed0ea
chore(deps): update containernetworking/cilium/cilium docker tag to v…
renovate[bot] Apr 7, 2026
bd1dc8e
fix: quote --features arg for arm64 TL image definitions (#8222)
aadhar-agarwal Apr 7, 2026
5ab39fa
chore: automated PR to update ReleaseNotes for 202603.30.0 VHD (#8224)
aks-node-assistant[bot] Apr 7, 2026
c766ba5
feat: download containerd with oras in network isolated windows clust…
jiashun0011 Apr 8, 2026
70d5229
feat(windows): add known aks processes and files to defender exclusio…
timmy-wright Apr 8, 2026
7bacbd9
fix(gpu): add systemd ordering to prevent MIG device detection race (…
surajssd Apr 8, 2026
a61b49a
test: add test for MIG mixed mode (#8249)
runzhen Apr 8, 2026
9811447
fix(e2e): set PrincipalType on role assignment to avoid AAD replicati…
ganeshkumarashok Apr 8, 2026
d6f5b37
refactor(e2e): add DAG-based concurrent task execution for cluster se…
r2k1 Apr 9, 2026
0a3ff4e
chore(securitypatch/azurelinux): automated PR to add release notes fo…
aks-node-assistant[bot] Apr 9, 2026
80851cf
feat(windows): add Windows 2025 support for Windows Cilium Networking…
rzlink Apr 9, 2026
2ad563b
chore(securitypatch/ubuntu): automated PR to add release notes for 20…
aks-node-assistant[bot] Apr 9, 2026
9eb8fbe
chore(securitypatch/ubuntu2404): automated PR to add release notes fo…
aks-node-assistant[bot] Apr 9, 2026
a94bc9f
test: run NC24ads_A100_v4 tests in a westus2 (#8250)
runzhen Apr 9, 2026
85acc06
fix(e2e): add DAG dependencies to prevent route table race condition …
djsly Apr 9, 2026
723d61c
feat: upgrade blobfuse version to v2.5.3 on Ubuntu (#8219)
andyzhangx Apr 10, 2026
2a7a13f
fix(cse): prevent CSE timeout overrun with per-op budget and pre-comm…
djsly Apr 10, 2026
7d2e053
fix(e2e): retry WireServer blocked validation to eliminate flakes (#8…
djsly Apr 10, 2026
911e389
fix(e2e): resolve debug pod before wireserver check retry loop (#8274)
djsly Apr 10, 2026
4e093e0
fix: strip --pod-infra-container-image for Kubernetes >= 1.35 (#8273)
djsly Apr 10, 2026
8b7ee80
chore(deps): bump actions/github-script from 8 to 9 (#8271)
dependabot[bot] Apr 10, 2026
cbbe1e8
fix: use dpkg for local deb installs (#8285)
awesomenix Apr 12, 2026
39cf616
chore(deps): bump aks-secure-tls-bootstrap-client to v1.1.0 (#8277)
cameronmeissner Apr 13, 2026
6dce0b4
fix(e2e): prevent kubenet route table detachment and stale node accum…
djsly Apr 13, 2026
e667158
fix: ensure VHD build garbage collection script always runs to comple…
cameronmeissner Apr 13, 2026
164e8e3
chore(deps): update oss/v2/kubernetes/windows-gmsa-webhook docker tag…
renovate[bot] Apr 14, 2026
ccb3417
feat: add configuration support for secure TLS bootstrap client RPC t…
cameronmeissner Apr 14, 2026
5d7fc8d
feat: add OSSKU-based IsCgroupV2 detection and CustomizedImageTrusted…
aadhar-agarwal Apr 14, 2026
a025f2d
fix: adjust Renovate configuration limits and rebase behavior (#8304)
Devinwong Apr 14, 2026
282ad2f
chore: automated PR to update ReleaseNotes for 202604.13.0 VHD (#8301)
aks-node-assistant[bot] Apr 14, 2026
7868de1
chore: automated PR to update VHDVersion for 202604.13.0 VHD (#8302)
aks-node-assistant[bot] Apr 14, 2026
aa535df
disable minor update for all packages by default (#8310)
Devinwong Apr 14, 2026
d92017c
feat: pass cse cmd generated from nbc to node controller (#8291)
awesomenix Apr 14, 2026
7d4e1a4
chore(deps): bump azure-cloud-node-manager versions (#8298)
anndono Apr 14, 2026
e8d4b54
chore(deps): update kube-components (patch) (#8099)
renovate[bot] Apr 14, 2026
ca78466
fix(e2e): allow transient cloud-init temp mount failures in systemd u…
hsubramanianaks Apr 14, 2026
9722703
chore(deps): update windowsbase (patch) (#8307)
renovate[bot] Apr 14, 2026
076c8c3
feat: aks-node-controller self-update mechanism and version command s…
Devinwong Apr 14, 2026
ca98687
e2e: increase Azure SDK retry tolerance for gallery throttling (#8314)
djsly Apr 15, 2026
004305e
test: add blobfuse related content tests (#8296)
Devinwong Apr 15, 2026
b297d71
fix: use the script file directly instead of bash -c (#8312)
awesomenix Apr 15, 2026
f399ec8
fix: windows doesnt support EnableScriptlessCSECmd which is default n…
awesomenix Apr 15, 2026
b43569a
feat: add support for --help and version commands in aks-node-control…
Devinwong Apr 15, 2026
37deed5
feat: windows base version update & script to do it manually (#8315)
timmy-wright Apr 15, 2026
124bea6
fix: split rpm matchUpdateTypes and ignoreUnstable (#8316)
Devinwong Apr 15, 2026
e7d35a6
fix: acl hostname seems to be set further down boot order, wait for h…
awesomenix Apr 15, 2026
320d4b0
feat: cache versioned kubelet kubectl package binaries (#8287)
awesomenix Apr 15, 2026
2240050
fix: use single e2e and run all flavours (#8319)
awesomenix Apr 15, 2026
676b9fa
chore(deps): update acr-credential-provider (patch) (#8053)
renovate[bot] Apr 15, 2026
8e7d326
chore(deps): update containernetworking/azure-cns docker tag to v1.8.…
renovate[bot] Apr 15, 2026
706e89e
chore(deps): update containernetworking/azure-cni docker tag to v1.8.…
renovate[bot] Apr 15, 2026
6649e20
feat: enhance renovate configuration with package rules and team assi…
Devinwong Apr 15, 2026
5f27b41
fix: move EnableScriptlessNBCCSECmd to ScenarioRuntime (#8325)
awesomenix Apr 15, 2026
5cffde6
fix: switch to use msft golang for building aks-node-controller (#8324)
awesomenix Apr 16, 2026
8399610
chore(deps): update ama-metrics (minor) (#8278)
renovate[bot] Apr 16, 2026
41e7232
fix(vhd-scanning): install trivy from PMC with version pinning and Re…
djsly Apr 16, 2026
21c9d22
fix: consolidate e2e scenario tests (#8329)
awesomenix Apr 16, 2026
1220494
chore(deps): bump github.com/moby/spdystream from 0.5.0 to 0.5.1 in /…
dependabot[bot] Apr 16, 2026
c046303
test: add Ubuntu 24.04 ARM64 artifact streaming e2e tests (#8328)
calvin197 Apr 16, 2026
b3212dd
chore(deps): update kube-components (patch) (#8321)
renovate[bot] Apr 17, 2026
44399f6
chore(deps): update kubelet-kubectl (patch) (#8128)
renovate[bot] Apr 17, 2026
a848a1d
fix: speed up provisioning even more by 10s with localdns enabled (#8…
awesomenix Apr 17, 2026
b159c9d
chore(deps): update runc-containerd-ca_watcher (patch) (#8127)
renovate[bot] Apr 17, 2026
de76e67
fix: cis regressions — re-apply /etc/issue banners + comprehensive lo…
djsly Apr 17, 2026
5e395a5
chore(deps): update dependency dcgm-exporter (#8290)
renovate[bot] Apr 17, 2026
9bc3cc5
feat(localdns): add localDNS metrics exporter (#7917)
saewoni Apr 17, 2026
c0170c2
fix: reduce hourly limits for PRs and commits, and update kubelet pac…
Devinwong Apr 17, 2026
4fee5dc
test: re-enable Windows Cilium Networking e2e test (#8337)
rzlink Apr 18, 2026
dff51f9
fix: wait for a bit longer for containerd to get ready, sometimes its…
awesomenix Apr 19, 2026
61250fe
docs: update windows release notes for 2026-04B (#8350)
aks-node-assistant[bot] Apr 20, 2026
af79c5c
feat(windows): add using cache first in DownloadFileWithOras (#8289)
fseldow Apr 20, 2026
69692ee
chore(deps): update containernetworking/azure-cni docker tag to v1.6.…
renovate[bot] Apr 20, 2026
d549787
fix: do not retry not found errors from azure (#8351)
awesomenix Apr 20, 2026
45408f0
fix(renovate): enable Renovate version tracking for DCGM AzureLinux 3…
surajssd Apr 20, 2026
ed550ff
feat: implement rendering nodecustomdata in aks-node-controller to su…
awesomenix Apr 20, 2026
943b13b
fix(e2e): validate secure TLS bootstrapping token fallback purely thr…
cameronmeissner Apr 20, 2026
f880933
fix: remove localdns metrics exporter flaky security hardening direct…
jingwenw15 Apr 20, 2026
c68290b
fix(e2e): gunzip nbc-cmd source in CustomDataWithNBCCmdHack for Flatc…
ganeshkumarashok Apr 21, 2026
d494a41
fix: fix azure cni case where route table doesnt exist (#8363)
awesomenix Apr 21, 2026
12e23eb
chore(deps): update containernetworking/azure-cni docker tag to v1.7.…
renovate[bot] Apr 21, 2026
83bcff1
feat: disable kernel lockdown mode for azurelinux 3.0 aks image by de…
miz060 Apr 21, 2026
7943ffa
chore(deps): update azure-cns (patch) (#8334)
renovate[bot] Apr 22, 2026
587e7e2
chore: upgrade CSI driver image versions (#8339)
andyzhangx Apr 22, 2026
fdc598a
feat(linux): network isolated cluster install package via cached firs…
fseldow Apr 22, 2026
6c86754
fix: update kubelet-kubectl group configuration and add autoscaler gr…
Devinwong Apr 22, 2026
fa16129
feat: refactoring blobfuse install to centralized in components.json …
Devinwong Apr 22, 2026
2052162
fix: add fips tests and downgrade 2004 containerd (#8380)
awesomenix Apr 22, 2026
d210b3e
fix: unfreeze 2204 kernel to pick up new one which has CVE fixes in 1…
awesomenix Apr 22, 2026
38b4ddf
fix: skip kernel log validation for fips 2004 OS (#8384)
awesomenix Apr 22, 2026
57ebc0d
fix: fall back to reinstall command to download security patch packag…
YaoC Apr 23, 2026
2c30dad
fix: bump containerd, fix e2es (#8385)
awesomenix Apr 23, 2026
6094809
chore(securitypatch/azurelinux): automated PR to add release notes fo…
aks-node-assistant[bot] Apr 23, 2026
bc3c799
fix: add ubuntu2204 azure cni with overlay since thats most popular (…
awesomenix Apr 23, 2026
b1738df
fix: check file exists before sourcing (#8391)
timmy-wright Apr 24, 2026
54aa84a
test: reduce Go test timeout to 80m to stay below 90m ADO job limit (…
r2k1 Apr 24, 2026
04c5fe2
feat: implement budget timeout for apt_get_install (#8379)
Devinwong Apr 24, 2026
51cec57
feat: refactor aks-node-controller to use urfave cli to manually do c…
awesomenix Apr 24, 2026
b30beb6
fix: conslidate use of masterminds semver across the codebase (#8399)
awesomenix Apr 24, 2026
f4cc8d4
chore(securitypatch/ubuntu): automated PR to add release notes for 20…
aks-node-assistant[bot] Apr 24, 2026
0567b7c
feat: add patch-only version matching for ANC hotfix download (#8355)
Devinwong Apr 24, 2026
ad2f25c
feat: add CSE timing regression tests for all Linux VHDs (Ubuntu 22.0…
djsly Apr 25, 2026
0acb28d
chore(deps): update nvidia-device-plugin (patch) (#8293)
renovate[bot] Apr 27, 2026
b8187bc
feat: add GitHub Action for ANC hotfix template injection (#8405)
Devinwong Apr 27, 2026
05e4149
fix: use compact JSON in ANC hotfix injection (#8410)
Devinwong Apr 27, 2026
bc59818
chore: add agentbaker artifact streaming combo e2es (#8332)
mxj220 Apr 27, 2026
069605e
feat(windows): add support for configuring secure TLS bootstrap clien…
cameronmeissner Apr 27, 2026
a7357ee
chore: automated PR to update VHDVersion for 202604.24.0 VHD (#8407)
aks-node-assistant[bot] Apr 27, 2026
fcd9343
chore: automated PR to update ReleaseNotes for 202604.24.0 VHD (#8406)
aks-node-assistant[bot] Apr 27, 2026
a0d5842
chore(deps): bump go.opentelemetry.io/otel from 1.39.0 to 1.41.0 in /…
dependabot[bot] Apr 27, 2026
53ca113
chore(deps): bump go.opentelemetry.io/otel from 1.39.0 to 1.41.0 in /…
dependabot[bot] Apr 27, 2026
74ca843
chore: add tcpdump to AzureLinuxV3 (#8413)
hunter32292 Apr 28, 2026
a9c4971
chore(deps): update dependency moby-containerd to v1.7.31-ubuntu20.04…
renovate[bot] Apr 28, 2026
8fab8ac
chore: remove snapshot generation from copilot-instructions.md (#8415)
cameronmeissner Apr 28, 2026
54341d2
test(ci): add `dcgm-exporter` compatibility unit test to `validate-co…
surajssd Apr 28, 2026
852d3bf
fix: exclude beta/pre-release versions for containerd in renovate con…
Devinwong Apr 28, 2026
1f1a911
fix: separate allowedVersions into its own packageRule (#8420)
Devinwong Apr 28, 2026
a2c0c6c
fix: always clean up /opt/cni/downloads after installNetworkPlugin (#…
djsly Apr 29, 2026
b4e13a4
feat: install aznfs package on AzureLinux 3.0 (#8085)
andyzhangx Apr 29, 2026
500c041
chore(deps): update dependency containerd2 to v2.1.6-2.azl3 (#8431)
renovate[bot] Apr 29, 2026
1bbb9fd
fix: prevent degraded secure-tls-bootstrap.service health from failin…
cameronmeissner Apr 29, 2026
4828603
feat(scriptless): compare AKSNodeConfig generated cse cmd with NBC cs…
lilypan26 Apr 29, 2026
41c0d57
chore(deps): bump github.com/onsi/gomega from 1.39.1 to 1.40.0 (#8428)
dependabot[bot] Apr 29, 2026
01bb1b0
fix: disable scriptless phase2 for subsets of overlapping tests (#8430)
awesomenix Apr 30, 2026
ef16070
fix: disable prefetch optimization for azurecontainerlinux since it b…
awesomenix Apr 30, 2026
143abce
chore(deps): bump aks-secure-tls-bootstrap-client to v1.1.1 (#8438)
cameronmeissner Apr 30, 2026
e1d31ae
fix: mitigate CVE-2026-31431 (Copy Fail) algif_aead LPE on Ubuntu and…
djsly May 1, 2026
04e9f38
fix: replace apt-mark with dpkg equivalents to avoid slow apt initial…
djsly May 1, 2026
8b20cff
fix: dont run scriptless phase2 if preprovision is turned on (#8440)
awesomenix May 1, 2026
40c8286
chore(deps): update nvidia-device-plugin (patch) (#8427)
renovate[bot] May 1, 2026
af5a4b7
fix: update AzureContainerLinux image reference (#8446)
aadhar-agarwal May 1, 2026
a7eac1c
test(e2e): add ANC hotfix binary selection E2E test (#8423)
Devinwong May 1, 2026
2d70358
fix: adjusting windows container image json url logic to reach build …
smiezah-msft May 3, 2026
143a84a
fix: reduce Windows SIG cleanup retention to 7d and remove name filte…
r2k1 May 3, 2026
2645da0
fix: update inspektor gadget v0.51.0 compatibility (#8396)
burak-ok May 4, 2026
b85e291
fix: start aks-node-controller service after ssh service (#8449)
awesomenix May 4, 2026
f5d1d88
fix: auto create PRs for minor ciprod versions (#8445)
timmy-wright May 4, 2026
7e09916
fix: add ACL-specific butane config with first-boot service workaroun…
aadhar-agarwal May 4, 2026
bb5d230
test: make Windows log extraction best-effort in cleanup (#8433)
r2k1 May 4, 2026
f2865cc
chore(deps): update azuremonitor/containerinsights/ciprod docker tag …
renovate[bot] May 4, 2026
06b12c7
Revert "chore(deps): update dependency moby-containerd to v1.7.31-ubu…
Devinwong May 5, 2026
3a7eeef
chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.…
dependabot[bot] May 5, 2026
4832171
chore(deps): bump actions/create-github-app-token from 2 to 3 (#8174)
dependabot[bot] May 5, 2026
8bce838
chore(deps): bump azure/cli from 2 to 3 (#8175)
dependabot[bot] May 5, 2026
f4d69a4
feat(linux): refactor secure-tls-bootstrap.service to use default fil…
cameronmeissner May 6, 2026
33598f0
chore(deps): bump azure/cli from 2 to 3 (#8457)
dependabot[bot] May 6, 2026
a6d5c4f
chore(deps): bump actions/create-github-app-token from 2 to 3 (#8458)
dependabot[bot] May 6, 2026
27face4
fix: skip setup_golang.sh on hosts without apt-get (#8462)
aadhar-agarwal May 6, 2026
521c16e
feat: add CoreDNS hosts plugin support for LocalDNS (#8165)
saewoni May 7, 2026
82a4db3
fix: use oras from AZL3 MCR image instead of imagecustomizer (#8467)
hbeberman May 7, 2026
574f975
chore(securitypatch/ubuntu2404): automated PR to add release notes fo…
aks-node-assistant[bot] May 7, 2026
efc3d49
fix: always add aks custom cloud until we do better (#8468)
awesomenix May 7, 2026
788e191
fix: add agentbaker tests for new code path i added (#8473)
awesomenix May 8, 2026
098e897
feat(e2e): add HTTPS_PROXY + private DNS test scenario (#8470)
r2k1 May 8, 2026
6bb3dc3
fix: use cloud-specific ARM endpoint for IMDS token in ORAS login (#8…
charleswool May 8, 2026
91db390
fix: blacklist rxrpc/esp4/esp6 modules to mitigate DirtyFrag LPE (#8475)
djsly May 8, 2026
bdefb95
fix: remove description while writing out mod file (#8484)
awesomenix May 9, 2026
0108736
feat: add 5B non-sec regkeys (#8483)
smiezah-msft May 10, 2026
f3beaff
chore(vhdbuilder): build ACL VHDs using marketplace images (#8469)
aadhar-agarwal May 11, 2026
18560af
test: add coverage for removeComments CSE stripping logic (#8489)
djsly May 11, 2026
fd64ae4
feat(acl): add FIPS image builds for Azure Container Linux (#8463)
hbeberman May 11, 2026
f98d1a8
chore(deps): update kubelet-kubectl (patch) (#8352)
renovate[bot] May 12, 2026
eef8bf1
chore(securitypatch/ubuntu): automated PR to add release notes for 20…
aks-node-assistant[bot] May 12, 2026
7a70bf6
chore(securitypatch/ubuntu2404): automated PR to add release notes fo…
aks-node-assistant[bot] May 12, 2026
7c091a3
chore(securitypatch/azurelinux): automated PR to add release notes fo…
aks-node-assistant[bot] May 12, 2026
e600f57
chore(deps): update kube-components (patch) (#8349)
renovate[bot] May 12, 2026
9c37039
chore(deps): update oss/v2/azure/ip-masq-agent-v2 docker tag to v0.1.…
renovate[bot] May 12, 2026
a068b17
chore: automated PR to update ReleaseNotes for 202605.05.1 VHD (#8478)
aks-node-assistant[bot] May 12, 2026
061c461
chore: automated PR to update VHDVersion for 202605.05.1 VHD (#8477)
aks-node-assistant[bot] May 12, 2026
332503f
fix: prewarm containerd, increase timeout value for wait for containe…
awesomenix May 12, 2026
d1ff615
chore(deps): update autoscaler (patch) (#8376)
renovate[bot] May 12, 2026
ee3a2f6
chore(deps): update coredns (patch) (#8377)
renovate[bot] May 12, 2026
01a9404
chore(deps): update windowsbase (patch) (#8498)
renovate[bot] May 13, 2026
02e3771
fix: bump windows base image version for 5B & improve windows image b…
timmy-wright May 13, 2026
7cf0dbe
fix: better logging when file hash compare fails (#8503)
timmy-wright May 13, 2026
8bed512
Merge remote-tracking branch 'origin/main' into keithpimm/release-gb2…
keith-ms May 13, 2026
d7d7e4e
Fix unresolved merge conflict
keith-ms May 13, 2026
8e4e107
Update go.mod and go.sum with go mod tidy
keith-ms May 14, 2026
c685023
Run go mod tidy in e2e directory
keith-ms May 14, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
16 changes: 9 additions & 7 deletions .github/README-RENOVATE.md
Original file line number Diff line number Diff line change
Expand Up @@ -112,17 +112,17 @@ We enabled auto-updating `minor` versions as default configuration for now we ca

p.s. To allow disable `minor` update but enable `patch` update, at root level `separateMinorPatch` needs to be `true`, though it's no harm to turn it on even we are also updating `minor`.

### Assigning specific component to specific person
### Assigning specific component to specific person/team
We can use `matchPackageNames` to achieve this purpose.
For example,
```
{
"matchPackageNames": ["moby-runc", "moby-containerd"],
"assignees": ["devinwong", "anujmaheshwari1", "cameronmeissner", "lilypan26", "djsly", "zachary-bailey", "ganeshkumarashok"]
"reviewers": ["devinwong", "anujmaheshwari1", "cameronmeissner", "lilypan26", "djsly", "zachary-bailey", "ganeshkumarashok"]
"assignees": ["team:aks-node-lifecycle"],
"reviewers": ["team:aks-node-lifecycle"]
},
```
In this block, it is saying that if the package name, that a PR is updating, is one of the defined values, then assign this PR to these Github IDs. The values in `reviewers` are the same group of people to allow them to self-approve the PR. Unfortunately JSON doesn't support variable in value so we have to provide the value strings twice for both `assignees` and `reviewers`
In this block, it is saying that if the package name, that a PR is updating, is one of the defined values, then assign this PR to the configured owner. The values in `reviewers` are the same owner group as `assignees`.

### Additional string operation to specific component
```
Expand Down Expand Up @@ -402,6 +402,8 @@ where
- `${version}` will be resolved at runtime with the `latestVersion` and `previousLatestVersion` defined above.
- `${CPU_ARCH}` will be resolved at runtime depending on the CPU architecture of the Node (VM) under provisioning.

systemd system extensions (sysexts) are also hosted as MAR OCI artifacts, but they use a slightly different `extractVersion` rule and `downloadURL`. The distribution (e.g. `azlinux3`) is included in the version to allow different distributions within groups of artifacts. `${SYSTEMD_ARCH}` rather than `${CPU_ARCH}` is used in the URL, as systemd has different architecture names in some cases.

## `REVISION` in Dalec built container images
Dalec-built container images use static tags in the form `vMAJOR.MINOR.PATCH-REVISION` (see the Dalec FAQ https://github.com/Azure/dalec-build-defs/blob/main/faq.md#how-do-floating-vs-static-tags-work for details). For clarity and deterministic caching we represent these container images in Agent Baker's `components.json` using the exact static tag `vMAJOR.MINOR.PATCH-REVISION`.

Expand All @@ -426,16 +428,16 @@ This is a common scenario where we want the PR to be merged automatically when a
],
"automerge": true,
"enabled": true,
"assignees": ["devinwong", "anujmaheshwari1", "cameronmeissner", "lilypan26", "djsly", "zachary-bailey", "ganeshkumarashok"],
"reviewers": ["devinwong", "anujmaheshwari1", "cameronmeissner", "lilypan26", "djsly", "zachary-bailey", "ganeshkumarashok"]
"assignees": ["team:aks-node-lifecycle"],
"reviewers": ["team:aks-node-lifecycle"]
},
```
The config includes:
- `matchPackageNames`: The name of the component's renovateTag in `AgentBaker/parts/common/components.json`. For example `moby-containerd`, `oss/kubernetes/kube-proxy`, `oss/binaries/kubernetes/kubernetes-node`. Wildcard character (*) is supported too. For example, `"matchPackageNames": ["oss/kubernetes-csi/*"],`
- `matchUpdateTypes`: The type of version updates (`patch`) to which this rule applies.
- `automerge`: Set to `true` to automatically merge PRs created by this rule. Default is `false`.
- `enabled`: Set to `true` to enable this rule.
- `assignees` and `reviewers`: The same group of GitHub IDs who will be assigned to and can review and approve the automatically created PRs.
- `assignees` and `reviewers`: The same owner group (users or a team handle like `team:aks-node-lifecycle`) who will be assigned to and can review and approve the automatically created PRs.

## Why are some components' `minor version update` disabled?
For many components which have defined multiple versions cached in the components.json, we have disabled the `minor version update`.
Expand Down
298 changes: 298 additions & 0 deletions .github/copilot-instructions.md~origin_main

Large diffs are not rendered by default.

Loading
Loading