v1.31.2

Full Changelog: v1.31.1..v1.31.2

Changes by Kind

Testing

• Fix: revert to go1.22 windows filesystem stdlib behavior building with go 1.23 (#7751, @k8s-infra-cherrypick-robot)

Feature

• Feat: Lock updates on azure resources when other component is doing the same thing.

  This PR utilizes a lease in each service reconciliation to prevent race conditions where cloud provider and others are updating the same azure resources. (#7341, @nilo19)

• Feat: match source account as first priority in snapshot restore and volume clone scenarios (#7700, @k8s-infra-cherrypick-robot)

• [credential provider] Add a flag mirrorMapping. This flag is to mirror registry A to B when fetching credential. (#7335, @k8s-infra-cherrypick-robot)

Bug or Regression

• Fix checking service references from tags when deleting PIP (#7263, @zarvd)
• Fix: Change the order of updating vmss vm and vmss (#7539, @k8s-infra-cherrypick-robot)
• Fix: Support switching from loadbalancer to externalName for services (#7565, @k8s-infra-cherrypick-robot)
• Fix: several bugs related to multiple standard load balancers mode.
  1. All endpointslices of a local service should be included in local backend pool updater, instead of only the first endpointslice.
  2. In some rare cases, migration from NIC to IP-based LB can be in a middle state where the NIC references are removed, but those IPConfigs in the backend pool are not. In this case, we should manually exclude those IPConfigs from the request body.
  3. localServiceOwnsBackendPool should compare the full backend pool name, not just prefix, because two service names can share the same prefix.
  4. There is a corner case when the cluster is being updated to multi-slb from classic NIC-based single lb, not from an IP-based cluster. In this case, if the service being reconciled is local, the cloud provider will try to update a NIC pool to IP-based pool direct, which is not allowed. We should skip adding IPs to NIC-based pool in multi-slb mode.
  5. There is a bug in ReconcileBackendPools, where we by mistake parse the LB name to use as the backend pool name. (#7605, @k8s-infra-cherrypick-robot)
• Introduced prefix-based matching for systemTags during tag reconciliation.
  • Tags starting with a prefix defined in systemTags (e.g., aks-managed) will now be matched and retained.
  • For example: Adding aks-managed to systemTags ensures tags like aks-managed-cluster-name and aks-managed-cluster-rg are preserved. (#8147, @k8s-infra-cherrypick-robot)
• Tags with values resembling "null" (e.g., " null " or " NuLL ") will now retain their leading and trailing whitespace during inheritance or updates to avoid errors caused by ARM's reserved tag value "null".
  This change only affects tags with such specific values, ensuring all other tags continue to have whitespace trimmed as before. (#8118, @k8s-infra-cherrypick-robot)

Other (Cleanup or Flake)

• Optimize CIDR aggregation to improve performance and reduce memory usage (#7685, @k8s-infra-cherrypick-robot)

Dependencies

Added

• github.com/Azure/azure-sdk-for-go/sdk/azidentity/cache: v0.3.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v6: v6.3.0
• github.com/AzureAD/microsoft-authentication-extensions-for-go/cache: v0.1.1
• github.com/dgryski/go-rendezvous: 9f7001d
• github.com/keybase/go-keychain: 57a3676
• github.com/redis/go-redis/v9: v9.7.0
• go.opentelemetry.io/auto/sdk: v1.1.0

Changed

• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.14.0 → v1.17.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.7.0 → v1.8.1
• github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry: v0.2.1 → v0.2.2
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v6: v6.0.0 → v6.3.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v6: v6.0.0 → v6.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/privatedns/armprivatedns: v1.2.0 → v1.3.0
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets: v1.1.0 → v1.3.0
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal: v1.0.0 → v1.1.0
• github.com/Azure/go-autorest/autorest/date: v0.3.0 → v0.3.1
• github.com/Azure/go-autorest/autorest/mocks: v0.4.2 → v0.4.3
• github.com/Azure/go-autorest/autorest: v0.11.29 → v0.11.30
• github.com/Azure/go-autorest/tracing: v0.6.0 → v0.6.1
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.2.2 → v1.3.2
• github.com/evanphx/json-patch: v5.9.0+incompatible → v5.9.11+incompatible
• github.com/fsnotify/fsnotify: v1.7.0 → v1.8.0
• github.com/google/pprof: fa2c70b → 40e02aa
• github.com/onsi/ginkgo/v2: v2.20.2 → v2.22.2
• github.com/onsi/gomega: v1.34.2 → v1.36.2
• github.com/prometheus/client_golang: v1.20.2 → v1.20.5
• github.com/prometheus/common: v0.55.0 → v0.61.0
• github.com/rogpeppe/go-internal: v1.12.0 → v1.13.1
• github.com/spf13/pflag: v1.0.5 → v1.0.6
• github.com/stretchr/testify: v1.9.0 → v1.10.0
• go.opentelemetry.io/otel/exporters/prometheus: v0.50.0 → v0.56.0
• go.opentelemetry.io/otel/metric: v1.30.0 → v1.34.0
• go.opentelemetry.io/otel/sdk/metric: v1.29.0 → v1.34.0
• go.opentelemetry.io/otel/sdk: v1.29.0 → v1.34.0
• go.opentelemetry.io/otel/trace: v1.30.0 → v1.34.0
• go.opentelemetry.io/otel: v1.30.0 → v1.34.0
• go.uber.org/mock: v0.4.0 → v0.5.0
• golang.org/x/crypto: v0.27.0 → v0.33.0
• golang.org/x/mod: v0.20.0 → v0.22.0
• golang.org/x/net: v0.28.0 → v0.34.0
• golang.org/x/oauth2: v0.21.0 → v0.24.0
• golang.org/x/sync: v0.8.0 → v0.11.0
• golang.org/x/sys: v0.25.0 → v0.30.0
• golang.org/x/term: v0.24.0 → v0.29.0
• golang.org/x/text: v0.18.0 → v0.22.0
• golang.org/x/time: v0.6.0 → v0.10.0
• golang.org/x/tools: v0.24.0 → v0.28.0
• google.golang.org/protobuf: v1.34.2 → v1.36.3
• k8s.io/api: v0.31.1 → v0.31.3
• k8s.io/apimachinery: v0.31.1 → v0.31.3
• k8s.io/apiserver: v0.31.1 → v0.31.5
• k8s.io/client-go: v0.31.1...

v1.30.8

Full Changelog: v1.30.7..v1.30.8

Changes by Kind

Testing

• Fix: revert to go1.22 windows filesystem stdlib behavior building with go 1.23 (#7752, @k8s-infra-cherrypick-robot)

Feature

• Feat: Lock updates on azure resources when other component is doing the same thing.

  This PR utilizes a lease in each service reconciliation to prevent race conditions where cloud provider and others are updating the same azure resources. (#7342, @nilo19)

• Feat: always match source account in restore and volume clone scenarios (#8152, @andyzhangx)

• [credential provider] Add a flag mirrorMapping. This flag is to mirror registry A to B when fetching credential. (#7336, @k8s-infra-cherrypick-robot)

Bug or Regression

• Fix checking service references from tags when deleting PIP (#7262, @zarvd)
• Fix: AzureStack env var setting issue (#8129, @andyzhangx)
• Fix: Change the order of updating vmss vm and vmss (#7540, @k8s-infra-cherrypick-robot)
• Fix: Support switching from loadbalancer to externalName for services (#7566, @k8s-infra-cherrypick-robot)
• Fix: VirtualNetworkRule match issue during account search (#8153, @andyzhangx)
• Fix: several bugs related to multiple standard load balancers mode.
  1. All endpointslices of a local service should be included in local backend pool updater, instead of only the first endpointslice.
  2. In some rare cases, migration from NIC to IP-based LB can be in a middle state where the NIC references are removed, but those IPConfigs in the backend pool are not. In this case, we should manually exclude those IPConfigs from the request body.
  3. localServiceOwnsBackendPool should compare the full backend pool name, not just prefix, because two service names can share the same prefix.
  4. There is a corner case when the cluster is being updated to multi-slb from classic NIC-based single lb, not from an IP-based cluster. In this case, if the service being reconciled is local, the cloud provider will try to update a NIC pool to IP-based pool direct, which is not allowed. We should skip adding IPs to NIC-based pool in multi-slb mode.
  5. There is a bug in ReconcileBackendPools, where we by mistake parse the LB name to use as the backend pool name. (#7606, @nilo19)
• Introduced prefix-based matching for systemTags during tag reconciliation.
  • Tags starting with a prefix defined in systemTags (e.g., aks-managed) will now be matched and retained.
  • For example: Adding aks-managed to systemTags ensures tags like aks-managed-cluster-name and aks-managed-cluster-rg are preserved. (#8149, @nilo19)
• Tags with values resembling "null" (e.g., " null " or " NuLL ") will now retain their leading and trailing whitespace during inheritance or updates to avoid errors caused by ARM's reserved tag value "null".
  This change only affects tags with such specific values, ensuring all other tags continue to have whitespace trimmed as before. (#8119, @nilo19)

Other (Cleanup or Flake)

• Optimize CIDR aggregation to improve performance and reduce memory usage (#7686, @k8s-infra-cherrypick-robot)

Dependencies

Added

• github.com/Azure/azure-sdk-for-go/sdk/azidentity/cache: v0.3.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v6: v6.3.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v5: v5.0.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v6: v6.3.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v6: v6.2.0
• github.com/AzureAD/microsoft-authentication-extensions-for-go/cache: v0.1.1
• github.com/dgryski/go-rendezvous: 9f7001d
• github.com/keybase/go-keychain: 57a3676
• github.com/redis/go-redis/v9: v9.7.0
• go.opentelemetry.io/auto/sdk: v1.1.0
• gopkg.in/evanphx/json-patch.v4: v4.12.0

Changed

• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.14.0 → v1.17.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.7.0 → v1.8.1
• github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry: v0.2.1 → v0.2.2
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/privatedns/armprivatedns: v1.2.0 → v1.3.0
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets: v1.1.0 → v1.3.0
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal: v1.0.0 → v1.1.0
• github.com/Azure/go-autorest/autorest/date: v0.3.0 → v0.3.1
• github.com/Azure/go-autorest/autorest/mocks: v0.4.2 → v0.4.3
• github.com/Azure/go-autorest/autorest: v0.11.29 → v0.11.30
• github.com/Azure/go-autorest/tracing: v0.6.0 → v0.6.1
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.2.2 → v1.3.2
• github.com/evanphx/json-patch: v5.9.0+incompatible → v5.9.11+incompatible
• github.com/fsnotify/fsnotify: v1.7.0 → v1.8.0
• github.com/fxamacker/cbor/v2: v2.6.0 → v2.7.0
• github.com/go-openapi/jsonpointer: v0.19.6 → v0.21.0
• github.com/go-openapi/swag: v0.22.4 → v0.23.0
• github.com/google/pprof: fa2c70b → 40e02aa
• github.com/onsi/ginkgo/v2: v2.20.2 → v2.22.2
• github.com/onsi/gomega: v1.34.2 → v1.36.2
• github.com/prometheus/client_golang: v1.20.3 → v1.20.5
• github.com/prometheus/common: v0.59.1 → v0.61.0
• github.com/rogpeppe/go-internal: v1.12.0 → v1.13.1
• github.com/spf13/pflag: v1.0.5 → v1.0.6
• github.com/stretchr/testify: v1.9.0 → v1.10.0
• go.opentelemetry.io/otel/exporters/prometheus: v0.52.0 → v0.56.0
• go.opentelemetry.io/otel/metric: v1.30.0 → v1.34.0
• go.opentelemetry.io/otel/sdk/metric: v1.30.0 → v1.34.0
• go.opentelemetry.io/otel/sdk: v1.30.0 → v1.34.0
• go.opentelemetry.io/otel/trace: v1.30.0 → v1.34.0
• go.opentelemetry.io/otel:...

v1.29.12

Full Changelog: v1.29.11..v1.29.12

Changes by Kind

Testing

• Fix: revert to go1.22 windows filesystem stdlib behavior building with go 1.23 (#7753, @k8s-infra-cherrypick-robot)

Feature

• Feat: Lock updates on azure resources when other component is doing the same thing.

  This PR utilizes a lease in each service reconciliation to prevent race conditions where cloud provider and others are updating the same azure resources. (#7343, @nilo19)

Bug or Regression

• Fix checking service references from tags when deleting PIP (#7261, @zarvd)
• Fix: Change the order of updating vmss vm and vmss (#7541, @nilo19)
• Fix: Support switching from loadbalancer to externalName for services (#7567, @nilo19)
• Fix: several bugs related to multiple standard load balancers mode.
  1. All endpointslices of a local service should be included in local backend pool updater, instead of only the first endpointslice.
  2. In some rare cases, migration from NIC to IP-based LB can be in a middle state where the NIC references are removed, but those IPConfigs in the backend pool are not. In this case, we should manually exclude those IPConfigs from the request body.
  3. localServiceOwnsBackendPool should compare the full backend pool name, not just prefix, because two service names can share the same prefix.
  4. There is a corner case when the cluster is being updated to multi-slb from classic NIC-based single lb, not from an IP-based cluster. In this case, if the service being reconciled is local, the cloud provider will try to update a NIC pool to IP-based pool direct, which is not allowed. We should skip adding IPs to NIC-based pool in multi-slb mode.
  5. There is a bug in ReconcileBackendPools, where we by mistake parse the LB name to use as the backend pool name. (#7607, @nilo19)
• Introduced prefix-based matching for systemTags during tag reconciliation.
  • Tags starting with a prefix defined in systemTags (e.g., aks-managed) will now be matched and retained.
  • For example: Adding aks-managed to systemTags ensures tags like aks-managed-cluster-name and aks-managed-cluster-rg are preserved. (#8150, @nilo19)
• Tags with values resembling "null" (e.g., " null " or " NuLL ") will now retain their leading and trailing whitespace during inheritance or updates to avoid errors caused by ARM's reserved tag value "null".
  This change only affects tags with such specific values, ensuring all other tags continue to have whitespace trimmed as before. (#8121, @k8s-infra-cherrypick-robot)

Dependencies

Added

• github.com/Azure/azure-sdk-for-go/sdk/azidentity/cache: v0.3.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v6: v6.3.0
• github.com/AzureAD/microsoft-authentication-extensions-for-go/cache: v0.1.1
• github.com/dgryski/go-rendezvous: 9f7001d
• github.com/fxamacker/cbor/v2: v2.7.0
• github.com/keybase/go-keychain: 57a3676
• github.com/redis/go-redis/v9: v9.7.0
• github.com/x448/float16: v0.8.4
• go.opentelemetry.io/auto/sdk: v1.1.0
• gopkg.in/evanphx/json-patch.v4: v4.12.0

Changed

• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.14.0 → v1.17.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.7.0 → v1.8.1
• github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry: v0.2.1 → v0.2.2
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v6: v6.0.0 → v6.3.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v6: v6.0.0 → v6.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/privatedns/armprivatedns: v1.2.0 → v1.3.0
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets: v1.1.0 → v1.3.0
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal: v1.0.0 → v1.1.0
• github.com/Azure/go-autorest/autorest/date: v0.3.0 → v0.3.1
• github.com/Azure/go-autorest/autorest/mocks: v0.4.2 → v0.4.3
• github.com/Azure/go-autorest/autorest: v0.11.29 → v0.11.30
• github.com/Azure/go-autorest/tracing: v0.6.0 → v0.6.1
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.2.2 → v1.3.2
• github.com/evanphx/json-patch: v5.9.0+incompatible → v5.9.11+incompatible
• github.com/fsnotify/fsnotify: v1.7.0 → v1.8.0
• github.com/google/pprof: fa2c70b → 40e02aa
• github.com/onsi/ginkgo/v2: v2.20.2 → v2.22.2
• github.com/onsi/gomega: v1.34.2 → v1.36.2
• github.com/prometheus/client_golang: v1.20.3 → v1.20.5
• github.com/prometheus/common: v0.59.1 → v0.61.0
• github.com/rogpeppe/go-internal: v1.12.0 → v1.13.1
• github.com/spf13/pflag: v1.0.5 → v1.0.6
• github.com/stretchr/testify: v1.9.0 → v1.10.0
• go.opentelemetry.io/otel/exporters/prometheus: v0.52.0 → v0.56.0
• go.opentelemetry.io/otel/metric: v1.30.0 → v1.34.0
• go.opentelemetry.io/otel/sdk/metric: v1.30.0 → v1.34.0
• go.opentelemetry.io/otel/sdk: v1.30.0 → v1.34.0
• go.opentelemetry.io/otel/trace: v1.30.0 → v1.34.0
• go.opentelemetry.io/otel: v1.30.0 → v1.34.0
• go.uber.org/mock: v0.4.0 → v0.5.0
• golang.org/x/crypto: v0.27.0 → v0.33.0
• golang.org/x/mod: v0.20.0 → v0.22.0
• golang.org/x/net: v0.28.0 → v0.34.0
• golang.org/x/oauth2: v0.22.0 → v0.24.0
• golang.org/x/sync: v0.8.0 → v0.11.0
• golang.org/x/sys: v0.25.0 → v0.30.0
• golang.org/x/term: v0.24.0 → v0.29.0
• golang.org/x/text: v0.18.0 → v0.22.0
• golang.org/x/time: v0.6.0 → v0.10.0
• golang.org/x/tools: v0.24.0 → v0.28.0
• google.golang.org/protobuf: v1.34.2 → v1.36.3
• k8s.io/apiserver: v0.29.9 → v0.29.13
• k8s.io/cloud-provider: v0.29.9 → v0.29.13
• k8s.io/component-base: v0.29.9 → v0.29.13
• k8s.io/component-helpers: v0.29.9 → v0.29.13
• k8s.io/controller-manager: v0.29.9 → v0.29.13
• k8s.io/cri-api: v0.29.9 → v0.29.13
• k8s.io/kms: v0.29.9 → v0.29.13
• k8s.io/kubelet: v0.29.9 → v0.29.13
• sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader: v0.0.5 → v0.0.29
• sigs.k8s.io/cloud-provider-azure/pkg/azclient: v0.0.56 → v0.4.16

Removed

• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5: v5.7.0

v1.28.14

Full Changelog: v1.28.13..v1.28.14

Changes by Kind

Feature

• Feat: Lock updates on azure resources when other component is doing the same thing.

  This PR utilizes a lease in each service reconciliation to prevent race conditions where cloud provider and others are updating the same azure resources. (#7344, @nilo19)

Bug or Regression

• Fix checking service references from tags when deleting PIP (#7260, @zarvd)
• Fix: Change the order of updating vmss vm and vmss (#7542, @nilo19)
• Fix: Support switching from loadbalancer to externalName for services (#7568, @nilo19)
• Fix: several bugs related to multiple standard load balancers mode.
  1. All endpointslices of a local service should be included in local backend pool updater, instead of only the first endpointslice.
  2. In some rare cases, migration from NIC to IP-based LB can be in a middle state where the NIC references are removed, but those IPConfigs in the backend pool are not. In this case, we should manually exclude those IPConfigs from the request body.
  3. localServiceOwnsBackendPool should compare the full backend pool name, not just prefix, because two service names can share the same prefix.
  4. There is a corner case when the cluster is being updated to multi-slb from classic NIC-based single lb, not from an IP-based cluster. In this case, if the service being reconciled is local, the cloud provider will try to update a NIC pool to IP-based pool direct, which is not allowed. We should skip adding IPs to NIC-based pool in multi-slb mode.
  5. There is a bug in ReconcileBackendPools, where we by mistake parse the LB name to use as the backend pool name. (#7608, @nilo19)
• Introduced prefix-based matching for systemTags during tag reconciliation.
  • Tags starting with a prefix defined in systemTags (e.g., aks-managed) will now be matched and retained.
  • For example: Adding aks-managed to systemTags ensures tags like aks-managed-cluster-name and aks-managed-cluster-rg are preserved. (#8151, @nilo19)
• Tags with values resembling "null" (e.g., " null " or " NuLL ") will now retain their leading and trailing whitespace during inheritance or updates to avoid errors caused by ARM's reserved tag value "null".
  This change only affects tags with such specific values, ensuring all other tags continue to have whitespace trimmed as before. (#8122, @nilo19)

Dependencies

Added

Nothing has changed.

Changed

• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.7.2 → v1.17.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.3.1 → v1.7.0
• github.com/Azure/azure-sdk-for-go/sdk/internal: v1.3.0 → v1.10.0
• github.com/Azure/go-autorest/autorest/date: v0.3.0 → v0.3.1
• github.com/Azure/go-autorest/autorest/mocks: v0.4.2 → v0.4.3
• github.com/Azure/go-autorest/autorest: v0.11.29 → v0.11.30
• github.com/Azure/go-autorest/tracing: v0.6.0 → v0.6.1
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.2.0 → v1.2.2
• github.com/evanphx/json-patch: v5.9.0+incompatible → v5.9.11+incompatible
• github.com/fsnotify/fsnotify: v1.7.0 → v1.8.0
• github.com/golang-jwt/jwt/v5: v5.0.0 → v5.2.1
• github.com/google/pprof: fa2c70b → 40e02aa
• github.com/google/uuid: v1.3.1 → v1.6.0
• github.com/onsi/ginkgo/v2: v2.20.2 → v2.22.2
• github.com/onsi/gomega: v1.34.2 → v1.36.2
• github.com/pkg/browser: 681adbf → 5ac0b6a
• github.com/rogpeppe/go-internal: v1.10.0 → v1.12.0
• github.com/spf13/pflag: v1.0.5 → v1.0.6
• github.com/stretchr/testify: v1.9.0 → v1.10.0
• golang.org/x/crypto: v0.26.0 → v0.32.0
• golang.org/x/mod: v0.20.0 → v0.22.0
• golang.org/x/net: v0.28.0 → v0.34.0
• golang.org/x/sync: v0.8.0 → v0.11.0
• golang.org/x/sys: v0.25.0 → v0.30.0
• golang.org/x/term: v0.23.0 → v0.28.0
• golang.org/x/text: v0.18.0 → v0.22.0
• golang.org/x/tools: v0.24.0 → v0.28.0
• google.golang.org/protobuf: v1.34.1 → v1.36.1
• k8s.io/api: v0.28.14 → v0.28.15
• k8s.io/apimachinery: v0.28.14 → v0.28.15
• k8s.io/apiserver: v0.28.14 → v0.28.15
• k8s.io/client-go: v0.28.14 → v0.28.15
• k8s.io/cloud-provider: v0.28.14 → v0.28.15
• k8s.io/component-base: v0.28.14 → v0.28.15
• k8s.io/component-helpers: v0.28.14 → v0.28.15
• k8s.io/controller-manager: v0.28.14 → v0.28.15
• k8s.io/cri-api: v0.28.14 → v0.28.15
• k8s.io/kms: v0.28.14 → v0.28.15
• k8s.io/kubelet: v0.28.14 → v0.28.15
• k8s.io/utils: d93618c → 49e7df5
• sigs.k8s.io/yaml: v1.3.0 → v1.4.0

Removed

Nothing has changed.

v1.32.0

Full Changelog: v1.31.0..v1.32.0

Changes by Kind

Feature

• Consolidate adjacent CIDR ranges for allowed sources (#6995, @zarvd)

• Feat: Lock updates on azure resources when other component is doing the same thing.

  This PR utilizes a lease in each service reconciliation to prevent race conditions where cloud provider and others are updating the same azure resources. (#7193, @nilo19)

• Feat: bump k8s versions to v1.32.0 (#7822, @feiskyer)

• Feat: match source account as first priority in snapshot restore and volume clone scenarios (#7699, @andyzhangx)

• [credential provider] Add a flag mirrorMapping. This flag is to mirror registry A to B when fetching credential. (#6846, @lzhecheng)

Bug or Regression

• Aggregate overlapping allowed source ranges (#6807, @zarvd)

• Fix a bug that prevented patches to NSGs when the Azure API responded with empty strings for DestinationAddressPrefix (#7854, @kon-angelo)

• Fix checking service references from tags when deleting PIP (#7167, @zarvd)

• Fix: Change the order of updating vmss vm and vmss (#7520, @nilo19)

• Fix: Do not move nodes that have already been attached to load balancers after restarting

  When using multislb, the node distribution could be changed after restarting the ccm. This is because the node distribution cache would be lost after restarting. This PR restores the node distribution each time the ccm is restarted. (#6965, @nilo19)

• Fix: Support switching from loadbalancer to externalName for services (#7518, @nilo19)

• Fix: cloud provider should only generate userAgent if it's not provided (#7723, @andyzhangx)

• Fix: revert to go1.22 windows filesystem stdlib behavior building with go 1.23 (#7750, @andyzhangx)

• Fix: several bugs related to multiple standard load balancers mode.

  1. All endpointslices of a local service should be included in local backend pool updater, instead of only the first endpointslice.
  2. In some rare cases, migration from NIC to IP-based LB can be in a middle state where the NIC references are removed, but those IPConfigs in the backend pool are not. In this case, we should manually exclude those IPConfigs from the request body.
  3. localServiceOwnsBackendPool should compare the full backend pool name, not just prefix, because two service names can share the same prefix.
  4. There is a corner case when the cluster is being updated to multi-slb from classic NIC-based single lb, not from an IP-based cluster. In this case, if the service being reconciled is local, the cloud provider will try to update a NIC pool to IP-based pool direct, which is not allowed. We should skip adding IPs to NIC-based pool in multi-slb mode.
  5. There is a bug in ReconcileBackendPools, where we by mistake parse the LB name to use as the backend pool name. (#7432, @nilo19)

Other (Cleanup or Flake)

• Bump azure network api to 2024-03-01 (#7156, @MartinForReal)
• Optimize CIDR aggregation to improve performance and reduce memory usage (#7201, @zarvd)
• The apiVersion of network security group is bumped to 2024-01-01
  The apiVersion of VirtualNetworkLink is bumped to 2020-06-01
  The apiVersion of PrivateZone is bumped to 2020-06-01 (#7155, @MartinForReal)

Dependencies

Added

• github.com/Azure/azure-kusto-go/azkustodata: 5
• github.com/Azure/azure-kusto-go/azkustoingest: 5
• github.com/Azure/azure-sdk-for-go/sdk/azidentity/cache: v0.3.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/authorization/armauthorization/v2: v2.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v6: v6.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v5: v5.0.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v6: v6.3.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/msi/armmsi: v1.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v6: v6.2.0
• github.com/Azure/azure-sdk-for-go/sdk/storage/azqueue: v1.0.0
• github.com/AzureAD/microsoft-authentication-extensions-for-go/cache: v0.1.1
• github.com/dgryski/go-rendezvous: 9f7001d
• github.com/golang-jwt/jwt: v3.2.1+incompatible
• github.com/keybase/go-keychain: 57a3676
• github.com/redis/go-redis/v9: v9.6.1
• go.opentelemetry.io/auto/sdk: v1.1.0
• sigs.k8s.io/cloud-provider-azure/pkg/azclient/cache: v0.3.0

Changed

• cel.dev/expr: v0.15.0 → v0.18.0
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.14.0 → v1.17.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.7.0 → v1.8.0
• github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry: v0.2.1 → v0.2.2
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v3: v3.0.0 → v3.1.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/privatedns/armprivatedns: v1.2.0 → v1.3.0
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets: v1.1.0 → v1.3.0
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal: v1.0.0 → v1.1.0
• github.com/Azure/azure-sdk-for-go/sdk/storage/azblob: v1.1.0 → v1.4.0
• github.com/Azure/go-ansiterm: d185dfc → 306776e
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.2.2 → v1.3.1
• github.com/fsnotify/fsnotify: v1.7.0 → v1.8.0
• github.com/golang-jwt/jwt/v4: v4.5.0 → v4.5.1
• github.com/google/cel-go: v0.20.1 → v0.22.0
• github.com/google/pprof: 813a5fb → 40e02aa
• github.com/gregjones/httpcache: 9cad4c3 → 901d907
• github.com/jonboulle/clock...

v1.31.1

Full Changelog: v1.31.0..v1.31.1

Changes by Kind

Feature

• Consolidate adjacent CIDR ranges for allowed sources (#7047, @zarvd)

Bug or Regression

• Aggregate overlapping allowed source ranges (#6942, @zarvd)

• Fix: Do not move nodes that have already been attached to load balancers after restarting

  When using multislb, the node distribution could be changed after restarting the ccm. This is because the node distribution cache would be lost after restarting. This PR restores the node distribution each time the ccm is restarted. (#7021, @k8s-infra-cherrypick-robot)

Dependencies

Added

• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/authorization/armauthorization/v2: v2.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/msi/armmsi: v1.2.0
• github.com/klauspost/compress: v1.17.9

Changed

• github.com/google/pprof: 813a5fb → fa2c70b
• github.com/onsi/ginkgo/v2: v2.20.1 → v2.20.2
• github.com/onsi/gomega: v1.34.1 → v1.34.2
• github.com/prometheus/client_golang: v1.19.1 → v1.20.2
• go.opentelemetry.io/otel/metric: v1.29.0 → v1.30.0
• go.opentelemetry.io/otel/trace: v1.29.0 → v1.30.0
• go.opentelemetry.io/otel: v1.29.0 → v1.30.0
• golang.org/x/crypto: v0.26.0 → v0.27.0
• golang.org/x/sys: v0.24.0 → v0.25.0
• golang.org/x/term: v0.23.0 → v0.24.0
• golang.org/x/text: v0.17.0 → v0.18.0
• k8s.io/api: v0.31.0 → v0.31.1
• k8s.io/apimachinery: v0.31.0 → v0.31.1
• k8s.io/apiserver: v0.31.0 → v0.31.1
• k8s.io/client-go: v0.31.0 → v0.31.1
• k8s.io/cloud-provider: v0.31.0 → v0.31.1
• k8s.io/component-base: v0.31.0 → v0.31.1
• k8s.io/component-helpers: v0.31.0 → v0.31.1
• k8s.io/controller-manager: v0.31.0 → v0.31.1
• k8s.io/cri-api: v0.31.0 → v0.31.1
• k8s.io/kubelet: v0.31.0 → v0.31.1
• sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader: v0.0.25 → v0.0.27
• sigs.k8s.io/cloud-provider-azure/pkg/azclient: v0.0.43 → v0.0.55

Removed

• google.golang.org/appengine: v1.6.7

v1.30.7

Full Changelog: v1.30.6..v1.30.7

Changes by Kind

Feature

• Consolidate adjacent CIDR ranges for allowed sources (#7046, @zarvd)

Bug or Regression

• Aggregate overlapping allowed source ranges (#6941, @zarvd)

• Fix: Do not move nodes that have already been attached to load balancers after restarting

  When using multislb, the node distribution could be changed after restarting the ccm. This is because the node distribution cache would be lost after restarting. This PR restores the node distribution each time the ccm is restarted. (#7040, @nilo19)

Dependencies

Added

• github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry: v0.2.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/authorization/armauthorization/v2: v2.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/msi/armmsi: v1.2.0
• github.com/go-task/slim-sprig: 52ccab3
• github.com/klauspost/compress: v1.17.9
• go.opentelemetry.io/otel/exporters/prometheus: v0.52.0
• go.opentelemetry.io/otel/sdk/metric: v1.30.0

Changed

• github.com/Azure/azure-kusto-go: v0.16.0 → v0.16.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v3: v3.0.0 → v3.1.0
• github.com/alecthomas/kingpin/v2: v2.3.2 → v2.4.0
• github.com/fxamacker/cbor/v2: v2.7.0 → v2.6.0
• github.com/google/pprof: 813a5fb → fa2c70b
• github.com/moby/spdystream: v0.4.0 → v0.2.0
• github.com/onsi/ginkgo/v2: v2.20.1 → v2.20.2
• github.com/onsi/gomega: v1.34.1 → v1.34.2
• github.com/prometheus/client_golang: v1.16.0 → v1.20.3
• github.com/prometheus/client_model: v0.4.0 → v0.6.1
• github.com/prometheus/common: v0.44.0 → v0.59.1
• github.com/prometheus/procfs: v0.10.1 → v0.15.1
• go.etcd.io/etcd/api/v3: v3.5.10 → v3.5.14
• go.etcd.io/etcd/client/pkg/v3: v3.5.10 → v3.5.14
• go.etcd.io/etcd/client/v3: v3.5.10 → v3.5.14
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.46.0 → v0.53.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.46.0 → v0.53.0
• go.opentelemetry.io/otel/metric: v1.28.0 → v1.30.0
• go.opentelemetry.io/otel/sdk: v1.28.0 → v1.30.0
• go.opentelemetry.io/otel/trace: v1.28.0 → v1.30.0
• go.opentelemetry.io/otel: v1.28.0 → v1.30.0
• golang.org/x/crypto: v0.26.0 → v0.27.0
• golang.org/x/oauth2: v0.21.0 → v0.22.0
• golang.org/x/sys: v0.23.0 → v0.25.0
• golang.org/x/term: v0.23.0 → v0.24.0
• golang.org/x/text: v0.17.0 → v0.18.0
• k8s.io/api: v0.31.0 → v0.30.5
• k8s.io/apimachinery: v0.31.0 → v0.30.5
• k8s.io/apiserver: v0.30.4 → v0.30.5
• k8s.io/client-go: v0.31.0 → v0.30.5
• k8s.io/cloud-provider: v0.30.4 → v0.30.5
• k8s.io/component-base: v0.30.4 → v0.30.5
• k8s.io/component-helpers: v0.30.4 → v0.30.5
• k8s.io/controller-manager: v0.30.4 → v0.30.5
• k8s.io/cri-api: v0.30.4 → v0.30.5
• k8s.io/kms: v0.30.4 → v0.30.5
• k8s.io/kubelet: v0.30.4 → v0.30.5
• sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader: v0.0.25 → v0.0.23
• sigs.k8s.io/cloud-provider-azure/pkg/azclient: v0.0.39 → v0.0.55

Removed

• cloud.google.com/go/accessapproval: v1.7.1
• cloud.google.com/go/accesscontextmanager: v1.8.1
• cloud.google.com/go/aiplatform: v1.48.0
• cloud.google.com/go/analytics: v0.21.3
• cloud.google.com/go/apigateway: v1.6.1
• cloud.google.com/go/apigeeconnect: v1.6.1
• cloud.google.com/go/apigeeregistry: v0.7.1
• cloud.google.com/go/appengine: v1.8.1
• cloud.google.com/go/area120: v0.8.1
• cloud.google.com/go/artifactregistry: v1.14.1
• cloud.google.com/go/asset: v1.14.1
• cloud.google.com/go/assuredworkloads: v1.11.1
• cloud.google.com/go/automl: v1.13.1
• cloud.google.com/go/baremetalsolution: v1.1.1
• cloud.google.com/go/batch: v1.3.1
• cloud.google.com/go/beyondcorp: v1.0.0
• cloud.google.com/go/bigquery: v1.53.0
• cloud.google.com/go/billing: v1.16.0
• cloud.google.com/go/binaryauthorization: v1.6.1
• cloud.google.com/go/certificatemanager: v1.7.1
• cloud.google.com/go/channel: v1.16.0
• cloud.google.com/go/cloudbuild: v1.13.0
• cloud.google.com/go/clouddms: v1.6.1
• cloud.google.com/go/cloudtasks: v1.12.1
• cloud.google.com/go/compute: v1.23.0
• cloud.google.com/go/contactcenterinsights: v1.10.0
• cloud.google.com/go/container: v1.24.0
• cloud.google.com/go/containeranalysis: v0.10.1
• cloud.google.com/go/datacatalog: v1.16.0
• cloud.google.com/go/dataflow: v0.9.1
• cloud.google.com/go/dataform: v0.8.1
• cloud.google.com/go/datafusion: v1.7.1
• cloud.google.com/go/datalabeling: v0.8.1
• cloud.google.com/go/dataplex: v1.9.0
• cloud.google.com/go/dataproc/v2: v2.0.1
• cloud.google.com/go/dataqna: v0.8.1
• cloud.google.com/go/datastore: v1.13.0
• cloud.google.com/go/datastream: v1.10.0
• cloud.google.com/go/deploy: v1.13.0
• cloud.google.com/go/dialogflow: v1.40.0
• cloud.google.com/go/dlp: v1.10.1
• cloud.google.com/go/documentai: v1.22.0
• cloud.google.com/go/domains: v0.9.1
• cloud.google.com/go/edgecontainer: v1.1.1
• cloud.google.com/go/errorreporting: v0.3.0
• cloud.google.com/go/essentialcontacts: v1.6.2
• cloud.google.com/go/eventarc: v1.13.0
• cloud.google.com/go/filestore: v1.7.1
• cloud.google.com/go/firestore: v1.12.0
• cloud.google.com/go/functions: v1.15.1
• cloud.google.com/go/gkebackup: v1.3.0
• cloud.google.com/go/gkeconnect: v0.8.1
• cloud.google.com/go/gkehub: v0.14.1
• cloud.google.com/go/gkemulticloud: v1.0.0
• cloud.google.com/go/gsuiteaddons: v1.6.1
• cloud.google.com/go/iam: v1.1.1
• cloud.google.com/go/iap: v1.8.1
• cloud.google.com/go/ids: v1.4.1
• cloud.google.com/go/iot: v1.7.1
• cloud.google.com/go/kms: v1.15.0
• cloud.google.com/go/language: v1.10.1
• cloud.google.com/go/lifesciences: v0.9.1
• cloud.google.com/go/logging: v1.7.0
• cloud.google.com/go/longrunning: v0.5.1
• cloud.google.com/go/managedidentities: v1.6.1
• cloud.google.com/go/maps: v1.4.0
• cloud.google.com/go/mediatranslation: v0.8.1
• cloud.google.com/go/memcache: v1.10.1
• cloud.google.com/go/metastore: v1.12.0
• cloud.google.com/go/monitoring: v1.15.1
• cloud.google.com/go/networkconnectivity: v1.12.1
• cloud.google.com/go/networkmanagement: v1.8.0
• cloud.google.com/go/networksecurity: v0.9.1
• cloud.google.com/go/notebooks: v1.9.1
• cloud.google.com/go/optimization: v1.4.1
• cloud.google.com/go/orchestration: v1.8.1
• cloud.google.com/go/orgpolicy: v1.11.1
• cloud.google.com/go/osconfig: v1.12.1
• cloud.google.com/go/oslogin: v1.10.1
• cloud.google.com/go/phishingprotection: v0.8.1
• cloud.google.com/go/policytroubleshooter: v1.8.0
• cloud.google.com/go/privatecatalog: v0.9.1
• cloud.google.com/go/pubsub: v1.33.0
• cloud.google.com/go/pubsublite: v1.8.1
• cloud.google.com/go/recaptchaenterprise/v2: v2.7.2
• cloud.google.com/go/recommendationengine: v0.8.1
• cloud.google.com/go/recommender: v1.10.1
• cloud.google.com/go/redis: v1.13.1
• cloud.google.com/go/resourcemanager: v1.9.1
• cloud.google.com/go/resourcesettings: v1.6.1
• cloud.google.com/go/retail: v1.14.1
• cloud.google.com/go/run: v1.2.0
• cloud.google.com/go/scheduler: v1.10.1
• cloud.google.com/go/secretmanager: v1.11.1
• cloud.google.com/go/security: v1.15.1
• cloud.google.com/go/securitycenter: v1.23.0
• cloud.google.com/go/servicedirectory: v1.11.0
• cloud.google.com/go/shell: v1.7.1
• cloud.google.com/go/spanner: v1.47.0
• cloud.google.com/go/speech: v1.19.0
• cloud.google.com/go/storagetransfer: v1.10.0
• cloud.google.com/go/talent: v1.6.2
• cloud.google.com/go/texttospeech: v1.7.1
• cloud.google.com/go/tpu: v1.6.1
• cloud.google.com/go/trace: v1.10.1
• cloud.google.com/go/translate: v1.8.2
• cloud.google.com/go/video: v1.19.0
• cloud.google.com/go/videointelligence: v1.11.1
• cloud.google.com/go/vision/v2: v2.7.2
• cloud.google.com/go/vmmigration: v1.7.1
• cloud.google.com/go/vmwareengine: v1.0.0
• cloud.google.com/go/vpcaccess: v1.7.1
• cloud.google.com/go/webrisk: v1.9.1
• cloud.google.com/go/websecurityscanner: v1.6.1
• cloud.google.com/go/workflows: v1.11.1
• cloud.google.com/go: v0.110.7
• gopkg.in/evanphx/json-patch.v4: v4.12.0

v1.29.11

Full Changelog: v1.29.10..v1.29.11

Changes by Kind

Feature

• Consolidate adjacent CIDR ranges for allowed sources (#7045, @zarvd)

Bug or Regression

• Aggregate overlapping allowed source ranges (#6940, @zarvd)

• Fix: Do not move nodes that have already been attached to load balancers after restarting

  When using multislb, the node distribution could be changed after restarting the ccm. This is because the node distribution cache would be lost after restarting. This PR restores the node distribution each time the ccm is restarted. (#7041, @nilo19)

Dependencies

Added

• github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry: v0.2.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/authorization/armauthorization/v2: v2.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/msi/armmsi: v1.2.0
• github.com/klauspost/compress: v1.17.9
• go.opentelemetry.io/otel/exporters/prometheus: v0.52.0
• go.opentelemetry.io/otel/sdk/metric: v1.30.0
• k8s.io/gengo/v2: 51d4e06

Changed

• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v3: v3.0.0 → v3.1.0
• github.com/alecthomas/kingpin/v2: v2.3.2 → v2.4.0
• github.com/davecgh/go-spew: v1.1.1 → d8f796a
• github.com/google/pprof: 813a5fb → fa2c70b
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.20.0 → v2.22.0
• github.com/onsi/ginkgo/v2: v2.20.1 → v2.20.2
• github.com/onsi/gomega: v1.34.1 → v1.34.2
• github.com/pmezard/go-difflib: v1.0.0 → 5d4384e
• github.com/prometheus/client_golang: v1.16.0 → v1.20.3
• github.com/prometheus/client_model: v0.4.0 → v0.6.1
• github.com/prometheus/common: v0.44.0 → v0.59.1
• github.com/prometheus/procfs: v0.10.1 → v0.15.1
• go.etcd.io/etcd/api/v3: v3.5.10 → v3.5.14
• go.etcd.io/etcd/client/pkg/v3: v3.5.10 → v3.5.14
• go.etcd.io/etcd/client/v3: v3.5.10 → v3.5.14
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.46.0 → v0.53.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.46.0 → v0.53.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.28.0 → v1.29.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.28.0 → v1.29.0
• go.opentelemetry.io/otel/metric: v1.29.0 → v1.30.0
• go.opentelemetry.io/otel/sdk: v1.28.0 → v1.30.0
• go.opentelemetry.io/otel/trace: v1.29.0 → v1.30.0
• go.opentelemetry.io/otel: v1.29.0 → v1.30.0
• go.uber.org/zap: v1.19.0 → v1.26.0
• golang.org/x/crypto: v0.26.0 → v0.27.0
• golang.org/x/oauth2: v0.20.0 → v0.22.0
• golang.org/x/sys: v0.24.0 → v0.25.0
• golang.org/x/term: v0.23.0 → v0.24.0
• golang.org/x/text: v0.17.0 → v0.18.0
• google.golang.org/genproto/googleapis/api: f6361c8 → fc7c04a
• google.golang.org/genproto/googleapis/rpc: b1a4ccb → fc7c04a
• k8s.io/api: v0.29.8 → v0.29.9
• k8s.io/apimachinery: v0.29.8 → v0.29.9
• k8s.io/apiserver: v0.29.8 → v0.29.9
• k8s.io/client-go: v0.29.8 → v0.29.9
• k8s.io/cloud-provider: v0.29.8 → v0.29.9
• k8s.io/component-base: v0.29.8 → v0.29.9
• k8s.io/component-helpers: v0.29.8 → v0.29.9
• k8s.io/controller-manager: v0.29.8 → v0.29.9
• k8s.io/cri-api: v0.29.8 → v0.29.9
• k8s.io/klog/v2: v2.110.1 → v2.130.1
• k8s.io/kms: v0.29.8 → v0.29.9
• k8s.io/kube-openapi: 2dd684a → 70dd376
• k8s.io/kubelet: v0.29.8 → v0.29.9
• k8s.io/utils: b307cd5 → 18e509b
• sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader: v0.0.4 → v0.0.5
• sigs.k8s.io/cloud-provider-azure/pkg/azclient: v0.0.43 → v0.0.55

Removed

• cloud.google.com/go/accessapproval: v1.7.1
• cloud.google.com/go/accesscontextmanager: v1.8.1
• cloud.google.com/go/aiplatform: v1.48.0
• cloud.google.com/go/analytics: v0.21.3
• cloud.google.com/go/apigateway: v1.6.1
• cloud.google.com/go/apigeeconnect: v1.6.1
• cloud.google.com/go/apigeeregistry: v0.7.1
• cloud.google.com/go/appengine: v1.8.1
• cloud.google.com/go/area120: v0.8.1
• cloud.google.com/go/artifactregistry: v1.14.1
• cloud.google.com/go/asset: v1.14.1
• cloud.google.com/go/assuredworkloads: v1.11.1
• cloud.google.com/go/automl: v1.13.1
• cloud.google.com/go/baremetalsolution: v1.1.1
• cloud.google.com/go/batch: v1.3.1
• cloud.google.com/go/beyondcorp: v1.0.0
• cloud.google.com/go/bigquery: v1.53.0
• cloud.google.com/go/billing: v1.16.0
• cloud.google.com/go/binaryauthorization: v1.6.1
• cloud.google.com/go/certificatemanager: v1.7.1
• cloud.google.com/go/channel: v1.16.0
• cloud.google.com/go/cloudbuild: v1.13.0
• cloud.google.com/go/clouddms: v1.6.1
• cloud.google.com/go/cloudtasks: v1.12.1
• cloud.google.com/go/compute: v1.23.0
• cloud.google.com/go/contactcenterinsights: v1.10.0
• cloud.google.com/go/container: v1.24.0
• cloud.google.com/go/containeranalysis: v0.10.1
• cloud.google.com/go/datacatalog: v1.16.0
• cloud.google.com/go/dataflow: v0.9.1
• cloud.google.com/go/dataform: v0.8.1
• cloud.google.com/go/datafusion: v1.7.1
• cloud.google.com/go/datalabeling: v0.8.1
• cloud.google.com/go/dataplex: v1.9.0
• cloud.google.com/go/dataproc/v2: v2.0.1
• cloud.google.com/go/dataqna: v0.8.1
• cloud.google.com/go/datastore: v1.13.0
• cloud.google.com/go/datastream: v1.10.0
• cloud.google.com/go/deploy: v1.13.0
• cloud.google.com/go/dialogflow: v1.40.0
• cloud.google.com/go/dlp: v1.10.1
• cloud.google.com/go/documentai: v1.22.0
• cloud.google.com/go/domains: v0.9.1
• cloud.google.com/go/edgecontainer: v1.1.1
• cloud.google.com/go/errorreporting: v0.3.0
• cloud.google.com/go/essentialcontacts: v1.6.2
• cloud.google.com/go/eventarc: v1.13.0
• cloud.google.com/go/filestore: v1.7.1
• cloud.google.com/go/firestore: v1.12.0
• cloud.google.com/go/functions: v1.15.1
• cloud.google.com/go/gkebackup: v1.3.0
• cloud.google.com/go/gkeconnect: v0.8.1
• cloud.google.com/go/gkehub: v0.14.1
• cloud.google.com/go/gkemulticloud: v1.0.0
• cloud.google.com/go/gsuiteaddons: v1.6.1
• cloud.google.com/go/iam: v1.1.1
• cloud.google.com/go/iap: v1.8.1
• cloud.google.com/go/ids: v1.4.1
• cloud.google.com/go/iot: v1.7.1
• cloud.google.com/go/kms: v1.15.0
• cloud.google.com/go/language: v1.10.1
• cloud.google.com/go/lifesciences: v0.9.1
• cloud.google.com/go/logging: v1.7.0
• cloud.google.com/go/longrunning: v0.5.1
• cloud.google.com/go/managedidentities: v1.6.1
• cloud.google.com/go/maps: v1.4.0
• cloud.google.com/go/mediatranslation: v0.8.1
• cloud.google.com/go/memcache: v1.10.1
• cloud.google.com/go/metastore: v1.12.0
• cloud.google.com/go/monitoring: v1.15.1
• cloud.google.com/go/networkconnectivity: v1.12.1
• cloud.google.com/go/networkmanagement: v1.8.0
• cloud.google.com/go/networksecurity: v0.9.1
• cloud.google.com/go/notebooks: v1.9.1
• cloud.google.com/go/optimization: v1.4.1
• cloud.google.com/go/orchestration: v1.8.1
• cloud.google.com/go/orgpolicy: v1.11.1
• cloud.google.com/go/osconfig: v1.12.1
• cloud.google.com/go/oslogin: v1.10.1
• cloud.google.com/go/phishingprotection: v0.8.1
• cloud.google.com/go/policytroubleshooter: v1.8.0
• cloud.google.com/go/privatecatalog: v0.9.1
• cloud.google.com/go/pubsub: v1.33.0
• cloud.google.com/go/pubsublite: v1.8.1
• cloud.google.com/go/recaptchaenterprise/v2: v2.7.2
• cloud.google.com/go/recommendationengine: v0.8.1
• cloud.google.com/go/recommender: v1.10.1
• cloud.google.com/go/redis: v1.13.1
• cloud.google.com/go/resourcemanager: v1.9.1
• cloud.google.com/go/resourcesettings: v1.6.1
• cloud.google.com/go/retail: v1.14.1
• cloud.google.com/go/run: v1.2.0
• cloud.google.com/go/scheduler: v1.10.1
• cloud.google.com/go/secretmanager: v1.11.1
• cloud.google.com/go/security: v1.15.1
• cloud.google.com/go/securitycenter: v1.23.0
• cloud.google.com/go/servicedirectory: v1.11.0
• cloud.google.com/go/shell: v1.7.1
• cloud.google.com/go/spanner: v1.47.0
• cloud.google.com/go/speech: v1.19.0
• cloud.google.com/go/storagetransfer: v1.10.0
• cloud.google.com/go/talent: v1.6.2
• cloud.google.com/go/texttospeech: v1.7.1
• cloud.google.com/go/tpu: v1.6.1
• cloud.google.com/go/trace: v1.10.1
• cloud.google.com/go/translate: v1.8.2
• cloud.google.com/go/video: v1.19.0
• cloud.google.com/go/videointelligence: v1.11.1
• cloud.google.com/go/vision/v2: v2.7.2
• cloud.google.com/go/vmmigration: v1.7.1
• cloud.google.com/go/vmwareengine: v1.0.0
• cloud.google.com/go/vpcaccess: v1.7.1
• cloud.google.com/go/webrisk: v1.9.1
• cloud.google.com/go/websecurityscanner: v1.6.1
• cloud.google.com/go/work...

v1.28.13

Full Changelog: v1.28.12..v1.28.13

Changes by Kind

Bug or Regression

• Fix: Do not move nodes that have already been attached to load balancers after restarting

  When using multislb, the node distribution could be changed after restarting the ccm. This is because the node distribution cache would be lost after restarting. This PR restores the node distribution each time the ccm is restarted. (#7042, @nilo19)

Dependencies

Added

Nothing has changed.

Changed

• github.com/google/pprof: 813a5fb → fa2c70b
• github.com/onsi/ginkgo/v2: v2.20.1 → v2.20.2
• github.com/onsi/gomega: v1.34.1 → v1.34.2
• golang.org/x/sys: v0.24.0 → v0.25.0
• golang.org/x/text: v0.17.0 → v0.18.0
• k8s.io/api: v0.28.13 → v0.28.14
• k8s.io/apimachinery: v0.28.13 → v0.28.14
• k8s.io/apiserver: v0.28.13 → v0.28.14
• k8s.io/client-go: v0.28.13 → v0.28.14
• k8s.io/cloud-provider: v0.28.13 → v0.28.14
• k8s.io/component-base: v0.28.13 → v0.28.14
• k8s.io/component-helpers: v0.28.13 → v0.28.14
• k8s.io/controller-manager: v0.28.13 → v0.28.14
• k8s.io/cri-api: v0.28.13 → v0.28.14
• k8s.io/kms: v0.28.13 → v0.28.14
• k8s.io/kubelet: v0.28.13 → v0.28.14

Removed

Nothing has changed.

v1.27.21

Full Changelog: v1.27.20..v1.27.21

Dependencies

Added

Nothing has changed.

Changed

• github.com/google/pprof: a892ee0 → fa2c70b
• github.com/onsi/ginkgo/v2: v2.19.1 → v2.20.2
• github.com/onsi/gomega: v1.34.1 → v1.34.2
• golang.org/x/crypto: v0.25.0 → v0.26.0
• golang.org/x/mod: v0.19.0 → v0.20.0
• golang.org/x/net: v0.27.0 → v0.28.0
• golang.org/x/sync: v0.7.0 → v0.8.0
• golang.org/x/term: v0.22.0 → v0.23.0
• golang.org/x/text: v0.16.0 → v0.17.0
• golang.org/x/tools: v0.23.0 → v0.24.0

Removed

• github.com/chromedp/cdproto: 3cf4e6d
• github.com/chromedp/chromedp: v0.9.2
• github.com/chromedp/sysutil: v1.0.0
• github.com/gobwas/httphead: v0.1.0
• github.com/gobwas/pool: v0.2.1
• github.com/gobwas/ws: v1.2.1