v1.29.4

Full Changelog: v1.29.3..v1.29.4

Changes by Kind

Bug or Regression

• Allow space-separated load balancer source ranges in service annotation. Allow service.beta.kubernetes.io/load-balancer-source-ranges to be used together with service.beta.kubernetes.io/azure-allowed-service-tags. (#5887, @k8s-infra-cherrypick-robot)
• Fix cleaning legacy security rules while upgrading from versions that are 1.28 or older. (#5918, @k8s-infra-cherrypick-robot)
• Fix: Retry put vmss vm on preempted error (#5921, @k8s-infra-cherrypick-robot)
• Force cache refresh for getVMManagementTypeByIPConfigurationID(). The reason is that when a new standalone VM is included in the cluster, CCM cannot tell its VM type with stale cache. (#5970, @k8s-infra-cherrypick-robot)

Dependencies

Added

• github.com/Azure/azure-sdk-for-go/sdk/keyvault/azsecrets: v0.12.0
• github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal: v0.7.1
• github.com/golang-jwt/jwt: v3.2.1+incompatible
• github.com/modocache/gover: b58185e

Changed

• github.com/Azure/azure-kusto-go: v0.15.1 → v0.15.2
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.10.0 → v1.11.1
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.5.1 → v1.5.2
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.2.1 → v1.2.2
• github.com/golang-jwt/jwt/v5: v5.2.0 → v5.2.1
• github.com/onsi/ginkgo/v2: v2.17.0 → v2.17.1
• golang.org/x/crypto: v0.21.0 → v0.22.0
• golang.org/x/net: v0.21.0 → v0.24.0
• golang.org/x/sync: v0.6.0 → v0.7.0
• golang.org/x/sys: v0.18.0 → v0.19.0
• golang.org/x/term: v0.18.0 → v0.19.0
• k8s.io/api: v0.29.3 → v0.29.4
• k8s.io/apimachinery: v0.29.3 → v0.29.4
• k8s.io/apiserver: v0.29.3 → v0.29.4
• k8s.io/client-go: v0.29.3 → v0.29.4
• k8s.io/cloud-provider: v0.29.3 → v0.29.4
• k8s.io/component-base: v0.29.3 → v0.29.4
• k8s.io/component-helpers: v0.29.3 → v0.29.4
• k8s.io/controller-manager: v0.29.3 → v0.29.4
• k8s.io/cri-api: v0.29.3 → v0.29.4
• k8s.io/kms: v0.29.3 → v0.29.4
• k8s.io/kubelet: v0.29.3 → v0.29.4
• sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader: v0.0.1 → v0.0.4
• sigs.k8s.io/cloud-provider-azure/pkg/azclient: v0.0.4 → v0.0.13

Removed

Nothing has changed.

v1.28.9

Full Changelog: v1.28.8..v1.28.9

Changes by Kind

Bug or Regression

• Allow space-separated load balancer source ranges in service annotation. Allow service.beta.kubernetes.io/load-balancer-source-ranges to be used together with service.beta.kubernetes.io/azure-allowed-service-tags. (#5893, @jwtty)
• Fix: Retry put vmss vm on preempted error (#5966, @nilo19)
• Force cache refresh for getVMManagementTypeByIPConfigurationID(). The reason is that when a new standalone VM is included in the cluster, CCM cannot tell its VM type with stale cache. (#5971, @k8s-infra-cherrypick-robot)

Dependencies

Added

Nothing has changed.

Changed

• github.com/Azure/azure-kusto-go: v0.15.1 → v0.15.2
• github.com/onsi/gomega: v1.32.0 → v1.33.0
• golang.org/x/crypto: v0.21.0 → v0.22.0
• golang.org/x/net: v0.21.0 → v0.24.0
• golang.org/x/sync: v0.6.0 → v0.7.0
• golang.org/x/sys: v0.18.0 → v0.19.0
• golang.org/x/term: v0.18.0 → v0.19.0
• k8s.io/api: v0.28.8 → v0.28.9
• k8s.io/apimachinery: v0.28.8 → v0.28.9
• k8s.io/apiserver: v0.28.8 → v0.28.9
• k8s.io/client-go: v0.28.8 → v0.28.9
• k8s.io/cloud-provider: v0.28.8 → v0.28.9
• k8s.io/component-base: v0.28.8 → v0.28.9
• k8s.io/component-helpers: v0.28.8 → v0.28.9
• k8s.io/controller-manager: v0.28.8 → v0.28.9
• k8s.io/cri-api: v0.28.8 → v0.28.9
• k8s.io/kms: v0.28.8 → v0.28.9
• k8s.io/kubelet: v0.28.8 → v0.28.9

Removed

Nothing has changed.

v1.27.17

Full Changelog: v1.27.16..v1.27.17

Changes by Kind

Bug or Regression

• Allow space-separated load balancer source ranges in service annotation. Allow service.beta.kubernetes.io/load-balancer-source-ranges to be used together with service.beta.kubernetes.io/azure-allowed-service-tags. (#5894, @jwtty)
• Fix: Retry put vmss vm on preempted error (#5925, @nilo19)
• Force cache refresh for getVMManagementTypeByIPConfigurationID(). The reason is that when a new standalone VM is included in the cluster, CCM cannot tell its VM type with stale cache. (#5972, @k8s-infra-cherrypick-robot)

Dependencies

Added

Nothing has changed.

Changed

• github.com/onsi/gomega: v1.32.0 → v1.33.0
• golang.org/x/crypto: v0.21.0 → v0.22.0
• golang.org/x/net: v0.21.0 → v0.24.0
• golang.org/x/sync: v0.6.0 → v0.7.0
• golang.org/x/sys: v0.18.0 → v0.19.0
• golang.org/x/term: v0.18.0 → v0.19.0
• k8s.io/api: v0.27.12 → v0.27.13
• k8s.io/apimachinery: v0.27.12 → v0.27.13
• k8s.io/apiserver: v0.27.12 → v0.27.13
• k8s.io/client-go: v0.27.12 → v0.27.13
• k8s.io/cloud-provider: v0.27.12 → v0.27.13
• k8s.io/component-base: v0.27.12 → v0.27.13
• k8s.io/component-helpers: v0.27.12 → v0.27.13
• k8s.io/controller-manager: v0.27.12 → v0.27.13
• k8s.io/kms: v0.27.12 → v0.27.13
• k8s.io/kubelet: v0.27.12 → v0.27.13

Removed

Nothing has changed.

v1.29.3

Full Changelog: v1.29.2..v1.29.3

Changes by Kind

Feature

• When user-provided LoadBalancerSourceRanges or azure-allowed-ip-ranges are not valid network prefixes, cloud-controller-manager skips these invalid ranges, emits a warning event, and adds a deny-All rule in nsg. (#5749, @k8s-infra-cherrypick-robot)

Bug or Regression

• For dual-stack Windows case, both ipv4 and ipv6 ip address are provided and separated by comma in a string. This change is to split the ipv4 and ipv6 addresses and check whether all these provided IPs exist in the cloud provider. (#5759, @k8s-infra-cherrypick-robot)

Dependencies

Added

Nothing has changed.

Changed

• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5: v5.5.0 → v5.6.0
• github.com/onsi/gomega: v1.31.1 → v1.32.0
• gopkg.in/dnaeon/go-vcr.v3: v3.1.2 → v3.2.0
• sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader: ba9f211 → v0.0.1
• sigs.k8s.io/cloud-provider-azure/pkg/azclient: ba9f211 → v0.0.2

Removed

Nothing has changed.

v1.28.8

Full Changelog: v1.28.7..v1.28.8

Changes by Kind

Feature

• When user-provided LoadBalancerSourceRanges or azure-allowed-ip-ranges are not valid network prefixes, cloud-controller-manager skips these invalid ranges, emits a warning event, and adds a deny-All rule in nsg. (#5751, @jwtty)

Bug or Regression

• Fix NSG DenyAll rule priority (#5763, @lodrem)

Dependencies

Added

Nothing has changed.

Changed

• github.com/onsi/ginkgo/v2: v2.16.0 → v2.17.0

Removed

Nothing has changed.

v1.27.16

Full Changelog: v1.27.15..v1.27.16

Changes by Kind

Feature

• When user-provided LoadBalancerSourceRanges or azure-allowed-ip-ranges are not valid network prefixes, cloud-controller-manager skips these invalid ranges, emits a warning event, and adds a deny-All rule in nsg. (#5752, @jwtty)

Bug or Regression

• Fix NSG DenyAll rule priority (#5765, @lodrem)

Dependencies

Added

Nothing has changed.

Changed

• github.com/onsi/gomega: v1.31.1 → v1.32.0

Removed

Nothing has changed.

v1.26.22

Full Changelog: v1.26.21..v1.26.22

Changes by Kind

Feature

• When user-provided LoadBalancerSourceRanges or azure-allowed-ip-ranges are not valid network prefixes, cloud-controller-manager skips these invalid ranges, emits a warning event, and adds a deny-All rule in nsg. (#5753, @jwtty)

Bug or Regression

• Fix NSG DenyAll rule priority (#5764, @lodrem)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v1.29.2

Full Changelog: v1.29.1..v1.29.2

Changes by Kind

Feature

• Add support of service principal with cert auth for multi tenant scenario (#5595, @k8s-infra-cherrypick-robot)

Bug or Regression

• Fix: nfs file share created in storage account that has smb file share (#5634, @k8s-infra-cherrypick-robot)

Dependencies

Added

Nothing has changed.

Changed

• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.9.2 → v1.10.0
• github.com/golang/protobuf: v1.5.3 → v1.5.4
• golang.org/x/crypto: v0.20.0 → v0.21.0
• golang.org/x/term: v0.17.0 → v0.18.0
• google.golang.org/protobuf: v1.31.0 → v1.33.0
• k8s.io/api: v0.29.2 → v0.29.3
• k8s.io/apimachinery: v0.29.2 → v0.29.3
• k8s.io/apiserver: v0.29.2 → v0.29.3
• k8s.io/client-go: v0.29.2 → v0.29.3
• k8s.io/cloud-provider: v0.29.2 → v0.29.3
• k8s.io/component-base: v0.29.2 → v0.29.3
• k8s.io/component-helpers: v0.29.2 → v0.29.3
• k8s.io/controller-manager: v0.29.2 → v0.29.3
• k8s.io/cri-api: v0.29.2 → v0.29.3
• k8s.io/kms: v0.29.2 → v0.29.3
• k8s.io/kubelet: v0.29.2 → v0.29.3

Removed

Nothing has changed.

v1.28.7

Full Changelog: v1.28.6..v1.28.7

Changes by Kind

Feature

• Add support of service principal with cert auth for multi tenant scenario (#5596, @k8s-infra-cherrypick-robot)

Bug or Regression

• Fix: nfs file share created in storage account that has smb file share (#5635, @k8s-infra-cherrypick-robot)

Dependencies

Added

Nothing has changed.

Changed

• github.com/Azure/azure-kusto-go: v0.15.0 → v0.15.1
• github.com/golang/protobuf: v1.5.3 → v1.5.4
• github.com/onsi/ginkgo/v2: v2.15.0 → v2.16.0
• github.com/stretchr/objx: v0.5.0 → v0.5.2
• github.com/stretchr/testify: v1.8.4 → v1.9.0
• golang.org/x/tools: v0.16.1 → v0.17.0
• google.golang.org/protobuf: v1.31.0 → v1.33.0
• k8s.io/api: v0.28.7 → v0.28.8
• k8s.io/apimachinery: v0.28.7 → v0.28.8
• k8s.io/apiserver: v0.28.7 → v0.28.8
• k8s.io/client-go: v0.28.7 → v0.28.8
• k8s.io/cloud-provider: v0.28.7 → v0.28.8
• k8s.io/component-base: v0.28.7 → v0.28.8
• k8s.io/component-helpers: v0.28.7 → v0.28.8
• k8s.io/controller-manager: v0.28.7 → v0.28.8
• k8s.io/cri-api: v0.28.7 → v0.28.8
• k8s.io/kms: v0.28.7 → v0.28.8
• k8s.io/kubelet: v0.28.7 → v0.28.8

Removed

Nothing has changed.

v1.27.15

Full Changelog: v1.27.14..v1.27.15

Changes by Kind

Feature

• Add support of service principal with cert auth for multi tenant scenario (#5597, @k8s-infra-cherrypick-robot)

Dependencies

Added

Nothing has changed.

Changed

• github.com/golang/protobuf: v1.5.3 → v1.5.4
• google.golang.org/protobuf: v1.31.0 → v1.33.0
• k8s.io/api: v0.27.11 → v0.27.12
• k8s.io/apimachinery: v0.27.11 → v0.27.12
• k8s.io/apiserver: v0.27.11 → v0.27.12
• k8s.io/client-go: v0.27.11 → v0.27.12
• k8s.io/cloud-provider: v0.27.11 → v0.27.12
• k8s.io/component-base: v0.27.11 → v0.27.12
• k8s.io/component-helpers: v0.27.11 → v0.27.12
• k8s.io/controller-manager: v0.27.11 → v0.27.12
• k8s.io/kms: v0.27.11 → v0.27.12
• k8s.io/kubelet: v0.27.11 → v0.27.12

Removed

Nothing has changed.