Azure Container Services Docs – Weekly Update (2026-01-25 to 2026-02-01)
The most meaningful Azure Kubernetes Service, Container Registry, Application Gateway for Containers, and Fleet Manager documentation changes from the last 7 days. Summaries are AI-filtered to skip trivial edits.
📊 Updates this week: AGC (3), AKS (118), Fleet (9)
|
||
| Security 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary This document introduces the concepts of data encryption at rest for Kubernetes secrets in Azure Kubernetes Service (AKS) using Azure Key Vault and the KMS provider. It provides essential information for securing sensitive data within AKS clusters. |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for Azure CNI Overlay in AKS has been updated to clarify the setup process and improve consistency in terminology. Users can now find clearer instructions on creating dual-stack AKS clusters and using specific commands, such as `az aks create` and `az aks nodepool add`, with updated descriptions for parameters like `–pod-cidr` and `–service-cidrs`. Additionally, the article now… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes updated retirement notices for Windows Server 2019 and Windows Server 2022, detailing their respective end-of-life dates and the implications for AKS users. Users will need to be aware that after March 1, 2026, and March 15, 2027, they will no longer be able to create new node pools with these versions, and existing node pools will become unsupported, affecting scali… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes a warning about the retirement of the Open Service Mesh (OSM) add-on for AKS, effective September 30, 2027. Users are advised to identify any existing OSM configurations and migrate them to equivalent Istio configurations, with a link provided for migration guidance. This change emphasizes the need for users to take action regarding their OSM setups before the retire… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for configuring the Kubernetes Gateway API for the Istio service mesh add-on in Azure Kubernetes Service (AKS) has been updated to clarify the setup process and enhance user understanding. Users can now find detailed instructions on enabling the Managed Gateway API, installing the Istio service mesh add-on, and configuring ingress traffic management using both automated and manua… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for configuring the AKS scheduler has been updated to clarify the global parameters for the scheduling profiles **scheduler-one** and **scheduler-two**. Users can now better understand how **scheduler-one** enforces strict zonal distribution and honors pod affinity rules, while **scheduler-two** focuses on resource-efficient placement based on available storage, CPU, and memory,… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes a dedicated section for deploying infrastructure with Terraform, emphasizing the use of the Azure Verified Module for AKS. Users are advised to consider the AKS production pattern module for best practices when deploying in production. Additionally, the steps for creating a Terraform variables file and deploying the infrastructure have been clarified, enhancing user… |
||
|
|
||
| General 🗑️ Removal Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now clarifies that when using cluster autoupgrade, users can no longer upgrade the control plane separately from the node pools; both will be upgraded together. Additionally, it emphasizes that users must select appropriate autoupgrade channels to ensure their clusters remain within the AKS support window, and it provides specific error messages that will occur if the `az aks upg… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation has been updated to clarify the prerequisites for viewing Kubernetes resources in the Azure portal, emphasizing the need for an AKS cluster and the requirement for AKS-managed Microsoft Entra integration if applicable. Additionally, users are now guided on how to configure authorized IP ranges to enable access to the Kubernetes resource view, including specific Azure CLI and Powe… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now specifies that B series VMs are not supported for system node pools, and Av1 series VMs are not recommended. This change clarifies the limitations on VM sizes for users, ensuring they can make informed decisions when configuring their system node pools to reliably schedule *kube-system* pods and applications. |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for AKS desktop has been updated to clarify its application-focused experience for deploying and managing workloads on Azure Kubernetes Service (AKS), emphasizing its ability to accelerate time to business value. Users can now benefit from simplified application deployment through a guided wizard, automatic generation of Kubernetes manifests, and an application-centric management… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for updating the Key Vault mode for an Azure Kubernetes Service (AKS) cluster with KMS etcd encryption has been updated to indicate that the command may produce a specific error message, which users can safely ignore. Additionally, the title has been modified to reflect that this is the legacy method for updating the Key Vault mode. |
||
|
|
||
| General ✨ Update Modified: 2026-01-30 06:02 | ||
|
Summary The documentation now explicitly states that Windows 2019 nodes are not supported in the Azure CNI Pod Subnet, providing clarity for users regarding compatibility limitations. This update ensures that users are aware of this restriction when planning their deployments. |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation has been updated to reflect the legacy status of the "Observability for Azure Kubernetes Service (AKS) Clusters with Key Management Service (KMS) Etcd Encryption" section. Users can now find guidance on migrating to KMS v2 for etcd encryption in AKS, which may impact their implementation strategies. Additionally, the title has been modified to indicate its legacy status, signalin… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes a warning about the retirement of the Open Service Mesh (OSM) add-on for AKS, effective September 30, 2027. Users are advised to identify existing OSM configurations and migrate them to equivalent Istio configurations, with migration steps provided in the linked guidance. This change emphasizes the need for users to transition away from OSM in preparation for its ret… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now emphasizes the recommendation to use a single node pool for each availability zone when implementing the Cluster Autoscaler in AKS. Users can set the `–balance-similar-node-groups` parameter to `True` to ensure a balanced distribution of nodes across zones during scale-up operations, which helps prevent pods from remaining in a pending state. Additionally, it clarifies that… |
||
|
|
||
| General 🆕 New Modified: 2026-01-30 23:07 | ||
|
Summary The documentation has been updated to clarify the configuration options for the Azure Key Vault provider for the Secrets Store CSI Driver in Azure Kubernetes Service (AKS). Users can now enable and customize autorotation of secrets, sync mounted content with Kubernetes secrets, and access metrics more effectively. Additionally, specific commands for enabling autorotation on both new and existing A… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now clarifies that users can expand the pod Classless Inter-Domain Routing (CIDR) space on Azure CNI Overlay AKS clusters with Linux nodes using the `az aks update` command, without needing to recreate the cluster. Additionally, the requirements and parameters section has been updated for clarity, ensuring users understand that pod CIDR expansion is only supported on Azure CNI Ov… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes a standardized notice regarding the retirement of Open Service Mesh (OSM) by the Cloud Native Computing Foundation (CNCF). Users are advised to identify their OSM configurations and migrate them to equivalent Istio configurations, with a reference to the migration guidance for assistance. This change ensures that users are consistently informed about the retirement a… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes a prominent notice regarding the retirement of the Basic Load Balancer on September 30, 2025. Users are advised to transition to the Standard Load Balancer for new deployments and to upgrade existing deployments accordingly, with links provided for further guidance on the upgrade process. This change emphasizes the importance of planning for the upcoming retirement t… |
||
|
|
||
| General 🗑️ Removal Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now clarifies that starting on November 30, 2025, Azure Kubernetes Service (AKS) will no longer support or provide security updates for Azure Linux 2.0, with node images being frozen at the 202512.06.0 release. Users are advised to migrate to a supported Azure Linux version by upgrading their node pools or migrating to osSku AzureLinux3, as node images will be removed on March 31… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for deploying a Valkey cluster on Azure Kubernetes Service (AKS) has been updated to replace the term "slave" with "replica" for clarity and alignment with Microsoft’s terminology standards. Additionally, users are now instructed to export the secret variable using `export SECRET=$(openssl rand -base64 32)` instead of just defining it, enhancing the clarity of the setup process.… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now clarifies that when using Microsoft Entra authentication with Kubernetes RBAC, the output value for `enableAzureRbac` will be `false`, rather than just stating it is `false`. Additionally, it emphasizes that the role name specified must exactly match the Azure role definition name, including capitalization and spacing. The references to Azure AD have been updated to Microsoft… |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary Updates content with clarifications and improvements. |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for controlling egress traffic in Azure Kubernetes Service (AKS) has been updated to include a new section on "Firewall frontend IP requirements," which outlines the minimum number of frontend IPs needed for production scenarios and high-traffic clusters to prevent SNAT port exhaustion. Additionally, the article now emphasizes the importance of adding the firewall’s public fronte… |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary Updates content with clarifications and improvements. |
||
|
|
||
| General 🆕 New Modified: 2026-01-30 16:50 | ||
|
Summary The documentation has been updated to reflect the new version 1.9.11 of the Application Gateway for Containers. Users should now reference this version in their commands instead of the previous version 1.8.12, ensuring they are utilizing the latest features and improvements available in the application gateway. |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 23:08 | ||
|
Summary The documentation for LocalDNS in Azure Kubernetes Service (AKS) has been updated to clarify the functionality of the `Preferred` mode, which now explicitly states that it validates LocalDNS configuration syntax without enabling LocalDNS, allowing users to catch errors early without impacting their cluster. Additionally, the section on updating VNet DNS servers emphasizes that changes made at the… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for the Custom Certificate Authority (CA) in Azure Kubernetes Service (AKS) has been updated to clarify that the custom CA feature adds certificates to the trust store of the AKS node, but these certificates are not available to containers running in pods. Additionally, the instructions for passing custom CAs to the AKS cluster have been refined, specifying the use of `<path-to-c… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now specifies that the default values for `net.netfilter.nf_conntrack_max` and `net.netfilter.nf_conntrack_buckets` are dynamically calculated based on system memory, providing users with a clearer understanding of how these parameters adjust according to their VM size. Additionally, the `kernel.threads-max` parameter’s default value is also dynamically calculated, enhancing user… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes a dedicated section on "Update cluster considerations," which outlines important information users should keep in mind when updating their AKS clusters. Specifically, it emphasizes the need to run the `az aks update –resource-group <resource-group-name> –name <aks-cluster-name> –attach-acr <acr-resource-id>` command if the cluster was previously using `–attach-ac… |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary Updates content with clarifications and improvements. |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now clarifies that after March 31, 2026, new AKS clusters using the AKS-managed virtual network option will default to placing cluster subnets into private subnets, with `defaultOutboundAccess` set to false. This change does not affect AKS-managed cluster traffic but may impact unsupported scenarios, such as deploying other resources like VMs into the same subnet. Additionally, c… |
||
|
|
||
| General 🆕 New Modified: 2026-01-29 23:05 | ||
|
Summary The documentation for the seccomp-profile section has been updated to direct users to the new "Overview of default seccomp profiles (preview)" instead of the previous "Secure computing seccomp" section. This change provides users with more relevant information regarding default seccomp profiles in Azure Kubernetes Service. |
||
|
|
||
| Networking 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now clarifies that after March 31, 2026, new AKS clusters using the AKS-managed virtual network option will default to placing cluster subnets into private subnets (`defaultOutboundAccess = false`). This change does not affect AKS-managed cluster traffic but may impact unsupported scenarios, such as deploying other resources like VMs into the same subnet. Additionally, clusters u… |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary Updates content with clarifications and improvements. |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes an important notice regarding the retirement of the Basic Load Balancer on September 30, 2025. Users are advised to upgrade to the Standard Load Balancer before this date, with links provided for further guidance. Additionally, broken links have been fixed to ensure users have access to the most accurate information. |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now specifies that starting with AKS 1.33 and Istio add-on `asm-1-29`, the AKS service mesh add-on uses native sidecar for the Envoy proxy by default for all clusters, whereas prior to `asm-1-29`, this behavior depended on the cluster version and add-on revision. Additionally, users are advised to review the updated table on default behavior to ensure their revision meets the nec… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-30 23:07 | ||
|
Summary The documentation now instructs users to check the YAML for a specific pod to verify the security context, replacing the previous command that suggested using `kubectl describe`. Additionally, the security context for the `istio-validation` init container has been updated to include `readOnlyRootFilesystem: true` and `privileged: false`, enhancing security. Users can also see that the security con… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes updated include statements for the retirement notices of Windows Server 2019 and Windows Server 2022, consolidating important information into separate files. Users can find clearer and more organized details regarding the retirement timelines and implications for node pools, including the cessation of support and the removal of node images, which will help them bett… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-29 23:05 | ||
|
Summary The documentation for securing container access in Azure Kubernetes Service (AKS) has been updated to clarify the use of built-in Linux security features such as user namespaces, AppArmor, and seccomp. Users can now learn how to implement these features to enhance security by limiting container actions and defining permissions through Kubernetes pod security contexts. Additionally, the prerequisit… |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary Updates content with clarifications and improvements. |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now reflects updated expected release timelines and supported versions for the Azure Service Mesh (ASM) policy. Users can see that the expected end-of-life for asm-1-25 has been clarified to January 2026, and asm-1-27 now includes support for version 1.35, enhancing the compatibility options for users managing their Istio deployments. |
||
|
|
||
| Operations 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes updated retirement notices for Windows Server 2019 and Windows Server 2022, highlighting critical dates and implications for AKS users. Specifically, users are informed that after March 1, 2026, Windows Server 2019 will no longer receive new node images or security patches, and after March 15, 2027, the same will apply to Windows Server 2022. This means users will be… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for the Managed Gateway API Installation for Azure Kubernetes Service (AKS) has been updated to clarify that users must have at least one implementation of the Gateway API, such as the Istio add-on, installed and enabled on their cluster. Additionally, the commands for installing and uninstalling the Managed Gateway API Custom Resource Definitions (CRDs) have been refined for cla… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes important retirement notices for the AKS GPU image, which will no longer be available for creating new GPU-enabled node pools starting January 10, 2025. Users are advised to migrate to the default GPU configuration as the GPU image will not be supported. Additionally, the `–skip-gpu-driver-install` node pool tag will be retired on August 14, 2025, and users must use… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for setting up permissions and role-based access control (RBAC) in AKS desktop has been updated to clarify user responsibilities and required permissions for both cluster operators and developers. Users can now better understand the specific roles needed, such as the **Azure Kubernetes Service Cluster User Role** and **Azure Kubernetes Service Namespace User**, to effectively man… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now clarifies that users should select **Infrastructure Services** instead of **Containers** when navigating to Azure Kubernetes Service (AKS) in the portal. Additionally, users can now change the preset configuration during cluster creation by selecting **Compare presets**, providing more flexibility in cluster setup. The recommended VM size for node pools has been updated to **… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now clarifies that users cannot enable the Istio add-on on an existing cluster if the Open Service Mesh (OSM) add-on is already installed. Users must uninstall the OSM add-on before proceeding with the installation of the Istio add-on. This change enhances understanding of the prerequisites for enabling Istio in a cluster environment. |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes updated retirement notices for Ubuntu OS versions used in AKS. Specifically, it states that starting March 17, 2027, AKS will no longer support Ubuntu 20.04, and users must upgrade their node pools to Kubernetes version 1.35 or higher to migrate to a supported Ubuntu version. Additionally, there is a new inclusion regarding the retirement of Ubuntu 22.04, providing u… |
||
|
|
||
| Compute 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes important retirement notices for Ubuntu 22.04, Azure Linux 2.0, Windows Server 2019, and Windows Server 2022, informing users of the upcoming deprecation of these operating systems in Azure Kubernetes Service (AKS). Users are advised to migrate to supported versions to avoid losing security updates and the ability to scale their node pools, with specific deadlines ou… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now emphasizes the upcoming retirement of the Basic Load Balancer on September 30, 2025, and instructs users to migrate their workloads to a new cluster using the Standard Load Balancer SKU before this date. It clarifies that there is no option to migrate the Load Balancer SKU via the Azure AKS API, making it essential for users to decide on the SKU at the time of cluster creatio… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes a standardized retirement notice for Availability Sets in Azure Kubernetes Service (AKS), emphasizing that support will be fully deprecated by September 30, 2025. Users are advised to migrate all workloads from Virtual Machine Availability Sets (VMAS) to Virtual Machine Node Pools to ensure continued support after this date. |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 23:08 | ||
|
Summary The documentation now specifies that AKS requires Windows Server containers to be based on images of Windows Server 2022 or greater, updating from the previous requirement of Windows Server 2019. Additionally, the example output for a valid public IP address assigned to the service has been clarified to indicate that `<public-ip-address>` should be replaced with an actual IP address. Users should… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes updated retirement notices for Windows Server 2019 and Windows Server 2022, detailing their respective end-of-life dates and the implications for AKS users. Users will be informed that after these dates, they will no longer be able to create new node pools with these Windows Server versions, and existing node pools will become unsupported, affecting scaling operation… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for Azure Kubernetes Service (AKS) has been updated to clarify the features and usage of the Free, Standard, and Premium pricing tiers. Users can now find detailed instructions on how to create and update AKS clusters using the Azure CLI, including specific commands for each tier and the requirement to enable Long Term Support when using the Premium tier. Additionally, the articl… |
||
|
|
||
| General 🆕 New Modified: 2026-01-29 18:13 | ||
|
Summary The documentation now includes a new section on how to exclude a node pool from the Load Balancer backend pool by applying the label `node.kubernetes.io/exclude-from-external-load-balancers=true`. Users can follow the provided Azure CLI command to update their node pool accordingly. Additionally, the note clarifies that while the label is applied to individual nodes, it should be set at the node p… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes a warning about the retirement of the Open Service Mesh (OSM) add-on for AKS, effective September 30, 2027. Users are advised to identify any existing OSM configurations and migrate them to equivalent Istio configurations, with migration steps provided in the linked guidance. This change emphasizes the need for users to transition away from OSM in light of its retire… |
||
|
|
||
| Compute ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now clarifies that multi-instance GPU node pools are not supported on Azure Linux, providing users with important information regarding compatibility. This update helps users avoid potential issues when planning their GPU deployments on Azure. |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now clarifies that when a resource update fails on a cluster, Fleet Manager will continue to retry the update and mark the cluster status as "stuck" after approximately five minutes, instead of aborting the entire update run. Additionally, it outlines multiple reasons for an update run to abort, including mismatched binding specs, validation failures, and changes in cluster label… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for the API server authorized IP ranges in Azure Kubernetes Service (AKS) has been updated to clarify that users can now specify up to 200 authorized IP ranges, with the option to use API Server VNet Integration for up to 2,000 ranges. Additionally, the prerequisites section now emphasizes the need for Azure CLI version 2.0.76 or later, and the limitations section has been expand… |
||
|
|
||
| General ✨ Update Modified: 2026-01-30 16:50 | ||
|
Summary The documentation now reflects that the Application Gateway for Containers supports version 1.9.11 of Istio, updating from the previous version 1.8.12. Additionally, it reiterates that only the community/open source version of Istio is supported, and the Istio-based service mesh add-on for AKS remains unsupported. Users should take note of these version changes when configuring their service mesh… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for using external identity providers with AKS structured authentication has been updated to clarify that Microsoft Entra ID is not supported as an external identity provider through structured authentication, directing users to use the existing AKS-managed Microsoft Entra integration instead. Additionally, the section on identity provider requirements now emphasizes the need for… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes updated retirement notices for Windows Server 2019 and Windows Server 2022, indicating that after their respective retirement dates, AKS will no longer produce new node images or provide security patches for these versions. Users will not be able to create new node pools with these Windows Server versions on any Kubernetes version, and existing node pools will become… |
||
|
|
||
| Operations 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes a new section on the AKS audit policy, detailing how it controls event logging for various API requests based on users, resources, namespaces, and verbs. Users can now understand the different audit levels—None, Metadata, Request, and RequestResponse—and see specific examples of events logged at each level, enhancing their ability to monitor and manage security and p… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes a warning about the retirement of the Open Service Mesh (OSM) add-on for AKS, effective September 30, 2027. Users are advised to identify existing OSM configurations and migrate them to equivalent Istio configurations, with migration steps provided in the linked guidance. This change emphasizes the need for users to transition away from OSM as it is no longer support… |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary Updates content with clarifications and improvements. |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for the Elastic Solutions section has been updated to include additional links to "Elastic Observability on Azure Marketplace" and "Elastic Security on Azure Marketplace." Users can now access more resources directly related to Elastic’s offerings on Azure, enhancing their ability to find relevant solutions. |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary [!IMPORTANT] |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary Learn how to migrate from KMS v2 to KMS with infrastructure encryption platform-managed keys (PMK) or customer-managed keys (CMK) for enhanced performance and security. |
||
|
|
||
| Operations ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary Learn how to plan for capacity and costs when upgrading Azure Kubernetes Service (AKS) clusters, including surge node requirements, quota management, and IP address planning. |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary [!IMPORTANT] |
||
|
|
||
| General ✨ Update Modified: 2026-01-30 23:07 | ||
|
Summary Learn how to use the Container Storage Interface (CSI) driver to provision volumes in an Azure Kubernetes Service (AKS) cluster. |
||
|
|
||
| Compute ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary [!IMPORTANT] |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary [!IMPORTANT] |
||
|
|
||
| Operations ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary Learn how to upgrade the control plane of an Azure Kubernetes Service (AKS) cluster to get the latest Kubernetes version features and security updates. |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary [!IMPORTANT] |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary [!IMPORTANT] |
||
|
|
||
| Operations ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary Learn how to configure and customize rolling upgrades for Azure Kubernetes Service (AKS) node pools, including surge settings, drain timeout, and soak time. |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary [!IMPORTANT] |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary [!IMPORTANT] |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary Learn how to set up Advanced Container Networking Services on your Azure Kubernetes Service (AKS) clusters to enhance network observability and security for your containerized applications. |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary Learn how to enable Key Management Service (KMS) data encryption with platform-managed keys or customer-managed keys in AKS. |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary [!IMPORTANT] |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary [!IMPORTANT] |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary [!IMPORTANT] |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary [!IMPORTANT] |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary This document discusses the AI toolchain operator in Azure Kubernetes Service (AKS), providing insights into its management and operational considerations. |
||
|
|
||
| Security ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary This article explains the concepts of identity bindings in Azure Kubernetes Service (AKS), detailing how to manage and utilize identities for secure access to resources. |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary This document provides guidance on using GitHub Actions for deploying and testing workloads in Azure Kubernetes Service (AKS), including links to sample workflows. |
||
|
|
||
| Operations ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary This article discusses the auto-provisioning of nodes in Azure Kubernetes Service (AKS) and includes important updates regarding the support for specific node images and configurations. |
||
|
|
||
| Compliance ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary This document outlines the retirement of Azure Network Policy Manager (NPM) on Linux nodes in Azure Kubernetes Service (AKS) and provides migration guidance to Cilium Network Policy to avoid service disruptions. |
||
|
|
||
| Networking ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary This article discusses the support for Local Redirect Policy (LRP) starting from Kubernetes v1.29 and Cilium v1.14. It provides insights into managing Cilium identities and performance considerations for high-churning workloads. |
||
|
|
||
| Security 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary This document details the legacy experience of using Key Management Service (KMS) etcd encryption in Azure Kubernetes Service (AKS). It emphasizes the transition to a new KMS data encryption experience for clusters running Kubernetes version 1.33 or later. |
||
|
|
||
| Networking ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary This article explains how to use service tags to specify authorized IP ranges for the API server in Azure Kubernetes Service (AKS). It includes prerequisites, limitations, and installation instructions for the Azure CLI extension. |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now specifies that only Ubuntu 24.04 or Azure Linux 3.0 are compatible operating systems for enabling eBPF host routing. Users are directed to refer to the preview documentation for Ubuntu 24.04 to enable the feature flag, ensuring they have the correct OS version for this functionality. |
||
|
|
||
| Compute ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now clarifies that users can upgrade a node pool to a snapshot configuration if both the snapshot Kubernetes version and node image version are more recent than those in the current node pool, and the snapshot node image version must be within 90 days of the node image publish date. This change enhances the understanding of the upgrade criteria for node pools. |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-29 23:05 | ||
|
Summary The documentation for AKS support policies has been updated to clarify user responsibilities regarding agent nodes, emphasizing that modifications to these nodes must be done using Kubernetes-native mechanisms like `DaemonSets`. Additionally, the sections detailing supported and unsupported scenarios for AKS technical support have been expanded, providing clearer guidance on what users can expect… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for deploying applications using the AKS desktop has been updated to clarify the process and improve user guidance. Users can now find detailed steps for adding clusters, creating projects, and deploying applications, including specific methods for using Azure subscriptions and kubeconfig files. Additionally, the article emphasizes the importance of using AKS Automatic clusters f… |
||
|
|
||
| Operations 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes important deprecation timelines for Ubuntu and Azure Linux OS versions in AKS. Specifically, Ubuntu 18.04 will be unsupported after June 17, 2025, and Ubuntu 20.04 will be unsupported after March 17, 2027, with existing node images being deleted and no security updates provided. Additionally, Azure Linux 2.0 will no longer be supported after November 30, 2025, requir… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes a new section on Static Private IP Support (Preview), allowing users to configure egress traffic on private addresses for the Static Egress Gateway. Users must ensure their clusters are running Kubernetes version 1.34 or later and have the appropriate Azure Feature Exposure Control flag enabled. Additionally, the `az aks nodepool add` command has been updated to incl… |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary Updates content with clarifications and improvements. |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary Updates content with clarifications and improvements. |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary Updates content with clarifications and improvements. |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary Updates content with clarifications and improvements. |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes a note regarding the retirement of the `–skip-gpu-driver-install` node pool tag on AKS, effective 14 August 2025. Users are advised to upgrade their node pools to the latest node image version and utilize the `–gpu-driver` API field set to `none` to maintain the ability to skip automatic GPU driver installation. After the retirement date, the `–skip-gpu-driver-ins… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 23:08 | ||
|
Summary The documentation now includes a detailed list of health probe annotations that can be used for ports `80` and `443` in Kubernetes services for ingress gateways. Users can implement these annotations, such as `service.beta.kubernetes.io/port_{port}_health-probe_interval`, to customize health probe settings effectively. Additionally, the references to related documentation have been updated to guid… |
||
|
|
||
| Compute 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes a new section on configuring FIPS compliant node images, allowing users to enable Federal Information Processing Standard (FIPS) compliant images by setting the `fipsMode` field to either `FIPS` or `Disabled`. Additionally, the LocalDNS configuration section has been expanded to detail its deployment options, including `Disabled`, `Preferred`, and `Required`, along w… |
||
|
|
||
| Operations 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes a clear notice regarding the retirement of the Basic Load Balancer on September 30, 2025, emphasizing the need for users to upgrade to the Standard Load Balancer to maintain support for their clusters. Additionally, the article provides guidance on the upgrade process, ensuring users have the necessary information to transition before the retirement date. |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for the Azure Kubernetes Service (AKS) app routing migration has been updated to reflect changes in the DNS configuration process. Users can now create a global Azure DNS zone and enable Azure DNS integration, enhancing their ability to manage DNS settings for application routing. |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes a warning about the retirement of the Open Service Mesh (OSM) add-on for AKS, effective September 30, 2027. Users are advised to identify existing OSM configurations and migrate them to equivalent Istio configurations, with migration guidance provided in the linked documentation. This change emphasizes the need for users to take action regarding their OSM setups befo… |
||
|
|
||
| General 🆕 New Modified: 2026-01-29 18:13 | ||
|
Summary The documentation now clarifies that API Server VNet Integration is available in all GA public cloud regions except for qatarcentral. Additionally, users can enable this feature using the updated command `az aks update –enable-apiserver-vnet-integration` along with the new parameters `–apiserver-subnet-id <apiserver-subnet-resource-id>`. It is also emphasized that after enabling this integration… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-30 23:07 | ||
|
Summary The documentation for setting up custom domain names and SSL certificates with the application routing add-on for Azure Kubernetes Service (AKS) has been updated to clarify the integration with Azure Key Vault and Azure DNS. Users can now find detailed instructions on creating and importing SSL certificates into Azure Key Vault, as well as configuring Azure DNS zones for their Ingress resources. A… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for setting up identity bindings on Azure Kubernetes Service (AKS) has been updated to clarify the requirements and steps for configuring identity bindings. Users are now informed that they need Azure CLI version 2.73.0 or later and the `aks-preview` extension version 18.0.0b26 or later, along with specific Azure permissions to proceed. Additionally, the instructions have been re… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now emphasizes that Artifact Streaming (preview) is the recommended alternative for users currently utilizing Teleport (preview), which will be retired on July 15, 2025. Users are advised to migrate to Artifact Streaming or update their node pools with the `–aks-custom-headers EnableACRTeleport=false` parameter to avoid potential breakage and provisioning failures after the reti… |
||
|
|
||
| Operations 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for validating Valkey resiliency during an AKS node pool upgrade has been updated to clarify the process and improve readability. Users can now find a dedicated section for verifying the Locust client status and a new section for upgrading the Valkey node pool, which enhances the guidance on monitoring the upgrade process. Additionally, the descriptions have been refined for bett… |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary Updates content with clarifications and improvements. |
||
|
|
||
| General 🆕 New Modified: 2026-01-30 16:50 | ||
|
Summary The release notes for the ALB Controller have been updated to include version 1.9.11, which introduces several enhancements such as the implementation of `allowPrivilegeEscalation` set to false, integration with the AKS Istio Service Mesh Add-on, and a fix for NAP with Karpenter. Users can now benefit from these improvements and general image updates, enhancing the overall functionality and securi… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes updated retirement notices for Windows Server 2019 and Windows Server 2022, detailing their respective end-of-life dates and the implications for AKS users. Users should be aware that after these dates, they will no longer be able to create new node pools with these Windows Server versions, and existing node pools will be unsupported, affecting scaling operations. Th… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for using a Service Principal with Azure Kubernetes Service (AKS) has been updated to clarify the prerequisites and considerations for creating and managing service principals. Users are now explicitly informed that they need Azure CLI version 2.0.59 or higher and Azure PowerShell version 5.0.0 or higher. Additionally, the instructions for creating an AKS cluster with an existing… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for the Agentic CLI for Azure Kubernetes Service (AKS) has been updated to clarify installation and configuration steps, including the requirement to replace `<RESOURCE_GROUP>` and `<CLUSTER_NAME>` with actual values in commands. Users are now explicitly instructed to ensure successful completion of the `init` experience to utilize the CLI, and the configuration file’s parameters… |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary Updates content with clarifications and improvements. |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now clarifies that the article applies specifically to clusters using the legacy KMS experience that need to migrate from KMS v1 to KMS v2. Users are advised to use the new KMS data encryption experience for clusters running Kubernetes version 1.33 or later, which includes features like platform-managed keys and automatic key rotation. Additionally, users are informed that a spec… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for Azure CNI Overlay networking in Azure Kubernetes Service (AKS) has been updated to clarify the networking model’s features and configurations. Users can now better understand the differences between Azure CNI Overlay and the traditional kubenet model, including details on IP address management, pod communication, and scaling limitations. Additionally, the guidance on configur… |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now includes a warning about the retirement of the Open Service Mesh (OSM) add-on for AKS, effective September 30, 2027. Users are advised to identify existing OSM configurations and migrate them to equivalent Istio configurations, with migration steps provided in the linked guidance. This change emphasizes the need for users to transition away from OSM in light of its retirement… |
||
|
|
||
| General ✨ Update Modified: 2026-01-28 18:44 | ||
|
Summary Updates content with clarifications and improvements. |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now emphasizes that the Cluster Autoscaler is not zone-aware, which is crucial for users implementing zone-based pod topology spread constraints on multi-zonal node pools. It highlights that restrictive constraints may lead to pods remaining in a pending state, particularly in capacity-constrained regions or during zone-down scenarios. Users are advised to consider relaxing these… |
||
|
|
||
| General ♻️ Rework Modified: 2026-01-28 18:44 | ||
|
Summary The documentation now clarifies that migrations between AKS Automatic clusters and AKS Standard clusters are supported, with updated guidance on how to perform these migrations. Users can refer to the revised section on updating the SKU of an existing AKS cluster for detailed instructions. |
||
|
|
||
| General 🆕 New Modified: 2026-01-28 18:44 | ||
|
Summary The documentation for Advanced Container Networking Services has been updated to clarify the features available for Azure Kubernetes Service (AKS), including Container Network Observability, Container Network Security, and Container Network Performance. Users can now leverage FQDN-based filtering for network policies, enhancing security by allowing policy management based on fully qualified domain… |
||
|
|
||
| General 🆕 New Modified: 2026-01-29 06:01 | ||
|
Summary The documentation now includes instructions for configuring `nftables` in addition to `IPVS` for the `kube-proxy` settings in Azure Kubernetes Service (AKS). Users can create a configuration file that specifies either `IPVS` or `nftables` as the mode, allowing for improved performance and scalability in load balancing. Additionally, the article clarifies that changes to the `kube-proxy` configurat… |
||
|
Full tracker with filters: Azure Container Services Docs Tracker
