Azure Container Services Docs – Weekly Update (2026-03-01 to 2026-03-08)
The most meaningful Azure Kubernetes Service, Container Registry, Application Gateway for Containers, and Fleet Manager documentation changes from the last 7 days. Summaries are AI-filtered to skip trivial edits.
📊 Updates this week: ACR (17), AGC (8), AKS (12), Fleet (3)
|
||
| General 🆕 New Modified: 2026-03-02 18:09 | ||
|
Summary Clarifications have been made regarding the default behavior of the OIDC issuer for new and existing AKS clusters. OIDC issuer is enabled by default for new clusters on Kubernetes version 1.34+, while existing clusters require manual enablement. |
||
|
|
||
| General 🆕 New Modified: 2026-03-02 21:13 | ||
|
Summary The documentation now includes additional resources for users to learn more about Azure Container Registry concepts, including registries, repositories, and artifacts. Users can also find guidance on how to push and pull images to their container registry using the Docker CLI, enhancing their ability to manage container images effectively. |
||
|
|
||
| General 🆕 New Modified: 2026-03-02 21:13 | ||
|
Summary The documentation now includes additional resources for users to learn more about Azure Container Registry concepts, including registries, repositories, and artifacts. Users can also find guidance on how to push and pull images using the Docker CLI, enhancing their ability to manage container images effectively. |
||
|
|
||
| General 🆕 New Modified: 2026-03-02 23:09 | ||
|
Summary The documentation now includes detailed instructions for installing and updating the `aks-preview` Azure CLI extension, specifying that the minimum required version is `14.0.0b6`. Additionally, users can register the `AdvancedNetworkingL7PolicyPreview` feature flag and verify its registration status, enhancing their ability to utilize advanced networking policies in Azure Kubernetes Service. |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-02 21:13 | ||
|
Summary The documentation has been updated to clarify the process of pushing images to an Azure container registry using the Docker CLI, including a more precise phrasing in the introduction. The section on logging in has been renamed to "Sign in to your container registry," and users are now directed to use the Azure CLI command `az acr login` and the PowerShell cmdlet `Connect-AzContainerRegistry` for a… |
||
|
|
||
| General ✨ Update Modified: 2026-03-04 21:33 | ||
|
Summary The documentation now reflects an update to the version of Istio supported by Application Gateway for Containers, changing from version 1.9.11 to 1.9.13. Additionally, it clarifies that Application Gateway for Containers continues to support only the community/open source version of Istio, and the Istio-based service mesh add-on for AKS remains unsupported. Users should be aware of these version c… |
||
|
|
||
| Security 🆕 New Modified: 2026-03-06 23:11 | ||
|
Summary The documentation now includes the security bulletin AKS-2026-0001, which details the enforcement of TLS 1.2 handshake with Extended Master Secret (EMS) in AKS v1.34 when FIPS mode is enabled. Users should be aware that applications built with Go versions earlier than 1.21 may fail to establish TLS connections to FIPS-enabled AKS components after upgrading, and it is recommended to rebuild applica… |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-02 21:13 | ||
|
Summary The documentation has been updated to clarify the process of configuring Azure Container Registry (ACR) for ACR-scoped Microsoft Entra authentication. Users can now find clearer instructions on how to authenticate with Microsoft Entra ID and obtain an ACR-scoped token using the `az login` command, as well as how to configure their registries to accept only ACR-scoped authentication for enhanced se… |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-04 21:33 | ||
|
Summary The documentation has been updated to reflect the integration of Application Gateway for Containers with Microsoft Sentinel and Microsoft Defender, replacing references to Azure Sentinel. Users can now follow a revised quickstart guide to configure Microsoft Sentinel for ingesting access logs from Application Gateway for Containers, enabling enhanced monitoring, threat detection, and investigation… |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-04 18:12 | ||
|
Summary The documentation now specifies that users need a custom domain name enabled on their Azure OpenAI account for Microsoft Entra authorization, with updated references to "Foundry Tools" instead of "Azure AI services." This change clarifies the context in which custom subdomain names are applicable, ensuring users have the correct information for their setup. |
||
|
|
||
| General 🆕 New Modified: 2026-03-04 21:33 | ||
|
Summary The documentation has been updated to reflect changes in the cert-manager configuration, specifically updating the issuer from "letsencrypt-cert" to "letsencrypt-prod." Additionally, the version of cert-manager has been updated from v1.19.1 to v1.19.3, which may include new features or bug fixes that users can now take advantage of. |
||
|
|
||
| General ✨ Update Modified: 2026-03-04 07:40 | ||
|
Summary The documentation now clarifies that when using Application Gateway for Containers with CNI Overlay, requests cannot be forwarded to Azure Firewall or a Network Virtual Appliance (NVA) due to access limitations. Additionally, it specifies that Application Gateway for Containers must be deployed in the same virtual network as the AKS cluster, as separate virtual networks are not supported. |
||
|
|
||
| General 🆕 New Modified: 2026-03-04 18:12 | ||
|
Summary The documentation has been updated to correct the name of the Log Analytics table from "ContainerNetworkLog" to "ContainerNetworkLogs." This change ensures that users reference the correct table name when configuring container network logs, which may affect how they access and analyze their data. Additionally, the instructions regarding the delay for new data to appear in the updated table have be… |
||
|
|
||
| General 🆕 New Modified: 2026-03-06 17:46 | ||
|
Summary The documentation now specifies that the `ResourcePlacement` API has transitioned from `placement.kubernetes-fleet.io/v1beta1` to `placement.kubernetes-fleet.io/v1`, which is currently in preview. Users are informed that when using the `External` rollout strategy, resource snapshots will not be created automatically and must be initiated through a staged update run, clarifying the behavior when sw… |
||
|
|
||
| General 🆕 New Modified: 2026-03-02 23:09 | ||
|
Summary The documentation now includes a critical limitation stating that once a cluster is created with a managed identity, users cannot switch back to using a service principal. This clarification is essential for users planning their identity management strategy in Azure Kubernetes Service (AKS). |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-06 23:09 | ||
|
Summary The documentation now specifies that the Application Gateway for Containers WAF supports only the Default Rule Set (DRS) 2.1 managed rule set, clarifying previous references to managed rule sets. This change ensures users are aware of the specific version of the rule set that is supported, which may impact their configuration and security policies. |
||
|
|
||
| General 🆕 New Modified: 2026-03-04 18:12 | ||
|
Summary The documentation now correctly refers to the Log Analytics table as `ContainerNetworkLogs` instead of the incorrect `ContainerNetworkLog`. Users should note that after re-enabling, there may be a short delay before new data appears in the updated `ContainerNetworkLogs` table. |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-02 21:13 | ||
|
Summary The documentation for configuring Conditional Access policies in Azure Container Registry has been updated to clarify that these policies now specifically support Microsoft Entra user accounts, while service principal accounts are not supported. Additionally, the article emphasizes the importance of configuring all registries in the tenant to accept only ACR-scoped Microsoft Entra authentication b… |
||
|
|
||
| General ✨ Update Modified: 2026-03-04 18:12 | ||
|
Summary The documentation now clarifies that the AKS-ACR integration using `az aks –attach-acr` is not supported for ABAC-enabled ACR registries with the "RBAC Registry + ABAC Repository Permissions" mode. Users must manually assign the `Container Registry Repository Reader` role instead of using the `AcrPull` role for image pull permissions, and they can do this via the Azure Portal, `az role assignment… |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-02 21:13 | ||
|
Summary The documentation now specifies that the admin account is required for deploying a container image from a registry to Azure Container Apps, in addition to Azure Container Instances and Azure Web Apps for Containers. This change clarifies the scenarios in which users need to utilize an admin account for deployments, enhancing their understanding of authentication requirements. |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-02 21:13 | ||
|
Summary The documentation for configuring firewall access rules for Azure Container Registry has been updated to clarify that users can now enable dedicated data endpoints, which allow for tighter scoping of client firewall rules. Additionally, the section on enabling dedicated data endpoints has been enhanced with clearer instructions for both the Azure portal and Azure CLI, ensuring users can easily imp… |
||
|
|
||
| Compute ✨ Update Modified: 2026-03-05 18:11 | ||
|
Summary The documentation now states that NPD conducts health checks on all GPU node pools using AKS-managed GPU drivers, expanding the scope beyond specific VM sizes. This provides clearer guidance for users managing GPU resources in AKS. |
||
|
|
||
| Networking ♻️ Rework Modified: 2026-03-02 23:09 | ||
|
Summary The documentation has been updated to reflect the installation and registration process for the `AdvancedNetworkingL7PolicyPreview` feature flag, ensuring users can access the latest networking capabilities in AKS. |
||
|
|
||
| General ✨ Update Modified: 2026-03-03 10:08 | ||
|
Summary Start here to learn how you can use the features of Azure Service Health to monitor and alert service issues in Azure Container Registry. |
||
|
|
||
| General 🆕 New Modified: 2026-03-06 17:46 | ||
|
Summary The documentation for Azure Kubernetes Fleet Manager has been updated to clarify the status of resource placements. Users can now find detailed explanations of the `ResourcePlacement` conditions, including new messages indicating when resources have started rolling out and when they are available across clusters. Additionally, the article emphasizes that the `ResourcePlacement` object is currently… |
||
|
|
||
| General 🆕 New Modified: 2026-03-02 21:13 | ||
|
Summary The documentation now includes updated sections on troubleshooting geo-replicated registries, providing users with clearer guidance on resolving issues related to push operations. Additionally, the instructions for temporarily excluding a geo-replica from global endpoint routing have been refined, allowing users to manage their registry configurations more effectively. |
||
|
|
||
| Compute ♻️ Rework Modified: 2026-03-04 23:09 | ||
|
Summary The documentation for connecting to AKS nodes has been updated to clarify the secure connection methods for both Linux and Windows nodes. Users can now find detailed instructions on using the `kubectl debug` command, including updated example commands and parameters, such as the correct image for the `kubectl debug` command. Additionally, the section on accessing nodes via the Kubernetes API has b… |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-02 21:13 | ||
|
Summary The documentation for geo-replication in Azure Container Registry has been updated to clarify the benefits and functionalities of the feature. Users can now manage a single registry across multiple regions, enabling automatic syncing of images and metadata, which enhances performance and reliability while reducing data transfer costs. Additionally, the introduction of regional endpoints allows for… |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-02 21:13 | ||
|
Summary The documentation now emphasizes that dedicated data endpoints in Azure Container Registry allow for tightly scoped client firewall rules, which help mitigate data exfiltration risks. Users are informed that enabling these endpoints may require updating firewall rules to maintain access, and they can use the `az acr update` command to enable this feature. Additionally, the section on enabling dedi… |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-02 21:13 | ||
|
Summary The documentation for the Azure Container Registry quickstart has been updated to clarify the steps for creating a container registry and running commands. Users are now instructed to create a container registry by using the `az acr create` command and to run the image using the `az acr run` command, with improved phrasing for clarity. Additionally, the tutorial now emphasizes the need to pass the… |
||
|
|
||
| General ✨ Update Modified: 2026-03-02 21:13 | ||
|
Summary The documentation now provides a clearer description of how to audit compliance using Azure Policy built-in policy definitions for Azure Container Registry. Users can create policy assignments through various methods, including the Azure portal and Azure CLI, and can scope these assignments to resource groups, subscriptions, or Azure management groups. Additionally, the section on reviewing policy… |
||
|
|
||
| General 🆕 New Modified: 2026-03-06 17:46 | ||
|
Summary The documentation now clarifies that `ResourcePlacement` uses the `placement.kubernetes-fleet.io/v1` API version instead of the previously mentioned v1beta1, and it emphasizes that certain features, such as `ResourceSnapshot`, are not available in the v1 API. Additionally, users can now create a `StagedUpdateRun` without specifying the `resourceSnapshotIndex` field to automatically create a new re… |
||
|
|
||
| General 🆕 New Modified: 2026-03-02 21:13 | ||
|
Summary The documentation now includes additional resources for users to learn more about Azure Container Registry concepts, including registries, repositories, and artifacts. Users can also find guidance on how to push and pull images to their container registry using the Docker CLI, enhancing their ability to manage container images effectively. |
||
|
|
||
| General 🆕 New Modified: 2026-03-03 10:08 | ||
|
Summary The documentation for the `acr purge` command has been updated to clarify that the `–untagged` parameter now honors the `–ago` duration filter starting with version 0.17 of the ACR CLI. Additionally, a new example has been added to demonstrate how to purge only untagged manifests without affecting tagged images, using a repository filter that matches no tag names. Users can now better manage the… |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-04 18:12 | ||
|
Summary The documentation has been updated to reflect the rebranding of the Azure AI Foundry to the Microsoft Foundry. Users will now see references to the "Microsoft Foundry portal" instead of "Azure AI Foundry portal," and the instructions for obtaining the Azure OpenAI deployment name have been adjusted accordingly. This change clarifies the source for users accessing the deployment name. |
||
|
|
||
| General 🆕 New Modified: 2026-03-04 07:40 | ||
|
Summary The documentation now includes an important note stating that Application Gateway for Containers requires certificates to be local to the AKS cluster and cannot use external volumes, making the use of Azure Key Vault with the Secrets Store CSI driver unsupported. Users are advised to sync certificates from Azure Key Vault to Kubernetes secrets, with options for automated management using cert-mana… |
||
|
|
||
| General ✨ Update Modified: 2026-03-04 07:40 | ||
|
Summary The documentation now specifies that certificates for Application Gateway for Containers must be stored as Kubernetes secrets, as integration with Azure Key Vault via the Secrets Store CSI driver is not supported. Users are advised to use cert-manager with Let’s Encrypt for automated certificate management, ensuring that certificates remain local to the cluster. |
||
|
|
||
| General 🆕 New Modified: 2026-03-02 21:13 | ||
|
Summary The documentation now includes additional resources for users to learn more about Azure Container Registry concepts, including registries, repositories, and artifacts. Users can also find guidance on how to push and pull images to their container registry using the Docker CLI, enhancing their ability to manage container images effectively. |
||
|
|
||
| General 🆕 New Modified: 2026-03-02 23:09 | ||
|
Summary The documentation has been updated to reflect the latest Kubernetes and Cilium versions supported by Azure CNI. Users can now see that Cilium versions 1.14.20, 1.16.16, 1.17.9, and 1.18.6 are available for Kubernetes versions 1.29 (LTS), 1.30 (LTS), 1.31 (LTS), 1.32, 1.33, 1.34, and 1.35, ensuring they have access to the most current features and improvements. |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-04 07:40 | ||
|
Summary The documentation now emphasizes that certificates for Application Gateway for Containers must be stored as Kubernetes secrets, as integration with Azure Key Vault via the Secrets Store CSI driver is not supported. Users are advised to use cert-manager with Let’s Encrypt for automated certificate management, ensuring that certificates remain local to the cluster. |
||
|
Full tracker with filters: Azure Container Services Docs Tracker
