Azure Container Services Docs – Weekly Update (2026-03-15 to 2026-03-22)
The most meaningful Azure Kubernetes Service, Container Registry, Application Gateway for Containers, and Fleet Manager documentation changes from the last 7 days. Summaries are AI-filtered to skip trivial edits.
📊 Updates this week: ACR (5), AGC (2), AKS (26), Fleet (5)
|
||
| General 🆕 New Modified: 2026-03-20 22:09 | ||
|
Summary The article has been revised to improve clarity on configuring availability zones in AKS, including updated links and a new section on limitations and considerations. This ensures users have the most accurate and helpful information for deploying reliable AKS resources. |
||
|
|
||
| General ✨ Update Modified: 2026-03-19 06:01 | ||
|
Summary The documentation now specifies that users can configure both GitHub and Google Identity external identity providers for Azure Kubernetes Service (AKS) control plane authentication using structured authentication. Additionally, it includes detailed steps for setting up GitHub Actions OIDC authentication and Google Identity OAuth 2.0 authentication, including necessary configurations and example wo… |
||
|
|
||
| General 🆕 New Modified: 2026-03-19 06:01 | ||
|
Summary The documentation for Azure Kubernetes Service (AKS) has been updated to clarify how to use external identity providers with structured authentication. Users can now configure external identity providers, such as Google and GitHub, for authenticating to the Kubernetes API server, enabling integration with existing identity infrastructures. Additionally, the article now includes detailed steps on t… |
||
|
|
||
| General 🆕 New Modified: 2026-03-20 06:02 | ||
|
Summary The documentation now includes a migration guide for transitioning from RBAC-only to ABAC-enabled mode for Azure Container Registry, emphasizing that ABAC-enabled mode will become the default role assignment permissions mode in the future. Users are advised to assign equivalent ABAC-enabled roles to maintain access, as legacy roles like AcrPull, AcrPush, and AcrDelete will not be honored in ABAC-e… |
||
|
|
||
| Networking ♻️ Rework Modified: 2026-03-19 22:12 | ||
|
Summary The documentation for the `userAssignedNatGateway` option in the egress outbound type section has been enhanced to recommend using StandardV2 NAT Gateways over Standard. Users are now informed that StandardV2 is zone-redundant by default and offers higher bandwidth and throughput, providing clearer guidance for optimal configuration when using bring-your-own virtual networking. |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-18 06:02 | ||
|
Summary The documentation now emphasizes that users can dynamically provision persistent volumes for stateful applications on Kubernetes clusters using Azure Container Storage, which is recommended over CSI drivers for a fully managed solution. This update clarifies the integration of Azure Container Storage with Kubernetes, enhancing the understanding of its capabilities for block-level data access. |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-18 22:13 | ||
|
Summary The documentation has been updated to reflect changes in the GitHub repository references from "master" to "main" for the context parameters and Dockerfile links. Users can now access the correct Dockerfiles for the ACR build tutorial using the updated links, ensuring they are working with the latest version of the resources. |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-16 22:08 | ||
|
Summary The documentation now reflects a change in the command for creating node pools from `az aks nodepool create` to `az aks nodepool add`, which users should note when implementing blue-green upgrade strategies. Additionally, links have been updated to provide more detailed information on undrainable node behavior and the `maxBlockedNodes` setting, enhancing user understanding of these features. |
||
|
|
||
| General 🆕 New Modified: 2026-03-19 17:18 | ||
|
Summary The documentation now clarifies that node pool rollback does not support reverting OS SKU changes. Users are informed that if they change the OS SKU of their node pool (e.g., from Ubuntu to Azure Linux), the rollback will fail because the previous node image version is incompatible with the new OS SKU. To revert an OS SKU change, users should utilize the `az aks nodepool update –os-sku` command i… |
||
|
|
||
| Networking ♻️ Rework Modified: 2026-03-19 11:01 | ||
|
Summary The documentation now emphasizes that production workloads using the Application Routing add-on will remain fully supported through November 2026, and users are encouraged to migrate to the application routing Gateway API implementation for enhanced ingress traffic management. Additionally, the text clarifies that there is no immediate action required for AKS clusters currently utilizing the Appli… |
||
|
|
||
| General 🆕 New Modified: 2026-03-18 22:11 | ||
|
Summary The documentation now includes detailed information about the optional `maxConcurrency` field in the JSON file used for defining update strategies. Users can specify how many clusters can upgrade concurrently at both the stage and group levels, allowing for faster upgrades or more controlled rollouts. The examples provided clarify how to set these values, including fixed integers and percentages,… |
||
|
|
||
| General 🆕 New Modified: 2026-03-19 06:01 | ||
|
Summary The documentation now includes corrected verification commands for the agentic CLI service account setup, ensuring users can accurately verify the creation of resources based on their chosen access option. Specifically, the commands for checking namespace-scoped read access have been updated to reflect the correct role binding name, enhancing clarity for users implementing these configurations. Ad… |
||
|
|
||
| General 🆕 New Modified: 2026-03-20 22:11 | ||
|
Summary The documentation now includes a detailed section on home region outage behavior for geo-replicated registries. Users can continue to push and pull images, authenticate, and receive webhook deliveries from available geo-replicas even if the home region is unavailable. However, they will be unable to modify registry properties or run ACR Tasks until the home region recovers. |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-17 22:13 | ||
|
Summary The documentation for scaling nodes in an Azure Kubernetes Service (AKS) cluster has been updated to clarify the scaling process for user node pools. Users can now explicitly disable the cluster autoscaler to force a user node pool to scale to 0 nodes, and they can also allow autoscaling to zero nodes by setting the `–min-count` parameter of the Cluster Autoscaler to 0. Additionally, the instruct… |
||
|
|
||
| General 🆕 New Modified: 2026-03-19 11:01 | ||
|
Summary The documentation now includes information on enabling the application routing Gateway API implementation, allowing users to manage ingress traffic using the Kubernetes Gateway API. This enhancement provides users with a more streamlined approach to handling ingress traffic in their AKS environments. |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-18 22:13 | ||
|
Summary The documentation has been updated to correct the output of the Azure CLI command `az acr task list-runs –registry $ACR_NAME –output table`, changing "UN ID" to "RUN ID" for clarity. Additionally, the links to the Dockerfiles have been updated to point to the main branch instead of the master branch, ensuring users access the most current versions of the resources. |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-18 22:11 | ||
|
Summary The documentation for the Azure Kubernetes Service (AKS) has been updated to clarify the use of the `NodeResourcesFit` scheduling plugin and its default mode, `NodeResourcesFit:LeastAllocated`, which prioritizes nodes with lower utilization. Users can now better understand how to utilize configurable scheduler profiles to optimize node utilization by focusing on higher utilization nodes, with the… |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-17 20:47 | ||
|
Summary The documentation for configuring the Application Gateway for Containers with Prometheus and Grafana has been updated to clarify the monitoring setup process. Users can now enable Prometheus metrics and container logs directly from the Azure portal by navigating to their AKS cluster, selecting the Monitoring tab, and configuring the necessary settings. Additionally, the section on Azure Monitor da… |
||
|
|
||
| General 🆕 New Modified: 2026-03-18 22:11 | ||
|
Summary The documentation now includes a new feature, "Maximum Concurrency," which allows users to control how many clusters can upgrade concurrently within an update stage or update group. Users can set this at both the stage and group levels, with specific limits and behaviors outlined, enhancing their ability to manage updates more effectively. Additionally, the explanations for "Update stage," "Update… |
||
|
|
||
| Operations 🆕 New Modified: 2026-03-19 22:12 | ||
|
Summary The documentation now clarifies that users can utilize the `maxUnavailable` parameter to upgrade using existing nodes instead of deploying new ones, with updated links directing to the relevant sections on customizing unavailable nodes and node surge upgrades. Additionally, users are advised to lower the `maxSurge` setting to minimize extra capacity requirements during upgrades. |
||
|
|
||
| General ✨ Update Modified: 2026-03-16 22:08 | ||
|
Summary This update provides important information regarding the limitations of AKS Automatic clusters, specifically about node resource group lockdown and its implications for VNet links. It also includes troubleshooting resources for users facing issues. |
||
|
|
||
| General ✨ Update Modified: 2026-03-18 22:11 | ||
|
Summary Get started with Cilium mTLS encryption for Advanced Container Networking Services on your AKS cluster. |
||
|
|
||
| General ✨ Update Modified: 2026-03-20 06:03 | ||
|
Summary This article provides a conceptual overview of Azure Kubernetes Fleet Manager multi-cluster networking. |
||
|
|
||
| General ✨ Update Modified: 2026-03-20 06:03 | ||
|
Summary This article provides a conceptual overview of Cross-cluster networking for Azure Kubernetes Fleet Manager. |
||
|
|
||
| General ✨ Update Modified: 2026-03-18 22:11 | ||
|
Summary An overview of Advanced Container Networking Services’ Cilium mTLS encryption capabilities on Azure Kubernetes Service (AKS). |
||
|
|
||
| General ✨ Update Modified: 2026-03-19 11:01 | ||
|
Summary Use the application routing add-on to manage ingress traffic on Azure Kubernetes Service (AKS) using the Kubernetes Gateway API. |
||
|
|
||
| General 🆕 New Modified: 2026-03-16 21:11 | ||
|
Summary New page added. |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-19 22:12 | ||
|
Summary The documentation for the NAT gateway has been updated to recommend deploying a StandardV2 NAT gateway resource for zone-redundancy, which spans multiple availability zones and ensures continued outbound connectivity during a zone failure. Additionally, it clarifies that a Standard NAT gateway only provides resiliency within its specific availability zone. Users can now better understand the benef… |
||
|
|
||
| General ✨ Update Modified: 2026-03-19 11:01 | ||
|
Summary Secure ingress traffic with the application routing Gateway API implementation using AKV and the Secrets Store CSI Driver |
||
|
|
||
| General 🆕 New Modified: 2026-03-16 05:02 | ||
|
Summary The documentation now clarifies that labels can be used to create stages and control the deployment order within each stage. Additionally, a new command has been added to apply labels to member clusters, allowing users to update their cluster configurations more effectively with the `az fleet member update` command. |
||
|
|
||
| General 🆕 New Modified: 2026-03-20 17:11 | ||
|
Summary The documentation now includes important cautionary notes regarding the impact of `ValidatingWebhookConfiguration` and `MutatingWebhookConfiguration` on the stop operation of AKS clusters. Users are informed that if these configurations apply to cluster-scoped resources, the stop operation may be rejected with a `ValidationError`, and they are provided with specific resolutions to avoid this issue… |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-17 08:14 | ||
|
Summary The documentation now specifies that the Application Gateway for Containers WAF supports only the Default Rule Set (DRS) 2.1 managed rule set, clarifying the version of the rule set that users can utilize. This change ensures that users are aware of the specific version they need to implement for effective security management. |
||
|
|
||
| General 🆕 New Modified: 2026-03-21 06:01 | ||
|
Summary The documentation now includes updated information on the current versions of Cilium components used in Azure Kubernetes Service (AKS), with cilium-agent and cilium-operator-generic upgraded to v1.18.6, and cilium-envoy to v1.34.10. Additionally, the service health notification link has been corrected to ensure users can access the latest information regarding planned version removals. |
||
|
|
||
| General ✨ Update Modified: 2026-03-19 11:01 | ||
|
Summary The documentation now clarifies that the Istio service mesh add-on and the application routing Gateway API implementation cannot be enabled simultaneously, requiring users to disable one before enabling the other. Additionally, it specifies that ConfigMap customizations for `Gateway` resources must adhere to a resource customization allow list, with disallowed fields blocked via managed webhooks.… |
||
|
|
||
| Compute ♻️ Rework Modified: 2026-03-19 06:01 | ||
|
Summary The documentation for using Virtual Machines node pools in Azure Kubernetes Services (AKS) has been updated to clarify the requirement for a user-assigned managed identity with Network Contributor permissions when deploying into a custom virtual network. Additionally, the examples for creating an AKS cluster and adding node pools have been enhanced to include the necessary parameters for managing… |
||
|
|
||
| General ♻️ Rework Modified: 2026-03-21 06:02 | ||
|
Summary The documentation for Azure Container Registry’s zone redundancy has been significantly updated to clarify that zone redundancy is now enabled by default for all registries in regions that support availability zones, applying to all service tiers without requiring user action. Users are informed that the `zoneRedundancy` property may still display as "Disabled" in some tools, but this does not aff… |
||
|
|
||
| General 🆕 New Modified: 2026-03-16 20:38 | ||
|
Summary New page added. |
||
|
|
||
| General 🆕 New Modified: 2026-03-16 22:08 | ||
|
Summary The documentation for deleting a node pool in Azure Kubernetes Service (AKS) has been updated to reflect the use of the `–ignore-pdb` flag instead of the previous `–ignore-pod-disruption-budget` parameter. Users can now delete an existing node pool without adhering to any PodDisruptionBudgets by using the `az aks nodepool delete` command with the new `–ignore-pdb` flag. |
||
|
Full tracker with filters: Azure Container Services Docs Tracker
