Azure Container Services Docs – Weekly Update (2026-10-18 to 2026-10-25)

AKS Arc – Howto Upgrade Windows Os

Summary

The documentation now indicates that Windows Server 2019 node pools are deprecated and no longer supported, with users advised to transition to newer versions. Additionally, it clarifies that Windows Server 2022 node pools will remain supported until Windows Server 2025 node pool support is introduced alongside Kubernetes 1.35, prompting users to plan upgrades accordingly. Users should also note that Windows security patches and OS-level bug fixes will follow the Windows Server servicing lifecycle, separate from the AKS support timeline.

AKS Support – Troubleshoot Localdns

Summary

The troubleshooting guide for LocalDNS on AKS has been revised to include clearer steps for confirming LocalDNS is enabled and running, as well as detailed instructions for deploying a test dnsutils pod. It emphasizes the importance of checking service health and provides a structured approach to diagnosing DNS issues.

AKS Arc – AKS Bare Metal Upgrade Cluster Ubuntu

Summary

The documentation clarifies that the supported versions for new deployments may not represent valid upgrade paths, providing a more accurate understanding of upgrade options for users.

AGC – Service Mesh Integration

Summary

The document has been updated to reflect the new version 1.12.4 for the Application Gateway for Containers add-on, ensuring users have the latest information on supported versions.

AKS Arc – AKS Bare Metal Create Cluster Ubuntu CLI

Summary

The documentation now reflects an update to the supported Kubernetes versions, including the addition of versions 1.35.5 and 1.36.1. Users can now specify these versions using the `–kubernetes-version` parameter when creating a cluster, allowing for more flexibility in deployment options. Additionally, the example command has been updated to use `–kubernetes-version 1.34.3` instead of the previous format.

ACR – Tasks Agent Pools

Summary

The article has been updated to include important notes regarding the upcoming agent pool permission changes, clarifying that no action is needed for callers who already have effective agent pool read access. It directs users to the migration guide for further details.

Arc K8s – Flux Gitops Release Notes

Summary

The release notes for `microsoft.flux` version 1.26.2 have been updated to reflect the resolution of security vulnerabilities in several components, including `fluxconfig-agent`, `fluxconfig-controller`, and others, through updates to Go packages and base images. Additionally, upstream controllers are now pinned to Go version 1.26, enhancing stability and security for users.

AKS – Create Volume Azure Files

Summary

Updated the documentation to clarify that the `mountOptions` are a recommended subset and not exhaustive. It also includes important notes on the Azure Files CSI driver’s behavior and requirements for using the NFS protocol in AKS.

AKS – Overview

Summary

This update includes a new security bulletin regarding OpenSSL end-of-life scanner findings in AKS-managed add-on images. It clarifies that while OpenSSL 3.3 is reported as EOL, Azure Linux continues to apply security fixes through backports, and it provides guidance on how to handle EOL warnings and CVEs.

AGC – Tls Policy

Summary

Added a note indicating that the 2023-06 and 2023-06-S policies currently enforce the same ciphers, with plans for future releases to introduce different cipher sets.

AGC – Quickstart Deploy Application Gateway for Containers Alb Controller Helm

Summary

The documentation has been updated to reflect the use of version 1.12.4 of the application gateway for containers, replacing the previous version 1.12.2 in multiple command examples. Users can now follow the updated commands to deploy the application gateway with the latest version, ensuring they are utilizing the most current features and fixes.

ACR – Container Registry Webhook Reference

Summary

The documentation now includes guidance on securely sending credentials in Azure Container Registry webhooks, specifying that credentials should only be sent in the `Authorization` custom header and not in the URL or other custom headers. Additionally, the webhook behavior for when a Helm chart or repository is deleted has been clarified.

AKS Arc – AKS Bare Metal Connect to Cluster

Summary

The documentation now reflects an update to the Kubernetes version for the control plane, changing from v1.34.2 to v1.34.3. Users can expect improvements and new features associated with this latest version in their AKS Bare Metal clusters.

AKS – AKS Communication Manager

Summary

The documentation now clarifies that users can define the schedule for a planned maintenance window either inline within the cluster’s maintenance configuration or by linking to a shared maintenance window. This enhancement provides greater flexibility in managing automatic upgrades for Azure Kubernetes Service (AKS).

AKS Arc – Cluster Upgrade

Summary

The documentation now reflects updated Kubernetes versions for ALRS, including new versions 1.33.13, 1.34.10, 1.34.11, 1.35.7, 1.35.8, 1.36.3, and 1.36.4. Users can now utilize these newer versions for enhanced features and improvements in their cluster upgrades.

AKS – App Routing Nginx to Gateway API Migration

Summary

The documentation now clarifies that the application routing add-on can support multiple ingress-nginx controllers, each with its own ingress class and load balancer IP, requiring users to inventory all controllers rather than just the default. Additionally, the steps for configuring TLS on the new Gateway have been updated to streamline the process by allowing the Application Routing operator to sync the certificate from Azure Key Vault directly, rather than relying solely on the Secrets Store CSI driver. Users are also instructed to adjust the commands for listing ingress resources and setting the ingress controller IP accordingly.

AKS – Ray Overview

Summary

Documented the installation process for the managed KubeRay extension on AKS, providing users with essential guidance for managing their workloads effectively.

ACR – Tasks Agent Pools Permission Migration

Summary

This document introduces the migration of Azure Container Registry (ACR) task agent pool permissions, effective June 1, 2027. It details the new requirement for callers to have specific permissions on agent pools and provides guidance on identifying affected requests, updating permissions, and troubleshooting authorization failures.

AKS – AKS Production Upgrade Strategies

Summary

The documentation now emphasizes that AKS Automatic includes managed upgrade defaults and preconfigured upgrade channels, enhancing the automatic handling of upgrade scenarios. Users can link multiple clusters to a shared maintenance window for emergency patching, streamlining the upgrade process across clusters. Additionally, the guidance on architectural patterns has been refined to clarify their role in minimizing application impact during upgrades while still depending on workload design and other factors for end-to-end availability.

AKS – Custom Node Configuration Reference

Summary

The documentation now includes details on the AKS Node Hardening preview, specifically for Linux node pools. Users can configure settings such as `kubeReserved`, `hardEvictionThreshold`, `softEvictionThreshold`, `softEvictionGracePeriod`, and `evictionMaxPodGracePeriodInSeconds`, with specific values and requirements outlined for each parameter. Additionally, users must register the `CustomNodeConfigPreview` feature flag to utilize these settings effectively.

AKS Arc – AKS Bare Metal Preview Limitations

Summary

Updated the Kubernetes version information to reflect the latest default version available during deployment, enhancing clarity for users regarding supported versions.

AKS Support – Fail to Mount Azure File Share

Summary

The documentation has been updated to enhance clarity on troubleshooting errors when mounting an Azure file share in Azure Kubernetes Service (AKS). A new section detailing the `AuthorizationFailed` error during Azure Files share provisioning has been added, outlining symptoms, causes, and troubleshooting steps, including verifying role assignments and permissions for the AKS cluster identity. Additionally, the article now emphasizes the importance of Azure RBAC permissions and provides specific commands for users to check their configurations effectively.

AKS – Auto Upgrade Cluster

Summary

The documentation now includes information on linking multiple clusters’ `aksManagedAutoUpgradeSchedule` maintenance configurations to a shared maintenance window, allowing users to manage autoupgrade schedules more efficiently across clusters. For further details, users can refer to the section on using a shared maintenance window.

AKS Support – Troubleshoot Kueue Extension Errors

Summary

Troubleshoot managed Kueue extension errors on Azure Kubernetes Service (AKS), including installation, controller, and admission failures. Learn how to fix them.

AKS – Node Resource Reservations

Summary

The documentation now includes details on enabling Node Hardening for Azure Kubernetes Service (AKS) by registering the `CustomNodeConfigPreview` feature flag and using the `–enable-node-hardening` parameter. Users can also customize `kubeReserved` CPU and memory values or eviction thresholds on Linux node pools through the preview custom node configuration settings. This enhances the ability to manage resource reservations and improve node performance.

Arc K8s – Cert Manager Monitor Troubleshoot

Summary

Added a command to retrieve logs from the cert-manager-cainjector deployment, improving troubleshooting guidance for users managing cert-manager in Kubernetes.

AGC – Container Networking

Summary

Clarified that Application Gateway for Containers can proxy traffic to clusters running CNI Overlay with Cilium and WireGuard enabled, and confirmed support for virtual networks with VNet encryption enabled.

AKS Support – Troubleshoot Kuberay Extension Errors

Summary

This article helps troubleshoot the managed KubeRay extension on AKS, detailing installation, updates, removal, and readiness issues. It includes commands for checking extension status and diagnosing problems with the operator and custom resource definitions.

AKS – Node Disruption Policy

Summary

Enhanced the explanation of the `AllowDuringMaintenanceWindow` policy, detailing the requirement for configuring an `aksManagedNodeOSUpgradeSchedule` maintenance window and its implications for node-disruptive operations.

AKS – Supported Kubernetes Versions

Summary

The documentation now includes the preview and general availability dates for Kubernetes version 1.38 in Azure Kubernetes Service (AKS), indicating that users can expect this version to be available in November 2026 and generally available by February 2027. This update allows users to plan their upgrades and deployments accordingly.

AKS – Cluster Extensions

Summary

Updated the AKS cluster extensions table to include new information about the managed Kueue extension and its capabilities, enhancing the clarity and completeness of the documentation.

ACR – Container Registry Webhook

Summary

Updated guidelines for protecting webhook credentials in Azure Container Registry. Emphasizes the use of HTTPS and the importance of sending credentials only in the Authorization header. It also clarifies that credentials should not be included in the service URI or other custom headers.

AKS Support – Upgrade Fails Because of Nsg Rules

Summary

The document has been updated to clarify troubleshooting steps for Azure Kubernetes Service (AKS) cluster upgrades that fail due to network security group (NSG) rules. It emphasizes the need for outbound connectivity to specific endpoints and provides detailed commands for checking NSG rules and connectivity analysis. Additionally, it includes new sections on identifying NSGs and fixing blocking rules, enhancing the overall troubleshooting guidance.

AGC – Alb Controller Release Notes

Summary

The ALB Controller version has been updated to 1.12.4, which includes important security patches. Additionally, the documentation now clarifies the compatibility between AKS cluster versions and the corresponding ALB Controller versions, ensuring users can easily identify which version to use based on their AKS setup. Users should refer to the updated section on AKS add-on releases for detailed version compatibility.

AKS – Create Volume Azure Disk

Summary

Added important information regarding the expansion of persistent volumes, including limitations for different disk types and the process required for expanding volumes beyond 4 TiB.

AKS – Kuberay Overview

Summary

Learn how to install, verify, update, and remove the managed KubeRay extension on Azure Kubernetes Service (AKS).

AKS Support – Troubleshoot Microsoft Entra Ssh Node Access

Summary

This new document provides troubleshooting guidance for Microsoft Entra SSH access issues on AKS nodes, enhancing user support for connectivity problems.

AKS – Kms Data Encryption

Summary

The documentation now specifies that after rotating a key in Azure Key Vault, users should wait at least seven days before deleting the old key version. Additionally, it emphasizes that users should not delete or expire the old key version immediately after creating the new one, ensuring a smoother key management process.

AKS – Custom Node Configuration

Summary

This document discusses the custom node configuration settings for AKS, including the Node Hardening feature. It provides details on how to install the aks-preview extension and the prerequisites for using kubeReserved and hardEvictionThreshold settings.

AKS – Upgrade Cluster Components

Summary

Updates to the article clarify the use of planned maintenance windows for managing upgrades in AKS. It emphasizes the importance of linking maintenance configurations across multiple clusters to ensure minimal workload impact during upgrades.

AKS – Kueue Overview

Summary

Introduced new details on submitting workloads to Kueue, including the necessary labels and the implications for workload management in AKS, along with updates on supported versions and permissions.

AKS – Node Hardening

Summary

This article introduces the Node Hardening feature in Azure Kubernetes Service (AKS), which enhances node stability under resource pressure by modifying resource reservations and eviction thresholds. It details the benefits, including enforced reservations and graceful eviction, and provides guidance on enabling and customizing the feature.

AKS – Configure Queues with Automatic Resource Flavors

Summary

This update includes a link to the Kubernetes installation guide for kubectl, enhancing the documentation’s usability for users needing to install necessary tools.

ACR – Container Registry Service Tag

Summary

The documentation now includes guidance on securing credentials for Azure Container Registry webhooks, emphasizing that service tag rules only filter network traffic and do not protect the credentials configured for the webhook. Users are directed to a new section on how to safely send webhook credentials, enhancing the security of their webhook configurations.

AKS – Node Auto Provisioning Node Pools

Summary

The documentation for the default Karpenter `NodePool` configuration has been updated to reflect the actual deployment settings when using Azure CNI Powered by Cilium. Users can now see specific changes, including the introduction of `consolidateAfter`, `budgets`, and `startupTaints`, which enhance the management of node resources and improve workload handling. Additionally, the example now includes a description annotation and updated metadata labels for better clarity and functionality.

AKS – Use Node Disruption Policy

Summary

The article has been updated to specify that the maintenance configuration for automatic upgrades can be defined inline or linked from a shared maintenance window, ensuring disruptive operations are managed effectively.

AKS – Planned Maintenance

Summary

The documentation now includes a new section on using shared maintenance windows (preview) for Azure Kubernetes Service (AKS). Users can apply a consistent maintenance window schedule across multiple AKS configurations and managed clusters in the same region, streamlining cluster auto-upgrades and node OS upgrades. To utilize this feature, users must install specific versions of the Azure CLI and the aks-preview extension, register the `AKSSharedMaintenanceWindowPreview` feature flag, and follow the provided commands to create and link shared maintenance windows to their configurations.