v1.20.0

Changes by Kind

Feature

• Add additionalCapabilities spec field to AzureMachinePool.Spec.Template.AdditionalCapabilities, allowing users to create MachinePools with UltraSSD capabilities (#5628, @w21froster)
• Add documentation on running e2e tests locally (#5489, @nawazkh)
• Add flag to disable bootstrap extension and improve error message (#5509, @willie-yao)
• Add make aks-delete target to clean up AKS clusters listed under allowed_contexts in tilt-settings.yaml (#5576, @Nitesh703)
• Added AdditionalAPIServerLBPorts field for the additional inbound control-plane load balancer port configuration, allowing to access user specified ports on the CP machines.
• Improved securityRules selection for the RKE2 provider. Defaulting now checks for ports 6443 and 22 in the existing list and appends them if missing, allowing users to specify only additional rules instead of the full set, when an additional rule is needed. (#5525, @Danil-Grigorev)
• Moved AzureASOManaged API to v1beta1 (#5660, @alimaazamat)

Documentation

• Added FAQ to documentation describing why kubectl get for an ASO resource shows a different API version than what CAPZ used to create it. (#5527, @nojnhuh)
• Cleaned up Tilt with AKS as management Cluster with Internal Load Balancer docs. (#5522, @alimaazamat)
• Updating the roadmap to align with our current timeline and future milestones (#5513, @mbrow137)

Bug or Regression

• Avoids marking an AzureMachinePoolMachine as terminal failure on provisioning failure. This ensures potential recovery from provisioning failure is handled correctly. (#5558, @mweibel)
• Fix GO-2025-3488 security vulnerability by updating golang.org/x/oauth2: v0.25.0 => v0.27.0 (#5638, @nawazkh)
• Fixed a bug causing an unnecessary update to an AKS agent pool after its managed cluster is created when certain fields are defined. (#5521, @nojnhuh)
• Fixes manager deployment to enable cluster cache tracker (#5556, @mweibel)
• Fixes potential OOM due to tracing (even if tracing not enabled) (#5540, @mweibel)
• Fixes potential nil pointer when deleting MachinePool (#5670, @mweibel)
• Fixes ready state of AzureMachinePool to avoid failing to reconcile a working VMSS. This improves reconciliation of MachinePools especially during scale up/down operations. (#5537, @mweibel)
• NIC should be try to fix itself when in ProvisioningFailed State (#5569, @nawazkh)
• Subnet spec should not be updated if status ASO CIDRs are empty. (#5584, @alimaazamat)
• Update ASO CRDs to v2.11.0 (#5512, @willie-yao)
• Upgraded aks-aso and aks-aso-clusterclass flavor templates to use the new API version. (#5622, @alimaazamat)

Other (Cleanup or Flake)

• Bump CAPI to v1.9.6 (#5530, @mboersma)
• Deprecated field NumberOfProbes has been replaced with ProbeThreshold (#5562, @jhixson74)
• Update Calico to 3.29 (#5523, @jsturtevant)
• Update default Kubernetes version to 1.32 (#5528, @jsturtevant)
• Bump CAPI to v1.10.2 (#5517, @tamalsaha)

Dependencies

Added

• cloud.google.com/go/auth/oauth2adapt: v0.2.6
• cloud.google.com/go/auth: v0.13.0
• cloud.google.com/go/monitoring: v1.21.2
• github.com/Azure/azure-kusto-go/azkustodata: 5
• github.com/Azure/azure-kusto-go/azkustoingest: 5
• github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry: v0.2.2
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/apimanagement/armapimanagement/v2: v2.1.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v6: v6.3.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v5: v5.0.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v6: v6.4.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal: v1.1.2
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v6: v6.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/notificationhubs/armnotificationhubs: v1.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/redhatopenshift/armredhatopenshift: v1.6.0
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets: v1.3.1
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal: v1.1.1
• github.com/Azure/azure-sdk-for-go/sdk/storage/azqueue: v1.0.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric: v0.48.1
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping: v0.48.1
• github.com/cenkalti/backoff/v5: v5.0.2
• github.com/go-jose/go-jose/v4: v4.0.4
• github.com/go-viper/mapstructure/v2: v2.2.1
• github.com/prashantv/gostub: v1.1.0
• github.com/rotisserie/eris: v0.5.4
• github.com/spiffe/go-spiffe/v2: v2.5.0
• github.com/zeebo/errs: v1.4.0
• go.uber.org/automaxprocs: v1.6.0
• sigs.k8s.io/cloud-provider-azure/pkg/azclient/cache: v0.4.0
• sigs.k8s.io/randfill: v1.0.0

Changed

• cel.dev/expr: v0.19.1 → v0.22.1
• cloud.google.com/go/iam: v1.1.5 → v1.2.2
• cloud.google.com/go/storage: v1.35.1 → v1.49.0
• cloud.google.com/go: v0.112.1 → v0.116.0
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.17.0 → v1.18.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.8.2 → v1.10.0
• github.com/Azure/azure-sdk-for-go/sdk/internal: v1.10.0 → v1.11.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault: v1.4.0 → v1.5.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage: v1.6.0 → v1.7.0
• github.com/Azure/azure-sdk-for-go/sdk/storage/azblob: v1.1.0 → v1.4.0
• github.com/Azure/azure-service-operator/v2: v2.11.0 → v2.13.0
• github.com/Azure/go-ansiterm: d185dfc → 306776e
• github.com/Azure/msi-dataplane: v0.4.0 → v0.4.3
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.3.3 → v1.4.2
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.25.0 → v1.26.0
• github.com/Microsoft/go-winio: v0.6.0 → v0.5.0
• github.com/census-instrumentation/opencensus-proto: v0.2.1 → v0.4.1
• github.com/cncf/xds/go: cff3c89 → 2f00578
• github.com/coredns/corefile-migration: v1.0.25 → v1.0.26
• github.com/cpuguy83/go-md2man/v2: v2.0.4 → v2.0.6
• github.com/docker/docker: v27.3.1+incompatible → v28.0.2+incompatible
• github.com/docker/go-units: v0.5.0 → v0.4.0
• github.com/emicklei/go-restful/v3: v3.12.1 → v3.12.2
• github.com/evanphx/json-patch: v5.9.0+incompatible → v5.9.11+incompatible
• github.com/exponent-io/jsonpath: d6023ce → 1de76d7
• github.com/go-logr/logr: v1.4.2 → v1.4.3
• github.com/go-openapi/jsonpointer: v0.21.0 → v0.21.1
• github.com/go-openapi/swag: v0.23.0 → v0.23.1
• github.com/go-sql-driver/mysql: v1.8.1 → v1.9.2
• github.com/golang-jwt/jwt/v4: v4.5.1 → v4.5.2
• github.com/google/btree: v1.0.1 → v1.1.3
• github.com/google/cel-go: v0.22.0 → v0.22.1
• github.com/google/gnostic-models: v0.6.8 → v0.6.9
• github.com/google/pprof: 40e02aa → 27863c8
• github.com/google/s2a-go: v0.1.7 → v0.1.8
• github.com/googleapis/enterprise-certificate-proxy: v0.3.2 → v0.3.4
• github.com/googleapis/gax-go/v2: v2.12.3 → v2.14.1
• github.com/gorilla/websocket: v1.5.0 → v1.5.3
• github.com/gregjones/httpcache: 9cad4c3 → 901d907
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.26.1 → v2.26.3
• github.com/jackc/pgx/v5: v5.7.1 → v5.7.4
• github.com/jonboulle/clockwork: v0.2.2 → v0.4.0
• github.com/keybase/go-keychain: 57a3676 → v0.0.1
• github.com/klauspost/compress: v1.17.9 → v1.18.0
• github.com/mailru/easyjson: v0.7.7 → v0.9.0
• github.com/matttproud/golang_protobuf_extensions: v1.0.4 → v1.0.1
• github.com/microsoft/go-mssqldb: v1.7.2 → v1.8.0
• github.com/moby/spdystream: v0.4.0 → v0.5.0
• github.com/onsi/ginkgo/v2: v2.22.2 → v2.23.4
• github.com/onsi/gomega: v1.36.2 → v1.37.0
• github.com/opencontainers/image-spec: 3a7f492 → v1.0.2
• github.com/pelletier/go-toml/v2: v2.2.2 → v2.2.3
• github.com/pkg/sftp: v1.13.7 → v1.13.9
• github.com/prometheus/client_golang: v1.20.5 → v1.22.0
• github.com/prometheus/client_model: v0.6.1 → v0.6.2
• github.com/prometheus/common: v0.62.0 → v0.64.0
• github.com/prometheus/procfs: v0.15.1 → v0.16.1
• github.com/redis/go-redis/v9: v9.7.0 → v9.8.0
• github.com/sagikazarmark/locafero: v0.4.0 → v0.7.0
• github.com/samber/lo: v1.47.0 → v1.49.1
• github.com/sergi/go-diff: v1.1.0 → v1.2.0
• github.com/spf13/afero: v1.11.0 → v1.12.0
• github.com/spf13/cast: v1.7.0 → v1.7.1
• github.com/spf13/cobra: v1.8.1 → v1.9.1
• github.com/spf13/viper: v1.19.0 → v1.20.0
• github.com/xiang90/probing: 43a291a → a49e3df
• go.etcd.io/bbolt: v1.3.9 → v1.3.11
• go.etcd.io/etcd/api/v3: v3.5.17 → v3.5.20
• go.etcd.io/etcd/client/pkg/v3: v3.5.17 → v3.5.20
• go.etcd.io/etcd/client/v2: v2.305.13 → v2.305.16
• go.etcd.io/etcd/client/v3: v3.5.17 → v3.5.20
• go.etcd.io/etcd/pkg/v3: v3.5.13 → v3.5.16
• go.etcd.io/etcd/raft/v3: v3.5.13 → v3.5.16
• go.etcd.io/etcd/server/v3: v3.5.13 → v3.5.16
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.53.0 → v0.54.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.54.0 → v0.60.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.35.0 → v1.36.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.35.0 → v1.36.0
• go.opentelemetry.io/otel/exporters/prometheus: v0.57.0 → v0.58.0
• go.opentelemetry.io/otel/metric: v1.35.0 → v1.36.0
• go.opentelemetry.io/otel/sdk/metric: v1.35.0 → v1.36.0
• go.opentelemetry.io/otel/sdk: v1.35.0 → v1.36.0
• go.opentelemetry.io/otel/trace: v1.35.0 → v1.36.0
• go.opentelemetry.io/otel: v1.35.0 → v1.36.0
• go.opentelemetry.io/proto/otlp: v1.5.0 → v1.6.0
• go.uber.org/mock: v0.5.0 → v0.5.2
• golang.org/x/crypto: v0.33.0 → v0.39.0
• golang.org/x/exp: 939b2ce → 054e65f
• golang.org/x/mod: v0.23.0 → v0.25.0
• golang.org/x/net: v0.35.0 → v0.40.0
• golang.org/x/oauth2: v0.26.0 → v0.30.0
• golang.org/x/sync: v0.11.0 → v0.15.0
• golang.org/x/sys: v0.30.0 → v0.33.0
• golang.org/x/term: v0.29.0 → v0.32.0
• golang.org/x/text: v0.22.0 → v0.26.0
• golang.org/x/time: v0.8.0 → v0.11.0
• golang.org/x/tools: v0.30.0 → v0.33.0
• golang.org/x/xerrors: 04be3eb → 5ec99f8
• gomodules.xyz/jsonpatch/v2: v2.4.0 → v2.5.0
• google.golang.org/api: v0.171.0 → v0.215.0
• google.golang.org/appengine: v1.6.8 → v1.6.7
• google.golang.org/genproto/googleapis/api: 56aae31 → 55703ea
• google.golang.org/genproto/googleapis/rpc: 56aae31 → 55703ea
• google.golang.org/genproto: 012b6fc → e639e21
• google.golang.org/grpc: v1.71.0 → v1.72.1
• google.golang.org/protobuf: v1.36.5 → v1.36.6
• k8s.io/api: v0.31.3 → v0.32.3
• k8s.io/apiextensions-apiserver: v0.31.3 → v0.32.3
• k8s.io/apimachinery: v0.31.3 → v0.32.3
• k8s.io/apiserver: v0.31.3 → v0.32.3
• k8s.io/cli-runtime: v0.30.3 → v0.32.3
• k8s.io/client-go: v0.31.3 → v0.32.3
• k8s.io/cloud-provider: v0.30.2 → v0.32.2
• k8s.io/cluster-bootstrap: v0.31.3 → v0.32.3
• k8s.io/code-generator: v0.31.3 → v0.32.3
• k8s.io/component-base: v0.31.3 → v0.32.3
• k8s.io/component-helpers: v0.30.3 → v0.32.3
• k8s.io/controller-manager: v0.30.2 → v0.32.2
• k8s.io/gengo/v2: a7b603a → 2b36238
• k8s.io/kms: v0.31.3 → v0.32.3
• k8s.io/kube-openapi: f7e401e → c8a335a
• k8s.io/kubectl: v0.30.3 → v0.32.3
• k8s.io/kubelet: v0.30.2 → v0.32.2
• k8s.io/metrics: v0.30.3 → v0.32.3
• k8s.io/utils: f90d014 → 1f6e0b7
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.30.3 → v0.32.0
• sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader: v0.0.16 → v0.4.1
• sigs.k8s.io/cloud-provider-azure/pkg/azclient: v0.0.29 → v0.5.9
• sigs.k8s.io/cloud-provider-azure: v1.30.4 → v1.32.3
• sigs.k8s.io/cluster-api/test: v1.9.5 → v1.10.2
• sigs.k8s.io/cluster-api: v1.9.5 → v1.10.2
• sigs.k8s.io/controller-runtime: v0.19.6 → v0.20.4
• sigs.k8s.io/json: bc3834c → cfa47c3
• sigs.k8s.io/kind: v0.27.0 → v0.29.0
• sigs.k8s.io/kustomize/api: 6ce0bf3 → v0.18.0
• sigs.k8s.io/kustomize/kustomize/v5: 6ce0bf3 → v5.5.0
• sigs.k8s.io/kustomize/kyaml: 6ce0bf3 → v0.18.1
• sigs.k8s.io/structured-merge-diff/v4: v4.4.1 → v4.6.0

Removed

• cloud.google.com/go/compute: v1.24.0
• cloud.google.com/go/firestore: v1.15.0
• cloud.google.com/go/longrunning: v0.5.5
• github.com/Azure/azure-kusto-go: v0.15.3
• github.com/Azure/azure-pipeline-go: v0.2.3
• github.com/Azure/azure-sdk-for-go/sdk/keyvault/azsecrets: v0.12.0
• github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal: v0.7.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/apimanagement/armapimanagement: v1.1.1
• github.com/Azure/azure-storage-queue-go: c06a8ef
• github.com/Azure/go-autorest/autorest/to: v0.4.0
• github.com/Azure/go-autorest/autorest/validation: v0.3.1
• github.com/alessio/shellescape: v1.4.2
• github.com/antlr/antlr4/runtime/Go/antlr/v4: 8188dc5
• github.com/armon/go-metrics: v0.4.1
• github.com/chzyer/logex: v1.1.10
• github.com/chzyer/test: a1ea475
• github.com/client9/misspell: v0.3.4
• github.com/daviddengcn/go-colortext: v1.0.0
• github.com/fvbommel/sortorder: v1.1.0
• github.com/go-task/slim-sprig: 52ccab3
• github.com/golang-jwt/jwt: v3.2.1+incompatible
• github.com/golang/mock: v1.1.1
• github.com/googleapis/google-cloud-go-testing: 1c9a4c6
• github.com/hashicorp/consul/api: v1.28.2
• github.com/hashicorp/errwrap: v1.1.0
• github.com/hashicorp/go-immutable-radix: v1.3.1
• github.com/hashicorp/go-multierror: v1.1.1
• github.com/hashicorp/go-rootcerts: v1.0.2
• github.com/hashicorp/hcl: v1.0.0
• github.com/hashicorp/serf: v0.10.1
• github.com/imdario/mergo: v0.3.16
• github.com/magiconair/properties: v1.8.8
• github.com/mattn/go-ieproxy: v0.0.11
• github.com/mitchellh/mapstructure: v1.5.0
• github.com/nats-io/nats.go: v1.34.0
• github.com/nats-io/nkeys: v0.4.7
• github.com/nats-io/nuid: v1.0.1
• github.com/russross/blackfriday: v1.6.0
• github.com/sagikazarmark/crypt: v0.19.0
• github.com/sagikazarmark/slog-shim: v0.1.0
• github.com/xeipuuv/gojsonpointer: 4e3ac27
• github.com/xeipuuv/gojsonreference: bd5ef7b
• github.com/xeipuuv/gojsonschema: v1.2.0
• go.starlark.net: a134d8f
• golang.org/x/lint: d0100b6
• gopkg.in/ini.v1: v1.67.0
• honnef.co/go/tools: ea95bdf

Details

v1.19.0...v1.20.0