v1.14.0

Changes by Kind

Feature

• Add additional Printer Columns like "Ready", "Severity", "Reason" and "Message" to CAPZ resources (#4442, @prashantrewar)
• Add support for AKS Extensions and Marketplace Offers (#4360, @willie-yao)
• Add support for Azure CNI Powered by Cilium (#4522, @willie-yao)
• Allow ASO to install other CRDs (#4547, @nawazkh)
• Allow adding pre-existing privateDNSZone to AKS clusters (#4572, @nawazkh)
• CAPZ now uses metadata.ownerReferences instead of the sigs.k8s.io_cluster-api-provider-azure_owned label to track ownership of ASO resources (#4499, @nojnhuh)
• EXPERIMENTAL: Added fields to AzureManagedControlPlane and AzureManagedMachinePool to supply arbitrary JSON merge patches to underlying ASO resources (#4527, @nojnhuh)
• Enable ASO in creating configMap for OIDC Issuer URL (#4551, @nawazkh)
• Expose AKS preview features (#4617, @willie-yao)
• Support for AKS Security Profile (#4245, @LochanRn)
• Support for Auto upgrade channels in AKS. (#4129, @LochanRn)
• Support to deploy infra clusters using a single subnet for both control plane and worker nodes. (#4253, @LochanRn)
• Use existing virtualNetwork from a different rg (#4606, @nawazkh)

Bug or Regression

• CAPZ now deletes ASO resources it manages if references to them are removed from CAPZ resource specs (#4506, @nojnhuh)
• Correcting AzureManagedMachinePool subnet name validation webhook to match Azure subnet naming rules. (#4511, @MagnusRef)
• Fixed a bug where tags applied by Azure Policy were keeping CAPZ from reconciling ASO ResourceGroups and ManagedClusters (#4531, @nojnhuh)
• Make PlatformFaultDomainCount & ZoneBalance configurable on AzureMachinePools (#4554, @willie-yao)
• Service CIDR addition to AKS Cluster should be independent of DNS Service IP (#4503, @nawazkh)

Other (Cleanup or Flake)

• Bump CAPI to v1.6.2 (#4585, @mboersma)

Dependencies

Added

• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/kubernetesconfiguration/armkubernetesconfiguration: v1.1.1

Changed

• cloud.google.com/go/accessapproval: v1.7.1 → v1.7.4
• cloud.google.com/go/accesscontextmanager: v1.8.1 → v1.8.4
• cloud.google.com/go/aiplatform: v1.48.0 → v1.57.0
• cloud.google.com/go/analytics: v0.21.3 → v0.21.6
• cloud.google.com/go/apigateway: v1.6.1 → v1.6.4
• cloud.google.com/go/apigeeconnect: v1.6.1 → v1.6.4
• cloud.google.com/go/apigeeregistry: v0.7.1 → v0.8.2
• cloud.google.com/go/appengine: v1.8.1 → v1.8.4
• cloud.google.com/go/area120: v0.8.1 → v0.8.4
• cloud.google.com/go/artifactregistry: v1.14.1 → v1.14.6
• cloud.google.com/go/asset: v1.14.1 → v1.15.3
• cloud.google.com/go/assuredworkloads: v1.11.1 → v1.11.4
• cloud.google.com/go/automl: v1.13.1 → v1.13.4
• cloud.google.com/go/baremetalsolution: v1.1.1 → v1.2.3
• cloud.google.com/go/batch: v1.3.1 → v1.7.0
• cloud.google.com/go/beyondcorp: v1.0.0 → v1.0.3
• cloud.google.com/go/bigquery: v1.53.0 → v1.57.1
• cloud.google.com/go/billing: v1.16.0 → v1.18.0
• cloud.google.com/go/binaryauthorization: v1.6.1 → v1.8.0
• cloud.google.com/go/certificatemanager: v1.7.1 → v1.7.4
• cloud.google.com/go/channel: v1.16.0 → v1.17.3
• cloud.google.com/go/cloudbuild: v1.13.0 → v1.15.0
• cloud.google.com/go/clouddms: v1.6.1 → v1.7.3
• cloud.google.com/go/cloudtasks: v1.12.1 → v1.12.4
• cloud.google.com/go/compute: v1.23.0 → v1.23.3
• cloud.google.com/go/contactcenterinsights: v1.10.0 → v1.12.1
• cloud.google.com/go/container: v1.24.0 → v1.29.0
• cloud.google.com/go/containeranalysis: v0.10.1 → v0.11.3
• cloud.google.com/go/datacatalog: v1.16.0 → v1.19.0
• cloud.google.com/go/dataflow: v0.9.1 → v0.9.4
• cloud.google.com/go/dataform: v0.8.1 → v0.9.1
• cloud.google.com/go/datafusion: v1.7.1 → v1.7.4
• cloud.google.com/go/datalabeling: v0.8.1 → v0.8.4
• cloud.google.com/go/dataplex: v1.9.0 → v1.13.0
• cloud.google.com/go/dataproc/v2: v2.0.1 → v2.3.0
• cloud.google.com/go/dataqna: v0.8.1 → v0.8.4
• cloud.google.com/go/datastore: v1.13.0 → v1.15.0
• cloud.google.com/go/datastream: v1.10.0 → v1.10.3
• cloud.google.com/go/deploy: v1.13.0 → v1.16.0
• cloud.google.com/go/dialogflow: v1.40.0 → v1.47.0
• cloud.google.com/go/dlp: v1.10.1 → v1.11.1
• cloud.google.com/go/documentai: v1.22.0 → v1.23.6
• cloud.google.com/go/domains: v0.9.1 → v0.9.4
• cloud.google.com/go/edgecontainer: v1.1.1 → v1.1.4
• cloud.google.com/go/essentialcontacts: v1.6.2 → v1.6.5
• cloud.google.com/go/eventarc: v1.13.0 → v1.13.3
• cloud.google.com/go/filestore: v1.7.1 → v1.8.0
• cloud.google.com/go/firestore: v1.13.0 → v1.14.0
• cloud.google.com/go/functions: v1.15.1 → v1.15.4
• cloud.google.com/go/gkebackup: v1.3.0 → v1.3.4
• cloud.google.com/go/gkeconnect: v0.8.1 → v0.8.4
• cloud.google.com/go/gkehub: v0.14.1 → v0.14.4
• cloud.google.com/go/gkemulticloud: v1.0.0 → v1.0.3
• cloud.google.com/go/gsuiteaddons: v1.6.1 → v1.6.4
• cloud.google.com/go/iam: v1.1.1 → v1.1.5
• cloud.google.com/go/iap: v1.8.1 → v1.9.3
• cloud.google.com/go/ids: v1.4.1 → v1.4.4
• cloud.google.com/go/iot: v1.7.1 → v1.7.4
• cloud.google.com/go/kms: v1.15.0 → v1.15.5
• cloud.google.com/go/language: v1.10.1 → v1.12.2
• cloud.google.com/go/lifesciences: v0.9.1 → v0.9.4
• cloud.google.com/go/logging: v1.7.0 → v1.8.1
• cloud.google.com/go/longrunning: v0.5.1 → v0.5.4
• cloud.google.com/go/managedidentities: v1.6.1 → v1.6.4
• cloud.google.com/go/maps: v1.4.0 → v1.6.2
• cloud.google.com/go/mediatranslation: v0.8.1 → v0.8.4
• cloud.google.com/go/memcache: v1.10.1 → v1.10.4
• cloud.google.com/go/metastore: v1.12.0 → v1.13.3
• cloud.google.com/go/monitoring: v1.15.1 → v1.16.3
• cloud.google.com/go/networkconnectivity: v1.12.1 → v1.14.3
• cloud.google.com/go/networkmanagement: v1.8.0 → v1.9.3
• cloud.google.com/go/networksecurity: v0.9.1 → v0.9.4
• cloud.google.com/go/notebooks: v1.9.1 → v1.11.2
• cloud.google.com/go/optimization: v1.4.1 → v1.6.2
• cloud.google.com/go/orchestration: v1.8.1 → v1.8.4
• cloud.google.com/go/orgpolicy: v1.11.1 → v1.11.4
• cloud.google.com/go/osconfig: v1.12.1 → v1.12.4
• cloud.google.com/go/oslogin: v1.10.1 → v1.12.2
• cloud.google.com/go/phishingprotection: v0.8.1 → v0.8.4
• cloud.google.com/go/policytroubleshooter: v1.8.0 → v1.10.2
• cloud.google.com/go/privatecatalog: v0.9.1 → v0.9.4
• cloud.google.com/go/recaptchaenterprise/v2: v2.7.2 → v2.9.0
• cloud.google.com/go/recommendationengine: v0.8.1 → v0.8.4
• cloud.google.com/go/recommender: v1.10.1 → v1.11.3
• cloud.google.com/go/redis: v1.13.1 → v1.14.1
• cloud.google.com/go/resourcemanager: v1.9.1 → v1.9.4
• cloud.google.com/go/resourcesettings: v1.6.1 → v1.6.4
• cloud.google.com/go/retail: v1.14.1 → v1.14.4
• cloud.google.com/go/run: v1.2.0 → v1.3.3
• cloud.google.com/go/scheduler: v1.10.1 → v1.10.5
• cloud.google.com/go/secretmanager: v1.11.1 → v1.11.4
• cloud.google.com/go/security: v1.15.1 → v1.15.4
• cloud.google.com/go/securitycenter: v1.23.0 → v1.24.3
• cloud.google.com/go/servicedirectory: v1.11.0 → v1.11.3
• cloud.google.com/go/shell: v1.7.1 → v1.7.4
• cloud.google.com/go/spanner: v1.47.0 → v1.53.1
• cloud.google.com/go/speech: v1.19.0 → v1.21.0
• cloud.google.com/go/storagetransfer: v1.10.0 → v1.10.3
• cloud.google.com/go/talent: v1.6.2 → v1.6.5
• cloud.google.com/go/texttospeech: v1.7.1 → v1.7.4
• cloud.google.com/go/tpu: v1.6.1 → v1.6.4
• cloud.google.com/go/trace: v1.10.1 → v1.10.4
• cloud.google.com/go/translate: v1.8.2 → v1.9.3
• cloud.google.com/go/video: v1.19.0 → v1.20.3
• cloud.google.com/go/videointelligence: v1.11.1 → v1.11.4
• cloud.google.com/go/vision/v2: v2.7.2 → v2.7.5
• cloud.google.com/go/vmmigration: v1.7.1 → v1.7.4
• cloud.google.com/go/vmwareengine: v1.0.0 → v1.0.3
• cloud.google.com/go/vpcaccess: v1.7.1 → v1.7.4
• cloud.google.com/go/webrisk: v1.9.1 → v1.9.4
• cloud.google.com/go/websecurityscanner: v1.6.1 → v1.6.4
• cloud.google.com/go/workflows: v1.11.1 → v1.12.3
• cloud.google.com/go: v0.110.7 → v0.111.0
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.9.1 → v1.10.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.4.0 → v1.5.1
• github.com/Azure/azure-sdk-for-go/sdk/internal: v1.5.1 → v1.5.2
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5: v5.4.0 → v5.5.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v4: v4.6.0 → v4.7.0
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.2.0 → v1.2.1
• github.com/cncf/xds/go: e9ce688 → 523115e
• github.com/evanphx/json-patch/v5: v5.7.0 → v5.9.0
• github.com/golang-jwt/jwt/v5: v5.0.0 → v5.2.0
• github.com/google/uuid: v1.5.0 → v1.6.0
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.16.2 → v2.19.0
• github.com/onsi/ginkgo/v2: v2.14.0 → v2.15.0
• github.com/onsi/gomega: v1.30.0 → v1.31.1
• github.com/pkg/browser: 681adbf → 5ac0b6a
• github.com/prometheus/client_model: v0.5.0 → v0.6.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.21.0 → v1.24.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.21.0 → v1.24.0
• go.opentelemetry.io/otel/exporters/prometheus: v0.44.0 → v0.46.0
• go.opentelemetry.io/otel/metric: v1.21.0 → v1.24.0
• go.opentelemetry.io/otel/sdk/metric: v1.21.0 → v1.24.0
• go.opentelemetry.io/otel/sdk: v1.21.0 → v1.24.0
• go.opentelemetry.io/otel/trace: v1.21.0 → v1.24.0
• go.opentelemetry.io/otel: v1.21.0 → v1.24.0
• go.opentelemetry.io/proto/otlp: v1.0.0 → v1.1.0
• golang.org/x/crypto: v0.18.0 → v0.20.0
• golang.org/x/mod: v0.14.0 → v0.15.0
• golang.org/x/net: v0.19.0 → v0.21.0
• golang.org/x/oauth2: v0.14.0 → v0.15.0
• golang.org/x/sys: v0.16.0 → v0.17.0
• golang.org/x/term: v0.16.0 → v0.17.0
• google.golang.org/genproto/googleapis/api: 007df8e → 50ed04b
• google.golang.org/genproto/googleapis/rpc: e6e6cda → 50ed04b
• google.golang.org/genproto: 007df8e → 995d672
• google.golang.org/grpc: v1.59.0 → v1.61.1
• google.golang.org/protobuf: v1.31.0 → v1.32.0
• sigs.k8s.io/cluster-api/test: v1.6.1 → v1.6.2
• sigs.k8s.io/cluster-api: v1.6.1 → v1.6.2
• sigs.k8s.io/controller-runtime: v0.16.3 → v0.16.5
• sigs.k8s.io/kind: v0.20.0 → v0.22.0
• go.etcd.io/etcd/client/pkg/v3: v3.5.9 → v3.5.10
• go.etcd.io/etcd/client/v2: v2.305.7 → v2.305.9
• go.etcd.io/etcd/client/v3: v3.5.9 → v3.5.10
• go.etcd.io/etcd/pkg/v3: v3.5.7 → v3.5.9
• go.etcd.io/etcd/raft/v3: v3.5.7 → v3.5.9
• go.etcd.io/etcd/server/v3: v3.5.7 → v3.5.9
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.44.0 → v0.46.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.20.0 → v1.21.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.20.0 → v1.21.0
• go.opentelemetry.io/otel/exporters/prometheus: v0.43.0 → v0.44.0
• go.opentelemetry.io/otel/metric: v1.20.0 → v1.21.0
• go.opentelemetry.io/otel/sdk/metric: v1.20.0 → v1.21.0
• go.opentelemetry.io/otel/sdk: v1.20.0 → v1.21.0
• go.opentelemetry.io/otel/trace: v1.20.0 → v1.21.0
• go.opentelemetry.io/otel: v1.20.0 → v1.21.0
• go.starlark.net: 8dd3e2e → a134d8f
• go.uber.org/mock: v0.3.0 → v0.4.0
• golang.org/x/crypto: v0.15.0 → v0.18.0
• golang.org/x/net: v0.17.0 → v0.19.0
• golang.org/x/oauth2: v0.13.0 → v0.14.0
• golang.org/x/sync: v0.4.0 → v0.5.0
• golang.org/x/sys: v0.14.0 → v0.16.0
• golang.org/x/term: v0.14.0 → v0.16.0
• golang.org/x/time: v0.4.0 → v0.5.0
• golang.org/x/tools: v0.14.0 → v0.16.1
• google.golang.org/api: v0.122.0 → v0.143.0
• google.golang.org/genproto/googleapis/api: b8732ec → 007df8e
• google.golang.org/genproto/googleapis/rpc: b8732ec → e6e6cda
• google.golang.org/genproto: b8732ec → 007df8e
• k8s.io/api: v0.27.2 → v0.28.4
• k8s.io/apiextensions-apiserver: v0.27.2 → v0.28.4
• k8s.io/apimachinery: v0.28.3 → v0.28.4
• k8s.io/apiserver: v0.27.2 → v0.28.4
• k8s.io/cli-runtime: v0.27.2 → v0.28.4
• k8s.io/client-go: v0.27.2 → v0.28.4
• k8s.io/cloud-provider: v0.27.1 → v0.28.4
• k8s.io/cluster-bootstrap: v0.27.2 → v0.28.4
• k8s.io/code-generator: v0.27.2 → v0.28.4
• k8s.io/component-base: v0.28.3 → v0.28.4
• k8s.io/component-helpers: v0.27.2 → v0.28.4
• k8s.io/controller-manager: v0.27.1 → v0.28.4
• k8s.io/kms: v0.28.3 → v0.28.4
• k8s.io/kube-openapi: 8b0f38b → 2695361
• k8s.io/kubectl: v0.27.2 → v0.28.4
• k8s.io/kubelet: v0.27.1 → v0.28.4
• k8s.io/metrics: v0.27.2 → v0.28.4
• sigs.k8s.io/cloud-provider-azure: v1.27.7 → v1.28.4
• sigs.k8s.io/cluster-api/test: v1.5.3 → v1.6.1
• sigs.k8s.io/cluster-api: v1.5.3 → v1.6.1
• sigs.k8s.io/kustomize/api: v0.13.2 → 6ce0bf3
• sigs.k8s.io/kustomize/kustomize/v5: v5.0.1 → 6ce0bf3
• sigs.k8s.io/kustomize/kyaml: v0.14.1 → 6ce0bf3

Removed

• contrib.go.opencensus.io/exporter/prometheus: v0.1.0
• github.com/Azure/aad-pod-identity: v1.8.17
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal: v1.1.2
• github.com/OneOfOne/xxhash: v1.2.2
• github.com/alecthomas/template: a0175ee
• github.com/antlr/antlr4/runtime/Go/antlr: v1.4.10
• github.com/armon/circbuf: bbbad09
• github.com/armon/go-radix: 7fddfc3
• github.com/bgentry/speakeasy: v0.1.0
• github.com/bketelsen/crypt: 5cbc8cc
• github.com/buger/jsonparser: v1.1.1
• github.com/cespare/xxhash: v1.1.0
• github.com/coreos/bbolt: v1.3.2
• github.com/coreos/etcd: v3.3.13+incompatible
• github.com/coreos/go-iptables: v0.3.0
• github.com/coreos/pkg: 399ea9e
• github.com/dgrijalva/jwt-go: v3.2.0+incompatible
• github.com/dgryski/go-sip13: e10d5fe
• github.com/docopt/docopt-go: ee0de3b
• github.com/flowstack/go-jsonschema: v0.1.1
• github.com/flynn/go-shlex: 3f9db97
• github.com/ghodss/yaml: v1.0.0
• github.com/go-kit/kit: v0.8.0
• github.com/go-stack/stack: v1.8.0
• github.com/google/gnostic: v0.6.9
• github.com/google/go-github/v48: v48.2.0
• github.com/googleapis/gnostic: v0.5.5
• github.com/gopherjs/gopherjs: 0766667
• github.com/gorilla/mux: v1.8.0
• github.com/hashicorp/consul/sdk: v0.1.1
• github.com/hashicorp/errwrap: v1.0.0
• github.com/hashicorp/go-msgpack: v0.5.3
• github.com/hashicorp/go-multierror: v1.0.0
• github.com/hashicorp/go-sockaddr: v1.0.0
• github.com/hashicorp/go-syslog: v1.0.0
• github.com/hashicorp/go-uuid: v1.0.1
• github.com/hashicorp/go.net: v0.0.1
• github.com/hashicorp/logutils: v1.0.0
• github.com/hashicorp/mdns: v1.0.0
• github.com/hashicorp/memberlist: v0.1.3
• github.com/jtolds/gls: v4.20.0+incompatible
• github.com/konsorten/go-windows-terminal-sequences: v1.0.1
• github.com/kr/logfmt: b84e30a
• github.com/miekg/dns: v1.0.14
• github.com/mitchellh/cli: v1.0.0
• github.com/mitchellh/go-testing-interface: v1.0.0
• github.com/mitchellh/gox: v0.4.0
• github.com/mitchellh/iochan: v1.0.0
• github.com/oklog/ulid: v1.3.1
• github.com/pascaldekloe/goe: 57f6aae
• github.com/posener/complete: v1.1.1
• github.com/prometheus/tsdb: v0.7.1
• github.com/ryanuber/columnize: 9b3edd6
• github.com/sean-/seed: e2103e2
• github.com/shurcooL/sanitized_anchor_name: v1.0.0
• github.com/smartystreets/assertions: b2de0cb
• github.com/smartystreets/goconvey: v1.6.4
• github.com/spaolacci/murmur3: f09979e
• github.com/spf13/jwalterweatherman: v1.1.0
• github.com/vishvananda/netlink: e5fd1f8
• github.com/vishvananda/netns: db3c7e5
• gopkg.in/alecthomas/kingpin.v2: v2.2.6
• gopkg.in/resty.v1: v1.12.0