Release v0.20261030.0 · Azure/AgentBaker

What's Changed

feat: add Azure Container Linux CVM FIPS image by Ankita Pareek (@Ankita13-code) in #9777
feat: report entire provision output from ANC by lilypan26 in #9877
feat: send VM resource ID to live-patching service in check-hotfix by C.YAO (@YaoC) in #9894
feat: create new aks network recovery for azure linux by Nishchay (@awesomenix) in #9895
feat(aks-node-controller): support optional containerd image-pull settings by Sri Harsha (@SriHarsha001) in #9888
feat(acl): convert ACL VHDs to COSI and publish to PMC by Adams Anaglo (@adamsanaglo) in #8848

fix: fix incorrectly formatted comments to reduce customdata size by lilypan26 in #9886
fix: clean up remaining unstripped comments to reduce customdata size by Abigail Liang (@abigailliang-aks-sig-node) in #9892
fix(gpu): raise nvidia-cdi-refresh TimeoutStartSec for multi-GPU nodes (GB300) by Xu Xue (@xuexu6666) in #9899
fix: configure artifact streaming before starting services by Julius Liu (@juliusl) with Copilot in #9843
fix: make telemetry event file names unique by Thibault Cohen (@titilambert) in #9631
fix: still return cse with customdataonlyprovisioning by lilypan26 in #9941
fix: order and gate the cgroup telemetry collector units by Thibault Cohen (@titilambert) in #9641
fix: use shfmt minifier and move unused functions by Nishchay (@awesomenix) in #9940
fix: reduce legacy Linux custom data encoding overhead by Shun Lyu (@sinmentis) in #9880
fix(security): restrict node secret file perms and avoid logging AD realm password by Calvin S. (@calvin197) in #9776
refactor: share cgroup telemetry event publishing by Thibault Cohen (@titilambert) in #9931

fix: use current MCR Trivy database repository by Artur Khantimirov (@r2k1) in #9872
fix: update ab e2e firewall to allow chrony ntp sync for 2604 by Zachary (@zachary-bailey) in #9866
fix(e2e): restore scoped roles during shared RG setup by janenotjung-hue in #9912
feat: enable ACL CVM FIPS image builds by default by mayankfz in #9918
fix: optimize Renovate Debian package lookups by Devinwong in #9921
fix: move configuration outside packer_source by Nishchay (@awesomenix) in #9919
feat(e2e): add E2E resource garbage collection pipeline definition by Cameron Meissner (@cameronmeissner) in #9922
fix: make ACL base image version overrides optional in the run form by Adams Anaglo (@adamsanaglo) in #9943
test: disable COSI update scenarios by bfjelds in #9942
test: add minification verification test by Nishchay (@awesomenix) in #9945
test: add offline eMudhra Linux host trust check by Artur Khantimirov (@r2k1) in #9879

feat: support shared Windows Gen2 images by Shun Lyu (@sinmentis) in #9717
chore(deps): update windows_nanoserver_servercore (patch) by renovate[bot] in #9905
chore(deps): bump aks-secure-tls-bootstrap-client on windows to v1.1.6 by Cameron Meissner (@cameronmeissner) in #9906
feat: migrate Windows ACR credential provider to use Dalec packages by An Cheng (@anndono) in #9275

chore(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.7 in /image-fetcher by dependabot[bot] in #9932
chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /vhdbuilder/cosi-uploader by dependabot[bot] in #9939
chore(deps): bump github/codeql-action/init from 4.39.0 to 4.39.1 by dependabot[bot] in #9923
chore(deps): bump github/codeql-action/analyze from 4.39.0 to 4.39.1 by dependabot[bot] in #9924
chore(deps): bump actions/setup-python from 7.0.0 to 7.1.0 by dependabot[bot] in #9925
chore(deps): bump github/codeql-action/autobuild from 4.39.0 to 4.39.1 by dependabot[bot] in #9926

chore(components): refresh cached DNS and autoscaler images by OBULAPURAM VENKATA ASHOK KUMAR (@ashokobulapuram7) with Copilot in #9884
chore: centralize and update ACL image version to 20261024 by aadhar-agarwal in #9898
chore: update ACL image version to 20261027 by aadhar-agarwal in #9933
chore(deps): update dependency blobfuse2 to v2.5.6 by renovate[bot] in #9893
chore(deps): update aks-secure-tls-bootstrap-client (patch) by renovate[bot] in #9885
chore: cache Cilium 1.20 by Camryn Lee (@camrynl) in #9873
chore(deps): update kubelet-kubectl (patch) by renovate[bot] in #9652
chore(deps): update dependency aks-secure-tls-bootstrap-client to v1.1.6 by renovate[bot] in #9896
chore(deps): update kubelet-kubectl (patch) by renovate[bot] in #9897
chore(deps): update dependency oras-project/oras to v1.3.5 by renovate[bot] in #9849
chore(deps): update dependency oras-project/oras to v1.3.6 by renovate[bot] in #9907
fix: align cached secrets store images with rp versions by jiashun0011 in #9929
feat: bake NPD into Azure Linux 3 Kata VHDs by chmill-zz in #9844
fix: update linux waagent by Nishchay (@awesomenix) in #9949

docs(apiserver): document risk-acceptance for missing TLS/authn by Calvin S. (@calvin197) in #9875
docs(cse_main): document risk-acceptance for unquoted OUTBOUND_COMMAND by Calvin S. (@calvin197) in #9876

Full Changelog: v0.20261023.0...v0.20261030.0

🤖 Generated by GitHub Copilot