From 27f0f7c63efc41529fba8f5ee7de5b08f92af562 Mon Sep 17 00:00:00 2001 From: Brian Moore Date: Thu, 6 Feb 2025 07:26:23 -0600 Subject: [PATCH 1/2] Update CHANGELOG.md Co-authored-by: Shashank Barsin --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 346ef7b6..421f3085 100755 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -37,7 +37,7 @@ Monitor the release status by regions at [AKS-Release-Tracker](https://releases. * Fixed a bug that prevented upgrade from starting if the PDB `expectedPods` count is less than the `minAvailable` count. * Fixed an error condition when AKS attempts to remove the taint `disk.csi.azure.com/agent-not-ready=NoExecute` on node startup. More details: [https://github.com/kubernetes-sigs/azuredisk-csi-driver/pull/2309](https://github.com/kubernetes-sigs/azuredisk-csi-driver/pull/2309) * Addressed an issue related to node subnet `IPAM Invoker Add failed with error: Failed to allocate pool` and the associated [agentbaker release](https://github.com/Azure/AgentBaker/pull/5551). - * Added validation when a cluster migrates to CNI Overlay to block migration when there is a custom ip-masq-agent config in the kube-system namespace. This prevents loss of connectivity during migration. See the [AKS documentation](https://learn.microsoft.com/en-us/azure/aks/upgrade-aks-ipam-and-dataplane) for more information. + * Added validation when a cluster migrates to CNI Overlay to block migration when there is a custom ip-masq-agent config in the kube-system namespace. This prevents loss of connectivity during migration. See the [AKS documentation](https://learn.microsoft.com/azure/aks/upgrade-aks-ipam-and-dataplane) for more information. * Component updates: * Cilium v1.14 version from v1.14.18-241220 to v1.14.18-250107 (v1.14.18-1) to include a fix for cilium dual stack upgrades. On upgrades, cilium config changes bpf-filter-priority from 1 to 2 but is not cleaning up the old filters at the old priority and as a result impacts connectivity. This patch will fix this bug, see GH issue in cilium repo for more details https://github.com/cilium/cilium/issues/36172 From f8856d0f15cbb22eb40c8dd5096272092f5d4c9d Mon Sep 17 00:00:00 2001 From: Brian Moore Date: Thu, 6 Feb 2025 07:36:43 -0600 Subject: [PATCH 2/2] Update CHANGELOG.md Co-authored-by: Shashank Barsin --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 421f3085..22b45320 100755 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -60,7 +60,7 @@ Monitor the release status by regions at [AKS-Release-Tracker](https://releases. * Update agentbaker version to v0.20250122.0 * Update Cilium v1.16 from v1.16.5-250108 to v1.16.5-250110 (v1.16.5-1) to include a fix for Cilium dual stack upgrades. This will fix [https://github.com/cilium/cilium/issues/36172](https://github.com/cilium/cilium/issues/36172). The following CVEs are included in [v1.16.5](https://github.com/cilium/cilium/releases/tag/v1.16.5) * [CVE-2024-52529](https://nvd.nist.gov/vuln/detail/CVE-2024-52529) - * The following CVEs were patched in Cilium v.1.14.15 + * The following CVEs were patched in Cilium v1.14.15 * [CVE-2024-24789](https://nvd.nist.gov/vuln/detail/CVE-2024-24789) * [CVE-2024-24790](https://nvd.nist.gov/vuln/detail/CVE-2024-24790) * [CVE-2024-24791](https://nvd.nist.gov/vuln/detail/CVE-2024-24791)