Workload cluster release azure-33.1.0 for CAPZ
Update Kubernetes to v1.33.6, Flatcar to v4459.2.1 and various component upgrades.
Changes compared to v33.0.1
Components
- cluster-azure from v4.2.0 to v4.4.0
- Flatcar from v4230.2.3 to v4459.2.1
- Kubernetes from v1.33.5 to v1.33.6
- os-tooling from v1.26.1 to v1.26.2
cluster-azure v4.2.0…v4.4.0
Changed
- Make
global.baseDomainandglobal.managementClusterrequired values. These values will be passed to the chart when deploying it from thecluster-app-installation-valuesConfigMap in the default namespace. - Extract required values to its own central file to avoid repeating the
requiredkeyword and error messages. This is normally done automatically by a Kyverno policy. - Chart: Update
clusterto v4.4.0. - Install External DNS CRDs and watch default sources.
- Chart: Update
clusterto v4.3.0.
Apps
- cert-exporter from v2.9.12 to v2.9.14
- cert-manager from v3.9.3 to v3.9.4
- cilium from v1.3.1 to v1.3.2
- etcd-defrag from v1.2.1 to v1.2.3
- etcd-k8s-res-count-exporter from v1.10.9 to v1.10.11
- k8s-audit-metrics from v0.10.8 to v0.10.10
- node-exporter from v1.20.7 to v1.20.9
- observability-policies from v0.0.2 to v0.0.3
- security-bundle from v1.13.1 to v1.15.0
- teleport-kube-agent from v0.10.6 to v0.10.7
cert-exporter v2.9.12…v2.9.14
Changed
- Go: Update dependencies.
- Go: Update dependencies.
cert-manager v3.9.3…v3.9.4
Added
- Add E2E tests using apptest-framework for automated PR testing across multiple providers (CAPA, CAPV, CAPZ, CAPVCD).
- Basic test suite: Validates fresh installations
- Upgrade test suite: Tests upgrade scenarios and certificate reconciliation
- Add certificate issuance integration test to cluster-test-suites.
Changed
- Upgrade cert-manager to v1.18.2.
cilium v1.3.1…v1.3.2
Changed
- Upgrade Cilium to v1.18.4.
etcd-defrag v1.2.1…v1.2.3
Changed
- Chart: Update dependency ahrtr/etcd-defrag to v0.36.0. (#69)
- Chart: Update dependency ahrtr/etcd-defrag to v0.35.0. (#64)
etcd-k8s-res-count-exporter v1.10.9…v1.10.11
Changed
- Go: Update dependencies.
- Go: Update dependencies.
k8s-audit-metrics v0.10.8…v0.10.10
Changed
- Go: Update dependencies.
- Go: Update dependencies.
node-exporter v1.20.7…v1.20.9
Changed
- Go: Update dependencies.
- Go: Update dependencies.
observability-policies v0.0.2…v0.0.3
Fixed
- Missing RBAC for kyverno-report-controller
security-bundle v1.13.1…v1.15.0
Added
- Add
kubescape(app) version v0.0.4.
Changed
- Update
kyverno(app) to v0.21.1. - Update
kyverno-crds(app) to v1.15.0. - Update
kyverno(app) to v0.20.1. - Update
kyverno-crds(app) to v1.14.0. - Update
kyverno-policies(app) to v0.24.0. - Update
reports-server(app) to v0.0.3.
teleport-kube-agent v0.10.6…v0.10.7
Added
- Add
ephemeral-storagerequests and limits to satisfy Kyverno policyrequire-emptydir-requests-and-limits.
Changed
- Enable upstream-provided Prometheus PodMonitor to scrape metrics from Teleport Kube Agent pods.