Update app-routing-nginx-to-gateway-api-migration.md - #456
Conversation
It is already supported now.
|
jacobbaek (@jacobbaek) : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change. KingOliver |
|
jacobbaek (@jacobbaek) : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change. KingOliver |
|
Learn Build status updates of commit d3157b6: ✅ Validation status: passed
For more details, please refer to the build report. |
|
Can you review the proposed changes? IMPORTANT: When the changes are ready for publication, adding a #label:"aq-pr-triaged" |
|
#sign-off |
|
Invalid command: '#sign-off'. Only the assigned author of one or more file in this PR can sign off. KingOliver |
Oliver King (@OliverMKing) We'll merge this PR. GitHub didn't accept your sign-off command because the metadata has your Microsoft alias listed for the |
be51738
into
MicrosoftDocs:main
* Remove outdated ACL FIPS limitation note * cluster extensions - updates for core extensions (#432) * cluster extensions - updates for core extensions * addressed pr comment * Update support policies and clarify coverage (#436) Updated the support policies document for Azure Kubernetes Service (AKS) clarify support coverage. * Auto Publish – main to live - 2026-06-11 01:30 UTC (#3314) * Add Eviction Pod Autoscaler documentation and references in upgrade guides - Introduced a new article for the Eviction Pod Autoscaler, detailing its functionality and installation. - Updated existing articles to include references to the Eviction Pod Autoscaler for proactive management of Pod Disruption Budgets during AKS upgrades. * Enhance Eviction Pod Autoscaler documentation with PDB-related drain failure identification and clarification on automatic PDB creation and scaling behavior * Add PDB Manager documentation and update references in the TOC * Rename to automatic Pod Disruption Budget management; clarify autoscaler coordination, StatefulSets, overprovisioning, and node-pool orthogonality * Address review feedback: drop stale redirect, broaden title, clarify namespace controls, remove redundant preview note, link to TSG hub * pencil edit * Rename automatic-pdb-management.md to automatic-pod-disruption-budget-management.md and update references * Refactor Azure CNI dynamic IP allocation benefits Removed duplicate benefits of Azure CNI dynamic IP allocation and cleaned up formatting. Remove merge conflict. * Confirm merge from repo_sync_working_branch to main to sync with https://github.com/MicrosoftDocs/azure-aks-docs (branch main) (#3304) * Remove outdated ACL FIPS limitation note * cluster extensions - updates for core extensions (#432) * cluster extensions - updates for core extensions * addressed pr comment * Update support policies and clarify coverage (#436) Updated the support policies document for Azure Kubernetes Service (AKS) clarify support coverage. --------- Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: flora-taagen <florataagen@microsoft.com> Co-authored-by: Regan Downer <v-rdowner@microsoft.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: Pradeep Agarwal <pradeepjsr05@gmail.com> Co-authored-by: Alaa <16225699+abarqawi@users.noreply.github.com> --------- Co-authored-by: Kaarthikeyan Subramanian <kaarthis@microsoft.com> Co-authored-by: Stacy Chambers <102548089+Stacyrch140@users.noreply.github.com> Co-authored-by: KAARTHIKEYAN SUBRAMANIAN <97623105+kaarthis@users.noreply.github.com> Co-authored-by: Colin Cooper <72402153+v-ccolin@users.noreply.github.com> Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: flora-taagen <florataagen@microsoft.com> Co-authored-by: Regan Downer <v-rdowner@microsoft.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: Pradeep Agarwal <pradeepjsr05@gmail.com> Co-authored-by: Alaa <16225699+abarqawi@users.noreply.github.com> * Update network isolated BYO ACR limitation (#438) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Update query for public IP ID in nat-gateway.md (#440) * Clarify OS SKU support in limitations section (#439) Updated limitations section to clarify OS SKU support. * Fix typo in CNI overview document (#443) Corrected 'Vet' to 'VNet' for clarity in the overlay networking section. * Document SecurityPatch channel limitation with CMK disk encryption deny policy (#441) * Document SecurityPatch channel limitation with CMK disk encryption deny policy Add a known limitation noting that the SecurityPatch node OS auto-upgrade channel is incompatible with an Azure Policy that uses a deny effect to require customer-managed key (CMK) OS disk encryption, since the temporary copy- VMSS created during patching is blocked with RequestDisallowedByPolicy. Recommend the NodeImage channel when an org-wide deny policy is required. Co-Authored-By: Claude <noreply@anthropic.com> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Group CMK SecurityPatch limitation bullet with other node channel limitations * Resolve merge conflict --------- Co-authored-by: Yao Cheng (AKS) <chyao@microsoft.com> Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Add AKS-2026-0005 security bulletin for Ubuntu kernel CVE reclassifications (#445) * Add AKS-2026-0005 security bulletin for Ubuntu kernel CVE reclassifications Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Correct Ubuntu CVE status transition (needs-triage -> needed/deferred) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Clarify manual verification via exact linux-azure version on Ubuntu CVE Tracker Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Restructure resolutions into recommended actions vs context to remove conflicting guidance Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Remove raw-count framing; focus on version-based exposure verification Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Call out Ubuntu 22.04 scope in title and opening so others can skip Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Drop skip-this-bulletin phrasing from opening Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Scope bulletin to Ubuntu 22.04 only; remove 24.04 comparative claims Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Link supported OS versions and K8s compatibility in migration guidance Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Align CVE status terminology to Canonical website statuses Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Drop reclassification-confirmation step from how-to-identify Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Fix resource group name in AKS creation command (#452) * Update non-Cilium container network metrics tables (Retina) (#454) * Update retina metrics * PR comments * Update app-routing-nginx-to-gateway-api-migration.md (#456) It is already supported now. * Resolve syncing conflicts from repo_sync_working_branch to main (#457) * updating login commands * Update articles/aks/how-to-configure-container-network-insights-agent.md Co-authored-by: learn-build-service-prod-09[bot] <274431102+learn-build-service-prod-09[bot]@users.noreply.github.com> * Update articles/aks/how-to-configure-container-network-insights-agent.md Co-authored-by: learn-build-service-prod-09[bot] <274431102+learn-build-service-prod-09[bot]@users.noreply.github.com> * Update articles/aks/how-to-configure-container-network-insights-agent.md Co-authored-by: learn-build-service-prod-09[bot] <274431102+learn-build-service-prod-09[bot]@users.noreply.github.com> * Fix environment variable name for Key Vault secret * Addition of new portal experiences for placement. (#3569) * Addition of new portal experiences for placement. * Tidy up. * Apply suggestions from code review Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> * Additoinal tweaks. * Fixing up linked items. * More tidy up. * Apply suggestions from code review Co-authored-by: learn-build-service-prod-02[bot] <274428175+learn-build-service-prod-02[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-08[bot] <274430765+learn-build-service-prod-08[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-07[bot] <274430390+learn-build-service-prod-07[bot]@users.noreply.github.com> * Fix ups. * Filename typos * Update articles/kubernetes-fleet/intelligent-resource-placement.md Co-authored-by: learn-build-service-prod-05[bot] <274429479+learn-build-service-prod-05[bot]@users.noreply.github.com> * Expand GVK, start work on resource placement. * Fix. * Apply suggestions from code review Co-authored-by: learn-build-service-prod-09[bot] <274431102+learn-build-service-prod-09[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-05[bot] <274429479+learn-build-service-prod-05[bot]@users.noreply.github.com> * Update articles/kubernetes-fleet/quickstart-namespace-scoped-resource-propagation.md Co-authored-by: learn-build-service-prod-04[bot] <274428985+learn-build-service-prod-04[bot]@users.noreply.github.com> * Fix up private hub cluster creation. * Update articles/kubernetes-fleet/quickstart-create-fleet-and-members.md Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> * Finish up create namespace-scoped resources. * Fix filename typo and bad YAML formatting. * Adding member selection dialog. * Final tweaks main docs. * Update strategy concept doc to remove preview. * Fix typo * Fix up broken preview links. * First cut DP strategies doc, * Fix image issue. * more work. * Final tweak. * Tweak. * staged rollouts first cut * Fix broken links / nested sections. * Add pivot placeholders * Portal add labels. * More work. * Rearranged because portal experience has different flow. * Add strategy steps. * More work. * Updating * Fix images * Complete run with approval. * Final tweaks * Learn Author Assistant tweaks. * Fix summary. * Review feedback applied. * Fix broken links. --------- Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-02[bot] <274428175+learn-build-service-prod-02[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-08[bot] <274430765+learn-build-service-prod-08[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-07[bot] <274430390+learn-build-service-prod-07[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-05[bot] <274429479+learn-build-service-prod-05[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-09[bot] <274431102+learn-build-service-prod-09[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-04[bot] <274428985+learn-build-service-prod-04[bot]@users.noreply.github.com> * Add documentation on maxAllowedFailures for update strategies (#3553) * Add documentation on maxAllowedFailures for update strategies * update alert example * Fleet -> Fleet Manager * Example * FAQ for MAF * Add explanation for 'Completed' status in update runs * Apply suggestion from @learn-build-service-prod-06[bot] Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> * Update API version for maxAllowedFailures setting in update strategy documentation * Updated docs per comments * Update articles/kubernetes-fleet/update-create-update-strategy.md Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> * Update articles/kubernetes-fleet/concepts-update-orchestration.md Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> * Update articles/kubernetes-fleet/concepts-update-orchestration.md Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> * Update articles/kubernetes-fleet/concepts-update-orchestration.md Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> * address original PR feedback * move autoupgrade note section, update example json * address automated pr feedback * address autoamted feedback * feedback * chore: retrigger PR checks --------- Co-authored-by: Sean Hobbs <sehobbs@microsoft.com> Co-authored-by: Sean Hobbs <ealianis@outlook.com> Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> Co-authored-by: francis <ftran@microsoft.com> * Remove beta note, fix lots of LAA suggestions. * Remove missed preview note. * kubernetes-fleet: Fix clustermesh networking Fix different issues around: - Bad resource group for both fleet and cluster - Bad NETWORK_NAME - Missing mbr- prefix on "az fleet member update" Signed-off-by: Mauricio Vásquez <mauriciov@microsoft.com> * Confirm merge from repo_sync_working_branch to main to sync with https://github.com/MicrosoftDocs/azure-aks-docs (branch main) (#3594) * Remove outdated ACL FIPS limitation note * cluster extensions - updates for core extensions (#432) * cluster extensions - updates for core extensions * addressed pr comment * Update support policies and clarify coverage (#436) Updated the support policies document for Azure Kubernetes Service (AKS) clarify support coverage. * Auto Publish – main to live - 2026-06-11 01:30 UTC (#3314) * Add Eviction Pod Autoscaler documentation and references in upgrade guides - Introduced a new article for the Eviction Pod Autoscaler, detailing its functionality and installation. - Updated existing articles to include references to the Eviction Pod Autoscaler for proactive management of Pod Disruption Budgets during AKS upgrades. * Enhance Eviction Pod Autoscaler documentation with PDB-related drain failure identification and clarification on automatic PDB creation and scaling behavior * Add PDB Manager documentation and update references in the TOC * Rename to automatic Pod Disruption Budget management; clarify autoscaler coordination, StatefulSets, overprovisioning, and node-pool orthogonality * Address review feedback: drop stale redirect, broaden title, clarify namespace controls, remove redundant preview note, link to TSG hub * pencil edit * Rename automatic-pdb-management.md to automatic-pod-disruption-budget-management.md and update references * Refactor Azure CNI dynamic IP allocation benefits Removed duplicate benefits of Azure CNI dynamic IP allocation and cleaned up formatting. Remove merge conflict. * Confirm merge from repo_sync_working_branch to main to sync with https://github.com/MicrosoftDocs/azure-aks-docs (branch main) (#3304) * Remove outdated ACL FIPS limitation note * cluster extensions - updates for core extensions (#432) * cluster extensions - updates for core extensions * addressed pr comment * Update support policies and clarify coverage (#436) Updated the support policies document for Azure Kubernetes Service (AKS) clarify support coverage. --------- Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: flora-taagen <florataagen@microsoft.com> Co-authored-by: Regan Downer <v-rdowner@microsoft.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: Pradeep Agarwal <pradeepjsr05@gmail.com> Co-authored-by: Alaa <16225699+abarqawi@users.noreply.github.com> --------- Co-authored-by: Kaarthikeyan Subramanian <kaarthis@microsoft.com> Co-authored-by: Stacy Chambers <102548089+Stacyrch140@users.noreply.github.com> Co-authored-by: KAARTHIKEYAN SUBRAMANIAN <97623105+kaarthis@users.noreply.github.com> Co-authored-by: Colin Cooper <72402153+v-ccolin@users.noreply.github.com> Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: flora-taagen <florataagen@microsoft.com> Co-authored-by: Regan Downer <v-rdowner@microsoft.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: Pradeep Agarwal <pradeepjsr05@gmail.com> Co-authored-by: Alaa <16225699+abarqawi@users.noreply.github.com> * Update network isolated BYO ACR limitation (#438) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Update query for public IP ID in nat-gateway.md (#440) * Clarify OS SKU support in limitations section (#439) Updated limitations section to clarify OS SKU support. * Fix typo in CNI overview document (#443) Corrected 'Vet' to 'VNet' for clarity in the overlay networking section. * Document SecurityPatch channel limitation with CMK disk encryption deny policy (#441) * Document SecurityPatch channel limitation with CMK disk encryption deny policy Add a known limitation noting that the SecurityPatch node OS auto-upgrade channel is incompatible with an Azure Policy that uses a deny effect to require customer-managed key (CMK) OS disk encryption, since the temporary copy- VMSS created during patching is blocked with RequestDisallowedByPolicy. Recommend the NodeImage channel when an org-wide deny policy is required. Co-Authored-By: Claude <noreply@anthropic.com> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Group CMK SecurityPatch limitation bullet with other node channel limitations * Resolve merge conflict --------- Co-authored-by: Yao Cheng (AKS) <chyao@microsoft.com> Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Add AKS-2026-0005 security bulletin for Ubuntu kernel CVE reclassifications (#445) * Add AKS-2026-0005 security bulletin for Ubuntu kernel CVE reclassifications Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Correct Ubuntu CVE status transition (needs-triage -> needed/deferred) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Clarify manual verification via exact linux-azure version on Ubuntu CVE Tracker Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Restructure resolutions into recommended actions vs context to remove conflicting guidance Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Remove raw-count framing; focus on version-based exposure verification Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Call out Ubuntu 22.04 scope in title and opening so others can skip Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Drop skip-this-bulletin phrasing from opening Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Scope bulletin to Ubuntu 22.04 only; remove 24.04 comparative claims Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Link supported OS versions and K8s compatibility in migration guidance Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Align CVE status terminology to Canonical website statuses Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Drop reclassification-confirmation step from how-to-identify Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Fix resource group name in AKS creation command (#452) * Update non-Cilium container network metrics tables (Retina) (#454) * Update retina metrics * PR comments * Apply suggestions from code review Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> --------- Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: flora-taagen <florataagen@microsoft.com> Co-authored-by: Regan Downer <v-rdowner@microsoft.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: Pradeep Agarwal <pradeepjsr05@gmail.com> Co-authored-by: Alaa <16225699+abarqawi@users.noreply.github.com> Co-authored-by: Kaarthikeyan Subramanian <kaarthis@microsoft.com> Co-authored-by: Stacy Chambers <102548089+Stacyrch140@users.noreply.github.com> Co-authored-by: KAARTHIKEYAN SUBRAMANIAN <97623105+kaarthis@users.noreply.github.com> Co-authored-by: Colin Cooper <72402153+v-ccolin@users.noreply.github.com> Co-authored-by: Xinhe Li <xinhl@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Mutaz Nassar <32297719+mutazn@users.noreply.github.com> Co-authored-by: Husain <maenbos2@gmail.com> Co-authored-by: C.YAO <YaoC@users.noreply.github.com> Co-authored-by: Yao Cheng (AKS) <chyao@microsoft.com> Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: chrischangcode <161086178+chrischangcode@users.noreply.github.com> Co-authored-by: Sumiran Jaiswal <87477723+sumi0309@users.noreply.github.com> Co-authored-by: carlotaarvela <67275927+carlotaarvela@users.noreply.github.com> Co-authored-by: Tim Sherer <28902327+TimShererWithAquent@users.noreply.github.com> Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> * Remove kube-no-trouble from validation tools list Removed kube-no-trouble from the list of open-source tools for AKS upgrade validation as the project is no longer maintained * Restore memberSelector-based update strategy docs (#3551) * Revert "Revert memberSelector-based update strategy docs from PR #3036 (#3346)" This reverts commit 5517699. * Apply suggestion from @learn-build-service-prod-06[bot] Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> --------- Co-authored-by: yoobinshin <yoobinshin@microsoft.com> Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> --------- Signed-off-by: Mauricio Vásquez <mauriciov@microsoft.com> Co-authored-by: Shaifali Garg <shaifaligarg@microsoft.com> Co-authored-by: learn-build-service-prod-09[bot] <274431102+learn-build-service-prod-09[bot]@users.noreply.github.com> Co-authored-by: prmerger-automator[bot] <40007230+prmerger-automator[bot]@users.noreply.github.com> Co-authored-by: Peiyi Zhang <peiyizhang@microsoft.com> Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: Simon Waight <simon.waight@microsoft.com> Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-02[bot] <274428175+learn-build-service-prod-02[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-08[bot] <274430765+learn-build-service-prod-08[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-07[bot] <274430390+learn-build-service-prod-07[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-05[bot] <274429479+learn-build-service-prod-05[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-04[bot] <274428985+learn-build-service-prod-04[bot]@users.noreply.github.com> Co-authored-by: frantran <aznspartan117@gmail.com> Co-authored-by: Sean Hobbs <sehobbs@microsoft.com> Co-authored-by: Sean Hobbs <ealianis@outlook.com> Co-authored-by: francis <ftran@microsoft.com> Co-authored-by: Mauricio Vásquez <mauriciov@microsoft.com> Co-authored-by: flora-taagen <florataagen@microsoft.com> Co-authored-by: Regan Downer <v-rdowner@microsoft.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: Pradeep Agarwal <pradeepjsr05@gmail.com> Co-authored-by: Alaa <16225699+abarqawi@users.noreply.github.com> Co-authored-by: Kaarthikeyan Subramanian <kaarthis@microsoft.com> Co-authored-by: Stacy Chambers <102548089+Stacyrch140@users.noreply.github.com> Co-authored-by: KAARTHIKEYAN SUBRAMANIAN <97623105+kaarthis@users.noreply.github.com> Co-authored-by: Colin Cooper <72402153+v-ccolin@users.noreply.github.com> Co-authored-by: Xinhe Li <xinhl@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Mutaz Nassar <32297719+mutazn@users.noreply.github.com> Co-authored-by: Husain <maenbos2@gmail.com> Co-authored-by: C.YAO <YaoC@users.noreply.github.com> Co-authored-by: Yao Cheng (AKS) <chyao@microsoft.com> Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: chrischangcode <161086178+chrischangcode@users.noreply.github.com> Co-authored-by: Sumiran Jaiswal <87477723+sumi0309@users.noreply.github.com> Co-authored-by: carlotaarvela <67275927+carlotaarvela@users.noreply.github.com> Co-authored-by: Tim Sherer <28902327+TimShererWithAquent@users.noreply.github.com> Co-authored-by: Steve Griffith <stgriffi@microsoft.com> Co-authored-by: Yoo Bin Shin <44984496+nibooy@users.noreply.github.com> Co-authored-by: yoobinshin <yoobinshin@microsoft.com> Co-authored-by: Diana Richards <103777760+v-dirichards@users.noreply.github.com> --------- Signed-off-by: Mauricio Vásquez <mauriciov@microsoft.com> Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: flora-taagen <florataagen@microsoft.com> Co-authored-by: Regan Downer <v-rdowner@microsoft.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: Pradeep Agarwal <pradeepjsr05@gmail.com> Co-authored-by: Alaa <16225699+abarqawi@users.noreply.github.com> Co-authored-by: Kaarthikeyan Subramanian <kaarthis@microsoft.com> Co-authored-by: Stacy Chambers <102548089+Stacyrch140@users.noreply.github.com> Co-authored-by: KAARTHIKEYAN SUBRAMANIAN <97623105+kaarthis@users.noreply.github.com> Co-authored-by: Colin Cooper <72402153+v-ccolin@users.noreply.github.com> Co-authored-by: Xinhe Li <xinhl@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Mutaz Nassar <32297719+mutazn@users.noreply.github.com> Co-authored-by: Husain <maenbos2@gmail.com> Co-authored-by: C.YAO <YaoC@users.noreply.github.com> Co-authored-by: Yao Cheng (AKS) <chyao@microsoft.com> Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: chrischangcode <161086178+chrischangcode@users.noreply.github.com> Co-authored-by: Sumiran Jaiswal <87477723+sumi0309@users.noreply.github.com> Co-authored-by: carlotaarvela <67275927+carlotaarvela@users.noreply.github.com> Co-authored-by: jacobbaek <dubaek@gmail.com> Co-authored-by: Shaifali Garg <shaifaligarg@microsoft.com> Co-authored-by: learn-build-service-prod-09[bot] <274431102+learn-build-service-prod-09[bot]@users.noreply.github.com> Co-authored-by: prmerger-automator[bot] <40007230+prmerger-automator[bot]@users.noreply.github.com> Co-authored-by: Peiyi Zhang <peiyizhang@microsoft.com> Co-authored-by: Simon Waight <simon.waight@microsoft.com> Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-02[bot] <274428175+learn-build-service-prod-02[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-08[bot] <274430765+learn-build-service-prod-08[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-07[bot] <274430390+learn-build-service-prod-07[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-05[bot] <274429479+learn-build-service-prod-05[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-04[bot] <274428985+learn-build-service-prod-04[bot]@users.noreply.github.com> Co-authored-by: frantran <aznspartan117@gmail.com> Co-authored-by: Sean Hobbs <sehobbs@microsoft.com> Co-authored-by: Sean Hobbs <ealianis@outlook.com> Co-authored-by: francis <ftran@microsoft.com> Co-authored-by: Mauricio Vásquez <mauriciov@microsoft.com> Co-authored-by: Tim Sherer <28902327+TimShererWithAquent@users.noreply.github.com> Co-authored-by: Steve Griffith <stgriffi@microsoft.com> Co-authored-by: Yoo Bin Shin <44984496+nibooy@users.noreply.github.com> Co-authored-by: yoobinshin <yoobinshin@microsoft.com> Co-authored-by: Diana Richards <103777760+v-dirichards@users.noreply.github.com>
…s://github.com/MicrosoftDocs/azure-aks-docs (branch main) (#3641) * Remove outdated ACL FIPS limitation note * cluster extensions - updates for core extensions (#432) * cluster extensions - updates for core extensions * addressed pr comment * Update support policies and clarify coverage (#436) Updated the support policies document for Azure Kubernetes Service (AKS) clarify support coverage. * Auto Publish – main to live - 2026-06-11 01:30 UTC (#3314) * Add Eviction Pod Autoscaler documentation and references in upgrade guides - Introduced a new article for the Eviction Pod Autoscaler, detailing its functionality and installation. - Updated existing articles to include references to the Eviction Pod Autoscaler for proactive management of Pod Disruption Budgets during AKS upgrades. * Enhance Eviction Pod Autoscaler documentation with PDB-related drain failure identification and clarification on automatic PDB creation and scaling behavior * Add PDB Manager documentation and update references in the TOC * Rename to automatic Pod Disruption Budget management; clarify autoscaler coordination, StatefulSets, overprovisioning, and node-pool orthogonality * Address review feedback: drop stale redirect, broaden title, clarify namespace controls, remove redundant preview note, link to TSG hub * pencil edit * Rename automatic-pdb-management.md to automatic-pod-disruption-budget-management.md and update references * Refactor Azure CNI dynamic IP allocation benefits Removed duplicate benefits of Azure CNI dynamic IP allocation and cleaned up formatting. Remove merge conflict. * Confirm merge from repo_sync_working_branch to main to sync with https://github.com/MicrosoftDocs/azure-aks-docs (branch main) (#3304) * Remove outdated ACL FIPS limitation note * cluster extensions - updates for core extensions (#432) * cluster extensions - updates for core extensions * addressed pr comment * Update support policies and clarify coverage (#436) Updated the support policies document for Azure Kubernetes Service (AKS) clarify support coverage. --------- Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: flora-taagen <florataagen@microsoft.com> Co-authored-by: Regan Downer <v-rdowner@microsoft.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: Pradeep Agarwal <pradeepjsr05@gmail.com> Co-authored-by: Alaa <16225699+abarqawi@users.noreply.github.com> --------- Co-authored-by: Kaarthikeyan Subramanian <kaarthis@microsoft.com> Co-authored-by: Stacy Chambers <102548089+Stacyrch140@users.noreply.github.com> Co-authored-by: KAARTHIKEYAN SUBRAMANIAN <97623105+kaarthis@users.noreply.github.com> Co-authored-by: Colin Cooper <72402153+v-ccolin@users.noreply.github.com> Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: flora-taagen <florataagen@microsoft.com> Co-authored-by: Regan Downer <v-rdowner@microsoft.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: Pradeep Agarwal <pradeepjsr05@gmail.com> Co-authored-by: Alaa <16225699+abarqawi@users.noreply.github.com> * Update network isolated BYO ACR limitation (#438) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Update query for public IP ID in nat-gateway.md (#440) * Clarify OS SKU support in limitations section (#439) Updated limitations section to clarify OS SKU support. * Fix typo in CNI overview document (#443) Corrected 'Vet' to 'VNet' for clarity in the overlay networking section. * Document SecurityPatch channel limitation with CMK disk encryption deny policy (#441) * Document SecurityPatch channel limitation with CMK disk encryption deny policy Add a known limitation noting that the SecurityPatch node OS auto-upgrade channel is incompatible with an Azure Policy that uses a deny effect to require customer-managed key (CMK) OS disk encryption, since the temporary copy- VMSS created during patching is blocked with RequestDisallowedByPolicy. Recommend the NodeImage channel when an org-wide deny policy is required. Co-Authored-By: Claude <noreply@anthropic.com> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Group CMK SecurityPatch limitation bullet with other node channel limitations * Resolve merge conflict --------- Co-authored-by: Yao Cheng (AKS) <chyao@microsoft.com> Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Add AKS-2026-0005 security bulletin for Ubuntu kernel CVE reclassifications (#445) * Add AKS-2026-0005 security bulletin for Ubuntu kernel CVE reclassifications Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Correct Ubuntu CVE status transition (needs-triage -> needed/deferred) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Clarify manual verification via exact linux-azure version on Ubuntu CVE Tracker Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Restructure resolutions into recommended actions vs context to remove conflicting guidance Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Remove raw-count framing; focus on version-based exposure verification Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Call out Ubuntu 22.04 scope in title and opening so others can skip Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Drop skip-this-bulletin phrasing from opening Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Scope bulletin to Ubuntu 22.04 only; remove 24.04 comparative claims Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Link supported OS versions and K8s compatibility in migration guidance Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Align CVE status terminology to Canonical website statuses Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Drop reclassification-confirmation step from how-to-identify Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Fix resource group name in AKS creation command (#452) * Update non-Cilium container network metrics tables (Retina) (#454) * Update retina metrics * PR comments * Update app-routing-nginx-to-gateway-api-migration.md (#456) It is already supported now. * Resolve syncing conflicts from repo_sync_working_branch to main (#457) * updating login commands * Update articles/aks/how-to-configure-container-network-insights-agent.md Co-authored-by: learn-build-service-prod-09[bot] <274431102+learn-build-service-prod-09[bot]@users.noreply.github.com> * Update articles/aks/how-to-configure-container-network-insights-agent.md Co-authored-by: learn-build-service-prod-09[bot] <274431102+learn-build-service-prod-09[bot]@users.noreply.github.com> * Update articles/aks/how-to-configure-container-network-insights-agent.md Co-authored-by: learn-build-service-prod-09[bot] <274431102+learn-build-service-prod-09[bot]@users.noreply.github.com> * Fix environment variable name for Key Vault secret * Addition of new portal experiences for placement. (#3569) * Addition of new portal experiences for placement. * Tidy up. * Apply suggestions from code review Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> * Additoinal tweaks. * Fixing up linked items. * More tidy up. * Apply suggestions from code review Co-authored-by: learn-build-service-prod-02[bot] <274428175+learn-build-service-prod-02[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-08[bot] <274430765+learn-build-service-prod-08[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-07[bot] <274430390+learn-build-service-prod-07[bot]@users.noreply.github.com> * Fix ups. * Filename typos * Update articles/kubernetes-fleet/intelligent-resource-placement.md Co-authored-by: learn-build-service-prod-05[bot] <274429479+learn-build-service-prod-05[bot]@users.noreply.github.com> * Expand GVK, start work on resource placement. * Fix. * Apply suggestions from code review Co-authored-by: learn-build-service-prod-09[bot] <274431102+learn-build-service-prod-09[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-05[bot] <274429479+learn-build-service-prod-05[bot]@users.noreply.github.com> * Update articles/kubernetes-fleet/quickstart-namespace-scoped-resource-propagation.md Co-authored-by: learn-build-service-prod-04[bot] <274428985+learn-build-service-prod-04[bot]@users.noreply.github.com> * Fix up private hub cluster creation. * Update articles/kubernetes-fleet/quickstart-create-fleet-and-members.md Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> * Finish up create namespace-scoped resources. * Fix filename typo and bad YAML formatting. * Adding member selection dialog. * Final tweaks main docs. * Update strategy concept doc to remove preview. * Fix typo * Fix up broken preview links. * First cut DP strategies doc, * Fix image issue. * more work. * Final tweak. * Tweak. * staged rollouts first cut * Fix broken links / nested sections. * Add pivot placeholders * Portal add labels. * More work. * Rearranged because portal experience has different flow. * Add strategy steps. * More work. * Updating * Fix images * Complete run with approval. * Final tweaks * Learn Author Assistant tweaks. * Fix summary. * Review feedback applied. * Fix broken links. --------- Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-02[bot] <274428175+learn-build-service-prod-02[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-08[bot] <274430765+learn-build-service-prod-08[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-07[bot] <274430390+learn-build-service-prod-07[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-05[bot] <274429479+learn-build-service-prod-05[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-09[bot] <274431102+learn-build-service-prod-09[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-04[bot] <274428985+learn-build-service-prod-04[bot]@users.noreply.github.com> * Add documentation on maxAllowedFailures for update strategies (#3553) * Add documentation on maxAllowedFailures for update strategies * update alert example * Fleet -> Fleet Manager * Example * FAQ for MAF * Add explanation for 'Completed' status in update runs * Apply suggestion from @learn-build-service-prod-06[bot] Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> * Update API version for maxAllowedFailures setting in update strategy documentation * Updated docs per comments * Update articles/kubernetes-fleet/update-create-update-strategy.md Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> * Update articles/kubernetes-fleet/concepts-update-orchestration.md Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> * Update articles/kubernetes-fleet/concepts-update-orchestration.md Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> * Update articles/kubernetes-fleet/concepts-update-orchestration.md Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> * address original PR feedback * move autoupgrade note section, update example json * address automated pr feedback * address autoamted feedback * feedback * chore: retrigger PR checks --------- Co-authored-by: Sean Hobbs <sehobbs@microsoft.com> Co-authored-by: Sean Hobbs <ealianis@outlook.com> Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> Co-authored-by: francis <ftran@microsoft.com> * Remove beta note, fix lots of LAA suggestions. * Remove missed preview note. * kubernetes-fleet: Fix clustermesh networking Fix different issues around: - Bad resource group for both fleet and cluster - Bad NETWORK_NAME - Missing mbr- prefix on "az fleet member update" Signed-off-by: Mauricio Vásquez <mauriciov@microsoft.com> * Confirm merge from repo_sync_working_branch to main to sync with https://github.com/MicrosoftDocs/azure-aks-docs (branch main) (#3594) * Remove outdated ACL FIPS limitation note * cluster extensions - updates for core extensions (#432) * cluster extensions - updates for core extensions * addressed pr comment * Update support policies and clarify coverage (#436) Updated the support policies document for Azure Kubernetes Service (AKS) clarify support coverage. * Auto Publish – main to live - 2026-06-11 01:30 UTC (#3314) * Add Eviction Pod Autoscaler documentation and references in upgrade guides - Introduced a new article for the Eviction Pod Autoscaler, detailing its functionality and installation. - Updated existing articles to include references to the Eviction Pod Autoscaler for proactive management of Pod Disruption Budgets during AKS upgrades. * Enhance Eviction Pod Autoscaler documentation with PDB-related drain failure identification and clarification on automatic PDB creation and scaling behavior * Add PDB Manager documentation and update references in the TOC * Rename to automatic Pod Disruption Budget management; clarify autoscaler coordination, StatefulSets, overprovisioning, and node-pool orthogonality * Address review feedback: drop stale redirect, broaden title, clarify namespace controls, remove redundant preview note, link to TSG hub * pencil edit * Rename automatic-pdb-management.md to automatic-pod-disruption-budget-management.md and update references * Refactor Azure CNI dynamic IP allocation benefits Removed duplicate benefits of Azure CNI dynamic IP allocation and cleaned up formatting. Remove merge conflict. * Confirm merge from repo_sync_working_branch to main to sync with https://github.com/MicrosoftDocs/azure-aks-docs (branch main) (#3304) * Remove outdated ACL FIPS limitation note * cluster extensions - updates for core extensions (#432) * cluster extensions - updates for core extensions * addressed pr comment * Update support policies and clarify coverage (#436) Updated the support policies document for Azure Kubernetes Service (AKS) clarify support coverage. --------- Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: flora-taagen <florataagen@microsoft.com> Co-authored-by: Regan Downer <v-rdowner@microsoft.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: Pradeep Agarwal <pradeepjsr05@gmail.com> Co-authored-by: Alaa <16225699+abarqawi@users.noreply.github.com> --------- Co-authored-by: Kaarthikeyan Subramanian <kaarthis@microsoft.com> Co-authored-by: Stacy Chambers <102548089+Stacyrch140@users.noreply.github.com> Co-authored-by: KAARTHIKEYAN SUBRAMANIAN <97623105+kaarthis@users.noreply.github.com> Co-authored-by: Colin Cooper <72402153+v-ccolin@users.noreply.github.com> Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: flora-taagen <florataagen@microsoft.com> Co-authored-by: Regan Downer <v-rdowner@microsoft.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: Pradeep Agarwal <pradeepjsr05@gmail.com> Co-authored-by: Alaa <16225699+abarqawi@users.noreply.github.com> * Update network isolated BYO ACR limitation (#438) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Update query for public IP ID in nat-gateway.md (#440) * Clarify OS SKU support in limitations section (#439) Updated limitations section to clarify OS SKU support. * Fix typo in CNI overview document (#443) Corrected 'Vet' to 'VNet' for clarity in the overlay networking section. * Document SecurityPatch channel limitation with CMK disk encryption deny policy (#441) * Document SecurityPatch channel limitation with CMK disk encryption deny policy Add a known limitation noting that the SecurityPatch node OS auto-upgrade channel is incompatible with an Azure Policy that uses a deny effect to require customer-managed key (CMK) OS disk encryption, since the temporary copy- VMSS created during patching is blocked with RequestDisallowedByPolicy. Recommend the NodeImage channel when an org-wide deny policy is required. Co-Authored-By: Claude <noreply@anthropic.com> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Group CMK SecurityPatch limitation bullet with other node channel limitations * Resolve merge conflict --------- Co-authored-by: Yao Cheng (AKS) <chyao@microsoft.com> Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Add AKS-2026-0005 security bulletin for Ubuntu kernel CVE reclassifications (#445) * Add AKS-2026-0005 security bulletin for Ubuntu kernel CVE reclassifications Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Correct Ubuntu CVE status transition (needs-triage -> needed/deferred) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Clarify manual verification via exact linux-azure version on Ubuntu CVE Tracker Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Restructure resolutions into recommended actions vs context to remove conflicting guidance Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Remove raw-count framing; focus on version-based exposure verification Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Call out Ubuntu 22.04 scope in title and opening so others can skip Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Drop skip-this-bulletin phrasing from opening Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Scope bulletin to Ubuntu 22.04 only; remove 24.04 comparative claims Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Link supported OS versions and K8s compatibility in migration guidance Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Align CVE status terminology to Canonical website statuses Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Drop reclassification-confirmation step from how-to-identify Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Fix resource group name in AKS creation command (#452) * Update non-Cilium container network metrics tables (Retina) (#454) * Update retina metrics * PR comments * Apply suggestions from code review Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> --------- Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: flora-taagen <florataagen@microsoft.com> Co-authored-by: Regan Downer <v-rdowner@microsoft.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: Pradeep Agarwal <pradeepjsr05@gmail.com> Co-authored-by: Alaa <16225699+abarqawi@users.noreply.github.com> Co-authored-by: Kaarthikeyan Subramanian <kaarthis@microsoft.com> Co-authored-by: Stacy Chambers <102548089+Stacyrch140@users.noreply.github.com> Co-authored-by: KAARTHIKEYAN SUBRAMANIAN <97623105+kaarthis@users.noreply.github.com> Co-authored-by: Colin Cooper <72402153+v-ccolin@users.noreply.github.com> Co-authored-by: Xinhe Li <xinhl@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Mutaz Nassar <32297719+mutazn@users.noreply.github.com> Co-authored-by: Husain <maenbos2@gmail.com> Co-authored-by: C.YAO <YaoC@users.noreply.github.com> Co-authored-by: Yao Cheng (AKS) <chyao@microsoft.com> Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: chrischangcode <161086178+chrischangcode@users.noreply.github.com> Co-authored-by: Sumiran Jaiswal <87477723+sumi0309@users.noreply.github.com> Co-authored-by: carlotaarvela <67275927+carlotaarvela@users.noreply.github.com> Co-authored-by: Tim Sherer <28902327+TimShererWithAquent@users.noreply.github.com> Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> * Remove kube-no-trouble from validation tools list Removed kube-no-trouble from the list of open-source tools for AKS upgrade validation as the project is no longer maintained * Restore memberSelector-based update strategy docs (#3551) * Revert "Revert memberSelector-based update strategy docs from PR #3036 (#3346)" This reverts commit 5517699. * Apply suggestion from @learn-build-service-prod-06[bot] Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> --------- Co-authored-by: yoobinshin <yoobinshin@microsoft.com> Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> --------- Signed-off-by: Mauricio Vásquez <mauriciov@microsoft.com> Co-authored-by: Shaifali Garg <shaifaligarg@microsoft.com> Co-authored-by: learn-build-service-prod-09[bot] <274431102+learn-build-service-prod-09[bot]@users.noreply.github.com> Co-authored-by: prmerger-automator[bot] <40007230+prmerger-automator[bot]@users.noreply.github.com> Co-authored-by: Peiyi Zhang <peiyizhang@microsoft.com> Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: Simon Waight <simon.waight@microsoft.com> Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-02[bot] <274428175+learn-build-service-prod-02[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-08[bot] <274430765+learn-build-service-prod-08[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-07[bot] <274430390+learn-build-service-prod-07[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-05[bot] <274429479+learn-build-service-prod-05[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-04[bot] <274428985+learn-build-service-prod-04[bot]@users.noreply.github.com> Co-authored-by: frantran <aznspartan117@gmail.com> Co-authored-by: Sean Hobbs <sehobbs@microsoft.com> Co-authored-by: Sean Hobbs <ealianis@outlook.com> Co-authored-by: francis <ftran@microsoft.com> Co-authored-by: Mauricio Vásquez <mauriciov@microsoft.com> Co-authored-by: flora-taagen <florataagen@microsoft.com> Co-authored-by: Regan Downer <v-rdowner@microsoft.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: Pradeep Agarwal <pradeepjsr05@gmail.com> Co-authored-by: Alaa <16225699+abarqawi@users.noreply.github.com> Co-authored-by: Kaarthikeyan Subramanian <kaarthis@microsoft.com> Co-authored-by: Stacy Chambers <102548089+Stacyrch140@users.noreply.github.com> Co-authored-by: KAARTHIKEYAN SUBRAMANIAN <97623105+kaarthis@users.noreply.github.com> Co-authored-by: Colin Cooper <72402153+v-ccolin@users.noreply.github.com> Co-authored-by: Xinhe Li <xinhl@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Mutaz Nassar <32297719+mutazn@users.noreply.github.com> Co-authored-by: Husain <maenbos2@gmail.com> Co-authored-by: C.YAO <YaoC@users.noreply.github.com> Co-authored-by: Yao Cheng (AKS) <chyao@microsoft.com> Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: chrischangcode <161086178+chrischangcode@users.noreply.github.com> Co-authored-by: Sumiran Jaiswal <87477723+sumi0309@users.noreply.github.com> Co-authored-by: carlotaarvela <67275927+carlotaarvela@users.noreply.github.com> Co-authored-by: Tim Sherer <28902327+TimShererWithAquent@users.noreply.github.com> Co-authored-by: Steve Griffith <stgriffi@microsoft.com> Co-authored-by: Yoo Bin Shin <44984496+nibooy@users.noreply.github.com> Co-authored-by: yoobinshin <yoobinshin@microsoft.com> Co-authored-by: Diana Richards <103777760+v-dirichards@users.noreply.github.com> * Fix incorrect feature flag name for the VM node pool cluster autoscaler preview (#449) --------- Signed-off-by: Mauricio Vásquez <mauriciov@microsoft.com> Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: flora-taagen <florataagen@microsoft.com> Co-authored-by: Regan Downer <v-rdowner@microsoft.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: Pradeep Agarwal <pradeepjsr05@gmail.com> Co-authored-by: Alaa <16225699+abarqawi@users.noreply.github.com> Co-authored-by: Kaarthikeyan Subramanian <kaarthis@microsoft.com> Co-authored-by: Stacy Chambers <102548089+Stacyrch140@users.noreply.github.com> Co-authored-by: KAARTHIKEYAN SUBRAMANIAN <97623105+kaarthis@users.noreply.github.com> Co-authored-by: Colin Cooper <72402153+v-ccolin@users.noreply.github.com> Co-authored-by: Xinhe Li <xinhl@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Mutaz Nassar <32297719+mutazn@users.noreply.github.com> Co-authored-by: Husain <maenbos2@gmail.com> Co-authored-by: C.YAO <YaoC@users.noreply.github.com> Co-authored-by: Yao Cheng (AKS) <chyao@microsoft.com> Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: chrischangcode <161086178+chrischangcode@users.noreply.github.com> Co-authored-by: Sumiran Jaiswal <87477723+sumi0309@users.noreply.github.com> Co-authored-by: carlotaarvela <67275927+carlotaarvela@users.noreply.github.com> Co-authored-by: jacobbaek <dubaek@gmail.com> Co-authored-by: Shaifali Garg <shaifaligarg@microsoft.com> Co-authored-by: learn-build-service-prod-09[bot] <274431102+learn-build-service-prod-09[bot]@users.noreply.github.com> Co-authored-by: prmerger-automator[bot] <40007230+prmerger-automator[bot]@users.noreply.github.com> Co-authored-by: Peiyi Zhang <peiyizhang@microsoft.com> Co-authored-by: Simon Waight <simon.waight@microsoft.com> Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-02[bot] <274428175+learn-build-service-prod-02[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-08[bot] <274430765+learn-build-service-prod-08[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-07[bot] <274430390+learn-build-service-prod-07[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-05[bot] <274429479+learn-build-service-prod-05[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-04[bot] <274428985+learn-build-service-prod-04[bot]@users.noreply.github.com> Co-authored-by: frantran <aznspartan117@gmail.com> Co-authored-by: Sean Hobbs <sehobbs@microsoft.com> Co-authored-by: Sean Hobbs <ealianis@outlook.com> Co-authored-by: francis <ftran@microsoft.com> Co-authored-by: Mauricio Vásquez <mauriciov@microsoft.com> Co-authored-by: Tim Sherer <28902327+TimShererWithAquent@users.noreply.github.com> Co-authored-by: Steve Griffith <stgriffi@microsoft.com> Co-authored-by: Yoo Bin Shin <44984496+nibooy@users.noreply.github.com> Co-authored-by: yoobinshin <yoobinshin@microsoft.com> Co-authored-by: Diana Richards <103777760+v-dirichards@users.noreply.github.com> Co-authored-by: Praveen Mariyappa <91910560+Praveen-Mariyappa@users.noreply.github.com>
…s://github.com/MicrosoftDocs/azure-aks-docs (branch main) (#3659) * Remove outdated ACL FIPS limitation note * cluster extensions - updates for core extensions (#432) * cluster extensions - updates for core extensions * addressed pr comment * Update support policies and clarify coverage (#436) Updated the support policies document for Azure Kubernetes Service (AKS) clarify support coverage. * Auto Publish – main to live - 2026-06-11 01:30 UTC (#3314) * Add Eviction Pod Autoscaler documentation and references in upgrade guides - Introduced a new article for the Eviction Pod Autoscaler, detailing its functionality and installation. - Updated existing articles to include references to the Eviction Pod Autoscaler for proactive management of Pod Disruption Budgets during AKS upgrades. * Enhance Eviction Pod Autoscaler documentation with PDB-related drain failure identification and clarification on automatic PDB creation and scaling behavior * Add PDB Manager documentation and update references in the TOC * Rename to automatic Pod Disruption Budget management; clarify autoscaler coordination, StatefulSets, overprovisioning, and node-pool orthogonality * Address review feedback: drop stale redirect, broaden title, clarify namespace controls, remove redundant preview note, link to TSG hub * pencil edit * Rename automatic-pdb-management.md to automatic-pod-disruption-budget-management.md and update references * Refactor Azure CNI dynamic IP allocation benefits Removed duplicate benefits of Azure CNI dynamic IP allocation and cleaned up formatting. Remove merge conflict. * Confirm merge from repo_sync_working_branch to main to sync with https://github.com/MicrosoftDocs/azure-aks-docs (branch main) (#3304) * Remove outdated ACL FIPS limitation note * cluster extensions - updates for core extensions (#432) * cluster extensions - updates for core extensions * addressed pr comment * Update support policies and clarify coverage (#436) Updated the support policies document for Azure Kubernetes Service (AKS) clarify support coverage. --------- Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: flora-taagen <florataagen@microsoft.com> Co-authored-by: Regan Downer <v-rdowner@microsoft.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: Pradeep Agarwal <pradeepjsr05@gmail.com> Co-authored-by: Alaa <16225699+abarqawi@users.noreply.github.com> --------- Co-authored-by: Kaarthikeyan Subramanian <kaarthis@microsoft.com> Co-authored-by: Stacy Chambers <102548089+Stacyrch140@users.noreply.github.com> Co-authored-by: KAARTHIKEYAN SUBRAMANIAN <97623105+kaarthis@users.noreply.github.com> Co-authored-by: Colin Cooper <72402153+v-ccolin@users.noreply.github.com> Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: flora-taagen <florataagen@microsoft.com> Co-authored-by: Regan Downer <v-rdowner@microsoft.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: Pradeep Agarwal <pradeepjsr05@gmail.com> Co-authored-by: Alaa <16225699+abarqawi@users.noreply.github.com> * Update network isolated BYO ACR limitation (#438) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Update query for public IP ID in nat-gateway.md (#440) * Clarify OS SKU support in limitations section (#439) Updated limitations section to clarify OS SKU support. * Fix typo in CNI overview document (#443) Corrected 'Vet' to 'VNet' for clarity in the overlay networking section. * Document SecurityPatch channel limitation with CMK disk encryption deny policy (#441) * Document SecurityPatch channel limitation with CMK disk encryption deny policy Add a known limitation noting that the SecurityPatch node OS auto-upgrade channel is incompatible with an Azure Policy that uses a deny effect to require customer-managed key (CMK) OS disk encryption, since the temporary copy- VMSS created during patching is blocked with RequestDisallowedByPolicy. Recommend the NodeImage channel when an org-wide deny policy is required. Co-Authored-By: Claude <noreply@anthropic.com> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Group CMK SecurityPatch limitation bullet with other node channel limitations * Resolve merge conflict --------- Co-authored-by: Yao Cheng (AKS) <chyao@microsoft.com> Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Add AKS-2026-0005 security bulletin for Ubuntu kernel CVE reclassifications (#445) * Add AKS-2026-0005 security bulletin for Ubuntu kernel CVE reclassifications Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Correct Ubuntu CVE status transition (needs-triage -> needed/deferred) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Clarify manual verification via exact linux-azure version on Ubuntu CVE Tracker Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Restructure resolutions into recommended actions vs context to remove conflicting guidance Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Remove raw-count framing; focus on version-based exposure verification Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Call out Ubuntu 22.04 scope in title and opening so others can skip Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Drop skip-this-bulletin phrasing from opening Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Scope bulletin to Ubuntu 22.04 only; remove 24.04 comparative claims Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Link supported OS versions and K8s compatibility in migration guidance Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Align CVE status terminology to Canonical website statuses Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Drop reclassification-confirmation step from how-to-identify Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Fix resource group name in AKS creation command (#452) * Update non-Cilium container network metrics tables (Retina) (#454) * Update retina metrics * PR comments * Update app-routing-nginx-to-gateway-api-migration.md (#456) It is already supported now. * Resolve syncing conflicts from repo_sync_working_branch to main (#457) * updating login commands * Update articles/aks/how-to-configure-container-network-insights-agent.md Co-authored-by: learn-build-service-prod-09[bot] <274431102+learn-build-service-prod-09[bot]@users.noreply.github.com> * Update articles/aks/how-to-configure-container-network-insights-agent.md Co-authored-by: learn-build-service-prod-09[bot] <274431102+learn-build-service-prod-09[bot]@users.noreply.github.com> * Update articles/aks/how-to-configure-container-network-insights-agent.md Co-authored-by: learn-build-service-prod-09[bot] <274431102+learn-build-service-prod-09[bot]@users.noreply.github.com> * Fix environment variable name for Key Vault secret * Addition of new portal experiences for placement. (#3569) * Addition of new portal experiences for placement. * Tidy up. * Apply suggestions from code review Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> * Additoinal tweaks. * Fixing up linked items. * More tidy up. * Apply suggestions from code review Co-authored-by: learn-build-service-prod-02[bot] <274428175+learn-build-service-prod-02[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-08[bot] <274430765+learn-build-service-prod-08[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-07[bot] <274430390+learn-build-service-prod-07[bot]@users.noreply.github.com> * Fix ups. * Filename typos * Update articles/kubernetes-fleet/intelligent-resource-placement.md Co-authored-by: learn-build-service-prod-05[bot] <274429479+learn-build-service-prod-05[bot]@users.noreply.github.com> * Expand GVK, start work on resource placement. * Fix. * Apply suggestions from code review Co-authored-by: learn-build-service-prod-09[bot] <274431102+learn-build-service-prod-09[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-05[bot] <274429479+learn-build-service-prod-05[bot]@users.noreply.github.com> * Update articles/kubernetes-fleet/quickstart-namespace-scoped-resource-propagation.md Co-authored-by: learn-build-service-prod-04[bot] <274428985+learn-build-service-prod-04[bot]@users.noreply.github.com> * Fix up private hub cluster creation. * Update articles/kubernetes-fleet/quickstart-create-fleet-and-members.md Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> * Finish up create namespace-scoped resources. * Fix filename typo and bad YAML formatting. * Adding member selection dialog. * Final tweaks main docs. * Update strategy concept doc to remove preview. * Fix typo * Fix up broken preview links. * First cut DP strategies doc, * Fix image issue. * more work. * Final tweak. * Tweak. * staged rollouts first cut * Fix broken links / nested sections. * Add pivot placeholders * Portal add labels. * More work. * Rearranged because portal experience has different flow. * Add strategy steps. * More work. * Updating * Fix images * Complete run with approval. * Final tweaks * Learn Author Assistant tweaks. * Fix summary. * Review feedback applied. * Fix broken links. --------- Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-02[bot] <274428175+learn-build-service-prod-02[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-08[bot] <274430765+learn-build-service-prod-08[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-07[bot] <274430390+learn-build-service-prod-07[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-05[bot] <274429479+learn-build-service-prod-05[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-09[bot] <274431102+learn-build-service-prod-09[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-04[bot] <274428985+learn-build-service-prod-04[bot]@users.noreply.github.com> * Add documentation on maxAllowedFailures for update strategies (#3553) * Add documentation on maxAllowedFailures for update strategies * update alert example * Fleet -> Fleet Manager * Example * FAQ for MAF * Add explanation for 'Completed' status in update runs * Apply suggestion from @learn-build-service-prod-06[bot] Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> * Update API version for maxAllowedFailures setting in update strategy documentation * Updated docs per comments * Update articles/kubernetes-fleet/update-create-update-strategy.md Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> * Update articles/kubernetes-fleet/concepts-update-orchestration.md Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> * Update articles/kubernetes-fleet/concepts-update-orchestration.md Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> * Update articles/kubernetes-fleet/concepts-update-orchestration.md Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> * address original PR feedback * move autoupgrade note section, update example json * address automated pr feedback * address autoamted feedback * feedback * chore: retrigger PR checks --------- Co-authored-by: Sean Hobbs <sehobbs@microsoft.com> Co-authored-by: Sean Hobbs <ealianis@outlook.com> Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> Co-authored-by: francis <ftran@microsoft.com> * Remove beta note, fix lots of LAA suggestions. * Remove missed preview note. * kubernetes-fleet: Fix clustermesh networking Fix different issues around: - Bad resource group for both fleet and cluster - Bad NETWORK_NAME - Missing mbr- prefix on "az fleet member update" Signed-off-by: Mauricio Vásquez <mauriciov@microsoft.com> * Confirm merge from repo_sync_working_branch to main to sync with https://github.com/MicrosoftDocs/azure-aks-docs (branch main) (#3594) * Remove outdated ACL FIPS limitation note * cluster extensions - updates for core extensions (#432) * cluster extensions - updates for core extensions * addressed pr comment * Update support policies and clarify coverage (#436) Updated the support policies document for Azure Kubernetes Service (AKS) clarify support coverage. * Auto Publish – main to live - 2026-06-11 01:30 UTC (#3314) * Add Eviction Pod Autoscaler documentation and references in upgrade guides - Introduced a new article for the Eviction Pod Autoscaler, detailing its functionality and installation. - Updated existing articles to include references to the Eviction Pod Autoscaler for proactive management of Pod Disruption Budgets during AKS upgrades. * Enhance Eviction Pod Autoscaler documentation with PDB-related drain failure identification and clarification on automatic PDB creation and scaling behavior * Add PDB Manager documentation and update references in the TOC * Rename to automatic Pod Disruption Budget management; clarify autoscaler coordination, StatefulSets, overprovisioning, and node-pool orthogonality * Address review feedback: drop stale redirect, broaden title, clarify namespace controls, remove redundant preview note, link to TSG hub * pencil edit * Rename automatic-pdb-management.md to automatic-pod-disruption-budget-management.md and update references * Refactor Azure CNI dynamic IP allocation benefits Removed duplicate benefits of Azure CNI dynamic IP allocation and cleaned up formatting. Remove merge conflict. * Confirm merge from repo_sync_working_branch to main to sync with https://github.com/MicrosoftDocs/azure-aks-docs (branch main) (#3304) * Remove outdated ACL FIPS limitation note * cluster extensions - updates for core extensions (#432) * cluster extensions - updates for core extensions * addressed pr comment * Update support policies and clarify coverage (#436) Updated the support policies document for Azure Kubernetes Service (AKS) clarify support coverage. --------- Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: flora-taagen <florataagen@microsoft.com> Co-authored-by: Regan Downer <v-rdowner@microsoft.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: Pradeep Agarwal <pradeepjsr05@gmail.com> Co-authored-by: Alaa <16225699+abarqawi@users.noreply.github.com> --------- Co-authored-by: Kaarthikeyan Subramanian <kaarthis@microsoft.com> Co-authored-by: Stacy Chambers <102548089+Stacyrch140@users.noreply.github.com> Co-authored-by: KAARTHIKEYAN SUBRAMANIAN <97623105+kaarthis@users.noreply.github.com> Co-authored-by: Colin Cooper <72402153+v-ccolin@users.noreply.github.com> Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: flora-taagen <florataagen@microsoft.com> Co-authored-by: Regan Downer <v-rdowner@microsoft.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: Pradeep Agarwal <pradeepjsr05@gmail.com> Co-authored-by: Alaa <16225699+abarqawi@users.noreply.github.com> * Update network isolated BYO ACR limitation (#438) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Update query for public IP ID in nat-gateway.md (#440) * Clarify OS SKU support in limitations section (#439) Updated limitations section to clarify OS SKU support. * Fix typo in CNI overview document (#443) Corrected 'Vet' to 'VNet' for clarity in the overlay networking section. * Document SecurityPatch channel limitation with CMK disk encryption deny policy (#441) * Document SecurityPatch channel limitation with CMK disk encryption deny policy Add a known limitation noting that the SecurityPatch node OS auto-upgrade channel is incompatible with an Azure Policy that uses a deny effect to require customer-managed key (CMK) OS disk encryption, since the temporary copy- VMSS created during patching is blocked with RequestDisallowedByPolicy. Recommend the NodeImage channel when an org-wide deny policy is required. Co-Authored-By: Claude <noreply@anthropic.com> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Group CMK SecurityPatch limitation bullet with other node channel limitations * Resolve merge conflict --------- Co-authored-by: Yao Cheng (AKS) <chyao@microsoft.com> Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Add AKS-2026-0005 security bulletin for Ubuntu kernel CVE reclassifications (#445) * Add AKS-2026-0005 security bulletin for Ubuntu kernel CVE reclassifications Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Correct Ubuntu CVE status transition (needs-triage -> needed/deferred) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Clarify manual verification via exact linux-azure version on Ubuntu CVE Tracker Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Restructure resolutions into recommended actions vs context to remove conflicting guidance Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Remove raw-count framing; focus on version-based exposure verification Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Call out Ubuntu 22.04 scope in title and opening so others can skip Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Drop skip-this-bulletin phrasing from opening Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Scope bulletin to Ubuntu 22.04 only; remove 24.04 comparative claims Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Link supported OS versions and K8s compatibility in migration guidance Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Align CVE status terminology to Canonical website statuses Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Drop reclassification-confirmation step from how-to-identify Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Fix resource group name in AKS creation command (#452) * Update non-Cilium container network metrics tables (Retina) (#454) * Update retina metrics * PR comments * Apply suggestions from code review Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> --------- Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: flora-taagen <florataagen@microsoft.com> Co-authored-by: Regan Downer <v-rdowner@microsoft.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: Pradeep Agarwal <pradeepjsr05@gmail.com> Co-authored-by: Alaa <16225699+abarqawi@users.noreply.github.com> Co-authored-by: Kaarthikeyan Subramanian <kaarthis@microsoft.com> Co-authored-by: Stacy Chambers <102548089+Stacyrch140@users.noreply.github.com> Co-authored-by: KAARTHIKEYAN SUBRAMANIAN <97623105+kaarthis@users.noreply.github.com> Co-authored-by: Colin Cooper <72402153+v-ccolin@users.noreply.github.com> Co-authored-by: Xinhe Li <xinhl@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Mutaz Nassar <32297719+mutazn@users.noreply.github.com> Co-authored-by: Husain <maenbos2@gmail.com> Co-authored-by: C.YAO <YaoC@users.noreply.github.com> Co-authored-by: Yao Cheng (AKS) <chyao@microsoft.com> Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: chrischangcode <161086178+chrischangcode@users.noreply.github.com> Co-authored-by: Sumiran Jaiswal <87477723+sumi0309@users.noreply.github.com> Co-authored-by: carlotaarvela <67275927+carlotaarvela@users.noreply.github.com> Co-authored-by: Tim Sherer <28902327+TimShererWithAquent@users.noreply.github.com> Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> * Remove kube-no-trouble from validation tools list Removed kube-no-trouble from the list of open-source tools for AKS upgrade validation as the project is no longer maintained * Restore memberSelector-based update strategy docs (#3551) * Revert "Revert memberSelector-based update strategy docs from PR #3036 (#3346)" This reverts commit 5517699. * Apply suggestion from @learn-build-service-prod-06[bot] Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> --------- Co-authored-by: yoobinshin <yoobinshin@microsoft.com> Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> --------- Signed-off-by: Mauricio Vásquez <mauriciov@microsoft.com> Co-authored-by: Shaifali Garg <shaifaligarg@microsoft.com> Co-authored-by: learn-build-service-prod-09[bot] <274431102+learn-build-service-prod-09[bot]@users.noreply.github.com> Co-authored-by: prmerger-automator[bot] <40007230+prmerger-automator[bot]@users.noreply.github.com> Co-authored-by: Peiyi Zhang <peiyizhang@microsoft.com> Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: Simon Waight <simon.waight@microsoft.com> Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-02[bot] <274428175+learn-build-service-prod-02[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-08[bot] <274430765+learn-build-service-prod-08[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-07[bot] <274430390+learn-build-service-prod-07[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-05[bot] <274429479+learn-build-service-prod-05[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-04[bot] <274428985+learn-build-service-prod-04[bot]@users.noreply.github.com> Co-authored-by: frantran <aznspartan117@gmail.com> Co-authored-by: Sean Hobbs <sehobbs@microsoft.com> Co-authored-by: Sean Hobbs <ealianis@outlook.com> Co-authored-by: francis <ftran@microsoft.com> Co-authored-by: Mauricio Vásquez <mauriciov@microsoft.com> Co-authored-by: flora-taagen <florataagen@microsoft.com> Co-authored-by: Regan Downer <v-rdowner@microsoft.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: Pradeep Agarwal <pradeepjsr05@gmail.com> Co-authored-by: Alaa <16225699+abarqawi@users.noreply.github.com> Co-authored-by: Kaarthikeyan Subramanian <kaarthis@microsoft.com> Co-authored-by: Stacy Chambers <102548089+Stacyrch140@users.noreply.github.com> Co-authored-by: KAARTHIKEYAN SUBRAMANIAN <97623105+kaarthis@users.noreply.github.com> Co-authored-by: Colin Cooper <72402153+v-ccolin@users.noreply.github.com> Co-authored-by: Xinhe Li <xinhl@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Mutaz Nassar <32297719+mutazn@users.noreply.github.com> Co-authored-by: Husain <maenbos2@gmail.com> Co-authored-by: C.YAO <YaoC@users.noreply.github.com> Co-authored-by: Yao Cheng (AKS) <chyao@microsoft.com> Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: chrischangcode <161086178+chrischangcode@users.noreply.github.com> Co-authored-by: Sumiran Jaiswal <87477723+sumi0309@users.noreply.github.com> Co-authored-by: carlotaarvela <67275927+carlotaarvela@users.noreply.github.com> Co-authored-by: Tim Sherer <28902327+TimShererWithAquent@users.noreply.github.com> Co-authored-by: Steve Griffith <stgriffi@microsoft.com> Co-authored-by: Yoo Bin Shin <44984496+nibooy@users.noreply.github.com> Co-authored-by: yoobinshin <yoobinshin@microsoft.com> Co-authored-by: Diana Richards <103777760+v-dirichards@users.noreply.github.com> * Fix incorrect feature flag name for the VM node pool cluster autoscaler preview (#449) * Fix NAP custom VNet subnet guidance (#459) --------- Signed-off-by: Mauricio Vásquez <mauriciov@microsoft.com> Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: flora-taagen <florataagen@microsoft.com> Co-authored-by: Regan Downer <v-rdowner@microsoft.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: Pradeep Agarwal <pradeepjsr05@gmail.com> Co-authored-by: Alaa <16225699+abarqawi@users.noreply.github.com> Co-authored-by: Kaarthikeyan Subramanian <kaarthis@microsoft.com> Co-authored-by: Stacy Chambers <102548089+Stacyrch140@users.noreply.github.com> Co-authored-by: KAARTHIKEYAN SUBRAMANIAN <97623105+kaarthis@users.noreply.github.com> Co-authored-by: Colin Cooper <72402153+v-ccolin@users.noreply.github.com> Co-authored-by: Xinhe Li <xinhl@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Mutaz Nassar <32297719+mutazn@users.noreply.github.com> Co-authored-by: Husain <maenbos2@gmail.com> Co-authored-by: C.YAO <YaoC@users.noreply.github.com> Co-authored-by: Yao Cheng (AKS) <chyao@microsoft.com> Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: chrischangcode <161086178+chrischangcode@users.noreply.github.com> Co-authored-by: Sumiran Jaiswal <87477723+sumi0309@users.noreply.github.com> Co-authored-by: carlotaarvela <67275927+carlotaarvela@users.noreply.github.com> Co-authored-by: jacobbaek <dubaek@gmail.com> Co-authored-by: Shaifali Garg <shaifaligarg@microsoft.com> Co-authored-by: learn-build-service-prod-09[bot] <274431102+learn-build-service-prod-09[bot]@users.noreply.github.com> Co-authored-by: prmerger-automator[bot] <40007230+prmerger-automator[bot]@users.noreply.github.com> Co-authored-by: Peiyi Zhang <peiyizhang@microsoft.com> Co-authored-by: Simon Waight <simon.waight@microsoft.com> Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-02[bot] <274428175+learn-build-service-prod-02[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-08[bot] <274430765+learn-build-service-prod-08[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-07[bot] <274430390+learn-build-service-prod-07[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-05[bot] <274429479+learn-build-service-prod-05[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-04[bot] <274428985+learn-build-service-prod-04[bot]@users.noreply.github.com> Co-authored-by: frantran <aznspartan117@gmail.com> Co-authored-by: Sean Hobbs <sehobbs@microsoft.com> Co-authored-by: Sean Hobbs <ealianis@outlook.com> Co-authored-by: francis <ftran@microsoft.com> Co-authored-by: Mauricio Vásquez <mauriciov@microsoft.com> Co-authored-by: Tim Sherer <28902327+TimShererWithAquent@users.noreply.github.com> Co-authored-by: Steve Griffith <stgriffi@microsoft.com> Co-authored-by: Yoo Bin Shin <44984496+nibooy@users.noreply.github.com> Co-authored-by: yoobinshin <yoobinshin@microsoft.com> Co-authored-by: Diana Richards <103777760+v-dirichards@users.noreply.github.com> Co-authored-by: Praveen Mariyappa <91910560+Praveen-Mariyappa@users.noreply.github.com> Co-authored-by: Alex Leites <18728999+tallaxes@users.noreply.github.com>
It is already supported now.