v1.32.0

Full Changelog: v1.31.0..v1.32.0

Changes by Kind

Feature

• Consolidate adjacent CIDR ranges for allowed sources (#6995, @zarvd)

• Feat: Lock updates on azure resources when other component is doing the same thing.

  This PR utilizes a lease in each service reconciliation to prevent race conditions where cloud provider and others are updating the same azure resources. (#7193, @nilo19)

• Feat: bump k8s versions to v1.32.0 (#7822, @feiskyer)

• Feat: match source account as first priority in snapshot restore and volume clone scenarios (#7699, @andyzhangx)

• [credential provider] Add a flag mirrorMapping. This flag is to mirror registry A to B when fetching credential. (#6846, @lzhecheng)

Bug or Regression

• Aggregate overlapping allowed source ranges (#6807, @zarvd)

• Fix a bug that prevented patches to NSGs when the Azure API responded with empty strings for DestinationAddressPrefix (#7854, @kon-angelo)

• Fix checking service references from tags when deleting PIP (#7167, @zarvd)

• Fix: Change the order of updating vmss vm and vmss (#7520, @nilo19)

• Fix: Do not move nodes that have already been attached to load balancers after restarting

  When using multislb, the node distribution could be changed after restarting the ccm. This is because the node distribution cache would be lost after restarting. This PR restores the node distribution each time the ccm is restarted. (#6965, @nilo19)

• Fix: Support switching from loadbalancer to externalName for services (#7518, @nilo19)

• Fix: cloud provider should only generate userAgent if it's not provided (#7723, @andyzhangx)

• Fix: revert to go1.22 windows filesystem stdlib behavior building with go 1.23 (#7750, @andyzhangx)

• Fix: several bugs related to multiple standard load balancers mode.

  1. All endpointslices of a local service should be included in local backend pool updater, instead of only the first endpointslice.
  2. In some rare cases, migration from NIC to IP-based LB can be in a middle state where the NIC references are removed, but those IPConfigs in the backend pool are not. In this case, we should manually exclude those IPConfigs from the request body.
  3. localServiceOwnsBackendPool should compare the full backend pool name, not just prefix, because two service names can share the same prefix.
  4. There is a corner case when the cluster is being updated to multi-slb from classic NIC-based single lb, not from an IP-based cluster. In this case, if the service being reconciled is local, the cloud provider will try to update a NIC pool to IP-based pool direct, which is not allowed. We should skip adding IPs to NIC-based pool in multi-slb mode.
  5. There is a bug in ReconcileBackendPools, where we by mistake parse the LB name to use as the backend pool name. (#7432, @nilo19)

Other (Cleanup or Flake)

• Bump azure network api to 2024-03-01 (#7156, @MartinForReal)
• Optimize CIDR aggregation to improve performance and reduce memory usage (#7201, @zarvd)
• The apiVersion of network security group is bumped to 2024-01-01
  The apiVersion of VirtualNetworkLink is bumped to 2020-06-01
  The apiVersion of PrivateZone is bumped to 2020-06-01 (#7155, @MartinForReal)

Dependencies

Added

• github.com/Azure/azure-kusto-go/azkustodata: 5
• github.com/Azure/azure-kusto-go/azkustoingest: 5
• github.com/Azure/azure-sdk-for-go/sdk/azidentity/cache: v0.3.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/authorization/armauthorization/v2: v2.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v6: v6.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v5: v5.0.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v6: v6.3.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/msi/armmsi: v1.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v6: v6.2.0
• github.com/Azure/azure-sdk-for-go/sdk/storage/azqueue: v1.0.0
• github.com/AzureAD/microsoft-authentication-extensions-for-go/cache: v0.1.1
• github.com/dgryski/go-rendezvous: 9f7001d
• github.com/golang-jwt/jwt: v3.2.1+incompatible
• github.com/keybase/go-keychain: 57a3676
• github.com/redis/go-redis/v9: v9.6.1
• go.opentelemetry.io/auto/sdk: v1.1.0
• sigs.k8s.io/cloud-provider-azure/pkg/azclient/cache: v0.3.0

Changed

• cel.dev/expr: v0.15.0 → v0.18.0
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.14.0 → v1.17.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.7.0 → v1.8.0
• github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry: v0.2.1 → v0.2.2
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v3: v3.0.0 → v3.1.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/privatedns/armprivatedns: v1.2.0 → v1.3.0
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets: v1.1.0 → v1.3.0
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal: v1.0.0 → v1.1.0
• github.com/Azure/azure-sdk-for-go/sdk/storage/azblob: v1.1.0 → v1.4.0
• github.com/Azure/go-ansiterm: d185dfc → 306776e
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.2.2 → v1.3.1
• github.com/fsnotify/fsnotify: v1.7.0 → v1.8.0
• github.com/golang-jwt/jwt/v4: v4.5.0 → v4.5.1
• github.com/google/cel-go: v0.20.1 → v0.22.0
• github.com/google/pprof: 813a5fb → 40e02aa
• github.com/gregjones/httpcache: 9cad4c3 → 901d907
• github.com/jonboulle/clock...

v1.31.1

Full Changelog: v1.31.0..v1.31.1

Changes by Kind

Feature

• Consolidate adjacent CIDR ranges for allowed sources (#7047, @zarvd)

Bug or Regression

• Aggregate overlapping allowed source ranges (#6942, @zarvd)

• Fix: Do not move nodes that have already been attached to load balancers after restarting

  When using multislb, the node distribution could be changed after restarting the ccm. This is because the node distribution cache would be lost after restarting. This PR restores the node distribution each time the ccm is restarted. (#7021, @k8s-infra-cherrypick-robot)

Dependencies

Added

• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/authorization/armauthorization/v2: v2.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/msi/armmsi: v1.2.0
• github.com/klauspost/compress: v1.17.9

Changed

• github.com/google/pprof: 813a5fb → fa2c70b
• github.com/onsi/ginkgo/v2: v2.20.1 → v2.20.2
• github.com/onsi/gomega: v1.34.1 → v1.34.2
• github.com/prometheus/client_golang: v1.19.1 → v1.20.2
• go.opentelemetry.io/otel/metric: v1.29.0 → v1.30.0
• go.opentelemetry.io/otel/trace: v1.29.0 → v1.30.0
• go.opentelemetry.io/otel: v1.29.0 → v1.30.0
• golang.org/x/crypto: v0.26.0 → v0.27.0
• golang.org/x/sys: v0.24.0 → v0.25.0
• golang.org/x/term: v0.23.0 → v0.24.0
• golang.org/x/text: v0.17.0 → v0.18.0
• k8s.io/api: v0.31.0 → v0.31.1
• k8s.io/apimachinery: v0.31.0 → v0.31.1
• k8s.io/apiserver: v0.31.0 → v0.31.1
• k8s.io/client-go: v0.31.0 → v0.31.1
• k8s.io/cloud-provider: v0.31.0 → v0.31.1
• k8s.io/component-base: v0.31.0 → v0.31.1
• k8s.io/component-helpers: v0.31.0 → v0.31.1
• k8s.io/controller-manager: v0.31.0 → v0.31.1
• k8s.io/cri-api: v0.31.0 → v0.31.1
• k8s.io/kubelet: v0.31.0 → v0.31.1
• sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader: v0.0.25 → v0.0.27
• sigs.k8s.io/cloud-provider-azure/pkg/azclient: v0.0.43 → v0.0.55

Removed

• google.golang.org/appengine: v1.6.7

v1.30.7

Full Changelog: v1.30.6..v1.30.7

Changes by Kind

Feature

• Consolidate adjacent CIDR ranges for allowed sources (#7046, @zarvd)

Bug or Regression

• Aggregate overlapping allowed source ranges (#6941, @zarvd)

• Fix: Do not move nodes that have already been attached to load balancers after restarting

  When using multislb, the node distribution could be changed after restarting the ccm. This is because the node distribution cache would be lost after restarting. This PR restores the node distribution each time the ccm is restarted. (#7040, @nilo19)

Dependencies

Added

• github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry: v0.2.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/authorization/armauthorization/v2: v2.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/msi/armmsi: v1.2.0
• github.com/go-task/slim-sprig: 52ccab3
• github.com/klauspost/compress: v1.17.9
• go.opentelemetry.io/otel/exporters/prometheus: v0.52.0
• go.opentelemetry.io/otel/sdk/metric: v1.30.0

Changed

• github.com/Azure/azure-kusto-go: v0.16.0 → v0.16.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v3: v3.0.0 → v3.1.0
• github.com/alecthomas/kingpin/v2: v2.3.2 → v2.4.0
• github.com/fxamacker/cbor/v2: v2.7.0 → v2.6.0
• github.com/google/pprof: 813a5fb → fa2c70b
• github.com/moby/spdystream: v0.4.0 → v0.2.0
• github.com/onsi/ginkgo/v2: v2.20.1 → v2.20.2
• github.com/onsi/gomega: v1.34.1 → v1.34.2
• github.com/prometheus/client_golang: v1.16.0 → v1.20.3
• github.com/prometheus/client_model: v0.4.0 → v0.6.1
• github.com/prometheus/common: v0.44.0 → v0.59.1
• github.com/prometheus/procfs: v0.10.1 → v0.15.1
• go.etcd.io/etcd/api/v3: v3.5.10 → v3.5.14
• go.etcd.io/etcd/client/pkg/v3: v3.5.10 → v3.5.14
• go.etcd.io/etcd/client/v3: v3.5.10 → v3.5.14
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.46.0 → v0.53.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.46.0 → v0.53.0
• go.opentelemetry.io/otel/metric: v1.28.0 → v1.30.0
• go.opentelemetry.io/otel/sdk: v1.28.0 → v1.30.0
• go.opentelemetry.io/otel/trace: v1.28.0 → v1.30.0
• go.opentelemetry.io/otel: v1.28.0 → v1.30.0
• golang.org/x/crypto: v0.26.0 → v0.27.0
• golang.org/x/oauth2: v0.21.0 → v0.22.0
• golang.org/x/sys: v0.23.0 → v0.25.0
• golang.org/x/term: v0.23.0 → v0.24.0
• golang.org/x/text: v0.17.0 → v0.18.0
• k8s.io/api: v0.31.0 → v0.30.5
• k8s.io/apimachinery: v0.31.0 → v0.30.5
• k8s.io/apiserver: v0.30.4 → v0.30.5
• k8s.io/client-go: v0.31.0 → v0.30.5
• k8s.io/cloud-provider: v0.30.4 → v0.30.5
• k8s.io/component-base: v0.30.4 → v0.30.5
• k8s.io/component-helpers: v0.30.4 → v0.30.5
• k8s.io/controller-manager: v0.30.4 → v0.30.5
• k8s.io/cri-api: v0.30.4 → v0.30.5
• k8s.io/kms: v0.30.4 → v0.30.5
• k8s.io/kubelet: v0.30.4 → v0.30.5
• sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader: v0.0.25 → v0.0.23
• sigs.k8s.io/cloud-provider-azure/pkg/azclient: v0.0.39 → v0.0.55

Removed

• cloud.google.com/go/accessapproval: v1.7.1
• cloud.google.com/go/accesscontextmanager: v1.8.1
• cloud.google.com/go/aiplatform: v1.48.0
• cloud.google.com/go/analytics: v0.21.3
• cloud.google.com/go/apigateway: v1.6.1
• cloud.google.com/go/apigeeconnect: v1.6.1
• cloud.google.com/go/apigeeregistry: v0.7.1
• cloud.google.com/go/appengine: v1.8.1
• cloud.google.com/go/area120: v0.8.1
• cloud.google.com/go/artifactregistry: v1.14.1
• cloud.google.com/go/asset: v1.14.1
• cloud.google.com/go/assuredworkloads: v1.11.1
• cloud.google.com/go/automl: v1.13.1
• cloud.google.com/go/baremetalsolution: v1.1.1
• cloud.google.com/go/batch: v1.3.1
• cloud.google.com/go/beyondcorp: v1.0.0
• cloud.google.com/go/bigquery: v1.53.0
• cloud.google.com/go/billing: v1.16.0
• cloud.google.com/go/binaryauthorization: v1.6.1
• cloud.google.com/go/certificatemanager: v1.7.1
• cloud.google.com/go/channel: v1.16.0
• cloud.google.com/go/cloudbuild: v1.13.0
• cloud.google.com/go/clouddms: v1.6.1
• cloud.google.com/go/cloudtasks: v1.12.1
• cloud.google.com/go/compute: v1.23.0
• cloud.google.com/go/contactcenterinsights: v1.10.0
• cloud.google.com/go/container: v1.24.0
• cloud.google.com/go/containeranalysis: v0.10.1
• cloud.google.com/go/datacatalog: v1.16.0
• cloud.google.com/go/dataflow: v0.9.1
• cloud.google.com/go/dataform: v0.8.1
• cloud.google.com/go/datafusion: v1.7.1
• cloud.google.com/go/datalabeling: v0.8.1
• cloud.google.com/go/dataplex: v1.9.0
• cloud.google.com/go/dataproc/v2: v2.0.1
• cloud.google.com/go/dataqna: v0.8.1
• cloud.google.com/go/datastore: v1.13.0
• cloud.google.com/go/datastream: v1.10.0
• cloud.google.com/go/deploy: v1.13.0
• cloud.google.com/go/dialogflow: v1.40.0
• cloud.google.com/go/dlp: v1.10.1
• cloud.google.com/go/documentai: v1.22.0
• cloud.google.com/go/domains: v0.9.1
• cloud.google.com/go/edgecontainer: v1.1.1
• cloud.google.com/go/errorreporting: v0.3.0
• cloud.google.com/go/essentialcontacts: v1.6.2
• cloud.google.com/go/eventarc: v1.13.0
• cloud.google.com/go/filestore: v1.7.1
• cloud.google.com/go/firestore: v1.12.0
• cloud.google.com/go/functions: v1.15.1
• cloud.google.com/go/gkebackup: v1.3.0
• cloud.google.com/go/gkeconnect: v0.8.1
• cloud.google.com/go/gkehub: v0.14.1
• cloud.google.com/go/gkemulticloud: v1.0.0
• cloud.google.com/go/gsuiteaddons: v1.6.1
• cloud.google.com/go/iam: v1.1.1
• cloud.google.com/go/iap: v1.8.1
• cloud.google.com/go/ids: v1.4.1
• cloud.google.com/go/iot: v1.7.1
• cloud.google.com/go/kms: v1.15.0
• cloud.google.com/go/language: v1.10.1
• cloud.google.com/go/lifesciences: v0.9.1
• cloud.google.com/go/logging: v1.7.0
• cloud.google.com/go/longrunning: v0.5.1
• cloud.google.com/go/managedidentities: v1.6.1
• cloud.google.com/go/maps: v1.4.0
• cloud.google.com/go/mediatranslation: v0.8.1
• cloud.google.com/go/memcache: v1.10.1
• cloud.google.com/go/metastore: v1.12.0
• cloud.google.com/go/monitoring: v1.15.1
• cloud.google.com/go/networkconnectivity: v1.12.1
• cloud.google.com/go/networkmanagement: v1.8.0
• cloud.google.com/go/networksecurity: v0.9.1
• cloud.google.com/go/notebooks: v1.9.1
• cloud.google.com/go/optimization: v1.4.1
• cloud.google.com/go/orchestration: v1.8.1
• cloud.google.com/go/orgpolicy: v1.11.1
• cloud.google.com/go/osconfig: v1.12.1
• cloud.google.com/go/oslogin: v1.10.1
• cloud.google.com/go/phishingprotection: v0.8.1
• cloud.google.com/go/policytroubleshooter: v1.8.0
• cloud.google.com/go/privatecatalog: v0.9.1
• cloud.google.com/go/pubsub: v1.33.0
• cloud.google.com/go/pubsublite: v1.8.1
• cloud.google.com/go/recaptchaenterprise/v2: v2.7.2
• cloud.google.com/go/recommendationengine: v0.8.1
• cloud.google.com/go/recommender: v1.10.1
• cloud.google.com/go/redis: v1.13.1
• cloud.google.com/go/resourcemanager: v1.9.1
• cloud.google.com/go/resourcesettings: v1.6.1
• cloud.google.com/go/retail: v1.14.1
• cloud.google.com/go/run: v1.2.0
• cloud.google.com/go/scheduler: v1.10.1
• cloud.google.com/go/secretmanager: v1.11.1
• cloud.google.com/go/security: v1.15.1
• cloud.google.com/go/securitycenter: v1.23.0
• cloud.google.com/go/servicedirectory: v1.11.0
• cloud.google.com/go/shell: v1.7.1
• cloud.google.com/go/spanner: v1.47.0
• cloud.google.com/go/speech: v1.19.0
• cloud.google.com/go/storagetransfer: v1.10.0
• cloud.google.com/go/talent: v1.6.2
• cloud.google.com/go/texttospeech: v1.7.1
• cloud.google.com/go/tpu: v1.6.1
• cloud.google.com/go/trace: v1.10.1
• cloud.google.com/go/translate: v1.8.2
• cloud.google.com/go/video: v1.19.0
• cloud.google.com/go/videointelligence: v1.11.1
• cloud.google.com/go/vision/v2: v2.7.2
• cloud.google.com/go/vmmigration: v1.7.1
• cloud.google.com/go/vmwareengine: v1.0.0
• cloud.google.com/go/vpcaccess: v1.7.1
• cloud.google.com/go/webrisk: v1.9.1
• cloud.google.com/go/websecurityscanner: v1.6.1
• cloud.google.com/go/workflows: v1.11.1
• cloud.google.com/go: v0.110.7
• gopkg.in/evanphx/json-patch.v4: v4.12.0

v1.29.11

Full Changelog: v1.29.10..v1.29.11

Changes by Kind

Feature

• Consolidate adjacent CIDR ranges for allowed sources (#7045, @zarvd)

Bug or Regression

• Aggregate overlapping allowed source ranges (#6940, @zarvd)

• Fix: Do not move nodes that have already been attached to load balancers after restarting

  When using multislb, the node distribution could be changed after restarting the ccm. This is because the node distribution cache would be lost after restarting. This PR restores the node distribution each time the ccm is restarted. (#7041, @nilo19)

Dependencies

Added

• github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry: v0.2.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/authorization/armauthorization/v2: v2.2.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/msi/armmsi: v1.2.0
• github.com/klauspost/compress: v1.17.9
• go.opentelemetry.io/otel/exporters/prometheus: v0.52.0
• go.opentelemetry.io/otel/sdk/metric: v1.30.0
• k8s.io/gengo/v2: 51d4e06

Changed

• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v3: v3.0.0 → v3.1.0
• github.com/alecthomas/kingpin/v2: v2.3.2 → v2.4.0
• github.com/davecgh/go-spew: v1.1.1 → d8f796a
• github.com/google/pprof: 813a5fb → fa2c70b
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.20.0 → v2.22.0
• github.com/onsi/ginkgo/v2: v2.20.1 → v2.20.2
• github.com/onsi/gomega: v1.34.1 → v1.34.2
• github.com/pmezard/go-difflib: v1.0.0 → 5d4384e
• github.com/prometheus/client_golang: v1.16.0 → v1.20.3
• github.com/prometheus/client_model: v0.4.0 → v0.6.1
• github.com/prometheus/common: v0.44.0 → v0.59.1
• github.com/prometheus/procfs: v0.10.1 → v0.15.1
• go.etcd.io/etcd/api/v3: v3.5.10 → v3.5.14
• go.etcd.io/etcd/client/pkg/v3: v3.5.10 → v3.5.14
• go.etcd.io/etcd/client/v3: v3.5.10 → v3.5.14
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.46.0 → v0.53.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.46.0 → v0.53.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.28.0 → v1.29.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.28.0 → v1.29.0
• go.opentelemetry.io/otel/metric: v1.29.0 → v1.30.0
• go.opentelemetry.io/otel/sdk: v1.28.0 → v1.30.0
• go.opentelemetry.io/otel/trace: v1.29.0 → v1.30.0
• go.opentelemetry.io/otel: v1.29.0 → v1.30.0
• go.uber.org/zap: v1.19.0 → v1.26.0
• golang.org/x/crypto: v0.26.0 → v0.27.0
• golang.org/x/oauth2: v0.20.0 → v0.22.0
• golang.org/x/sys: v0.24.0 → v0.25.0
• golang.org/x/term: v0.23.0 → v0.24.0
• golang.org/x/text: v0.17.0 → v0.18.0
• google.golang.org/genproto/googleapis/api: f6361c8 → fc7c04a
• google.golang.org/genproto/googleapis/rpc: b1a4ccb → fc7c04a
• k8s.io/api: v0.29.8 → v0.29.9
• k8s.io/apimachinery: v0.29.8 → v0.29.9
• k8s.io/apiserver: v0.29.8 → v0.29.9
• k8s.io/client-go: v0.29.8 → v0.29.9
• k8s.io/cloud-provider: v0.29.8 → v0.29.9
• k8s.io/component-base: v0.29.8 → v0.29.9
• k8s.io/component-helpers: v0.29.8 → v0.29.9
• k8s.io/controller-manager: v0.29.8 → v0.29.9
• k8s.io/cri-api: v0.29.8 → v0.29.9
• k8s.io/klog/v2: v2.110.1 → v2.130.1
• k8s.io/kms: v0.29.8 → v0.29.9
• k8s.io/kube-openapi: 2dd684a → 70dd376
• k8s.io/kubelet: v0.29.8 → v0.29.9
• k8s.io/utils: b307cd5 → 18e509b
• sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader: v0.0.4 → v0.0.5
• sigs.k8s.io/cloud-provider-azure/pkg/azclient: v0.0.43 → v0.0.55

Removed

• cloud.google.com/go/accessapproval: v1.7.1
• cloud.google.com/go/accesscontextmanager: v1.8.1
• cloud.google.com/go/aiplatform: v1.48.0
• cloud.google.com/go/analytics: v0.21.3
• cloud.google.com/go/apigateway: v1.6.1
• cloud.google.com/go/apigeeconnect: v1.6.1
• cloud.google.com/go/apigeeregistry: v0.7.1
• cloud.google.com/go/appengine: v1.8.1
• cloud.google.com/go/area120: v0.8.1
• cloud.google.com/go/artifactregistry: v1.14.1
• cloud.google.com/go/asset: v1.14.1
• cloud.google.com/go/assuredworkloads: v1.11.1
• cloud.google.com/go/automl: v1.13.1
• cloud.google.com/go/baremetalsolution: v1.1.1
• cloud.google.com/go/batch: v1.3.1
• cloud.google.com/go/beyondcorp: v1.0.0
• cloud.google.com/go/bigquery: v1.53.0
• cloud.google.com/go/billing: v1.16.0
• cloud.google.com/go/binaryauthorization: v1.6.1
• cloud.google.com/go/certificatemanager: v1.7.1
• cloud.google.com/go/channel: v1.16.0
• cloud.google.com/go/cloudbuild: v1.13.0
• cloud.google.com/go/clouddms: v1.6.1
• cloud.google.com/go/cloudtasks: v1.12.1
• cloud.google.com/go/compute: v1.23.0
• cloud.google.com/go/contactcenterinsights: v1.10.0
• cloud.google.com/go/container: v1.24.0
• cloud.google.com/go/containeranalysis: v0.10.1
• cloud.google.com/go/datacatalog: v1.16.0
• cloud.google.com/go/dataflow: v0.9.1
• cloud.google.com/go/dataform: v0.8.1
• cloud.google.com/go/datafusion: v1.7.1
• cloud.google.com/go/datalabeling: v0.8.1
• cloud.google.com/go/dataplex: v1.9.0
• cloud.google.com/go/dataproc/v2: v2.0.1
• cloud.google.com/go/dataqna: v0.8.1
• cloud.google.com/go/datastore: v1.13.0
• cloud.google.com/go/datastream: v1.10.0
• cloud.google.com/go/deploy: v1.13.0
• cloud.google.com/go/dialogflow: v1.40.0
• cloud.google.com/go/dlp: v1.10.1
• cloud.google.com/go/documentai: v1.22.0
• cloud.google.com/go/domains: v0.9.1
• cloud.google.com/go/edgecontainer: v1.1.1
• cloud.google.com/go/errorreporting: v0.3.0
• cloud.google.com/go/essentialcontacts: v1.6.2
• cloud.google.com/go/eventarc: v1.13.0
• cloud.google.com/go/filestore: v1.7.1
• cloud.google.com/go/firestore: v1.12.0
• cloud.google.com/go/functions: v1.15.1
• cloud.google.com/go/gkebackup: v1.3.0
• cloud.google.com/go/gkeconnect: v0.8.1
• cloud.google.com/go/gkehub: v0.14.1
• cloud.google.com/go/gkemulticloud: v1.0.0
• cloud.google.com/go/gsuiteaddons: v1.6.1
• cloud.google.com/go/iam: v1.1.1
• cloud.google.com/go/iap: v1.8.1
• cloud.google.com/go/ids: v1.4.1
• cloud.google.com/go/iot: v1.7.1
• cloud.google.com/go/kms: v1.15.0
• cloud.google.com/go/language: v1.10.1
• cloud.google.com/go/lifesciences: v0.9.1
• cloud.google.com/go/logging: v1.7.0
• cloud.google.com/go/longrunning: v0.5.1
• cloud.google.com/go/managedidentities: v1.6.1
• cloud.google.com/go/maps: v1.4.0
• cloud.google.com/go/mediatranslation: v0.8.1
• cloud.google.com/go/memcache: v1.10.1
• cloud.google.com/go/metastore: v1.12.0
• cloud.google.com/go/monitoring: v1.15.1
• cloud.google.com/go/networkconnectivity: v1.12.1
• cloud.google.com/go/networkmanagement: v1.8.0
• cloud.google.com/go/networksecurity: v0.9.1
• cloud.google.com/go/notebooks: v1.9.1
• cloud.google.com/go/optimization: v1.4.1
• cloud.google.com/go/orchestration: v1.8.1
• cloud.google.com/go/orgpolicy: v1.11.1
• cloud.google.com/go/osconfig: v1.12.1
• cloud.google.com/go/oslogin: v1.10.1
• cloud.google.com/go/phishingprotection: v0.8.1
• cloud.google.com/go/policytroubleshooter: v1.8.0
• cloud.google.com/go/privatecatalog: v0.9.1
• cloud.google.com/go/pubsub: v1.33.0
• cloud.google.com/go/pubsublite: v1.8.1
• cloud.google.com/go/recaptchaenterprise/v2: v2.7.2
• cloud.google.com/go/recommendationengine: v0.8.1
• cloud.google.com/go/recommender: v1.10.1
• cloud.google.com/go/redis: v1.13.1
• cloud.google.com/go/resourcemanager: v1.9.1
• cloud.google.com/go/resourcesettings: v1.6.1
• cloud.google.com/go/retail: v1.14.1
• cloud.google.com/go/run: v1.2.0
• cloud.google.com/go/scheduler: v1.10.1
• cloud.google.com/go/secretmanager: v1.11.1
• cloud.google.com/go/security: v1.15.1
• cloud.google.com/go/securitycenter: v1.23.0
• cloud.google.com/go/servicedirectory: v1.11.0
• cloud.google.com/go/shell: v1.7.1
• cloud.google.com/go/spanner: v1.47.0
• cloud.google.com/go/speech: v1.19.0
• cloud.google.com/go/storagetransfer: v1.10.0
• cloud.google.com/go/talent: v1.6.2
• cloud.google.com/go/texttospeech: v1.7.1
• cloud.google.com/go/tpu: v1.6.1
• cloud.google.com/go/trace: v1.10.1
• cloud.google.com/go/translate: v1.8.2
• cloud.google.com/go/video: v1.19.0
• cloud.google.com/go/videointelligence: v1.11.1
• cloud.google.com/go/vision/v2: v2.7.2
• cloud.google.com/go/vmmigration: v1.7.1
• cloud.google.com/go/vmwareengine: v1.0.0
• cloud.google.com/go/vpcaccess: v1.7.1
• cloud.google.com/go/webrisk: v1.9.1
• cloud.google.com/go/websecurityscanner: v1.6.1
• cloud.google.com/go/work...

v1.28.13

Full Changelog: v1.28.12..v1.28.13

Changes by Kind

Bug or Regression

• Fix: Do not move nodes that have already been attached to load balancers after restarting

  When using multislb, the node distribution could be changed after restarting the ccm. This is because the node distribution cache would be lost after restarting. This PR restores the node distribution each time the ccm is restarted. (#7042, @nilo19)

Dependencies

Added

Nothing has changed.

Changed

• github.com/google/pprof: 813a5fb → fa2c70b
• github.com/onsi/ginkgo/v2: v2.20.1 → v2.20.2
• github.com/onsi/gomega: v1.34.1 → v1.34.2
• golang.org/x/sys: v0.24.0 → v0.25.0
• golang.org/x/text: v0.17.0 → v0.18.0
• k8s.io/api: v0.28.13 → v0.28.14
• k8s.io/apimachinery: v0.28.13 → v0.28.14
• k8s.io/apiserver: v0.28.13 → v0.28.14
• k8s.io/client-go: v0.28.13 → v0.28.14
• k8s.io/cloud-provider: v0.28.13 → v0.28.14
• k8s.io/component-base: v0.28.13 → v0.28.14
• k8s.io/component-helpers: v0.28.13 → v0.28.14
• k8s.io/controller-manager: v0.28.13 → v0.28.14
• k8s.io/cri-api: v0.28.13 → v0.28.14
• k8s.io/kms: v0.28.13 → v0.28.14
• k8s.io/kubelet: v0.28.13 → v0.28.14

Removed

Nothing has changed.

v1.27.21

Full Changelog: v1.27.20..v1.27.21

Dependencies

Added

Nothing has changed.

Changed

• github.com/google/pprof: a892ee0 → fa2c70b
• github.com/onsi/ginkgo/v2: v2.19.1 → v2.20.2
• github.com/onsi/gomega: v1.34.1 → v1.34.2
• golang.org/x/crypto: v0.25.0 → v0.26.0
• golang.org/x/mod: v0.19.0 → v0.20.0
• golang.org/x/net: v0.27.0 → v0.28.0
• golang.org/x/sync: v0.7.0 → v0.8.0
• golang.org/x/term: v0.22.0 → v0.23.0
• golang.org/x/text: v0.16.0 → v0.17.0
• golang.org/x/tools: v0.23.0 → v0.24.0

Removed

• github.com/chromedp/cdproto: 3cf4e6d
• github.com/chromedp/chromedp: v0.9.2
• github.com/chromedp/sysutil: v1.0.0
• github.com/gobwas/httphead: v0.1.0
• github.com/gobwas/pool: v0.2.1
• github.com/gobwas/ws: v1.2.1

v1.31.0

Full Changelog: v1.30.0..v1.31.0

Changes by Kind

API Change

• No breaking change on existing behavior. (#6166, @wenxuan0923)

Feature

• Add a windows cloud-node-manager image based off of the host-process-containers base image (#6318, @marosset)
• Enable multi-tenant authentication with UAMI and auxiliary token provider (#6221, @zarvd)
• Service principal with cert auth supports PEM format cert. (#6601, @bowen5)

Bug or Regression

• Ensure NSG rules cleanup excludes DestinationApplicationSecurityGroups (#6331, @zarvd)
• Fix cleaning up security rule for services with shared external-IP (#6075, @zarvd)
• Fix generating NSG rules while using shared BYO public IP (#6186, @zarvd)
• Fix setting single dst prefix for NSG rule (#6258, @zarvd)
• Fix updating NSG rules when disabling floating IP (#6401, @zarvd)
• Fix: Ensure vnet ID will be attached to backend pool in local service reconciliation loops. (#6250, @nilo19)
• Fix: Only check internal lbs for internal services when using multi-slb (#6105, @nilo19)
• Fix: VirtualNetworkRule match issue during account search (#6741, @andyzhangx)
• Fix: add getFileServicePropertiesCache to fix throttling issue (#6564, @andyzhangx)
• Fix: not listing all accounts by default (#6565, @andyzhangx)
• Fix: return error when GetServiceProperties in account search (#6578, @andyzhangx)
• Fix: subnet update issue when vnetResourceGroup is specified in azure file storage class (#6720, @andyzhangx)
• Fix: support mulltiple subnet when creating private endpoints (#6783, @umagnus)
• This only affects 1P, internal-to-Microsoft, customers. Windows 2019 with dual-stack is not possible otherwise. (#6316, @tyler-lloyd)

Dependencies

Added

• cel.dev/expr: v0.15.0
• github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry: v0.2.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v3: v3.0.0
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets: v1.1.0
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal: v1.0.0
• github.com/antlr4-go/antlr/v4: v4.13.0
• github.com/go-task/slim-sprig/v3: v3.0.0
• go.opentelemetry.io/otel/exporters/prometheus: v0.50.0
• go.opentelemetry.io/otel/sdk/metric: v1.29.0
• gopkg.in/evanphx/json-patch.v4: v4.12.0

Changed

• cloud.google.com/go/compute/metadata: v0.2.3 → v0.3.0
• github.com/Azure/azure-kusto-go: v0.15.2 → v0.16.1
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.11.1 → v1.14.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.5.2 → v1.7.0
• github.com/Azure/azure-sdk-for-go/sdk/internal: v1.5.2 → v1.10.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5: v5.6.0 → v5.7.0
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage: v1.5.0 → v1.6.0
• github.com/Azure/go-autorest/autorest/adal: v0.9.23 → v0.9.24
• github.com/alecthomas/kingpin/v2: v2.3.2 → v2.4.0
• github.com/asaskevich/govalidator: f61b66f → a9d515a
• github.com/cenkalti/backoff/v4: v4.2.1 → v4.3.0
• github.com/cespare/xxhash/v2: v2.2.0 → v2.3.0
• github.com/cncf/xds/go: e9ce688 → 555b57e
• github.com/cpuguy83/go-md2man/v2: v2.0.3 → v2.0.4
• github.com/davecgh/go-spew: v1.1.1 → d8f796a
• github.com/emicklei/go-restful/v3: v3.11.0 → v3.12.1
• github.com/envoyproxy/go-control-plane: v0.11.1 → v0.12.0
• github.com/envoyproxy/protoc-gen-validate: v1.0.2 → v1.0.4
• github.com/fxamacker/cbor/v2: v2.6.0 → v2.7.0
• github.com/go-logr/logr: v1.4.1 → v1.4.2
• github.com/go-openapi/jsonpointer: v0.19.6 → v0.21.0
• github.com/go-openapi/jsonreference: v0.20.2 → v0.21.0
• github.com/go-openapi/swag: v0.22.4 → v0.23.0
• github.com/golang/glog: v1.1.2 → v1.2.1
• github.com/google/cel-go: v0.17.8 → v0.20.1
• github.com/google/pprof: ada837c → 813a5fb
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.16.0 → v2.20.0
• github.com/ianlancetaylor/demangle: eabc099 → bd984b5
• github.com/matttproud/golang_protobuf_extensions: v1.0.4 → v1.0.1
• github.com/moby/spdystream: v0.2.0 → v0.4.0
• github.com/moby/term: 1aeaba8 → v0.5.0
• github.com/onsi/ginkgo/v2: v2.17.1 → v2.20.1
• github.com/onsi/gomega: v1.33.0 → v1.34.1
• github.com/pmezard/go-difflib: v1.0.0 → 5d4384e
• github.com/prometheus/client_golang: v1.16.0 → v1.19.1
• github.com/prometheus/client_model: v0.4.0 → v0.6.1
• github.com/prometheus/common: v0.44.0 → v0.55.0
• github.com/prometheus/procfs: v0.10.1 → v0.15.1
• github.com/rogpeppe/go-internal: v1.10.0 → v1.12.0
• github.com/sirupsen/logrus: v1.9.0 → v1.9.3
• github.com/spf13/cobra: v1.8.0 → v1.8.1
• go.etcd.io/bbolt: v1.3.8 → v1.3.9
• go.etcd.io/etcd/api/v3: v3.5.10 → v3.5.14
• go.etcd.io/etcd/client/pkg/v3: v3.5.10 → v...

v1.30.6

Full Changelog: v1.30.5..v1.30.6

Dependencies

Added

• gopkg.in/evanphx/json-patch.v4: v4.12.0

Changed

• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.13.0 → v1.14.0
• github.com/davecgh/go-spew: v1.1.1 → d8f796a
• github.com/fxamacker/cbor/v2: v2.6.0 → v2.7.0
• github.com/moby/spdystream: v0.2.0 → v0.4.0
• github.com/pmezard/go-difflib: v1.0.0 → 5d4384e
• golang.org/x/oauth2: v0.20.0 → v0.21.0
• k8s.io/api: v0.30.3 → v0.31.0
• k8s.io/apimachinery: v0.30.3 → v0.31.0
• k8s.io/apiserver: v0.30.3 → v0.30.4
• k8s.io/client-go: v0.30.3 → v0.31.0
• k8s.io/cloud-provider: v0.30.3 → v0.30.4
• k8s.io/component-base: v0.30.3 → v0.30.4
• k8s.io/component-helpers: v0.30.3 → v0.30.4
• k8s.io/controller-manager: v0.30.3 → v0.30.4
• k8s.io/cri-api: v0.30.3 → v0.30.4
• k8s.io/klog/v2: v2.120.1 → v2.130.1
• k8s.io/kms: v0.30.3 → v0.30.4
• k8s.io/kubelet: v0.30.3 → v0.30.4
• k8s.io/utils: b307cd5 → 18e509b
• sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader: v0.0.18 → v0.0.24

Removed

• github.com/go-task/slim-sprig: 52ccab3

v1.29.10

Full Changelog: v1.29.9..v1.29.10

Dependencies

Added

Nothing has changed.

Changed

• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.13.0 → v1.14.0
• golang.org/x/sys: v0.23.0 → v0.24.0
• k8s.io/api: v0.29.7 → v0.29.8
• k8s.io/apimachinery: v0.29.7 → v0.29.8
• k8s.io/apiserver: v0.29.7 → v0.29.8
• k8s.io/client-go: v0.29.7 → v0.29.8
• k8s.io/cloud-provider: v0.29.7 → v0.29.8
• k8s.io/component-base: v0.29.7 → v0.29.8
• k8s.io/component-helpers: v0.29.7 → v0.29.8
• k8s.io/controller-manager: v0.29.7 → v0.29.8
• k8s.io/cri-api: v0.29.7 → v0.29.8
• k8s.io/kms: v0.29.7 → v0.29.8
• k8s.io/kubelet: v0.29.7 → v0.29.8

Removed

Nothing has changed.

v1.28.12

Full Changelog: v1.28.11..v1.28.12

Dependencies

Added

Nothing has changed.

Changed

• github.com/Azure/azure-kusto-go: v0.16.0 → v0.16.1
• github.com/google/pprof: a892ee0 → 813a5fb
• github.com/onsi/ginkgo/v2: v2.19.0 → v2.20.1
• github.com/onsi/gomega: v1.33.1 → v1.34.1
• golang.org/x/crypto: v0.23.0 → v0.26.0
• golang.org/x/exp: 9212866 → 8a7402a
• golang.org/x/mod: v0.17.0 → v0.20.0
• golang.org/x/net: v0.25.0 → v0.28.0
• golang.org/x/sync: v0.7.0 → v0.8.0
• golang.org/x/sys: v0.22.0 → v0.24.0
• golang.org/x/telemetry: f48c80b → bda5523
• golang.org/x/term: v0.20.0 → v0.23.0
• golang.org/x/text: v0.16.0 → v0.17.0
• golang.org/x/tools: e35e4cc → v0.24.0
• google.golang.org/protobuf: v1.33.0 → v1.34.1
• k8s.io/api: v0.28.12 → v0.28.13
• k8s.io/apimachinery: v0.28.12 → v0.28.13
• k8s.io/apiserver: v0.28.12 → v0.28.13
• k8s.io/client-go: v0.28.12 → v0.28.13
• k8s.io/cloud-provider: v0.28.12 → v0.28.13
• k8s.io/component-base: v0.28.12 → v0.28.13
• k8s.io/component-helpers: v0.28.12 → v0.28.13
• k8s.io/controller-manager: v0.28.12 → v0.28.13
• k8s.io/cri-api: v0.28.12 → v0.28.13
• k8s.io/kms: v0.28.12 → v0.28.13
• k8s.io/kubelet: v0.28.12 → v0.28.13

Removed

• github.com/chromedp/cdproto: 3cf4e6d
• github.com/chromedp/chromedp: v0.9.2
• github.com/chromedp/sysutil: v1.0.0
• github.com/gobwas/httphead: v0.1.0
• github.com/gobwas/pool: v0.2.1
• github.com/gobwas/ws: v1.2.1