Skip to content

Bump ASO dependency to v2.17.0+ to fix Azure China Cloud authentication #6275

@ZakariaSabour

Description

@ZakariaSabour

/kind bug

A bug in the AzureAD microsoft-authentication-library-for-go library (versions prior to v1.6.0) prevented Kubernetes addons relying on it -- such as cloud-provider-azure and azuredisk-csi-driver -- from authenticating to the Azure China Cloud. See AzureAD/microsoft-authentication-library-for-go#589 for details.
Most affected addons have since released versions that include the patched library (v1.6.0+).
The CAPZ controller manager itself already uses v1.6.0, so it is not affected. However, the version of Azure Service Operator (ASO) currently vendored on main (v2.16.0) still depends on the unpatched MSAL library, which means ASO-managed resources cannot authenticate against Azure China Cloud.

ASO v2.17.0 includes the fix.

Is there a plan to bump the ASO dependency to at least v2.17.0 to resolve this authentication issue for Azure China Cloud users, as it blocks our kubernetes clusters upgrade?

What steps did you take and what happened:
The ASO controller can not authenticate to azure china cloud.

What did you expect to happen:

Anything else you would like to add:

Environment:

  • cluster-api-provider-azure version: main
  • Kubernetes version: (use kubectl version):
  • OS (e.g. from /etc/os-release):

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/bugCategorizes issue or PR as related to a bug.

    Type

    No type
    No fields configured for issues without a type.

    Projects

    Status

    Done

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions