Skip to content

Bump Azure Service Operator from v2.16.0 to v2.17.0#6289

Open
mboersma wants to merge 1 commit into
kubernetes-sigs:mainfrom
mboersma:bump-aso-v2.17.0
Open

Bump Azure Service Operator from v2.16.0 to v2.17.0#6289
mboersma wants to merge 1 commit into
kubernetes-sigs:mainfrom
mboersma:bump-aso-v2.17.0

Conversation

@mboersma
Copy link
Copy Markdown
Contributor

@mboersma mboersma commented May 7, 2026

What type of PR is this?

/kind cleanup

What this PR does / why we need it:

Bumps Azure Service Operator (ASO) from v2.16.0 to v2.17.0.

v2.17.0 picks up microsoft-authentication-library-for-go v1.6.0+, which fixes Azure China Cloud authentication for ASO-managed resources. CAPZ's controller manager already uses the patched MSAL library, but the vendored ASO version did not until now.

Code changes

The only ASO API removed in v2.17.0 that CAPZ depends on is containerservice/v1api20230315preview. CAPZ uses this for FleetsMember; this PR migrates those imports to containerservice/v1api20250301, which is the new GA Fleet API.

  • go.mod / go.sum: ASO v2.16.0 → v2.17.0
  • azure/services/fleetsmembers/*, azure/scope/managedcontrolplane.go, controllers/azuremanagedcontrolplane_controller_test.go, main.go: import v1api20250301 instead of v1api20230315preview for FleetsMember
  • config/aso/kustomization.yaml, config/aso/crds.yaml: regenerated via make generate-aso-crds

User upgrade impact

Per the v2.17.0 release notes, the containerservice v20230315preview Fleet CRD versions are removed. Users with existing FleetsMember resources stored at the v1api20230315preview API version need to migrate them to v1api20250301 (running asoctl clean crds) before upgrading to a CAPZ release that includes this change.

Upcoming breaking changes (heads up, not in this PR)

  • ASO v2.18 will remove containerservice ManagedCluster/AgentPool API versions v1api20230201 and v1api20231001 — CAPZ currently uses v1api20231001.
  • ASO v2.19 will remove v1api20240402preview.

Which issue(s) this PR fixes:

Fixes #6275

Special notes for your reviewer:

TODOs:

  • squashed commits
  • includes documentation
  • adds unit tests
  • cherry-pick candidate

Release note:

Bump Azure Service Operator from v2.16.0 to v2.17.0

@k8s-ci-robot k8s-ci-robot added release-note Denotes a PR that will be considered when it comes time to generate release notes. kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt. labels May 7, 2026
@k8s-ci-robot k8s-ci-robot added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label May 7, 2026
@k8s-ci-robot k8s-ci-robot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label May 7, 2026
@mboersma
Copy link
Copy Markdown
Contributor Author

mboersma commented May 7, 2026

/hold until we know for sure how this will affect CAPZ users upgrading

@k8s-ci-robot k8s-ci-robot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label May 7, 2026
@mboersma mboersma requested review from jackfrancis, nojnhuh and willie-yao and removed request for jsturtevant May 7, 2026 21:51
@codecov
Copy link
Copy Markdown

codecov Bot commented May 7, 2026

Codecov Report

❌ Patch coverage is 0% with 3 lines in your changes missing coverage. Please review.
✅ Project coverage is 43.84%. Comparing base (7c65010) to head (0a346a6).
⚠️ Report is 11 commits behind head on main.

Files with missing lines Patch % Lines
azure/scope/managedcontrolplane.go 0.00% 2 Missing ⚠️
main.go 0.00% 1 Missing ⚠️
Additional details and impacted files
@@           Coverage Diff           @@
##             main    #6289   +/-   ##
=======================================
  Coverage   43.84%   43.84%           
=======================================
  Files         289      289           
  Lines       25346    25346           
=======================================
  Hits        11114    11114           
  Misses      13458    13458           
  Partials      774      774           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@mboersma mboersma force-pushed the bump-aso-v2.17.0 branch from 5ecc388 to 0a346a6 Compare May 8, 2026 01:38
@mboersma
Copy link
Copy Markdown
Contributor Author

mboersma commented May 8, 2026

/test pull-cluster-api-provider-azure-apiversion-upgrade

This one is very flaky, hoping it will improve with the next CAPI patch release.

@mboersma
Copy link
Copy Markdown
Contributor Author

/retest

@mboersma
Copy link
Copy Markdown
Contributor Author

/test pull-cluster-api-provider-azure-apiversion-upgrade

@willie-yao
Copy link
Copy Markdown
Contributor

/retest

Copy link
Copy Markdown
Contributor

@willie-yao willie-yao left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm
/approve

@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label May 12, 2026
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

LGTM label has been added.

DetailsGit tree hash: 1f589dddb098e53fcf149eeb522d76a6ee108f31

@k8s-ci-robot
Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: willie-yao

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label May 12, 2026
@willie-yao
Copy link
Copy Markdown
Contributor

/retest

@willie-yao
Copy link
Copy Markdown
Contributor

/retest

@willie-yao
Copy link
Copy Markdown
Contributor

/retest

@k8s-ci-robot
Copy link
Copy Markdown
Contributor

@mboersma: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
pull-cluster-api-provider-azure-apiversion-upgrade 0a346a6 link true /test pull-cluster-api-provider-azure-apiversion-upgrade

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt. lgtm "Looks good to me", indicates that a PR is ready to be merged. release-note Denotes a PR that will be considered when it comes time to generate release notes. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.

Projects

Status: Todo

Development

Successfully merging this pull request may close these issues.

Bump ASO dependency to v2.17.0+ to fix Azure China Cloud authentication

3 participants