Add AKS release notes for 2026-08-07 - #5913
Open
Ally Ford (allyford) wants to merge 19 commits into
Open
Conversation
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Ally Ford (allyford)
requested review from
a team and
Sercan Guler (seguler)
and
a lite review from Copilot
August 10, 2026 15:36
Ally Ford (allyford)
requested review from
a team and
Jorge Palma (palma21)
as code owners
August 10, 2026 15:36
Contributor
There was a problem hiding this comment.
Pull request overview
Adds the AKS v20260807 release notes to the repo changelog and checks in the corresponding node image VHD note artifacts (Azure Linux v3 and AKS Ubuntu) to back the “Component updates” section.
Changes:
- Added a new “Release Notes - 2026-08-07” section to
CHANGELOG.md, including feature/behavioral/bug-fix/component-update entries and VHD note links. - Added Azure Linux v3 VHD note files for
202607.20.0and202607.29.0. - Added an AKS Ubuntu 22.04 VHD note file for
202607.20.0.
Reviewed changes
Copilot reviewed 7 out of 7 changed files in this pull request and generated 3 comments.
| File | Description |
|---|---|
| CHANGELOG.md | Adds the 2026-08-07 release notes section, VHD note links, and the reviewed PR ID tracking comment. |
| vhd-notes/AzureLinuxv3/202607.20.0.txt | Adds Azure Linux v3 VHD build/package/component manifest for the 202607.20.0 image. |
| vhd-notes/AzureLinuxv3/202607.29.0.txt | Adds Azure Linux v3 VHD build/package/component manifest for the 202607.29.0 image. |
| vhd-notes/aks-ubuntu/AKSUbuntu-2204/202607.20.0.txt | Adds Ubuntu 22.04 VHD build/package/component manifest for the 202607.20.0 image. |
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
| @@ -1,5 +1,120 @@ | |||
| <!-- markdownlint-disable --> | |||
Comment on lines
+17
to
+20
| - cached kubectl binary at /opt/bin/kubectl-1.34.8 | ||
| - kubectl version 1.34.8-ubuntu22.04u4 | ||
| - cached kubectl binary at /opt/bin/kubectl-1.34.8 | ||
| - kubectl version 1.34.8-ubuntu22.04u2 |
Comment on lines
+17
to
+20
| - cached kubectl binary at /opt/bin/kubectl-1.34.8 | ||
| - kubectl version 1.34.8-ubuntu22.04u4 | ||
| - cached kubectl binary at /opt/bin/kubectl-1.34.8 | ||
| - kubectl version 1.34.8-ubuntu22.04u2 |
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 7 out of 7 changed files in this pull request and generated no new comments.
Suppressed comments (1)
CHANGELOG.md:67
- There are two consecutive blank lines after the horizontal rule separator. Elsewhere in this file the pattern is a single blank line after
---, so this looks like accidental extra whitespace (and may trip markdownlint rules like MD012 depending on configuration).
---
## Release Notes - 2026-07-17
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 7 out of 7 changed files in this pull request and generated no new comments.
Suppressed comments (2)
vhd-notes/aks-ubuntu/AKSUbuntu-2204/202607.20.0.txt:927
- This line contains non-printable control characters inside the EFI path ("/File(\u001bFI\u000buntu\shimx64.efi)"). These characters make the release note harder to read/copy and can cause rendering/search issues. Consider replacing them with the intended EFI path text.
Boot0004* ubuntu HD(15,GPT,de2daaf2-b55f-4aca-ac16-18549ec4eceb,0x2800,0x35000)/File(�FI�untu\shimx64.efi)
CHANGELOG.md:19
- The Ubuntu 26.04 preview bullet mixes a singular noun with a plural verb ("confidential VM" + "aren't"), which reads like a typo in customer-facing release notes. Consider pluralizing to match the rest of the list.
* Ubuntu 26.04 node image support is now available in preview for Kubernetes 1.36+ through the `Ubuntu2604` OS SKU. FIPS, confidential VM, Trusted Launch, GPU SKUs, and Artifact Streaming aren't supported for this preview. [PR#16419441](https://dev.azure.com/msazure/CloudNativeCompute/_git/aks-rp/pullrequest/16419441) (PM: @allyford) [PR#16564154](https://dev.azure.com/msazure/CloudNativeCompute/_git/aks-rp/pullrequest/16564154) (PM: @allyford) [PR#16713067](https://dev.azure.com/msazure/CloudNativeCompute/_git/aks-rp/pullrequest/16713067) (AI-flagged: validation-change)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 9 out of 9 changed files in this pull request and generated no new comments.
Suppressed comments (3)
vhd-notes/aks-ubuntu/AKSUbuntu-2204/202607.20.0.txt:20
- The same cached kubectl path (
/opt/bin/kubectl-1.34.8) is listed twice with two different versions. A single path can’t correspond to both versions, so the note is internally inconsistent and may mislead customers about the actual kubectl build included.
- cached kubectl binary at /opt/bin/kubectl-1.34.8
- kubectl version 1.34.8-ubuntu22.04u4
- cached kubectl binary at /opt/bin/kubectl-1.34.8
- kubectl version 1.34.8-ubuntu22.04u2
vhd-notes/AzureContainerLinux/gen2tl/202607.29.0.txt:45
- This release note contains an empty list item (
-) in the components section, which reads like a formatting artifact and makes the list harder to parse. Please remove the empty bullet so the section flows directly intoimages pre-pulled:.
- azure-acr-credential-provider version v1.36.2-1-azlinux3
- azure-acr-credential-provider version v1.36.1-1-azlinux3
-
images pre-pulled:
vhd-notes/AzureContainerLinux/gen2tl/202607.20.0.txt:46
- This release note contains an empty list item (
-) immediately after theruncentry, which looks unintentional and breaks the components list formatting. Please remove the empty bullet.
- runc version 1.3.6
-
images pre-pulled:
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 9 out of 9 changed files in this pull request and generated no new comments.
Suppressed comments (3)
vhd-notes/AzureContainerLinuxv3/202607.29.0.txt:45
- Remove the empty list item (
-with no content). It renders as a blank bullet and makes the components section harder to read.
- azure-acr-credential-provider version v1.36.1-1-azlinux3
-
images pre-pulled:
vhd-notes/AzureContainerLinuxv3/202607.20.0.txt:46
- Remove the empty list item (
-with no content). It renders as a blank bullet and makes the components section harder to read.
- runc version 1.3.6
-
images pre-pulled:
CHANGELOG.md:14
VirtualMachinesappears to be a literal vm-set type value (for example,az aks nodepool add --vm-set-type "VirtualMachines"). Consider formatting it as code to avoid it being read as a typo.
* [Automatic availability zone placement](https://aka.ms/aks/automatic-zonal-placement) is now enabled globally. Customers can create new VMSS or VirtualMachines node pools with `availabilityZones=["auto"]`, and existing VMSS node pools can be updated to `availabilityZones=["auto"]` after rollout completes. [PR#16499579](https://dev.azure.com/msazure/CloudNativeCompute/_git/aks-rp/pullrequest/16499579) (PM: @yudian)
|
|
||
| * [Node Auto Provisioning](https://aka.ms/aks/nap) can now be enabled on clusters with restricted `publicNetworkAccess`, including private API server VNet-integrated clusters using UDR, as long as the existing AKS-wide networking guardrails pass. [PR#15536557](https://dev.azure.com/msazure/CloudNativeCompute/_git/aks-rp/pullrequest/15536557) (PM: @wilsondarko) | ||
| * [Automatic availability zone placement](https://aka.ms/aks/automatic-zonal-placement) is now enabled globally. Customers can create new VMSS or VirtualMachines node pools with `availabilityZones=["auto"]`, and existing VMSS node pools can be updated to `availabilityZones=["auto"]` after rollout completes. [PR#16499579](https://dev.azure.com/msazure/CloudNativeCompute/_git/aks-rp/pullrequest/16499579) (PM: @yudian) | ||
| * [Long Term Support (LTS)](https://aka.ms/aks/lts) upgrade and enablement validation now allows existing agent pools on known but unsupported Kubernetes versions when they remain within the target control plane version-skew policy. [PR#16515988](https://dev.azure.com/msazure/CloudNativeCompute/_git/aks-rp/pullrequest/16515988) (PM: @stgriffi) |
Contributor
Author
There was a problem hiding this comment.
Steve Griffith (@swgriffith) - Is there more information about what the control plane version-skew policy is?
There was a problem hiding this comment.
suggested edit below to further clarify
Contributor
There was a problem hiding this comment.
- we should remove links to ADO PRs and PMs throughout this PR
- on the version-skew policy, can we briefly describe it here in 1-2 lines and add a docs link for more details?
Co-authored-by: Steve Griffith <stgriffi@microsoft.com> Co-authored-by: Ally Ford <37671069+allyford@users.noreply.github.com>
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 9 out of 9 changed files in this pull request and generated no new comments.
Suppressed comments (5)
CHANGELOG.md:48
- These list items have trailing whitespace at end-of-line, which can cause unnecessary diffs and may violate markdown linting rules. Please trim the trailing spaces.
* Azure Policy add-on components were updated: Gatekeeper was bumped to [`3.23.0`](https://learn.microsoft.com/azure/governance/policy/concepts/policy-for-kubernetes#gatekeeper-3230), and Azure Policy add-on was bumped to [`1.17.0`](https://learn.microsoft.com/azure/governance/policy/concepts/policy-for-kubernetes#1170).
* Azure File CSI Driver has been upgraded to [`v1.34.7`](https://github.com/kubernetes-sigs/azurefile-csi-driver/releases/tag/v1.34.7) on AKS 1.34 and [`v1.35.6`](https://github.com/kubernetes-sigs/azurefile-csi-driver/releases/tag/v1.35.6) on AKS 1.35 and 1.36.
* Azure Blob CSI Driver has been upgraded to [`v1.26.16`](https://github.com/kubernetes-sigs/blob-csi-driver/releases/tag/v1.26.16) on AKS 1.33 and [`v1.27.9`](https://github.com/kubernetes-sigs/blob-csi-driver/releases/tag/v1.27.9) on AKS 1.34 and later.
* Azure Disk CSI Driver has been upgraded to [`v1.33.11`](https://github.com/kubernetes-sigs/azuredisk-csi-driver/releases/tag/v1.33.11) on AKS 1.34 and [`v1.34.5`](https://github.com/kubernetes-sigs/azuredisk-csi-driver/releases/tag/v1.34.5) on AKS 1.35 and 1.36.
CHANGELOG.md:50
- This list item has trailing whitespace at end-of-line, which can cause unnecessary diffs and may violate markdown linting rules. Please trim the trailing space.
* Container Insights has been upgraded to [`3.6.0`](https://github.com/microsoft/Docker-Provider/releases/tag/3.6.0).
CHANGELOG.md:38
- These list items have trailing whitespace at end-of-line, which can cause unnecessary diffs and may violate markdown linting rules. Please trim the trailing spaces.
This issue also appears in the following locations of the same file:
- line 45
- line 50
* Fixed an [AKS Automatic](https://aka.ms/aks/automatic-networking) issue where App Routing on Kubernetes 1.36+ clusters could incorrectly default to NGINX instead of Istio/Gateway API mode during cluster creation.
* Fixed quota validation for agent pool VM size changes to use the observed VMSS SKU when available, reducing missed quota failures caused by stale VM-size data. [PR#16686692](https://dev.azure.com/msazure/CloudNativeCompute/_git/aks-rp/pullrequest/16686692) (AI-flagged: bug-fix)
vhd-notes/AzureContainerLinuxv3/202607.20.0.txt:46
- There is an empty list item (
-) in the components list. This looks like accidental output and makes the release note harder to read/search.
- runc version 1.3.6
-
vhd-notes/AzureContainerLinuxv3/202607.29.0.txt:46
- There is an empty list item (
-) in the components list. This looks like accidental output and makes the release note harder to read/search.
images pre-pulled:
- mcr.microsoft.com/oss/v2/kubernetes/autoscaler/addon-resizer:v1.8.23-28
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 9 out of 9 changed files in this pull request and generated no new comments.
Suppressed comments (7)
vhd-notes/aks-ubuntu/AKSUbuntu-2204/202607.29.0.txt:20
- The header lists
kubectl-1.34.8twice with two different package versions (u4 and u2), but later in the file the downloaded binaries include/opt/bin/kubectl-1.34.9. This makes the component summary inconsistent and hard to audit.
- cached kubectl binary at /opt/bin/kubectl-1.34.8
- kubectl version 1.34.8-ubuntu22.04u4
- cached kubectl binary at /opt/bin/kubectl-1.34.8
- kubectl version 1.34.8-ubuntu22.04u2
vhd-notes/aks-ubuntu/AKSUbuntu-2204/202607.20.0.txt:20
- The header lists
kubectl-1.34.8twice with two different package versions (u4 and u2), but later in the file the downloaded binaries include/opt/bin/kubectl-1.34.9. This makes the component summary inconsistent and hard to audit.
- cached kubectl binary at /opt/bin/kubectl-1.34.8
- kubectl version 1.34.8-ubuntu22.04u4
- cached kubectl binary at /opt/bin/kubectl-1.34.8
- kubectl version 1.34.8-ubuntu22.04u2
CHANGELOG.md:15
- This release note bullet has a typo ("conrol") and a grammatical error ("allows user"). Please correct the text so it reads clearly.
* AKS now allows control-plane only upgrades to AKS [Long Term Support (LTS)](https://aka.ms/aks/lts) as long as the [version skew policy](https://learn.microsoft.com/azure/aks/supported-kubernetes-versions?tabs=azure-cli#what-is-the-allowed-difference-in-versions-between-the-control-plane-and-node-pools) is satisfied. This allows user to more safely upgrade into LTS by first upgrading the conrol plane, validating functionality, and then upgrading node pools.
vhd-notes/AzureContainerLinuxv3/202607.29.0.txt:45
- This file includes a stray empty list item (
-) before the "images pre-pulled" section, which looks like an accidental artifact from the source log.
- azure-acr-credential-provider version v1.36.1-1-azlinux3
-
images pre-pulled:
vhd-notes/AzureContainerLinuxv3/202607.29.0.txt:157
- The "Installed Packages" section contains the placeholder text "listInstalledPackages stub" instead of an actual package list. This makes the VHD notes look incomplete and could confuse readers who rely on this section for auditing component versions.
=== Installed Packages Begin
listInstalledPackages stub
=== Installed Packages End
vhd-notes/AzureContainerLinuxv3/202607.20.0.txt:156
- The "Installed Packages" section contains the placeholder text "listInstalledPackages stub" instead of an actual package list. This makes the VHD notes look incomplete and could confuse readers who rely on this section for auditing component versions.
=== Installed Packages Begin
listInstalledPackages stub
=== Installed Packages End
vhd-notes/AzureContainerLinuxv3/202607.20.0.txt:46
- This file includes a stray empty list item (
-) before the "images pre-pulled" section, which looks like an accidental artifact from the source log.
- runc version 1.3.6
-
images pre-pulled:
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 9 out of 9 changed files in this pull request and generated no new comments.
Suppressed comments (8)
vhd-notes/AzureContainerLinuxv3/202607.29.0.txt:157
- The "=== Installed Packages" section contains the placeholder text "listInstalledPackages stub" rather than an actual package list. If the package list can't be produced for Azure Container Linux images, consider removing this section or replacing it with a short note explaining why it's omitted.
=== Installed Packages Begin
listInstalledPackages stub
=== Installed Packages End
vhd-notes/AzureContainerLinuxv3/202607.20.0.txt:156
- The "=== Installed Packages" section contains the placeholder text "listInstalledPackages stub" rather than an actual package list. If the package list can't be produced for Azure Container Linux images, consider removing this section or replacing it with a short note explaining why it's omitted.
=== Installed Packages Begin
listInstalledPackages stub
=== Installed Packages End
CHANGELOG.md:14
- "VirtualMachines" looks like an internal casing and is hard to parse in release notes. Consider using the standard product wording (for example, "Virtual Machines") so customers can understand the node pool type without needing to know an API enum name.
* [Automatic availability zone placement](https://aka.ms/aks/automatic-zonal-placement) is now enabled globally. Customers can create new VMSS or VirtualMachines node pools with `availabilityZones=["auto"]`, and existing VMSS node pools can be updated to `availabilityZones=["auto"]` after rollout completes.
CHANGELOG.md:15
- Grammar: "This allows user" should be plural or addressed to the reader ("users"/"you"). This reads like a typo in customer-facing release notes.
* AKS now allows control-plane only upgrades to AKS [Long Term Support (LTS)](https://aka.ms/aks/lts) as long as the [version skew policy](https://learn.microsoft.com/azure/aks/supported-kubernetes-versions?tabs=azure-cli#what-is-the-allowed-difference-in-versions-between-the-control-plane-and-node-pools) is satisfied. This allows user to more safely upgrade into LTS by first upgrading the control plane, validating functionality, and then upgrading node pools.
CHANGELOG.md:47
- The Azure Blob CSI Driver versions listed here (v1.26.16 / v1.27.9) don't appear anywhere in the repo and don't match the pre-pulled images listed in the new VHD notes (for example, Azure Linux v3 202607.29.0 includes blob-csi v1.26.15 and v1.27.8). Please update these versions to match what's actually shipped in this release.
* Azure Disk CSI Driver has been upgraded to [`v1.33.11`](https://github.com/kubernetes-sigs/azuredisk-csi-driver/releases/tag/v1.33.11) on AKS 1.34 and [`v1.34.5`](https://github.com/kubernetes-sigs/azuredisk-csi-driver/releases/tag/v1.34.5) on AKS 1.35 and 1.36.
vhd-notes/AzureContainerLinuxv3/202607.29.0.txt:45
- There is an empty list item ("-") in the components list. It renders as a blank bullet and looks accidental.
This issue also appears on line 155 of the same file.
-
images pre-pulled:
vhd-notes/AzureContainerLinuxv3/202607.20.0.txt:46
- There is an empty list item ("-") in the components list. It renders as a blank bullet and looks accidental.
This issue also appears on line 154 of the same file.
-
images pre-pulled:
CHANGELOG.md:48
- The Azure Disk CSI Driver versions listed here (v1.33.11 / v1.34.5) don't appear in the repo and don't match the new VHD notes (for example, the July images list azuredisk-csi v1.33.10 and v1.34.4). Please update the versions so the release notes reflect what's actually shipped.
* Azure Monitor managed service for Prometheus add-on was updated to the [07-27-2026 release](https://github.com/Azure/prometheus-collector/blob/main/RELEASENOTES.md#release-07-27-2026), including collector image updates and kube-state-metrics `v2.19.1-2`.
Co-authored-by: Ally Ford <37671069+allyford@users.noreply.github.com>
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 9 out of 9 changed files in this pull request and generated no new comments.
Suppressed comments (3)
CHANGELOG.md:15
- The LTS upgrade bullet has a grammatical error ("This allows user to...") which makes the release notes read awkwardly.
* AKS now allows control-plane only upgrades to AKS [Long Term Support (LTS)](https://aka.ms/aks/lts) as long as the [version skew policy](https://learn.microsoft.com/azure/aks/supported-kubernetes-versions?tabs=azure-cli#what-is-the-allowed-difference-in-versions-between-the-control-plane-and-node-pools) is satisfied. This allows user to more safely upgrade into LTS by first upgrading the control plane, validating functionality, and then upgrading node pools.
vhd-notes/AzureContainerLinuxv3/202607.20.0.txt:46
- This file contains an empty list item ("-" with no content), which looks like an accidental copy/paste artifact in the component list.
- runc version 1.3.6
-
vhd-notes/AzureContainerLinuxv3/202607.29.0.txt:46
- This file contains an empty list item ("-" with no content), which looks like an accidental copy/paste artifact in the component list.
images pre-pulled:
- mcr.microsoft.com/oss/v2/kubernetes/autoscaler/addon-resizer:v1.8.23-28
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 9 out of 9 changed files in this pull request and generated no new comments.
Suppressed comments (5)
vhd-notes/AzureContainerLinuxv3/202607.29.0.txt:45
- This file has an empty component entry (a bare "-" line) in the "Components downloaded" list, which renders as a blank bullet and looks like a copy/paste/log-generation artifact. Remove the empty list item so the component list is unambiguous.
- azure-acr-credential-provider version v1.36.2-1-azlinux3
- azure-acr-credential-provider version v1.36.1-1-azlinux3
-
images pre-pulled:
vhd-notes/AzureContainerLinuxv3/202607.29.0.txt:157
- The "Installed Packages" section contains the placeholder text "listInstalledPackages stub" instead of the actual package list. This makes the VHD notes incomplete/misleading; please regenerate this file (or remove the section) using the real build output so the package inventory is accurate.
=== Installed Packages Begin
listInstalledPackages stub
=== Installed Packages End
vhd-notes/AzureContainerLinuxv3/202607.20.0.txt:46
- This file includes an empty list item (a bare "-" line) in the "Components downloaded" section. Remove the empty entry to avoid publishing a malformed component list.
- azure-acr-credential-provider version v1.36.1-1-azlinux3
- runc version 1.3.6
-
images pre-pulled:
vhd-notes/AzureContainerLinuxv3/202607.20.0.txt:156
- The "Installed Packages" section contains the placeholder text "listInstalledPackages stub" instead of a real package list. Please regenerate this note from the build output (or remove the section) so the release notes are complete and accurate.
=== Installed Packages Begin
listInstalledPackages stub
=== Installed Packages End
CHANGELOG.md:15
- Minor grammar: "This allows user to" should be plural (or rephrased) since it's describing a capability available to customers generally.
* AKS now allows control-plane only upgrades to AKS [Long Term Support (LTS)](https://aka.ms/aks/lts) as long as the [version skew policy](https://learn.microsoft.com/azure/aks/supported-kubernetes-versions?tabs=azure-cli#what-is-the-allowed-difference-in-versions-between-the-control-plane-and-node-pools) is satisfied. This allows user to more safely upgrade into LTS by first upgrading the control plane, validating functionality, and then upgrading node pools.
Amanda Wang (wangyira)
approved these changes
Aug 10, 2026
Amanda Wang (wangyira)
left a comment
Amanda Wang (wangyira)
left a comment
Contributor
There was a problem hiding this comment.
Approving - pending docs will be added for the open items
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary