v2.7.0

Release notes

Breaking changes

Metrics endpoint has changed from 8080 to 8443 and now requires HTTPS

ASO no longer depends on kube-rbac-proxy and now correctly secures the metrics endpoint by default.

These options are configured via the following options in the Helm chart:

    --set metrics.secure=true/false (default: true)
    --set metrics.address=0.0.0.0:8443 (default)

For more details about how to scrape metrics, see the metrics guide.

Secret or ConfigMap values which cannot be written now trigger a reconcile error

Previously, if ASO couldn't find the corresponding secret/configmap value, it would just skip creating it with no error. This is almost
never what users expect: if they ask for a specific ConfigMap or Secret value to be exported they expect it to actually get exported. ASO now
behaves as expected in cases where it cannot find the value to export and will set an appropriate Ready condition warning.

See #3925 for more details.

Upcoming Breaking changes

None

New resources

• Support new MySQL API version 2023-06-30 (#3905)
• Support new Insight/Webtest API version 2022-06-15 (#3911)
• New resource Backup Instance for Microsoft.DataProtection (#3736)

Features

• Expose pprof endpoint at metrics URL when setting --set metrics.profiling=true/false (default: false) (#3833)
• Managedidentity operatorspec supports export to a secret (#3937)
• Add asoctl template command (#3968)

Improvements

• Updated numerous Golang dependencies
• Support exporting eventhub keys (#3882)
• Add namespace, label, and annotation support to asoctl import (#3884)

Bug fixes

• Fix bug where Reconciling condition would sometimes fail to overwrite AzureResourceNotFound (#3834)
• Fix bug where documentdb capacity failures had a very hard to understand error (#3906)
• Fix bug where user requested secrets or configmaps were not emtited in some edge cases (#3925)
• Fix asoctl bug that could prevent imported resources from being applied because of letter case differences in responses from ARM (#3880)
• Fix asoctl bug where attempts to list the extension resource kubernetestconfiguration/extension could abort the import (#3853)
• Fix asoctl panic when resource types case mismatched (#3862)

Documentation

• Add ASOv1 to ASOv2 migration guide (#3898)
• Improve various small doc nits (#3909)
• Add best practices documentation and update other docs (#3938)
• Improve ownership, adoption, and FAQ documentation (#3966)

External Contributors

• @mayankagg9722 made their first contribution in #3736
• @mehighlow

Full Changelog: v2.6.0...v2.7.0