v0.20260608.1

What's Changed

Changes

• feat: reduce node impact by aks-log-collector by @awesomenix in #8598
• fix(e2e): unblock Windows sysprep when VMAgentDisabler.dll load stalls by @r2k1 in #8544
• fix: limit log collection to latest 10MB for all the files by @awesomenix in #8599
• refactor: nvidia GB image build and update driver install order by @keith-ms in #8597
• fix(acl): bump marketplace to 3.20260517.01 and adapt to UKI rename by @aadhar-agarwal in #8577
• fix: in case of azure cni overlay use correct options to match RP by @awesomenix in #8609
• docs: update copilot instructions with shell script best practices by @djsly in #8482
• fix: prewarm containerd in boothook by @awesomenix in #8604
• fix: re-add few more files to nodecustomdata.yaml to allow bootstrapping azurelinuxv2 by @awesomenix in #8621
• feat: add new kubeletconfigs for node hardening by @mxj220 in #8497
• test: raise e2e cluster timeout so bastion create doesn't hit deadline by @ganeshkumarashok in #8616
• fix(e2e): strict wireserver validation — fail fast on unexpected curl exits by @r2k1 in #8580
• fix: handle idle image builder templates when retrying prefetch optimization and increase retry count by @cameronmeissner in #8623
• fix(e2e): improve infra setup reliability with retries and tolerant GC by @r2k1 in #8488
• fix(e2e): harden kube exec against apiserver SPDY hangs by @r2k1 in #8627
• chore(e2e): bump client-go to v0.36.1, Go to 1.26.4, switch pod exec to WebSocket by @r2k1 in #8628
• feat(e2e): use OR tag matching semantics with TAGS_TO_RUN when all are name filters by @cameronmeissner in #8631
• chore(e2e): remove usage of deprecated secure TLS bootstrap client deadline NBC field by @cameronmeissner in #8635
• chore: remove unprotected settings from fips 2204 e2es by @mxj220 in #8634
• fix: make Ubuntu Pro inert on 20.04/FIPS VHDs to stop phone-home (AB#38255910) by @djsly in #8638
• fix: filter apt list by CPU architecture to prevent cross-arch kubelet install failures by @djsly in #8639
• refactor: trim GPU provisioning critical path (skip redundant pull, async cleanup, defer DCGM) by @ganeshkumarashok in #8615
• fix: ensure aks-node-controller TestForwardCompatibility is not flaky by @cameronmeissner in #8644
• feat: expand sov cloud support by @cameronmeissner in #8648
• fix(vhd): remove bundled overlaybd packages after artifact streaming install by @ganeshkumarashok in #8651
• fix: widen fs.file-max sysctl from int32 to int64 by @fcher in #8640
• fix: Revert "fix: widen fs.file-max sysctl from int32 to int64 (#8640)" by @pdamianov-dev in #8658

VHD Component Updates

• chore(deps): update aks/aks-gpu-grid docker tag to v570 by @renovate[bot] in #8539
• chore(windows): bump cilium networking package to 1.7.1 for Windows 2025 by @rzlink in #8602
• chore(deps): update inspektor-gadget by @burak-ok in #8481
• chore(deps): update nvidia-dcgm (patch) by @renovate[bot] in #8354
• chore(deps): bump aks-secure-tls-bootstrap-client to v1.1.3 by @cameronmeissner in #8617
• chore: add 1.36 azure-cloud-node-manager and 1.35/1.36 acr-credential-provider entries by @anndono in #8608
• chore(deps): update ciprod to v3.4.0 by @renovate[bot] in #8548
• chore(deps): update dependency trivy by @renovate[bot] in #8550
• chore(deps): bump aks-secure-tls-bootstrap-client to v1.1.4 by @cameronmeissner in #8633
• chore(deps): update nvidia-device-plugin (patch) by @renovate[bot] in #8585
• chore(deps): bump containerdv2 to 2.2.4 for Ubuntu 2404 and AzureLinux 3.0 by @djsly in #7796

New Contributors

• @fcher made their first contribution in #8640

Full Changelog: v0.20260527.0...v0.20260608.1