From da187fcd2a405b00c6d2caa21457cc516c14a146 Mon Sep 17 00:00:00 2001 From: Sunil Yadav Date: Thu, 23 Apr 2026 04:34:55 +0000 Subject: [PATCH 1/4] 3.3.0 Release notes --- ReleaseNotes.md | 44 +++++++++++++++++++ .../templates/ama-logs.yaml | 12 +++-- .../values.yaml | 4 +- charts/azuremonitor-containers/Chart.yaml | 2 +- charts/azuremonitor-containers/values.yaml | 8 ++-- kubernetes/ama-logs.yaml | 40 ++++++++++++----- kubernetes/linux/Dockerfile.multiarch | 2 +- kubernetes/windows/Dockerfile | 2 +- 8 files changed, 91 insertions(+), 23 deletions(-) diff --git a/ReleaseNotes.md b/ReleaseNotes.md index 490bf2b51..d9b07d7a4 100644 --- a/ReleaseNotes.md +++ b/ReleaseNotes.md @@ -8,6 +8,50 @@ information see the [Code of Conduct FAQ](https://opensource.microsoft.com/codeo additional questions or comments. ## Release History +### 04/22/2026 - +##### Version mcr.microsoft.com/azuremonitor/containerinsights/ciprod:3.3.0 (linux) +##### Version mcr.microsoft.com/azuremonitor/containerinsights/ciprod:win-3.3.0 (windows) +- Linux + - [azurelinux 3.0.20260204](https://github.com/microsoft/azurelinux/releases/tag/3.0.20260401-3.0) + - Golang - 1.26.2 + - Ruby - arm64 - 3.3.5-7, x86_64 - 3.3.10 + - MDSD - 1.40.3 + - Telegraf - 1.38.2 + - Fluent-bit - 4.0.14 + - Fluentd - 1.16.3 +- Windows + - Golang - 1.26.2 + - Ruby - 3.1.1 + - Windows AMA - 47.7.1 + - Telegraf - 1.24.2 + - Fluent-bit - 4.0.3 + - Fluentd - 1.16.3 +##### Code change log +## What's Changed +- Common (Linux + Windows) + * 3.1.36 - CVE fixes by @suyadav1 in https://github.com/microsoft/Docker-Provider/pull/1631 + * Fix Telegraf Env Handling issue by @suyadav1 in https://github.com/microsoft/Docker-Provider/pull/1645 + * Add nodes/pods based on k8s version by @rashmichandrashekar in https://github.com/microsoft/Docker-Provider/pull/1609 + +- Infra + * let trivy fail when cves are detected by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1591 + * let ginkgo-e2e decide gotoolchain version by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1610 + * ama-logs deployment and test in dev clusters by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1625 + * Ignore unfixed telegraf cves for 3.1.36 by @suyadav1 in https://github.com/microsoft/Docker-Provider/pull/1637 + * collect ama-logs process metrics through telegraf by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1629 + * guard image deploy to prod clusters by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1638 + * fix: update testkube MongoDB image tag from 8.0.15 to 8.2.5 by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1641 + * add stub pipeline YAML for configmap testing by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1642 + * fix: schedule testkube MongoDB on non-FIPS nodes by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1639 + * disable trivyscan failure by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1644 + * add test clusters by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1635 + * Add retry logic for gem install to handle QEMU arm64 segfaults by @suyadav1 in https://github.com/microsoft/Docker-Provider/pull/1648 + * fix ama-logs-windows time issue by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1647 + * enable networkflowlogs through helm chart by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1649 + * add dev cluster for configmap testing by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1651 + * Store all Current Toggle Documents for Logs by @NicAtMS in https://github.com/microsoft/Docker-Provider/pull/1630 + * auto k8s version detect by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1654 + ### 02/25/2026 - ##### Version mcr.microsoft.com/azuremonitor/containerinsights/ciprod:3.1.35 (linux) ##### Version mcr.microsoft.com/azuremonitor/containerinsights/ciprod:win-3.1.35 (windows) diff --git a/charts/azuremonitor-containerinsights-for-prod-clusters/templates/ama-logs.yaml b/charts/azuremonitor-containerinsights-for-prod-clusters/templates/ama-logs.yaml index 14fc31458..35ea09496 100644 --- a/charts/azuremonitor-containerinsights-for-prod-clusters/templates/ama-logs.yaml +++ b/charts/azuremonitor-containerinsights-for-prod-clusters/templates/ama-logs.yaml @@ -476,7 +476,7 @@ spec: template: metadata: annotations: - agentVersion: "azure-mdsd-1.37.0" + agentVersion: "azure-mdsd-1.40.3" dockerProviderVersion: "18.0.1-0" schema-versions: "v1" WSID: {{ $.Values.OmsAgent.workspaceID | b64enc | quote }} @@ -1010,7 +1010,7 @@ spec: rsName: "ama-logs-rs" kubernetes.azure.com/managedby: aks annotations: - agentVersion: "azure-mdsd-1.37.0" + agentVersion: "azure-mdsd-1.40.3" cluster-autoscaler.kubernetes.io/safe-to-evict: "true" dockerProviderVersion: "18.0.1-0" schema-versions: "v1" @@ -1366,7 +1366,7 @@ spec: tier: node-win kubernetes.azure.com/managedby: aks annotations: - agentVersion: "46.17.2" + agentVersion: "47.7.1" dockerProviderVersion: "18.0.1-0" schema-versions: "v1" WSID: {{ .Values.OmsAgent.workspaceID | b64enc | quote }} @@ -1731,7 +1731,7 @@ spec: rsName: "ama-logs-multitenancy" kubernetes.azure.com/managedby: aks annotations: - agentVersion: "azure-mdsd-1.37.0" + agentVersion: "azure-mdsd-1.40.3" cluster-autoscaler.kubernetes.io/safe-to-evict: "true" dockerProviderVersion: "18.0.1-0" schema-versions: "v1" @@ -1858,6 +1858,10 @@ spec: value: "{{ .Values.AppmonitoringAgent.enabled }}" - name: CLUSTER_CLOUD_ENVIRONMENT value: "{{ .Values.global.commonGlobals.CloudEnvironment | lower }}" + - name: AMCS_CLIENT_INSTALL_ID_OVERRIDE + valueFrom: + fieldRef: + fieldPath: metadata.uid securityContext: privileged: true capabilities: diff --git a/charts/azuremonitor-containers-geneva/values.yaml b/charts/azuremonitor-containers-geneva/values.yaml index c307d7592..b654c9a91 100644 --- a/charts/azuremonitor-containers-geneva/values.yaml +++ b/charts/azuremonitor-containers-geneva/values.yaml @@ -17,9 +17,9 @@ genevaLogsConfig: image: repository: mcr.microsoft.com/azuremonitor/containerinsights/ciprod - tag: "3.1.35" + tag: "3.3.0" pullPolicy: IfNotPresent - agentVersion: "azure-mdsd-1.37.0" + agentVersion: "azure-mdsd-1.40.3" nameOverride: "" enableInternalMetrics: false enableKubernetesMetadata: false diff --git a/charts/azuremonitor-containers/Chart.yaml b/charts/azuremonitor-containers/Chart.yaml index 6e5bd0f46..454cfd81d 100644 --- a/charts/azuremonitor-containers/Chart.yaml +++ b/charts/azuremonitor-containers/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v1 appVersion: 7.0.0-1 description: Helm chart for deploying Azure Monitor container monitoring agent in Kubernetes name: azuremonitor-containers -version: 3.1.35 +version: 3.3.0 kubeVersion: "^1.10.0-0" keywords: - monitoring diff --git a/charts/azuremonitor-containers/values.yaml b/charts/azuremonitor-containers/values.yaml index 44593a765..f279ea7f4 100644 --- a/charts/azuremonitor-containers/values.yaml +++ b/charts/azuremonitor-containers/values.yaml @@ -24,12 +24,12 @@ Azure: amalogs: image: repo: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod" - tag: "3.1.35" - tagWindows: "win-3.1.35" + tag: "3.3.0" + tagWindows: "win-3.3.0" pullPolicy: IfNotPresent dockerProviderVersion: "18.0.1-0" - agentVersion: "azure-mdsd-1.37.0" - winAgentVersion: "46.31.3" # there is no base agent version for windows agent + agentVersion: "azure-mdsd-1.40.3" + winAgentVersion: "47.7.1" # there is no base agent version for windows agent # The priority used by the ama-logs priority class for the daemonset pods # Note that this is not execution piority - it is scheduling priority, as diff --git a/kubernetes/ama-logs.yaml b/kubernetes/ama-logs.yaml index 3db73b3dd..d921792c4 100644 --- a/kubernetes/ama-logs.yaml +++ b/kubernetes/ama-logs.yaml @@ -18,7 +18,7 @@ rules: "nodes/stats", "nodes/metrics", "nodes/spec", - "nodes/proxy", + "nodes/pods", "namespaces", "services", "persistentvolumes", @@ -343,7 +343,7 @@ spec: component: ama-logs-agent tier: node annotations: - agentVersion: "azure-mdsd-1.37.0" + agentVersion: "azure-mdsd-1.40.3" dockerProviderVersion: "18.0.1-0" schema-versions: "v1" kubernetes.azure.com/no-http-proxy-vars: "true" @@ -391,7 +391,7 @@ spec: # - NET_ADMIN # - NET_RAW - name: ama-logs - image: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod:3.1.35" + image: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod:3.3.0" imagePullPolicy: IfNotPresent resources: limits: @@ -460,6 +460,10 @@ spec: value: "false" - name: CLUSTER_CLOUD_ENVIRONMENT value: "azurepubliccloud" # Change this to the cloud environment of your cluster + - name: AMCS_CLIENT_INSTALL_ID_OVERRIDE + valueFrom: + fieldRef: + fieldPath: metadata.uid securityContext: privileged: true capabilities: @@ -532,7 +536,7 @@ spec: timeoutSeconds: 15 #Only in sidecar scraping mode - name: ama-logs-prometheus - image: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod:3.1.35" + image: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod:3.3.0" imagePullPolicy: IfNotPresent resources: limits: @@ -580,6 +584,10 @@ spec: # value: "true" - name: CLUSTER_CLOUD_ENVIRONMENT value: "azurepubliccloud" # Change this to the cloud environment of your cluster + - name: AMCS_CLIENT_INSTALL_ID_OVERRIDE + valueFrom: + fieldRef: + fieldPath: metadata.uid securityContext: privileged: true capabilities: @@ -790,7 +798,7 @@ spec: # labels: # rsName: "ama-logs-multitenancy" # annotations: -# agentVersion: "azure-mdsd-1.37.0" +# agentVersion: "azure-mdsd-1.40.3" # dockerProviderVersion: "18.0.1-0" # schema-versions: "v1" # kubernetes.azure.com/no-http-proxy-vars: "true" @@ -833,7 +841,7 @@ spec: # - NET_ADMIN # - NET_RAW # - name: ama-logs -# image: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod:3.1.22" +# image: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod:3.3.0" # imagePullPolicy: IfNotPresent # resources: # limits: @@ -869,6 +877,10 @@ spec: # value: "true" # - name: CLUSTER_CLOUD_ENVIRONMENT # value: "azurepubliccloud" # Change this to the cloud environment of your cluster +# - name: AMCS_CLIENT_INSTALL_ID_OVERRIDE +# valueFrom: +# fieldRef: +# fieldPath: metadata.uid # securityContext: # privileged: true # capabilities: @@ -965,7 +977,7 @@ spec: labels: rsName: "ama-logs-rs" annotations: - agentVersion: "azure-mdsd-1.37.0" + agentVersion: "azure-mdsd-1.40.3" dockerProviderVersion: "18.0.1-0" schema-versions: "v1" kubernetes.azure.com/no-http-proxy-vars: "true" @@ -1045,7 +1057,7 @@ spec: # - NET_ADMIN # - NET_RAW - name: ama-logs - image: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod:3.1.35" + image: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod:3.3.0" imagePullPolicy: IfNotPresent # comment resources if VPA configured since the VPA will set these values resources: @@ -1105,6 +1117,10 @@ spec: value: "false" - name: CLUSTER_CLOUD_ENVIRONMENT value: "azurepubliccloud" # Change this to the cloud environment of your cluster + - name: AMCS_CLIENT_INSTALL_ID_OVERRIDE + valueFrom: + fieldRef: + fieldPath: metadata.uid securityContext: privileged: true capabilities: @@ -1259,7 +1275,7 @@ spec: component: ama-logs-agent-windows tier: node-win annotations: - agentVersion: "46.31.3" + agentVersion: "47.7.1" dockerProviderVersion: "18.0.1-0" schema-versions: "v1" kubernetes.azure.com/no-http-proxy-vars: "true" @@ -1298,7 +1314,7 @@ spec: # add: # - NET_ADMIN - name: ama-logs-windows - image: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod:win-3.1.35" + image: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod:win-3.3.0" imagePullPolicy: IfNotPresent resources: requests: @@ -1364,6 +1380,10 @@ spec: value: "28331" - name: CLUSTER_CLOUD_ENVIRONMENT value: "azurepubliccloud" # Change this to the cloud environment of your cluster + - name: AMCS_CLIENT_INSTALL_ID_OVERRIDE + valueFrom: + fieldRef: + fieldPath: metadata.uid volumeMounts: # Uncomment below lines when telegraf upgraded to 1.28.5 or higher # - name: kube-api-access diff --git a/kubernetes/linux/Dockerfile.multiarch b/kubernetes/linux/Dockerfile.multiarch index 91343a12a..7dc1601b3 100644 --- a/kubernetes/linux/Dockerfile.multiarch +++ b/kubernetes/linux/Dockerfile.multiarch @@ -76,7 +76,7 @@ ENV KUBE_CLIENT_BACKOFF_DURATION 0 ENV RUBY_GC_HEAP_OLDOBJECT_LIMIT_FACTOR 1.0 # default value will be overwritten by pipeline -ARG IMAGE_TAG=3.1.35 +ARG IMAGE_TAG=3.3.0 ENV AGENT_VERSION ${IMAGE_TAG} WORKDIR ${tmpdir} diff --git a/kubernetes/windows/Dockerfile b/kubernetes/windows/Dockerfile index 25e463837..099264306 100644 --- a/kubernetes/windows/Dockerfile +++ b/kubernetes/windows/Dockerfile @@ -104,7 +104,7 @@ COPY ./amalogswindows/installer/scripts/rubyKeepCertificateAlive/*.rb /etc/fluen COPY ./amalogswindows/ruby/ /etc/fluent/plugin/ # default value will be overwritten by pipeline -ARG IMAGE_TAG=win-3.1.35 +ARG IMAGE_TAG=win-3.3.0 ENV AGENT_VERSION ${IMAGE_TAG} ENV OS_TYPE "windows" From cade6c2f25aa2aa44a0c0613c2b0a54976028a7c Mon Sep 17 00:00:00 2001 From: Sunil Yadav Date: Fri, 24 Apr 2026 17:49:01 +0000 Subject: [PATCH 2/4] combined chart 3.3.0 changes --- charts/azuremonitor-containerinsights/values.yaml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/charts/azuremonitor-containerinsights/values.yaml b/charts/azuremonitor-containerinsights/values.yaml index f2922d783..d03531452 100644 --- a/charts/azuremonitor-containerinsights/values.yaml +++ b/charts/azuremonitor-containerinsights/values.yaml @@ -41,8 +41,8 @@ OmsAgent: # Image configuration imageRepository: "/azuremonitor/containerinsights/ciprod" - imageTagLinux: "3.1.35" - imageTagWindows: "win-3.1.35" + imageTagLinux: "3.3.0" + imageTagWindows: "win-3.3.0" isImagePullPolicyAlways: false # Resource ID and cluster information @@ -214,12 +214,12 @@ OmsAgent: amalogs: image: repo: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod" - tag: "3.1.35" - tagWindows: "win-3.1.35" + tag: "3.3.0" + tagWindows: "win-3.3.0" pullPolicy: IfNotPresent dockerProviderVersion: "18.0.1-0" - agentVersion: "azure-mdsd-1.37.0" - winAgentVersion: "46.31.3" # there is no base agent version for windows agent + agentVersion: "azure-mdsd-1.40.3" + winAgentVersion: "47.7.1" # there is no base agent version for windows agent # The priority used by the ama-logs priority class for the daemonset pods # Note that this is not execution piority - it is scheduling priority, as From 4ce9e4b0620213e24a22c5e9c8f85a629b528af0 Mon Sep 17 00:00:00 2001 From: Sunil Yadav Date: Fri, 24 Apr 2026 18:04:50 +0000 Subject: [PATCH 3/4] nit --- .../templates/ama-logs-daemonset-windows.yaml | 2 +- .../templates/ama-logs-daemonset.yaml | 2 +- .../templates/ama-logs-deployment-multitenancy.yaml | 2 +- .../templates/ama-logs-deployment.yaml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/charts/azuremonitor-containerinsights/templates/ama-logs-daemonset-windows.yaml b/charts/azuremonitor-containerinsights/templates/ama-logs-daemonset-windows.yaml index fe983e235..d56d2e87a 100644 --- a/charts/azuremonitor-containerinsights/templates/ama-logs-daemonset-windows.yaml +++ b/charts/azuremonitor-containerinsights/templates/ama-logs-daemonset-windows.yaml @@ -68,7 +68,7 @@ spec: checksum/secret: {{ include (print $.Template.BasePath "/ama-logs-secret.yaml") . | sha256sum }} checksum/config: {{ toYaml .Values.amalogs.resources | sha256sum }} {{- else }} - agentVersion: "46.17.2" + agentVersion: "47.7.1" dockerProviderVersion: "18.0.1-0" schema-versions: "v1" WSID: {{ .Values.OmsAgent.workspaceID | b64enc | quote }} diff --git a/charts/azuremonitor-containerinsights/templates/ama-logs-daemonset.yaml b/charts/azuremonitor-containerinsights/templates/ama-logs-daemonset.yaml index 4e3990659..383cf1f10 100644 --- a/charts/azuremonitor-containerinsights/templates/ama-logs-daemonset.yaml +++ b/charts/azuremonitor-containerinsights/templates/ama-logs-daemonset.yaml @@ -98,7 +98,7 @@ spec: checksum/config: {{ toYaml $.Values.amalogs.resources | sha256sum }} checksum/logsettings: {{ toYaml $.Values.amalogs.logsettings | sha256sum }} {{- else }} - agentVersion: "azure-mdsd-1.37.0" + agentVersion: "azure-mdsd-1.40.3" dockerProviderVersion: "18.0.1-0" schema-versions: "v1" WSID: {{ $.Values.OmsAgent.workspaceID | b64enc | quote }} diff --git a/charts/azuremonitor-containerinsights/templates/ama-logs-deployment-multitenancy.yaml b/charts/azuremonitor-containerinsights/templates/ama-logs-deployment-multitenancy.yaml index 6533ad9b6..683bb1682 100644 --- a/charts/azuremonitor-containerinsights/templates/ama-logs-deployment-multitenancy.yaml +++ b/charts/azuremonitor-containerinsights/templates/ama-logs-deployment-multitenancy.yaml @@ -41,7 +41,7 @@ spec: rsName: "ama-logs-multitenancy" kubernetes.azure.com/managedby: aks annotations: - agentVersion: "azure-mdsd-1.37.0" + agentVersion: "azure-mdsd-1.40.3" cluster-autoscaler.kubernetes.io/safe-to-evict: "true" dockerProviderVersion: "18.0.1-0" schema-versions: "v1" diff --git a/charts/azuremonitor-containerinsights/templates/ama-logs-deployment.yaml b/charts/azuremonitor-containerinsights/templates/ama-logs-deployment.yaml index c549e369d..2021c663e 100644 --- a/charts/azuremonitor-containerinsights/templates/ama-logs-deployment.yaml +++ b/charts/azuremonitor-containerinsights/templates/ama-logs-deployment.yaml @@ -63,7 +63,7 @@ spec: checksum/config: {{ toYaml .Values.amalogs.resources | sha256sum }} checksum/logsettings: {{ toYaml .Values.amalogs.logsettings | sha256sum }} {{- else }} - agentVersion: "azure-mdsd-1.37.0" + agentVersion: "azure-mdsd-1.40.3" cluster-autoscaler.kubernetes.io/safe-to-evict: "true" dockerProviderVersion: "18.0.1-0" schema-versions: "v1" From bb5d39f2d9dc7e7d424fc6a291be00c1879f4b22 Mon Sep 17 00:00:00 2001 From: Sunil Yadav Date: Fri, 24 Apr 2026 19:37:28 +0000 Subject: [PATCH 4/4] Update extension chart for 3.3.0 --- charts/azuremonitor-containerinsights/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/azuremonitor-containerinsights/Chart.yaml b/charts/azuremonitor-containerinsights/Chart.yaml index 142fdc98d..a9a73838e 100644 --- a/charts/azuremonitor-containerinsights/Chart.yaml +++ b/charts/azuremonitor-containerinsights/Chart.yaml @@ -1,7 +1,7 @@ apiVersion: v2 name: azuremonitor-containers description: Azure Monitor container monitoring agent Helm chart for Kubernetes (supports both AKS addon and Arc K8s extension) -version: 3.2.1-merged-main-6 +version: 3.3.0 appVersion: 7.0.0-1 kubeVersion: "^1.10.0-0" keywords: