3.3.0 Release notes

ReleaseNotes.md

@@ -8,6 +8,50 @@ information see the [Code of Conduct FAQ](https://opensource.microsoft.com/codeo
 additional questions or comments.
 
 ## Release History
+### 04/22/2026 -
+##### Version mcr.microsoft.com/azuremonitor/containerinsights/ciprod:3.3.0 (linux)
+##### Version mcr.microsoft.com/azuremonitor/containerinsights/ciprod:win-3.3.0 (windows)
+- Linux
+  - [azurelinux 3.0.20260204](https://github.com/microsoft/azurelinux/releases/tag/3.0.20260401-3.0)
+  - Golang - 1.26.2
+  - Ruby - arm64 - 3.3.5-7, x86_64 - 3.3.10
+  - MDSD - 1.40.3
+  - Telegraf - 1.38.2
+  - Fluent-bit - 4.0.14
+  - Fluentd - 1.16.3
+- Windows
+  - Golang - 1.26.2
+  - Ruby - 3.1.1
+  - Windows AMA - 47.7.1
+  - Telegraf - 1.24.2
+  - Fluent-bit - 4.0.3
+  - Fluentd - 1.16.3
+##### Code change log
+## What's Changed
+- Common (Linux + Windows)
+    * 3.1.36 - CVE fixes by @suyadav1 in https://github.com/microsoft/Docker-Provider/pull/1631
+    * Fix Telegraf Env Handling issue by @suyadav1 in https://github.com/microsoft/Docker-Provider/pull/1645
+    * Add nodes/pods based on k8s version by @rashmichandrashekar in https://github.com/microsoft/Docker-Provider/pull/1609
+
+- Infra
+    * let trivy fail when cves are detected by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1591
+    * let ginkgo-e2e decide gotoolchain version by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1610
+    * ama-logs deployment and test in dev clusters by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1625
+    * Ignore unfixed telegraf cves for 3.1.36 by @suyadav1 in https://github.com/microsoft/Docker-Provider/pull/1637
+    * collect ama-logs process metrics through telegraf by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1629
+    * guard image deploy to prod clusters by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1638
+    * fix: update testkube MongoDB image tag from 8.0.15 to 8.2.5 by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1641
+    * add stub pipeline YAML for configmap testing by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1642
+    * fix: schedule testkube MongoDB on non-FIPS nodes by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1639
+    * disable trivyscan failure by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1644
+    * add test clusters by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1635    
+    * Add retry logic for gem install to handle QEMU arm64 segfaults by @suyadav1 in https://github.com/microsoft/Docker-Provider/pull/1648
+    * fix ama-logs-windows time issue by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1647
+    * enable networkflowlogs through helm chart by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1649
+    * add dev cluster for configmap testing by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1651
+    * Store all Current Toggle Documents for Logs by @NicAtMS in https://github.com/microsoft/Docker-Provider/pull/1630
+    * auto k8s version detect by @zanejohnson-azure in https://github.com/microsoft/Docker-Provider/pull/1654
+
 ### 02/25/2026 -
 ##### Version mcr.microsoft.com/azuremonitor/containerinsights/ciprod:3.1.35 (linux)
 ##### Version mcr.microsoft.com/azuremonitor/containerinsights/ciprod:win-3.1.35 (windows)

charts/azuremonitor-containerinsights-for-prod-clusters/templates/ama-logs.yaml

@@ -480,7 +480,7 @@ spec:
   template:
     metadata:
       annotations:
-        agentVersion: "azure-mdsd-1.37.0"
+        agentVersion: "azure-mdsd-1.40.3"
         dockerProviderVersion: "18.0.1-0"
         schema-versions: "v1"
         WSID: {{ $.Values.OmsAgent.workspaceID | b64enc | quote }}
@@ -1022,7 +1022,7 @@ spec:
         rsName: "ama-logs-rs"
         kubernetes.azure.com/managedby: aks
       annotations:
-        agentVersion: "azure-mdsd-1.37.0"
+        agentVersion: "azure-mdsd-1.40.3"
         cluster-autoscaler.kubernetes.io/safe-to-evict: "true"
         dockerProviderVersion: "18.0.1-0"
         schema-versions: "v1"
@@ -1382,7 +1382,7 @@ spec:
         tier: node-win
         kubernetes.azure.com/managedby: aks
       annotations:
-        agentVersion: "46.17.2"
+        agentVersion: "47.7.1"
         dockerProviderVersion: "18.0.1-0"
         schema-versions: "v1"
         WSID: {{ .Values.OmsAgent.workspaceID | b64enc | quote }}
@@ -1751,7 +1751,7 @@ spec:
         rsName: "ama-logs-multitenancy"
         kubernetes.azure.com/managedby: aks
       annotations:
-        agentVersion: "azure-mdsd-1.37.0"
+        agentVersion: "azure-mdsd-1.40.3"
         cluster-autoscaler.kubernetes.io/safe-to-evict: "true"
         dockerProviderVersion: "18.0.1-0"
         schema-versions: "v1"
@@ -1882,6 +1882,10 @@ spec:
               value: "{{ .Values.AppmonitoringAgent.enabled }}"
             - name: CLUSTER_CLOUD_ENVIRONMENT
               value: "{{ $cloudEnv }}"
+            - name: AMCS_CLIENT_INSTALL_ID_OVERRIDE
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.uid
           securityContext:
             privileged: true
             capabilities:

charts/azuremonitor-containerinsights/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 name: azuremonitor-containers
 description: Azure Monitor container monitoring agent Helm chart for Kubernetes (supports both AKS addon and Arc K8s extension)
-version: 3.2.1-merged-main-6
+version: 3.3.0
 appVersion: 7.0.0-1
 kubeVersion: "^1.10.0-0"
 keywords:

charts/azuremonitor-containerinsights/templates/ama-logs-daemonset-windows.yaml

@@ -68,7 +68,7 @@ spec:
         checksum/secret: {{ include (print $.Template.BasePath "/ama-logs-secret.yaml") . | sha256sum }}
         checksum/config: {{ toYaml .Values.amalogs.resources | sha256sum }}
 {{- else }}
-        agentVersion: "46.17.2"
+        agentVersion: "47.7.1"
         dockerProviderVersion: "18.0.1-0"
         schema-versions: "v1"
         WSID: {{ .Values.OmsAgent.workspaceID | b64enc | quote }}

charts/azuremonitor-containerinsights/templates/ama-logs-daemonset.yaml

@@ -98,7 +98,7 @@ spec:
         checksum/config: {{ toYaml $.Values.amalogs.resources | sha256sum }}
         checksum/logsettings: {{ toYaml $.Values.amalogs.logsettings | sha256sum }}
 {{- else }}
-        agentVersion: "azure-mdsd-1.37.0"
+        agentVersion: "azure-mdsd-1.40.3"
         dockerProviderVersion: "18.0.1-0"
         schema-versions: "v1"
         WSID: {{ $.Values.OmsAgent.workspaceID | b64enc | quote }}

charts/azuremonitor-containerinsights/templates/ama-logs-deployment-multitenancy.yaml

@@ -41,7 +41,7 @@ spec:
         rsName: "ama-logs-multitenancy"
         kubernetes.azure.com/managedby: aks
       annotations:
-        agentVersion: "azure-mdsd-1.37.0"
+        agentVersion: "azure-mdsd-1.40.3"
         cluster-autoscaler.kubernetes.io/safe-to-evict: "true"
         dockerProviderVersion: "18.0.1-0"
         schema-versions: "v1"

charts/azuremonitor-containerinsights/templates/ama-logs-deployment.yaml

@@ -63,7 +63,7 @@ spec:
         checksum/config: {{ toYaml .Values.amalogs.resources | sha256sum }}
         checksum/logsettings: {{ toYaml .Values.amalogs.logsettings | sha256sum }}
 {{- else }}
-        agentVersion: "azure-mdsd-1.37.0"
+        agentVersion: "azure-mdsd-1.40.3"
         cluster-autoscaler.kubernetes.io/safe-to-evict: "true"
         dockerProviderVersion: "18.0.1-0"
         schema-versions: "v1"

charts/azuremonitor-containerinsights/values.yaml

@@ -41,8 +41,8 @@ OmsAgent:
 
   # Image configuration
   imageRepository: "/azuremonitor/containerinsights/ciprod"
-  imageTagLinux: "3.1.35"
-  imageTagWindows: "win-3.1.35"
+  imageTagLinux: "3.3.0"
+  imageTagWindows: "win-3.3.0"
   isImagePullPolicyAlways: false
 
   # Resource ID and cluster information
@@ -214,12 +214,12 @@ OmsAgent:
 amalogs:
   image:
     repo: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod"
-    tag: "3.1.35"
-    tagWindows: "win-3.1.35"
+    tag: "3.3.0"
+    tagWindows: "win-3.3.0"
     pullPolicy: IfNotPresent
     dockerProviderVersion: "18.0.1-0"
-    agentVersion: "azure-mdsd-1.37.0"
-    winAgentVersion: "46.31.3" # there is no base agent version for windows agent
+    agentVersion: "azure-mdsd-1.40.3"
+    winAgentVersion: "47.7.1" # there is no base agent version for windows agent
 
   # The priority used by the ama-logs priority class for the daemonset pods
   # Note that this is not execution piority - it is scheduling priority, as

charts/azuremonitor-containers-geneva/values.yaml

@@ -17,9 +17,9 @@ genevaLogsConfig:
 
 image:
   repository: mcr.microsoft.com/azuremonitor/containerinsights/ciprod
-  tag: "3.1.35"
+  tag: "3.3.0"
   pullPolicy: IfNotPresent
-  agentVersion: "azure-mdsd-1.37.0"
+  agentVersion: "azure-mdsd-1.40.3"
 nameOverride: ""
 enableInternalMetrics: false
 enableKubernetesMetadata: false

charts/azuremonitor-containers/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 appVersion: 7.0.0-1
 description: Helm chart for deploying Azure Monitor container monitoring agent in Kubernetes
 name: azuremonitor-containers
-version: 3.1.35
+version: 3.3.0
 kubeVersion: "^1.10.0-0"
 keywords:
   - monitoring

charts/azuremonitor-containers/values.yaml

@@ -24,12 +24,12 @@ Azure:
 amalogs:
   image:
     repo: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod"
-    tag: "3.1.35"
-    tagWindows: "win-3.1.35"
+    tag: "3.3.0"
+    tagWindows: "win-3.3.0"
     pullPolicy: IfNotPresent
     dockerProviderVersion: "18.0.1-0"
-    agentVersion: "azure-mdsd-1.37.0"
-    winAgentVersion: "46.31.3" # there is no base agent version for windows agent
+    agentVersion: "azure-mdsd-1.40.3"
+    winAgentVersion: "47.7.1" # there is no base agent version for windows agent
 
   # The priority used by the ama-logs priority class for the daemonset pods
   # Note that this is not execution piority - it is scheduling priority, as

kubernetes/ama-logs.yaml

@@ -18,7 +18,7 @@ rules:
         "nodes/stats",
         "nodes/metrics",
         "nodes/spec",
-        "nodes/proxy",
+        "nodes/pods",
         "namespaces",
         "services",
         "persistentvolumes",
@@ -343,7 +343,7 @@ spec:
         component: ama-logs-agent
         tier: node
       annotations:
-        agentVersion: "azure-mdsd-1.37.0"
+        agentVersion: "azure-mdsd-1.40.3"
         dockerProviderVersion: "18.0.1-0"
         schema-versions: "v1"
         kubernetes.azure.com/no-http-proxy-vars: "true"
@@ -391,7 +391,7 @@ spec:
         #         - NET_ADMIN
         #         - NET_RAW
         - name: ama-logs
-          image: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod:3.1.35"
+          image: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod:3.3.0"
           imagePullPolicy: IfNotPresent
           resources:
             limits:
@@ -460,6 +460,10 @@ spec:
               value: "false"
             - name: CLUSTER_CLOUD_ENVIRONMENT
               value: "azurepubliccloud" # Change this to the cloud environment of your cluster
+            - name: AMCS_CLIENT_INSTALL_ID_OVERRIDE
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.uid
           securityContext:
             privileged: true
             capabilities:
@@ -532,7 +536,7 @@ spec:
             timeoutSeconds: 15
         #Only in sidecar scraping mode
         - name: ama-logs-prometheus
-          image: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod:3.1.35"
+          image: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod:3.3.0"
           imagePullPolicy: IfNotPresent
           resources:
             limits:
@@ -580,6 +584,10 @@ spec:
             #   value: "true"
             - name: CLUSTER_CLOUD_ENVIRONMENT
               value: "azurepubliccloud" # Change this to the cloud environment of your cluster
+            - name: AMCS_CLIENT_INSTALL_ID_OVERRIDE
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.uid
           securityContext:
             privileged: true
             capabilities:
@@ -790,7 +798,7 @@ spec:
 #       labels:
 #         rsName: "ama-logs-multitenancy"
 #       annotations:
-#         agentVersion: "azure-mdsd-1.37.0"
+#         agentVersion: "azure-mdsd-1.40.3"
 #         dockerProviderVersion: "18.0.1-0"
 #         schema-versions: "v1"
 #         kubernetes.azure.com/no-http-proxy-vars: "true"
@@ -833,7 +841,7 @@ spec:
 #                 - NET_ADMIN
 #                 - NET_RAW
 #         - name: ama-logs
-#           image: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod:3.1.22"
+#           image: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod:3.3.0"
 #           imagePullPolicy: IfNotPresent
 #           resources:
 #             limits:
@@ -869,6 +877,10 @@ spec:
 #               value: "true"
 #             - name: CLUSTER_CLOUD_ENVIRONMENT
 #               value: "azurepubliccloud" # Change this to the cloud environment of your cluster
+#             - name: AMCS_CLIENT_INSTALL_ID_OVERRIDE
+#               valueFrom:
+#                 fieldRef:
+#                   fieldPath: metadata.uid
 #           securityContext:
 #             privileged: true
 #             capabilities:
@@ -965,7 +977,7 @@ spec:
       labels:
         rsName: "ama-logs-rs"
       annotations:
-        agentVersion: "azure-mdsd-1.37.0"
+        agentVersion: "azure-mdsd-1.40.3"
         dockerProviderVersion: "18.0.1-0"
         schema-versions: "v1"
         kubernetes.azure.com/no-http-proxy-vars: "true"
@@ -1045,7 +1057,7 @@ spec:
         #         - NET_ADMIN
         #         - NET_RAW
         - name: ama-logs
-          image: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod:3.1.35"
+          image: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod:3.3.0"
           imagePullPolicy: IfNotPresent
           # comment resources if VPA configured since the VPA will set these values
           resources:
@@ -1105,6 +1117,10 @@ spec:
               value: "false"
             - name: CLUSTER_CLOUD_ENVIRONMENT
               value: "azurepubliccloud" # Change this to the cloud environment of your cluster
+            - name: AMCS_CLIENT_INSTALL_ID_OVERRIDE
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.uid
           securityContext:
             privileged: true
             capabilities:
@@ -1259,7 +1275,7 @@ spec:
         component: ama-logs-agent-windows
         tier: node-win
       annotations:
-        agentVersion: "46.31.3"
+        agentVersion: "47.7.1"
         dockerProviderVersion: "18.0.1-0"
         schema-versions: "v1"
         kubernetes.azure.com/no-http-proxy-vars: "true"
@@ -1298,7 +1314,7 @@ spec:
         #       add:
         #         - NET_ADMIN
         - name: ama-logs-windows
-          image: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod:win-3.1.35"
+          image: "mcr.microsoft.com/azuremonitor/containerinsights/ciprod:win-3.3.0"
           imagePullPolicy: IfNotPresent
           resources:
             requests:
@@ -1364,6 +1380,10 @@ spec:
               value: "28331"
             - name: CLUSTER_CLOUD_ENVIRONMENT
               value: "azurepubliccloud" # Change this to the cloud environment of your cluster
+            - name: AMCS_CLIENT_INSTALL_ID_OVERRIDE
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.uid
           volumeMounts:
             #  Uncomment below lines when telegraf upgraded to 1.28.5 or higher
             # - name: kube-api-access

kubernetes/linux/Dockerfile.multiarch

@@ -76,7 +76,7 @@ ENV KUBE_CLIENT_BACKOFF_DURATION 0
 ENV RUBY_GC_HEAP_OLDOBJECT_LIMIT_FACTOR 1.0
 
 # default value will be overwritten by pipeline
-ARG IMAGE_TAG=3.1.35
+ARG IMAGE_TAG=3.3.0
 ENV AGENT_VERSION ${IMAGE_TAG}
 
 WORKDIR ${tmpdir}

kubernetes/windows/Dockerfile

@@ -104,7 +104,7 @@ COPY ./amalogswindows/installer/scripts/rubyKeepCertificateAlive/*.rb /etc/fluen
 COPY ./amalogswindows/ruby/ /etc/fluent/plugin/
 
 # default value will be overwritten by pipeline
-ARG IMAGE_TAG=win-3.1.35
+ARG IMAGE_TAG=win-3.3.0
 ENV AGENT_VERSION ${IMAGE_TAG}
 
 ENV OS_TYPE "windows"