Azure/AKS

[Feature] Automatic Node Image Upgrade for node versions

palma21 opened this issue · 18 comments

Providing an opt-in feature for Automated Node Upgrade
Automating the Node Upgrade feature ->#893

https://docs.microsoft.com/en-us/azure/aks/upgrade-cluster#set-auto-upgrade-channel

This issue has been automatically marked as stale because it has not had any activity for 60 days. It will be closed if no further activity occurs within 15 days of this comment.

Hi @jluk and @palma21 any update on this issue please ?

@palma21 Hi, is there any documentation available on how to enable / use this? I've only come across the Github Actions documentation which is a different solution from this I assume?

"--auto-upgrade-channel node-image" is a new parameter in the aks preview cli

I have also registered the following preview feature (not sure if that is still required since it is public preview now).
az feature register --namespace "Microsoft.ContainerService" --name "NodeImageUpgradePreview"

I had to do az feature register --namespace Microsoft.ContainerService -n AutoUpgradePreview as well. It seems to work now. Thanks!

@palma21 Hi, is there any documentation available on how to enable / use this? I've only come across the Github Actions documentation which is a different solution from this I assume?

@pietervincken @denniszielke the docs don't state anything about the nodeimagepreview, apparently its enough just to supply the node-image. i think this was recent change in the docs
https://docs.microsoft.com/en-us/azure/aks/upgrade-cluster#set-auto-upgrade-channel

@palma21 Is this GA? I don't get any results for the below command
az feature list -o table --query "[?contains(name, 'Microsoft.ContainerService/AutoUpgradePreview')].{Name:name,State:properties.state}"

However when I do az aks update --help | grep auto I can see the --auto-upgrade-channel I am using Az cli 2.25.0

As per the GH project, this is still in public preview.

It's still in preview, will be GAing soon.

When I set the upgrade channel as node image
az aks update --auto-upgrade-channel node-image --resource-group rg-trh-qa --name trh-qa

It returns

"autoUpgradeProfile": {
"upgradeChannel": "none"
},

I've registered the AutoUpdatePreview and the NodeImageUpgradePreview
Is there something else I need to do?

When this feature would be GA? Soon means in days or weeks or months or years?

Are the upgrade channels inherited?

i.e. if you specify patch, you get patch and node-image updates. if you specify stable, you get stable, patch and node-image

We'd like both patch and node-image in our setup when adopting this to begin with, but I can't see anywhere that you get both by applying a higher upgrade channel

@damienpontifex #2429 is tracking that specific case seeing as the auto-upgrade node-image and aks are so close to GA having it seperate seems prudent.

@siegenthalerroger auto upgrade is now GA according to latest release https://github.com/Azure/AKS/releases/tag/2021-11-11

It just surprised me that this wasn't in the feature prior. Seems weird that I'd want say stable but that would somehow imply I didn't want node image updates in between stable version releases. Anyway, we can keep kured that we're currently using to update nodes, while still adopting patch or stable for the kubernetes version updates until the feature is enhanced

@damienpontifex yes it's GA now, however I believe the behaviour is still such that one must choose between node-image upgrades (weekly) or the k8s upgrades. Unless the documentation says something else that would be my assumption (and to the best of my knowledge this is the case).

@siegenthalerroger the node-image option will update only the OS image and patch/stable/rapid will update both OS+K8S

@naioja yes patch/stable/rapid will update both, however it won't be weekly right? Rather the node-image will only get updated when a k8s update triggers the nodes to update...

GA - closing

Additional discussions on cumulative in #2429