Merge branch 'main' into containers-from-vn2

Author: DomAyre

.github/CODEOWNERS

@@ -2,7 +2,7 @@
 
 /linter_exclusions.yml @kairu-ms @wangzelin007
 
-/src/index.json @kairu-ms @jsntcy @jiasli @zhoxing-ms @evelyn-ys @necusjz @wangzelin007
+/src/index.json @kairu-ms @jsntcy @jiasli @zhoxing-ms @calvinhzy @necusjz @wangzelin007
 
 /src/footprint/ @jonunezd @Diego-Perez-Botero
 
@@ -22,7 +22,7 @@
 
 /src/eventgrid/ @kalyanaj
 
-/src/storage-preview/ @evelyn-ys @calvinhzy
+/src/storage-preview/ @calvinhzy
 
 /src/dev-spaces/ @amsoedal
 
@@ -110,11 +110,11 @@
 
 /src/databricks/ @fengzhou-msft @xfz11 @windoze
 
-/src/powerbidedicated/ @Juliehzl @tarostok @evelyn-ys
+/src/powerbidedicated/ @Juliehzl @tarostok @calvinhzy
 
 /src/blueprint/ @fengzhou-msft
 
-/src/storage-blob-preview/ @evelyn-ys @calvinhzy
+/src/storage-blob-preview/ @calvinhzy
 
 /src/logic/ @jsntcy @kairu-ms
 
@@ -158,7 +158,7 @@
 
 /src/costmanagement/ @kairu-ms @jsntcy
 
-/src/datafactory/ @kairu-ms @evelyn-ys @Juliehzl
+/src/datafactory/ @kairu-ms @calvinhzy @Juliehzl
 
 /src/desktopvirtualization/ @changlong-liu
 
@@ -200,7 +200,7 @@
 
 /src/cosmosdb-preview/ @wmengmsft @MehaKaushik @kavskalyan
 
-/src/ad/ @evelyn-ys
+/src/ad/ @calvinhzy
 
 /src/next/ @zhoxing-ms
 
@@ -228,7 +228,7 @@
 
 /src/image-gallery/ @zhoxing-ms
 
-/src/keyvault-preview/ @evelyn-ys @calvinhzy
+/src/keyvault-preview/ @notyashhh @calvinhzy
 
 /src/init/ @zhoxing-ms @HuangYT2000
 

azure-cli-extensions.pyproj

@@ -2704,6 +2704,20 @@
     <Compile Include="src\mesh\azext_mesh\_params.py" />
     <Compile Include="src\mesh\azext_mesh\__init__.py" />
     <Compile Include="src\mesh\setup.py" />
+    <Compile Include="src\migrate\azext_migrate\aaz\__init__.py" />
+    <Compile Include="src\migrate\azext_migrate\commands.py" />
+    <Compile Include="src\migrate\azext_migrate\custom.py" />
+    <Compile Include="src\migrate\azext_migrate\tests\latest\test_migrate_commands.py" />
+    <Compile Include="src\migrate\azext_migrate\tests\latest\__init__.py" />
+    <Compile Include="src\migrate\azext_migrate\tests\__init__.py" />
+    <Compile Include="src\migrate\azext_migrate\_get_discovered_server_helpers.py" />
+    <Compile Include="src\migrate\azext_migrate\_help.py" />
+    <Compile Include="src\migrate\azext_migrate\_helpers.py" />
+    <Compile Include="src\migrate\azext_migrate\_initialize_replication_infrastructure_helpers.py" />
+    <Compile Include="src\migrate\azext_migrate\_new_local_server_replication_helpers.py" />
+    <Compile Include="src\migrate\azext_migrate\_params.py" />
+    <Compile Include="src\migrate\azext_migrate\__init__.py" />
+    <Compile Include="src\migrate\setup.py" />
     <Compile Include="src\privatedns\azext_privatedns\commands.py" />
     <Compile Include="src\privatedns\azext_privatedns\custom.py" />
     <Compile Include="src\privatedns\azext_privatedns\vendored_sdks\models\aaaa_record.py" />
@@ -4699,6 +4713,11 @@
     <Content Include="src\mesh\azext_mesh\azext_metadata.json" />
     <Content Include="src\mesh\HISTORY.rst" />
     <Content Include="src\mesh\README.rst" />
+    <Content Include="src\migrate\azext_migrate\azext_metadata.json" />
+    <Content Include="src\migrate\HISTORY.rst" />
+    <Content Include="src\migrate\linter_exclusions.yml" />
+    <Content Include="src\migrate\README.md" />
+    <Content Include="src\migrate\setup.cfg" />
     <Content Include="src\resource-graph\azext_resourcegraph\azext_metadata.json" />
     <Content Include="src\resource-graph\HISTORY.rst" />
     <Content Include="src\resource-graph\README.rst" />
@@ -4877,6 +4896,11 @@
     <Folder Include="src\mesh\azext_mesh\servicefabricmesh\mgmt\servicefabricmesh\operations" />
     <Folder Include="src\mesh\azext_mesh\tests\" />
     <Folder Include="src\mesh\azext_mesh\tests\latest" />
+    <Folder Include="src\migrate\" />
+    <Folder Include="src\migrate\azext_migrate\" />
+    <Folder Include="src\migrate\azext_migrate\aaz\" />
+    <Folder Include="src\migrate\azext_migrate\tests\" />
+    <Folder Include="src\migrate\azext_migrate\tests\latest\" />
     <Folder Include="src\privatedns\" />
     <Folder Include="src\privatedns\azext_privatedns\" />
     <Folder Include="src\privatedns\azext_privatedns\vendored_sdks\" />

linter_exclusions.yml

@@ -40,6 +40,9 @@ aks create:
     enable_private_cluster:
       rule_exclusions:
       - option_length_too_long
+    enable_application_load_balancer:
+      rule_exclusions:
+      - option_length_too_long
     load_balancer_idle_timeout:
       rule_exclusions:
       - option_length_too_long
@@ -198,6 +201,12 @@ aks update:
     cluster_service_load_balancer_health_probe_mode:
       rule_exclusions:
       - option_length_too_long
+    enable_application_load_balancer:
+      rule_exclusions:
+      - option_length_too_long
+    disable_application_load_balancer:
+      rule_exclusions:
+      - option_length_too_long
 aks agent:
   parameters:
     prompt:
@@ -2188,6 +2197,36 @@ network front-door waf-policy update:
     captcha_expiration_in_minutes:
       rule_exclusions:
       - option_length_too_long
+network front-door waf-policy managed-rules:
+  rule_exclusions:
+  - require_wait_command_if_no_wait
+network front-door waf-policy managed-rules exclusion:
+  rule_exclusions:
+  - require_wait_command_if_no_wait
+network front-door waf-policy managed-rules exclusion list:
+  rule_exclusions:
+  - no_ids_for_list_commands
+network front-door waf-policy managed-rules list:
+  rule_exclusions:
+  - no_ids_for_list_commands
+network front-door waf-policy managed-rules override:
+  rule_exclusions:
+  - require_wait_command_if_no_wait
+network front-door waf-policy managed-rules override list:
+  rule_exclusions:
+  - no_ids_for_list_commands
+network front-door waf-policy rule:
+  rule_exclusions:
+  - require_wait_command_if_no_wait
+network front-door waf-policy rule list:
+  rule_exclusions:
+  - no_ids_for_list_commands
+network front-door waf-policy rule match-condition:
+  rule_exclusions:
+  - require_wait_command_if_no_wait
+network front-door waf-policy rule match-condition list:
+  rule_exclusions:
+  - no_ids_for_list_commands
 network manager connect-config create:
   parameters:
     delete_existing_peering:
@@ -3510,3 +3549,21 @@ confcom containers from_vn2:
     template:
       rule_exclusions:
         - no_positional_parameters
+
+confcom fragment push:
+  parameters:
+    signed_fragment:
+      rule_exclusions:
+        - no_positional_parameters
+
+confcom fragment attach:
+  parameters:
+    signed_fragment:
+      rule_exclusions:
+        - no_positional_parameters
+
+confcom containers from_image:
+  parameters:
+    image:
+      rule_exclusions:
+        - no_positional_parameters

src/aks-agent/HISTORY.rst

@@ -12,6 +12,45 @@ To release a new version, please select a new version number (usually plus 1 to
 Pending
 +++++++
 
+1.0.0b16
+++++++++
+* Fix: client mode use AzureCLICredential to authenticate with Azure
+* Fix: correct wrong prompt message for init and cleanup
+* Fix: prompt the whole flags including --resource-group, --name and optional --namespace for az aks agent command
+* Enhancement: cluster mode cleanup will wait for pods to be removed after deletion
+
+1.0.0b15
+++++++++
+* Feature: Add local mode support - run AKS agent in Docker container on local machine as an alternative to cluster deployment
+* Feature: Mode selection during `az aks agent-init` - choose between cluster mode (Helm deployment) or local mode (Docker container)
+* Feature: Cluster Mode requires the user to specify the namespace and service account name during `az aks agent-init`
+* Feature: Cluster Mode requires namespace for `az aks agent-cleanup` and `az aks agent`
+* Enhancement: Comprehensive telemetry tracking - track init, cleanup, and startup events with mode information (cluster/local)
+
+1.0.0b14
+++++++++
+* Fix: set stdout to blocking mode to avoid "BlockingIOError: [Errno 35] write could not complete without blocking"
+* Fix: gracefully handle the connection reset error
+* Fix: correct the prompt to user `az aks agent-init` to initialize the aks agent
+* Fix: dont echo the user input for Linux users
+* Close websocket and restore terminal settings after `az aks agent` ends
+
+1.0.0b13
+++++++++
+* Fix subscription id not correctly set in helm chart
+
+1.0.0b12
+++++++++
+* [BREAKING CHANGE]:
+  * aks-agent is now containerized and deployed per Kubernetes cluster along with a managed aks-mcp instance
+  * aks-agent is deployed on the AKS cluster as Helm charts during `az aks agent-init`
+  * aks agent commands now require --resource-group and --name parameters to specify the target AKS cluster
+  * Add `az aks agent-cleanup` to cleanup the AKS agent from the cluster
+* [SECURITY]:
+  * Kubernetes RBAC: Uses cluster roles to securely access Kubernetes resources with least-privilege principles
+  * Azure Workload Identity: Supports Azure workload identity for secure, keyless access to Azure resources
+  * LLM credentials are stored securely in Kubernetes secrets with encryption at rest
+
 1.0.0b11
 ++++++++
 * Fix(agent-init): replace max_tokens with max_completion_tokens for connection check of Azure OpenAI service.