Skip to content

Add cluster-level FIPS to AKS 2026-03 preview#42799

Merged
ttruongatl merged 1 commit into
dev-containerservice-Microsoft.ContainerService-2026-03from
thanhtruong/aks-enable-fips-cluster-level
May 4, 2026
Merged

Add cluster-level FIPS to AKS 2026-03 preview#42799
ttruongatl merged 1 commit into
dev-containerservice-Microsoft.ContainerService-2026-03from
thanhtruong/aks-enable-fips-cluster-level

Conversation

@ttruongatl
Copy link
Copy Markdown
Member

@ttruongatl ttruongatl commented Apr 30, 2026 •
edited
Loading

ARM (Control Plane) API Specification Update Pull Request

Purpose of this PR

Adds the cluster-level enableFIPS property to AKS ManagedClusterProperties in 2026-03-02-preview. This is an additive preview API change for cluster-level FIPS enablement and includes generated swagger plus SDK client naming customizations for the FIPS acronym.

Approved proposal: https://github.com/azure-management-and-platforms/aks-handbook/pull/128

What's the purpose of this PR? Check the specific option that applies. This is mandatory!

  • New resource provider.
  • New API version for an existing resource provider. (If API spec is not defined in TypeSpec, the PR should have been created in adherence to OpenAPI specs PR creation guidance).
  • Update existing version for a new feature. (This is applicable only when you are revising a private preview API version.)
  • Update existing version to fix OpenAPI spec quality issues in S360.
  • Convert existing OpenAPI spec to TypeSpec spec (do not combine this with implementing changes for a new API version).
  • Other, please clarify:
    • edit this with your clarification

Due diligence checklist

To merge this PR, you must go through the following checklist and confirm you understood
and followed the instructions by checking all the boxes:

  • I confirm this PR is modifying Azure Resource Manager (ARM) related specifications, and not data plane related specifications.
  • I have reviewed following Resource Provider guidelines, including
    ARM resource provider contract and
    REST guidelines (estimated time: 4 hours).
    I understand this is required before I can proceed to the diagram Step 2, "ARM API changes review", for this PR.
  • A release plan has been created. If not, please create one as it will help guide you through the REST API and SDK creation process.

Additional information

Changed files:

  • specification/containerservice/resource-manager/Microsoft.ContainerService/aks/CommonModels.tsp
  • specification/containerservice/resource-manager/Microsoft.ContainerService/aks/client.tsp
  • specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2026-03-02-preview/managedClusters.json

Validation performed:

  • npx tsp compile . --warn-as-error
  • npx tsp compile client.tsp --no-emit --warn-as-error
  • npx tsp format --check specification/containerservice/resource-manager/Microsoft.ContainerService/aks/CommonModels.tsp specification/containerservice/resource-manager/Microsoft.ContainerService/aks/client.tsp
  • npx prettier --check specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2026-03-02-preview/managedClusters.json
  • git diff --check
Viewing API changes

For convenient view of the API changes made by this PR, refer to the URLs provided in the table
in the Generated ApiView comment added to this PR. You can use ApiView to show API versions diff.

Suppressing failures

If one or multiple validation error/warning suppression(s) is detected in your PR, please follow the
suppressions guide to get approval.

Getting help

  • First, please carefully read through this PR description, from top to bottom. Please fill out the Purpose of this PR and Due diligence checklist.
  • If you don't have permissions to remove or add labels to the PR, request write access per aka.ms/azsdk/access#request-access-to-rest-api-or-sdk-repositories
  • To understand what you must do next to merge this PR, see the Next Steps to Merge comment. It will appear within few minutes of submitting this PR and will continue to be up-to-date with current PR state.
  • For guidance on fixing this PR CI check failures, see the hyperlinks provided in given failure
    and https://aka.ms/ci-fix.
  • For help with ARM review (PR workflow diagram Step 2), see https://aka.ms/azsdk/pr-arm-review.
  • If the PR CI checks appear to be stuck in queued state, please add a comment with contents /azp run.
    This should result in a new comment denoting a PR validation pipeline has started and the checks should be updated after few minutes.
  • If the help provided by the previous points is not enough, post to https://aka.ms/azsdk/support/specreview-channel and link to this PR.
  • For guidance on SDK breaking change review, refer to https://aka.ms/ci-fix.

feat(api): add AKS cluster-level FIPS property
4f7fbaf 
Add the cluster-level enableFIPS property to ManagedClusterProperties for the 2026-03-02-preview AKS API.

Regenerate the 2026-03-02-preview managedClusters swagger and add C# and Java client naming customizations for the FIPS acronym.

Co-authored-by: Copilot <[email protected]>
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 30, 2026 •
edited
Loading

Next Steps to Merge

Important checks have failed. As of today they are not blocking this PR, but in near future they may.
Addressing the following failures is highly recommended:
  • ⚠️ The check named SDK Validation Status has failed. Refer to the check in the PR's 'Checks' tab for details on how to fix it and consult the aka.ms/ci-fix guide
If you still want to proceed merging this PR without addressing the above failures, refer to step 4 in the PR workflow diagram.

Comment generated by summarize-checks workflow run.

@github-actions github-actions Bot added resource-manager TypeSpec Authored with TypeSpec labels Apr 30, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 30, 2026 •
edited
Loading

API Change Check

APIView identified API level changes in this PR and created the following API reviews

Language API Review for Package
Python azure-mgmt-containerservice
Java com.azure.resourcemanager:azure-resourcemanager-containerservice
JavaScript @azure/arm-containerservice

Comment generated by After APIView workflow run.

@ttruongatl ttruongatl merged commit 532ef2a into dev-containerservice-Microsoft.ContainerService-2026-03 May 4, 2026
101 of 108 checks passed
@ttruongatl ttruongatl deleted the thanhtruong/aks-enable-fips-cluster-level branch May 4, 2026 15:16
FumingZhang added a commit that referenced this pull request May 9, 2026
@FumingZhang @jumpinthefire
@erinborders @aadhar-agarwal @ganeshkumarashok @christine33-creator @hccheng72 @seguler @ttruongatl
Review request for Microsoft.ContainerService/aks to add version stab…
0e3000d 
…le/2026-03-01 and preview/2026-03-02-preview (#42502)

* Adds base for updating Microsoft.ContainerService/aks from version 2026-02-01 to 2026-03-01 and 2026-02-02-preview to 2026-03-02-preview

* Add definitions for multi-NIC support to v2026_03_02_preview (#42513)

* Add definitions for multi-NIC support

* Post-review fixes

* Post-review fixes

* Regen JSON

* Remove newlines, align a comment

* add nodeDisruptionProfile to managedClusterProperties (#42548)

* add node disruption profile to managed cluster properties

* nits

* recompile

* nits

* recompile

* formatting

* Add AzureContainerLinux value to OSSKU enum in AKS API (stable 2026-03-01) (#42614)

* [AKS] Add ArtifactStreamingProfile to v2026-03-01 GA API (#42703)

Promote artifactStreamingProfile from v2026-03-02-preview to GA in
v2026-03-01, mirroring #40808 (which does the same for v2026-02-01).

- AgentPoolModels.tsp: bump @added decorator on the property and on the
  AgentPoolArtifactStreamingProfile model from v2026_03_02_preview to
  v2026_03_01.
- stable/2026-03-01/managedClusters.json: add the
  AgentPoolArtifactStreamingProfile definition and the
  artifactStreamingProfile $ref under agent pool properties.

* Add nodePublicIPPrefixIDs to AgentPoolNetworkProfile for IPv6 ILPIP Support (#42519)

* Add nodePublicIPPrefixIDs to AgentPoolNetworkProfile for IPv6 ILPIP support

Add a new nodePublicIPPrefixIDs array property to AgentPoolNetworkProfile
in the 2026-03-02-preview API version. This enables dual-stack (IPv4+IPv6)
node public IP assignment via public IP prefixes.

- Array of armResourceIdentifier scoped to Microsoft.Network/publicIPPrefixes
- @Maxitems(2): at most one IPv4 and one IPv6 prefix
- @added(Versions.v2026_03_02_preview): version-gated to new preview
- Mutually exclusive with top-level nodePublicIPPrefixID property

* Address review: use single-line description for nodePublicIPPrefixIDs

* chore: remove disk driver version from 2026-03-02-preview (#42561)

Co-authored-by: Huichan Cheng <[email protected]>

* Kubereserved and hardeviction customization - Dev containerservice microsoft.container service 2026 03 (#42655)

* Add kubelet kubeReserved and hard eviction schema

* Sync kubelet descriptions from private swagger

* Move kubelet schema changes into TypeSpec sources

* Fix spellcheck for millicores

---------

Co-authored-by: Ubuntu <[email protected]>

* resolve go sdk failure

* feat(api): add AKS cluster-level FIPS property (#42799)

Add the cluster-level enableFIPS property to ManagedClusterProperties for the 2026-03-02-preview AKS API.

Regenerate the 2026-03-02-preview managedClusters swagger and add C# and Java client naming customizations for the FIPS acronym.

Co-authored-by: Thanh Truong <[email protected]>
Co-authored-by: Copilot <[email protected]>

---------

Co-authored-by: jumpinthefire <[email protected]>
Co-authored-by: Erin Borders <[email protected]>
Co-authored-by: aadhar-agarwal <[email protected]>
Co-authored-by: Ganeshkumar Ashokavardhanan <[email protected]>
Co-authored-by: Christine DOSSA <[email protected]>
Co-authored-by: hccheng72 <[email protected]>
Co-authored-by: Huichan Cheng <[email protected]>
Co-authored-by: Sercan Guler <[email protected]>
Co-authored-by: Ubuntu <[email protected]>
Co-authored-by: tadelesh <[email protected]>
Co-authored-by: ttruongatl <[email protected]>
Co-authored-by: Thanh Truong <[email protected]>
Co-authored-by: Copilot <[email protected]>
saprakas pushed a commit to iyyappam/azure-rest-api-specs that referenced this pull request May 12, 2026
@FumingZhang @jumpinthefire
@erinborders @aadhar-agarwal @ganeshkumarashok @christine33-creator @hccheng72 @seguler @ttruongatl @saprakas
Review request for Microsoft.ContainerService/aks to add version stab…
9f81b16 
…le/2026-03-01 and preview/2026-03-02-preview (Azure#42502)

* Adds base for updating Microsoft.ContainerService/aks from version 2026-02-01 to 2026-03-01 and 2026-02-02-preview to 2026-03-02-preview

* Add definitions for multi-NIC support to v2026_03_02_preview (Azure#42513)

* Add definitions for multi-NIC support

* Post-review fixes

* Post-review fixes

* Regen JSON

* Remove newlines, align a comment

* add nodeDisruptionProfile to managedClusterProperties (Azure#42548)

* add node disruption profile to managed cluster properties

* nits

* recompile

* nits

* recompile

* formatting

* Add AzureContainerLinux value to OSSKU enum in AKS API (stable 2026-03-01) (Azure#42614)

* [AKS] Add ArtifactStreamingProfile to v2026-03-01 GA API (Azure#42703)

Promote artifactStreamingProfile from v2026-03-02-preview to GA in
v2026-03-01, mirroring Azure#40808 (which does the same for v2026-02-01).

- AgentPoolModels.tsp: bump @added decorator on the property and on the
  AgentPoolArtifactStreamingProfile model from v2026_03_02_preview to
  v2026_03_01.
- stable/2026-03-01/managedClusters.json: add the
  AgentPoolArtifactStreamingProfile definition and the
  artifactStreamingProfile $ref under agent pool properties.

* Add nodePublicIPPrefixIDs to AgentPoolNetworkProfile for IPv6 ILPIP Support (Azure#42519)

* Add nodePublicIPPrefixIDs to AgentPoolNetworkProfile for IPv6 ILPIP support

Add a new nodePublicIPPrefixIDs array property to AgentPoolNetworkProfile
in the 2026-03-02-preview API version. This enables dual-stack (IPv4+IPv6)
node public IP assignment via public IP prefixes.

- Array of armResourceIdentifier scoped to Microsoft.Network/publicIPPrefixes
- @Maxitems(2): at most one IPv4 and one IPv6 prefix
- @added(Versions.v2026_03_02_preview): version-gated to new preview
- Mutually exclusive with top-level nodePublicIPPrefixID property

* Address review: use single-line description for nodePublicIPPrefixIDs

* chore: remove disk driver version from 2026-03-02-preview (Azure#42561)

Co-authored-by: Huichan Cheng <[email protected]>

* Kubereserved and hardeviction customization - Dev containerservice microsoft.container service 2026 03 (Azure#42655)

* Add kubelet kubeReserved and hard eviction schema

* Sync kubelet descriptions from private swagger

* Move kubelet schema changes into TypeSpec sources

* Fix spellcheck for millicores

---------

Co-authored-by: Ubuntu <[email protected]>

* resolve go sdk failure

* feat(api): add AKS cluster-level FIPS property (Azure#42799)

Add the cluster-level enableFIPS property to ManagedClusterProperties for the 2026-03-02-preview AKS API.

Regenerate the 2026-03-02-preview managedClusters swagger and add C# and Java client naming customizations for the FIPS acronym.

Co-authored-by: Thanh Truong <[email protected]>
Co-authored-by: Copilot <[email protected]>

---------

Co-authored-by: jumpinthefire <[email protected]>
Co-authored-by: Erin Borders <[email protected]>
Co-authored-by: aadhar-agarwal <[email protected]>
Co-authored-by: Ganeshkumar Ashokavardhanan <[email protected]>
Co-authored-by: Christine DOSSA <[email protected]>
Co-authored-by: hccheng72 <[email protected]>
Co-authored-by: Huichan Cheng <[email protected]>
Co-authored-by: Sercan Guler <[email protected]>
Co-authored-by: Ubuntu <[email protected]>
Co-authored-by: tadelesh <[email protected]>
Co-authored-by: ttruongatl <[email protected]>
Co-authored-by: Thanh Truong <[email protected]>
Co-authored-by: Copilot <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@palma21 palma21 palma21 approved these changes

@matthchr matthchr matthchr approved these changes

Assignees

No one assigned

Labels

Container Service resource-manager TypeSpec Authored with TypeSpec

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@ttruongatl @palma21 @matthchr