From 479c682e5d3a9960c003a7d717ade4d90c74abf5 Mon Sep 17 00:00:00 2001 From: Sunil Yadav Date: Wed, 2 Sep 2026 22:54:10 +0000 Subject: [PATCH 1/3] Special clouds rollout - temp remove dependency on public cloud rollout --- .../azure-pipeline-aks-extension-managed-ev2-sdp.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.pipelines/azure-pipeline-aks-extension-managed-ev2-sdp.yml b/.pipelines/azure-pipeline-aks-extension-managed-ev2-sdp.yml index 587bc8e24..b5545e76b 100644 --- a/.pipelines/azure-pipeline-aks-extension-managed-ev2-sdp.yml +++ b/.pipelines/azure-pipeline-aks-extension-managed-ev2-sdp.yml @@ -233,7 +233,7 @@ extends: - stage: FF_Managed_SDP displayName: "FF: Managed SDP" - dependsOn: PROD_Managed_SDP + # dependsOn: PROD_Managed_SDP variables: ob_release_environment: Fairfax jobs: @@ -257,7 +257,7 @@ extends: - stage: MC_Managed_SDP displayName: "MC: Managed SDP" - dependsOn: PROD_Managed_SDP + # dependsOn: PROD_Managed_SDP variables: ob_release_environment: Mooncake jobs: @@ -281,7 +281,7 @@ extends: - stage: USSec_Managed_SDP displayName: "USSec: Managed SDP" - dependsOn: PROD_Managed_SDP + # dependsOn: PROD_Managed_SDP variables: ob_release_environment: USSec ob_release_stagetype: deployment @@ -308,7 +308,7 @@ extends: - stage: USNat_Managed_SDP displayName: "USNat: Managed SDP" - dependsOn: PROD_Managed_SDP + # dependsOn: PROD_Managed_SDP variables: ob_release_environment: USNat ob_release_stagetype: deployment From fc0846ce8366ea6939be67e58d22c759b8567d23 Mon Sep 17 00:00:00 2001 From: Sunil Yadav Date: Thu, 3 Sep 2026 21:30:03 +0000 Subject: [PATCH 2/3] Fix agent telemetry bug --- VERSION | 2 +- source/plugins/go/input/go.mod | 3 +++ source/plugins/go/src/go.mod | 10 ++++++++++ 3 files changed, 14 insertions(+), 1 deletion(-) diff --git a/VERSION b/VERSION index 7c69a55db..19811903a 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -3.7.0 +3.8.0 diff --git a/source/plugins/go/input/go.mod b/source/plugins/go/input/go.mod index b47f6e498..74630030e 100644 --- a/source/plugins/go/input/go.mod +++ b/source/plugins/go/input/go.mod @@ -2,6 +2,9 @@ module Docker-Provider/source/plugins/go/input go 1.27.0 +// keep in sync with ../src/go.mod. +godebug tlsmlkem=0 + require ( code.cloudfoundry.org/clock v1.85.0 // indirect github.com/Microsoft/go-winio v0.6.2 // indirect diff --git a/source/plugins/go/src/go.mod b/source/plugins/go/src/go.mod index 190916f9f..cd31815b3 100644 --- a/source/plugins/go/src/go.mod +++ b/source/plugins/go/src/go.mod @@ -2,6 +2,16 @@ module Docker-Provider/source/plugins/go/src go 1.27.0 +// This is temporary. The underlying defect is an EVP_PKEY_Q_keygen allowlist that +// rejects provider-supplied key names, so ML-KEM-768 fetches but will not generate; it +// is fixed by microsoft/azurelinux#18630 (merged 2026-08-27) and ships as +// openssl-3.3.7-5.azl3. As of 2026-09-03 the repo still carries only 3.3.7-4. Once the +// runtime base image picks up 3.3.7-5, rebuild, confirm a TLS handshake succeeds +// without this line, and delete it -- tracked upstream at microsoft/go#2472. Note this +// is a package bump, not an OpenSSL 3.5 or Azure Linux 4.0 migration. The build fails +// loudly if the knob is ever removed from Go, so this cannot rot silently. +godebug tlsmlkem=0 + require ( github.com/Microsoft/go-winio v0.6.2 github.com/fluent/fluent-bit-go v0.0.0-20260825100519-ee23069796c9 From 0ce8de85b43e8f5a953ec82011ac28f0cd9810cc Mon Sep 17 00:00:00 2001 From: suyadav1 <87668410+suyadav1@users.noreply.github.com> Date: Thu, 3 Sep 2026 14:36:45 -0700 Subject: [PATCH 3/3] revert pipeline changes --- .../azure-pipeline-aks-extension-managed-ev2-sdp.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.pipelines/azure-pipeline-aks-extension-managed-ev2-sdp.yml b/.pipelines/azure-pipeline-aks-extension-managed-ev2-sdp.yml index b5545e76b..587bc8e24 100644 --- a/.pipelines/azure-pipeline-aks-extension-managed-ev2-sdp.yml +++ b/.pipelines/azure-pipeline-aks-extension-managed-ev2-sdp.yml @@ -233,7 +233,7 @@ extends: - stage: FF_Managed_SDP displayName: "FF: Managed SDP" - # dependsOn: PROD_Managed_SDP + dependsOn: PROD_Managed_SDP variables: ob_release_environment: Fairfax jobs: @@ -257,7 +257,7 @@ extends: - stage: MC_Managed_SDP displayName: "MC: Managed SDP" - # dependsOn: PROD_Managed_SDP + dependsOn: PROD_Managed_SDP variables: ob_release_environment: Mooncake jobs: @@ -281,7 +281,7 @@ extends: - stage: USSec_Managed_SDP displayName: "USSec: Managed SDP" - # dependsOn: PROD_Managed_SDP + dependsOn: PROD_Managed_SDP variables: ob_release_environment: USSec ob_release_stagetype: deployment @@ -308,7 +308,7 @@ extends: - stage: USNat_Managed_SDP displayName: "USNat: Managed SDP" - # dependsOn: PROD_Managed_SDP + dependsOn: PROD_Managed_SDP variables: ob_release_environment: USNat ob_release_stagetype: deployment