ASO v2.17 Release Notes

Release notes for Azure Service Operator v2.17.0

Monday, December 08, 2025

We’re pleased to announce the release of Azure Service Operator v2.17.0! This release brings new PostgreSQL and Log Analytics resources, improved secret exports across several services, and the beginning of our transition to simplified API versioning.

Administrative note: This blog post written in early February 2026 and backdated to the actual release date for v2.17.

🎇 Headline Features

Resources introduced in this release are using simplified versioning, as we’re deprecating the v1api prefix (see #4831). We’ve laid the foundation for migration to the new versioning style, with batch resources being the first to migrate.

ASO will no longer attempt to delete Azure sub-resources that become a permanent part of their parent resource (such as FlexibleServersConfiguration for a PostgreSQL server). Instead of filling the ASO log with deletion errors, you’ll now see a warning that can be disabled by setting an annotation.

The operator now applies a default reconcile policy when one isn’t explicitly configured.

⚠️ Breaking changes

This release includes breaking changes. Please review the breaking changes documentation before upgrading.

Removed Fleet API version

We’ve removed the containerservice v20230315preview versions of Fleet resources, as the API has been deprecated by Azure.

If you allow the operator to manage its own CRDs via --crd-pattern, no action is needed—the operator will take care of removing these versions automatically.
If you manage the CRD versions yourself, you’ll need to run asoctl clean crds before upgrading.

Upcoming breaking changes

We have some deprecations coming up in future ASO versions that should be taken into account:

In ASO v2.18, we will remove containerservice ManagedCluster and AgentPool API versions v1api20230201 and v1api20231001.
In ASO v2.19, we will remove containerservice ManagedCluster and AgentPool API version v1api20240402preview.

🎉 New and improved resource support

New resources and API versions

We’ve added support for several new resources and updated API versions:

PostgreSQL Flexible Server Administrator resource for managing database administrators.
New dbforpostgresql API version v1api20250801 with the latest PostgreSQL features.
- Special thanks to tjololo for his contribution!
New operationalinsights API version v1api20250701 for Log Analytics workspaces.

Enhanced secret exports

We’ve expanded the ability to export secrets across several services:

RedisEnterprise keys can now be exported to Kubernetes secrets.
Shared keys for operationalinsights workspaces are now available for export.
Service Bus TopicAuthorizationRule now supports secret exports.

Improved resource references

PrivateDns A and AAAA record IP addresses can now be read from ConfigMaps.

🙏 Thank You

Thank you to all our contributors for making this release possible! We’re especially grateful to our new contributors jakjang and tjololo for their first contributions to ASO. Your engagement helps make ASO better for everyone!

Full Changelog: v2.16.0…v2.17.0