[AKS] Hotfix: az aks create/update: Add --enable-app-routing-istio and --disable-app-routing-istio to manage App Routing Istio gateway implementation#33287
Merged
wangzelin007 merged 2 commits intoAzure:releasefrom Apr 30, 2026
Conversation
…o / --disable-app-routing-istio Cherry-pick of Azure#33254 onto release. Promotes App Routing Istio from the aks-preview extension to the GA Azure CLI: adds --enable-app-routing-istio (with --enable-ari alias) to az aks create and both --enable-app-routing-istio and --disable-app-routing-istio (with --enable-ari / --disable-ari aliases) to az aks update, managing ingressProfile.webAppRouting.gatewayApiImplementations.appRoutingIstio.mode.
meecethereese
requested review from
DanielMicrosoft,
FumingZhang,
NoriZC,
ReaNAiveD,
bebound,
jiasli,
necusjz,
teresaritorto,
yanzhudd and
yonzhan
as code owners
|
Hi @meecethereese, |
|
Validation for Azure CLI Full Test Starting...
Thanks for your contribution! |
|
Validation for Breaking Change Starting...
Thanks for your contribution! |
microsoft-github-policy-service
Bot
added
Auto-Assign
Collaborator
|
Thank you for your contribution! We will review the pull request and get back to you soon. |
Contributor
There was a problem hiding this comment.
Pull request overview
Hotfix cherry-pick onto release to ship GA support for configuring the App Routing Istio Gateway API implementation in AKS via new CLI flags (and related aks approuting convenience commands), along with help/docs, tests, and recordings.
Changes:
- Add
--enable-app-routing-istio/--disable-app-routing-istio(and--enable-ari/--disable-arialiases) toaz aks create/az aks update, wiring them intoingressProfile.webAppRouting.gatewayApiImplementations.appRoutingIstio.mode. - Add new command group
az aks approuting gateway istio {enable|disable}to toggle the same setting via the App Routing command surface. - Add/extend unit + scenario tests and include the necessary test recordings; update
HISTORY.rstfor the 2.86.1 hotfix note.
Reviewed changes
Copilot reviewed 10 out of 15 changed files in this pull request and generated 3 comments.
Show a summary per file
| File | Description |
|---|---|
| src/azure-cli/azure/cli/command_modules/acs/managed_cluster_decorator.py | Adds context getters and create/update decorator logic to set App Routing Istio mode in the ingress profile. |
| src/azure-cli/azure/cli/command_modules/acs/custom.py | Plumbs new flags into aks create/update and adds aks approuting gateway istio enable/disable handlers. |
| src/azure-cli/azure/cli/command_modules/acs/commands.py | Registers aks approuting gateway istio command group and commands. |
| src/azure-cli/azure/cli/command_modules/acs/_params.py | Adds CLI parameters and aliases for enabling/disabling App Routing Istio on create/update. |
| src/azure-cli/azure/cli/command_modules/acs/_help.py | Documents the new flags and the new aks approuting gateway istio command group. |
| src/azure-cli/azure/cli/command_modules/acs/_consts.py | Introduces constants for App Routing Istio mode values. |
| src/azure-cli/azure/cli/command_modules/acs/tests/latest/test_managed_cluster_decorator.py | Adds unit coverage for new context getters and decorator update/setup methods. |
| src/azure-cli/azure/cli/command_modules/acs/tests/latest/test_aks_commands.py | Adds scenario tests covering enable/disable flows and ASM mutual-exclusion behavior. |
| src/azure-cli/azure/cli/command_modules/acs/tests/latest/recordings/test_aks_create_with_app_routing_istio_fails_when_asm_enabled.yaml | Adds recording for the new failure scenario test. |
| src/azure-cli/HISTORY.rst | Adds 2.86.1 hotfix entry for the new AKS surface. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
yanzhudd
changed the title
az aks create/update: Add --enable-app-routing-istio and --disable-app-routing-istio to manage App Routing Istio gateway implementation
yanzhudd
approved these changes
Apr 30, 2026
Contributor
|
Hi @meecethereese |
Contributor
Author
|
@yanzhudd I've removed the History.rst file! |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Hotfix cherry-pick of #33254 onto
releaseCherry-picks #33254 ("
az aks create/update: Add--enable-app-routing-istioand--disable-app-routing-istioto manage App Routing Istio gateway implementation") onto thereleasebranch so the GA App Routing Istio surface ships in the next patch without waiting for the regular dev → release promotion.Why hotfix
App Routing Istio is being promoted from the
aks-previewextension to the GA Azure CLI. Customers need the new flags (--enable-app-routing-istio/--disable-app-routing-istio, with--enable-ari/--disable-arialiases) available in the current release line to onboard via the in-box CLI.Contents
az aks create/update: Add new parameters--enable-app-routing-istioand--disable-app-routing-istioto manage App Routing Istio gateway implementation #33254 (no functional deltas vs. thedevmerge).src/azure-cli/HISTORY.rstupdated manually with a2.86.1patch section noting the hotfix (auto-gen skipsHotfix-labeled PRs, per project convention).Notes for reviewers
--enable-azure-service-mesh).Follow-up
A
release → devback-merge PR will be opened after this ships, without squash, to keep the histories aligned (per the precedent in #32168, #32881, #32038, #32076, #15505).References
az aks create/update: Add new parameters--enable-app-routing-istioand--disable-app-routing-istioto manage App Routing Istio gateway implementation #33254az aks create/update: Add--enable-gateway-apiand--disable-gateway-apiparameters to manage Managed Gateway API installation #33286 (Managed Gateway API, the Gateway implementation App Routing Istio binds to)TestExtensionsLoadingtimeout to 80 minutes #32168, {Misc.} Port credscan false positive fix from release to dev #32881, {LTS} Backport #30703: Fix generic update issue #32038, {LTS} Backport #31669: Bump urllib3 to 2.5.0 #32076, {Branch Management} Merge release 2.13.0 back to dev #15505