Open jiasli opened 2 years ago
Drop old Track 2
Bump
For the company that I work for, a financial institution, the use of the ADAL package which per Microsoft is no longer receiving security patches as of December 2022 is a significant problem. We can't use software that no longer receives security updates per our customers (& regulators). Remove the MS containers in AKS that leverage az-cli would be a significant effort (mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager, mcr.microsoft.com/oss/kubernetes-csi/azurefile-csi, mcr.microsoft.com/azuredefender/stable/low-level-collector, mcr.microsoft.com/oss/azure/secrets-store/provider-azure).
Let me know if there is a manager at MS that my company should reach out to in order to ensure that this ticket gets sufficient resources and not be de-prioritized by other management..
https://github.com/Azure/azure-cli/pull/15806 introduced patches for problematic old Track 2 SDKs. As autorest has been updated to generate new SDKs with these bugs fixed:
azure-cli-core
should drop these patches as they introduces extra maintenance effort.