feat(acns): add advanced network security fqdn policy feature to az aks create/update

[jshr-w]

Add azcli commands for enabling Advanced Network Security FQDN policy feature for aks-preview extension.

This checklist is used to make sure that common guidelines for a pull request are followed.

Related command

az aks create --enable-fqdn-policy
az aks update --enable-fqdn-policy
az aks update --disable-fqdn-policy

General Guidelines

• Have you run azdev style <YOUR_EXT> locally? (pip install azdev required)
• Have you run python scripts/ci/test_index.py -q locally? (pip install wheel==0.30.0 required)
• My extension version conforms to the Extension version schema

For new extensions:

• My extension description/summary conforms to the Extension Summary Guidelines.

About Extension Publish

There is a pipeline to automatically build, upload and publish extension wheels.
Once your pull request is merged into main branch, a new pull request will be created to update src/index.json automatically.
You only need to update the version information in file setup.py and historical information in file HISTORY.rst in your PR but do not modify src/index.json.

[azure-client-tools-bot-prd]

⚠️Azure CLI Extensions Breaking Change Test

⚠️aks-preview

rule	cmd_name	rule_message	suggest_message
⚠️ 1006 - ParaAdd	aks create	cmd aks create added parameter enable_acns
⚠️ 1006 - ParaAdd	aks create	cmd aks create added parameter enable_fqdn_policy
⚠️ 1006 - ParaAdd	aks update	cmd aks update added parameter disable_acns
⚠️ 1006 - ParaAdd	aks update	cmd aks update added parameter disable_fqdn_policy
⚠️ 1006 - ParaAdd	aks update	cmd aks update added parameter enable_acns
⚠️ 1006 - ParaAdd	aks update	cmd aks update added parameter enable_fqdn_policy

[azure-client-tools-bot-prd]

Hi @jshr-w,
Please write the description of changes which can be perceived by customers into HISTORY.rst.
If you want to release a new extension version, please update the version in setup.py as well.

[azure-client-tools-bot-prd]

Hi @jshr-w,
Since the current milestone time is less than 7 days, this pr will be reviewed in the next milestone.

[yonzhan]

Thank you for your contribution! We will review the pull request and get back to you soon.

[github-actions]

• For more info about extension versioning, please refer to Extension version schema

[FumingZhang]

Queued live test to validate the change.

• test_aks_create_with_enable_fqdn_policy
• test_aks_update_enable_fqdn_policy

[FumingZhang]

Queued live test to validate the change.

• test_aks_create_with_enable_fqdn_policy
• test_aks_update_enable_fqdn_policy

The previous live test failed, seems the feature is protected by a feature flag or toggle? Is the feature available in all regions? If it supports bypassing validation via akshttpcustomfeatures header, please modify the test accordingly.

Re-queued live test in staging env, test passed!

• test_aks_create_with_enable_fqdn_policy
• test_aks_update_enable_fqdn_policy
• test_aks_update_enable_fqdn_policy

[jshr-w]

The toggle to release feature is currently rolling out, should get to eastus2euap by tomorrow.

[FumingZhang]

The toggle to release feature is currently rolling out, should get to eastus2euap by tomorrow.

If the feature availability is controlled by toggle, there is a problem that it cannot be executed smoothly by the cli runner (something similar to runner, run tests at fixed intervals in a region in prod sub), please exclude your newly added cases in the following configuration file src/aks-preview/azcli_aks_live_test/configs/ext_matrix_default.json

[jshr-w]

Thanks for clarifying! Disabled the test cases until feature rolls out fully to prod.

[jshr-w]

Here is the passing tests run in staging. I have added all tests to the ext_matrix to be excluded from the pipeline until the feature is fully rolled out to all regions.

Tests:

• test_aks_create_with_enable_fqdn_policy
• test_aks_update_enable_fqdn_policy
• test_aks_update_enable_fqdn_policy
• test_aks_create_with_enable_acns
• test_aks_create_with_enable_acns_complex
• test_aks_update_enable_acns

[zhoxing-ms]

@FumingZhang Could you please help review it again?

[azclibot]

[Release] Update index.json for extension [ aks-preview ] : https://dev.azure.com/azclitools/release/_build/results?buildId=181057&view=results