Releases: Azure/WALinuxAgent
Releases · Azure/WALinuxAgent
v2.3.16.1
[Marked as a pre-release; 2.3.16.1 will be published internally for testing, it will not be available to Prod]
v2.3.16.0
[Marked as a pre-release; 2.3.16.0 will be published internally for testing, it will not be available to Prod]
v2.15.2.0-[Marked as a pre-release while it is deployed to production; will be marked as latest when the deployment completes]
Pre-release
Features in progress
- Extensions and Agent signature
- Extensions policy
- Parse the ga signatures from the goal state #3519
- Set separate CPU quota for extension signature validation #3488
- Delay extension signature validation after agent start #3552
- Error out only when signatureRequired is True on unsupported VMs #3585
- Self-update should attempt next highest version on download/package version #3584
- Disable signature validation if timeout period exceeded #3572
Bug Fixes and improvements
- Decouple initialization of the Transport certificate from protocol detection #3534
- Remove more instances of calls to WireClient.get_goal_state() #3539
- Use passlib module instead of crypt on Python >= 3.13 #3542
- Cgroup2fs filesystem detection in cgroups api check #3548
- Define 'backslashreplace' error handler for Python <= 3.4 #3553
- Update local log message to include extension name #3554
- Improve artifact download failure telemetry #3550
- Improve retry strategy for artifact download #3561
- Improve SAS redaction regex #3560
- Remove CPU and memory accounting enablement in CgroupV2 #3564
- Add IsCVM value to KeywordName column in events #3575
- Initialize cvm info in log collector for common telemetry parameters #3583
- IsCVM telemetry field should only be initialized on ExtHandler #3587
- Set a limit on firewall reports when the state of the firewall changes continuously #3574
- add support for Azure container linux #3577
Tests bug fixes and improvements
- Fix CVM unit tests failures #3538
- Fix flakiness in publish_hostname e2e test #3544
- Increase timeout for rsm checks in e2e tests #3543
- Add Oracle 10 to end-to-end test run #3546
- Fixing the timeout check that was added in rsm e2e updates previously #3549
- Add Python 3.13 and 3.14 to the unit test run #3556
- Exclude rocky_9_cvm from e2e tests #3555
- Move FIPS test to West US 2 #3558
- Add Oracle Linux 9.5 to FIPS test #3559
- Fixing test test_agent_enforcement_enabled_in_v2 #3563
- Update publisher for Rocky Linux #3565
- Update the ext_handler process name in pkill cmd #3579
- Add check for get_nm_controlled before invoking it #3580
- Skip tests requiring a scale set when using a VHD #3582
- Remove CentOS 8.2 from test suite #3586
- Move signature validation tests to production region #358
- Cleaning up CODEOWNERS #3590
- Disable signature validation in common test setup #3592
Deployment schedule
| Stage | Regions | Deployment Start |
|---|---|---|
| Canary | Central US EUAP, East US 2 EUAP | 2026-04-20T20:8Z |
| Pilot | West Central US, East Asia | |
| Medium | UK South | |
| Large | North Europe | |
| Batch 1A-i | Australia East, Brazil South, France Central, Germany West Central | |
| Batch 1A-ii | Korea Central, North Central US, Norway East, Sweden Central, Switzerland North, West India |
|
| Batch 1A-iii | Australia Central, Canada Central, Japan East, Jio India West | |
| Batch 1A-iv | Central India, South Africa North, UAE North, UK West | |
| Batch 1A-v | Australia Central 2, Brazil Southeast, Canada East, France South, Germany North, Japan West, Southeast Asia, West US 3 |
|
| Batch 1B-i | Central US | |
| Batch 1B-ii | West Europe | |
| Batch 1B-iii | East US | |
| Batch 2A-i | Australia Southeast, Jio India Central, Korea South, Norway West, South Africa West, South Central US, South India, Sweden South, Switzerland West, UAE Central |
|
| Batch 2A-ii | West US 2 | |
| Batch 2B-i | West US | |
| Batch 2B-ii | East US 2 | |
| All | Rest of the regions |
Deployment schedule - USGov
| Stage | Regions | Deployment Start |
|---|---|---|
| Stage 1 | USDoD Central | |
| Stage 2 | USDoD East | |
| Stage 3 | USGov Texas | |
| Stage 4 | USGov Virginia, USGov Arizona | |
| All | Rest of the USGov regions |
Deployment schedule - China
| Stage | Regions | Deployment Start |
|---|---|---|
| Stage 1 | China North | |
| Stage 2 | China North 2 | |
| Stage 3 | China East | |
| Stage 4 | China East 2 | |
| All | Rest of the China regions |
v2.15.1.5
[Marked as a pre-release; 2.15.1.5 will only be published to Canary]
This release is for internal testing only
Improvements:
- #3568 Define 'backslashreplace' error handler for Python <= 3.4
- #3566 Improve artifact download failure telemetry
- #3569 Improve SAS redaction regex
- #3570 Improve retry strategy for artifact download
Tests:
- #3563 Fixing test test_agent_enforcement_enabled_in_v2
Deployment schedule
| Stage | Regions | Deployment Start |
|---|---|---|
| Canary | Central US EUAP, East US 2 EUAP | 2026-03-04T15:44:52Z |
v2.15.1.4
[Marked as a pre-release; 2.15.1.4 will only be published to Canary for RSM deployment]
This release includes the same changes as 2.15.1.3 https://github.com/Azure/WALinuxAgent/releases/tag/pre-v2.15.1.3
v2.15.0.7
Same as 2.15.0.1
It will be used to test the settings for new clouds, but will not be released to Azure, Azure China, nor Azure Government.
pre-v2.15.1.3: Set Agent version to 2.15.1.3 (#3536)
[Marked as a pre-release while it is deployed to production; will be marked as latest when the deployment completes]
[Most of those changes were deployed to the to Central US EUAP and East US 2 EUAP regions, as 2.15.1.1 on 2025-12-22T15:10Z, and as 2.15.1.2 on 2026-01-07T21:37Z]
Features in progress
- Extensions signature
- Extensions policy
- Memory quota on WALinuxAgent
- #3398 Enforce extension signature validation with policy
- #3458 Improve error handling in policy engine
- #3483 Update telemetry for root certificate
- #3486 Restrict extension signature validation to CVMs
- #3499 Set soft limit for agents' memory cgroup in v2 machines
- #3535 Remove telemetry reporting if Agent memory usage > limit [Added in 2.15.1.3]
Bug Fixes and improvements
- #3457 Remove references to conf that may be uninitialized
- #3436 Enable cgroups on ChainGuard OS
- #3466 Remove reference to conf in supported features
- #3470 Do no fetch entire goal state when initializing telemetry
- #3484 Do not fetch full goal state on Daemon process + Do no send provisioning signals from CloudInitProvisionHandler
- #3490 Do not delete Certificates.pem on certificate download failures
- #3497 Do not change firewall rules in waagent-network-setup.service when firewalld is enabled
- #3498 Fix value of AZURE_GUEST_AGENT_UPDATING_FROM_VERSION on downgrades
- #3504 Use "iptables -L" to verify the results of "iptables -C"
- #3505 Do not pull entire goal state during provisioning by waagent
- #3526 Improve telemetry for firewall setup [Added on 2.15.1.2]
Tests bug fixes and improvements
- #3448 Install tar during test node setup when necessary
- #3449 Retry get instance view when execution state is 'Pending'
- #3461 Enable manual runs of the FIPS test on AzureUSGovernment cloud
- #3462 Disable extension policy and signature tests temporarily
- #3464 Add skipped tests to test results
- #3463 Enable FIPS test on AzureUSGovernment cloud
- #3465 Use ':' instead of ' ' in image URNs
- #3468 Use default resource name for VirtualMachineExtensionClient
- #3469 Fix ExtPolicy e2e test failures
- #3472 Update ExtSignatureValidation tests to run on CVMs
- #3473 Skipping test validation when network not ready on startup
- #3474 E2E test: Do not report exceptions in extensions
- #3475 Collect LISA logs by default
- #3476 Ignore systemd error in e2e tests
- #3485 Fix incorrect import in log_collector e2e test
- #3487 Update e2e test timestamp parsing logic
- #3491 Retry hibernate-resume cycle if incarnation is not 1 after resume
- #3493 Ignore records written by extensions when parsing waagent.log
- #3496 Skip tests that use VmAccess on gov cloud
- #3500, #3513 Disable and enable the agent service in the test agent setup
- #3501, #3512 Fix CSE deletion in ext_update scenario
- #3508 Skip firewall tests when the Proxy Agent manages the WireServer endpoint
- #3509 Remove agent update state files
- #3514 Disable signature validation in common test setup
- #3516 Disable policy tests
- #3520 Check for Proxy Agent on each reboot done by the firewall tests [Added on 2.15.1.2]
- #3521 Update URLs for python environments [Added on 2.15.1.2]
- #3528 Prepare agent for rollback scenario in e2e tests [Added on 2.15.1.2]
- #3529 Fix issue in telemetry reporting if Agent memory usage > limit [Added on 2.15.1.2]
Deployment schedule
| Stage | Regions | Deployment Start |
|---|---|---|
| Canary | Central US EUAP, East US 2 EUAP | 2026-01-14T16:33Z |
| Pilot | West Central US, East Asia | 2026-01-20T17:03Z |
| Medium | UK South | 2026-01-22T16:39Z |
| Large | North Europe | 2026-01-26T19:45Z |
| Batch 1A-i | Australia East, Brazil South, France Central, Germany West Central | 2026-01-28T16:27Z |
| Batch 1A-ii | Korea Central, North Central US, Norway East, Sweden Central, Switzerland North, West India |
2026-02-02T16:28Z |
| Batch 1A-iii | Australia Central, Canada Central, Japan East, Jio India West | 2026-02-04T16:39Z |
| Batch 1A-iv | Central India, South Africa North, UAE North, UK West | 2026-02-10T18:15Z |
| Batch 1A-v | Australia Central 2, Brazil Southeast, Canada East, France South, Germany North, Japan West, Southeast Asia, West US 3 |
2026-02-12T17:37Z |
| Batch 1B-i | Central US | 2026-02-17T17:46Z |
| Batch 1B-ii | West Europe | 2026-02-19T20:53Z |
| Batch 1B-iii | East US | 2026-02-23T19:39Z |
| Batch 2A-i | Australia Southeast, Jio India Central, Korea South, Norway West, South Africa West, South Central US, South India, Sweden South, Switzerland West, UAE Central |
2026-02-25T17:41Z |
| Batch 2A-ii | West US 2 | 2026-03-17T15:11Z |
| Batch 2B-i | West US | 2026-03-23T15:11Z |
| Batch 2B-ii | East US 2 | 2026-03-30T17:46Z |
| All | Rest of the regions |
Deployment schedule - USGov
| Stage | Regions | Deployment Start |
|---|---|---|
| Stage 1 | USDoD Central | |
| Stage 2 | USDoD East | |
| Stage 3 | USGov Texas | |
| Stage 4 | USGov Virginia, USGov Arizona | |
| All | Rest of the USGov regions |
Deployment schedule - China
| Stage | Regions | Deployment Start |
|---|---|---|
| Stage 1 | China North | |
| Stage 2 | China North 2 | |
| Stage 3 | China East | |
| Stage 4 | China East 2 | |
| All | Rest of the China regions |
v2.15.0.6
[Marked as a pre-release; 2.15.0.6 will only be published to Canary]
This release includes the same changes as 2.15.0.3
This release is for internal testing only
Deployment schedule
| Stage | Regions | Deployment Start |
|---|---|---|
| Canary | Central US EUAP, East US 2 EUAP | 12/17/2025 21:18:45 UTC |
v2.15.0.5
[Marked as a pre-release; 2.15.0.5 will only be published to Canary]
This release includes the same changes as 2.15.0.3
This release is for internal testing only
Deployment schedule
| Stage | Regions | Deployment Start |
|---|---|---|
| Canary | Central US EUAP, East US 2 EUAP | 12/15/2025 16:06:32 UTC |
v2.15.0.4
[Marked as a pre-release; 2.15.0.4 will only be published to Canary]
This release includes the same changes as 2.15.0.3
This release is for internal testing only
Deployment schedule
| Stage | Regions | Deployment Start |
|---|---|---|
| Canary | Central US EUAP, East US 2 EUAP | 12/11/2025 18:50:46 UTC |