AgentBaker icon indicating copy to clipboard operation
AgentBaker copied to clipboard

Allow us to turn off Mariner's equivalent of unattended upgrade

Open paulgmiller opened this issue 2 years ago • 1 comments

Is your feature request related to a problem?/Why is this needed We can turn off in ubuntu. If mariner has same functionality we should allow it to be turned off. Don't think Windows has an equivalent. @AbelHu.

Describe the solution you'd like in detail Honor NodeBootstrapingConfig's DisableUnattendedUpgrade and turn any automatic updates off.

Describe alternatives you've considered Daemonsets and remediators are fine but there is always a race with new images if we don't do it here.

Additional context

https://github.com/Azure/AgentBaker/pull/2175

paulgmiller avatar Sep 29 '22 18:09 paulgmiller

We use WindowsProfile.EnableAutomaticUpdates to set it for Windows. The default value is false. AKS Windows users only can get the security patch by updating the node image version.

AbelHu avatar Sep 30 '22 02:09 AbelHu