Upbound Official
provider-family-azure
By upbound
Last changed 2 months ago
Languages
Support
Upbound Supported
12 months window ends 2027/06/12
Security & Maintenance
CVE Remediation
Backporting
FIPS Compatibility
Upbound signed
Source Code

Notice something off about this package? Help us keep the marketplace safe and trustworthy by reporting inappropriate content or behavior.

Report this package
Overview
Ships ProviderConfig and authentication glue for the Azure family, wiring workload identities, service principals, and secret references used by other packages.
ReadmeProvidersProviderConfigManaged ResourcesProvenanceRelease Notes
Vulnerabilities (3)

Summary

This release includes security fixes, new Azure resources, API improvements, and dependency updates.

Highlights

  • Security: Remediated multiple CVE vulnerabilities in Go standard library and dependencies

    • Updated Go to 1.25.11 (fixes CVE-2026-42504, CVE-2026-42507, CVE-2026-27145, and related GO advisories)
    • Updated golang.org/x/crypto to v0.52.0
    • Updated golang.org/x/net to v0.55.0
    • Updated golang.org/x/sys to v0.45.0
    • Fixed GHSA-q9hv-hpm4-hj6x in github.com/cloudflare/circl
    • Fixed security issues in google.golang.org/grpc and go.opentelemetry.io/otel

  • New Azure Resources:

    • Oracle Autonomous Database resources (AutonomousDatabase, AutonomousDatabaseBackup, AutonomousDatabaseCloneFromBackup, AutonomousDatabaseCloneFromDatabase)
    • FlexibleServerActiveDirectoryAdministrator for PostgreSQL
    • CacheRule for Container Registry
    • Cluster for Event Hub
    • Key for App Configuration

  • API Enhancements:

    • Added elastic pool reference support to MSSQLDatabase
    • Added missing api_id reference in Subscription.apimanagement
    • Added ProviderConfig ReconciliationPolicy API for configurable exponential failure rate limiting
    • Backported missing SecretRef and reference fields to v1beta1 APIs
    • API version bumps for multi-version CRDs with deprecation process started

  • Improvements:

    • Azure service metadata integration with crank wiring and validation tests
    • API conversion roundtrip tests
    • Unified Go version management across workflows and Makefile
    • Enhanced Uptest cleanup with --all-namespaces flag
    • Updated Alpine base image to v3.23.4

  • Dependency Updates:

    • Bumped Upjet to include crossplane-runtime v2.2.1, k8s libs v0.35.5, controller-runtime v0.23.3
    • Bumped crossplane-cli to v2.3.0
    • Updated multiple GitHub Actions and workflow dependencies

  • Bug Fixes:

    • Fixed incorrect ProviderConfig lookup attempt
    • Fixed identity field type in HealthcareService v1beta1
    • Fixed LoadTest backported singleton list fields
    • Fixed CI schema-version-diff Makefile pattern
    • Fixed templating in crossplane.yaml
Discover the building blocks for your internal cloud platform.
© 2026 Upbound, Inc.
Solutions
Learn
Company
Community
More