Bumped Azure Linux base to 3.0.20260722 and chart to 1.9.13 (#1802)

- Regenerated chart snapshots to get tests green again
- Snapshot regen also removes accumulated stale cleanup-job hook manifests
  (leftover 1.6.0/1.9.0/1.9.5 Job copies); no functional change

Author: sean-jeffrey

Makefile

@@ -16,7 +16,7 @@ GOOS ?= linux
 GARCH ?= arm64
 
 BUILD_BASE_IMAGE ?= golang:1.25.12-bookworm
-BINARY_BASE_IMAGE ?= mcr.microsoft.com/azurelinux/distroless/base:3.0.20260706
+BINARY_BASE_IMAGE ?= mcr.microsoft.com/azurelinux/distroless/base:3.0.20260722
 
 REPO ?= appgwreg.azurecr.io
 IMAGE_NAME = public/azure-application-gateway/kubernetes-ingress-staging

helm/ingress-azure/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v1
-appVersion: "1.9.12"
+appVersion: "1.9.13"
 description: Use Azure Application Gateway as the ingress for an Azure Kubernetes Service cluster.
 name: ingress-azure
-version: 1.9.12
+version: 1.9.13

helm/ingress-azure/tests/snapshots/sample-config-addon/ingress-azure/templates/aadpodidentity.yaml

@@ -8,4 +8,4 @@ metadata:
 spec:
   type: 0
   resourceID: /a/b/c
-  clientID: 0000-0000-0000-0000-00000000
+  clientID: 0000-0000-0000-0000-00000000

helm/ingress-azure/tests/snapshots/sample-config-addon/ingress-azure/templates/cleanup-job.yaml

@@ -6,7 +6,7 @@ metadata:
   name: release-name-ingress-azure-cleanup
   labels:
     app: ingress-azure-cleanup
-    chart: ingress-azure-1.6.0
+    chart: ingress-azure-1.9.13
     heritage: Helm
     release: release-name
   annotations:
@@ -19,7 +19,7 @@ spec:
       restartPolicy: OnFailure
       containers:
       - name: cleanup
-        image: mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0
+        image: mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.9.13
         imagePullPolicy: Always
         env:
         - name: AGIC_POD_NAMESPACE
@@ -54,172 +54,4 @@ spec:
                 operator: Exists
       tolerations:
         - key: CriticalAppsOnly
-          operator: Exists---
-# Source: ingress-azure/templates/cleanup-job.yaml
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: release-name-ingress-azure-cleanup
-  labels:
-    app: ingress-azure-cleanup
-    chart: ingress-azure-1.9.0
-    heritage: Helm
-    release: release-name
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
-spec:
-  template:
-    spec:
-      serviceAccountName: release-name-sa-ingress-azure
-      restartPolicy: OnFailure
-      containers:
-      - name: cleanup
-        image: mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.9.0
-        imagePullPolicy: Always
-        env:
-        - name: AGIC_POD_NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        command:
-          - "/appgw-ingress"
-          - "--cleanup-oec"
-          - "app.kubernetes.io/managed-by=ingress-appgw-addon"
-        securityContext:
-          capabilities:
-            drop:
-              - ALL
-      nodeSelector:
-        beta.kubernetes.io/os: linux
-      affinity:
-        nodeAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-          - preference:
-              matchExpressions:
-              - key: kubernetes.cloud.com/mode
-                operator: In
-                values:
-                - system
-            weight: 100
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-            - labelSelector: null
-              matchExpressions:
-              - key: kubernetes.cloud.com/cluster
-                operator: Exists
-      tolerations:
-        - key: CriticalAppsOnly
-          operator: Exists---
-# Source: ingress-azure/templates/cleanup-job.yaml
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: release-name-ingress-azure-cleanup
-  labels:
-    app: ingress-azure-cleanup
-    chart: ingress-azure-1.9.5
-    heritage: Helm
-    release: release-name
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
-spec:
-  template:
-    spec:
-      serviceAccountName: release-name-sa-ingress-azure
-      restartPolicy: OnFailure
-      containers:
-      - name: cleanup
-        image: mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.9.5
-        imagePullPolicy: Always
-        env:
-        - name: AGIC_POD_NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        command:
-          - "/appgw-ingress"
-          - "--cleanup-oec"
-          - "app.kubernetes.io/managed-by=ingress-appgw-addon"
-        securityContext:
-          capabilities:
-            drop:
-              - ALL
-      nodeSelector:
-        beta.kubernetes.io/os: linux
-      affinity:
-        nodeAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-          - preference:
-              matchExpressions:
-              - key: kubernetes.cloud.com/mode
-                operator: In
-                values:
-                - system
-            weight: 100
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-            - labelSelector: null
-              matchExpressions:
-              - key: kubernetes.cloud.com/cluster
-                operator: Exists
-      tolerations:
-        - key: CriticalAppsOnly
-          operator: Exists---
-# Source: ingress-azure/templates/cleanup-job.yaml
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: release-name-ingress-azure-cleanup
-  labels:
-    app: ingress-azure-cleanup
-    chart: ingress-azure-1.9.11
-    heritage: Helm
-    release: release-name
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
-spec:
-  template:
-    spec:
-      serviceAccountName: release-name-sa-ingress-azure
-      restartPolicy: OnFailure
-      containers:
-      - name: cleanup
-        image: mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.9.11
-        imagePullPolicy: Always
-        env:
-        - name: AGIC_POD_NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        command:
-          - "/appgw-ingress"
-          - "--cleanup-oec"
-          - "app.kubernetes.io/managed-by=ingress-appgw-addon"
-        securityContext:
-          capabilities:
-            drop:
-              - ALL
-      nodeSelector:
-        beta.kubernetes.io/os: linux
-      affinity:
-        nodeAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-          - preference:
-              matchExpressions:
-              - key: kubernetes.cloud.com/mode
-                operator: In
-                values:
-                - system
-            weight: 100
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-            - labelSelector: null
-              matchExpressions:
-              - key: kubernetes.cloud.com/cluster
-                operator: Exists
-      tolerations:
-        - key: CriticalAppsOnly
-          operator: Exists
+          operator: Exists

helm/ingress-azure/tests/snapshots/sample-config-addon/ingress-azure/templates/configmap.yaml

@@ -6,7 +6,7 @@ metadata:
   name: release-name-cm-ingress-azure
   labels:
     app: ingress-azure
-    chart: ingress-azure-1.9.11
+    chart: ingress-azure-1.9.13
     heritage: Helm
     release: release-name
 data:

helm/ingress-azure/tests/snapshots/sample-config-addon/ingress-azure/templates/deployment.yaml

@@ -6,7 +6,7 @@ metadata:
   name: release-name-ingress-azure
   labels:
     app: ingress-azure
-    chart: ingress-azure-1.9.11
+    chart: ingress-azure-1.9.13
     heritage: Helm
     release: release-name
 spec:
@@ -32,7 +32,7 @@ spec:
         runAsUser: 3000
       containers:
       - name: ingress-azure
-        image: mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.9.11
+        image: mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.9.13
         imagePullPolicy: Always
         readinessProbe:
           httpGet:
@@ -105,4 +105,4 @@ spec:
                 operator: Exists
       tolerations:
         - key: CriticalAppsOnly
-          operator: Exists
+          operator: Exists

helm/ingress-azure/tests/snapshots/sample-config-addon/ingress-azure/templates/serviceaccount.yaml

@@ -5,7 +5,7 @@ kind: ServiceAccount
 metadata:
   labels:
     app: ingress-azure
-    chart: ingress-azure-1.9.11
+    chart: ingress-azure-1.9.13
     heritage: Helm
     release: release-name
   name: release-name-sa-ingress-azure

helm/ingress-azure/tests/snapshots/sample-config-empty/ingress-azure/templates/aadpodidentity.yaml

@@ -8,4 +8,4 @@ metadata:
 spec:
   type: 0
   resourceID: /a/b/c
-  clientID: 0000-0000-0000-0000-00000000
+  clientID: 0000-0000-0000-0000-00000000

helm/ingress-azure/tests/snapshots/sample-config-empty/ingress-azure/templates/cleanup-job.yaml

@@ -6,7 +6,7 @@ metadata:
   name: release-name-ingress-azure-cleanup
   labels:
     app: ingress-azure-cleanup
-    chart: ingress-azure-1.6.0
+    chart: ingress-azure-1.9.13
     heritage: Helm
     release: release-name
   annotations:
@@ -19,7 +19,7 @@ spec:
       restartPolicy: OnFailure
       containers:
       - name: cleanup
-        image: mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0
+        image: mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.9.13
         imagePullPolicy: Always
         env:
         - name: AGIC_POD_NAMESPACE
@@ -33,109 +33,4 @@ spec:
         securityContext:
           capabilities:
             drop:
-              - ALL---
-# Source: ingress-azure/templates/cleanup-job.yaml
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: release-name-ingress-azure-cleanup
-  labels:
-    app: ingress-azure-cleanup
-    chart: ingress-azure-1.9.0
-    heritage: Helm
-    release: release-name
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
-spec:
-  template:
-    spec:
-      serviceAccountName: release-name-sa-ingress-azure
-      restartPolicy: OnFailure
-      containers:
-      - name: cleanup
-        image: mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.9.0
-        imagePullPolicy: Always
-        env:
-        - name: AGIC_POD_NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        command:
-          - "/appgw-ingress"
-          - "--cleanup-oec"
-          - "app.kubernetes.io/managed-by=ingress-appgw-helm"
-        securityContext:
-          capabilities:
-            drop:
-              - ALL---
-# Source: ingress-azure/templates/cleanup-job.yaml
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: release-name-ingress-azure-cleanup
-  labels:
-    app: ingress-azure-cleanup
-    chart: ingress-azure-1.9.5
-    heritage: Helm
-    release: release-name
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
-spec:
-  template:
-    spec:
-      serviceAccountName: release-name-sa-ingress-azure
-      restartPolicy: OnFailure
-      containers:
-      - name: cleanup
-        image: mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.9.5
-        imagePullPolicy: Always
-        env:
-        - name: AGIC_POD_NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        command:
-          - "/appgw-ingress"
-          - "--cleanup-oec"
-          - "app.kubernetes.io/managed-by=ingress-appgw-helm"
-        securityContext:
-          capabilities:
-            drop:
-              - ALL---
-# Source: ingress-azure/templates/cleanup-job.yaml
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: release-name-ingress-azure-cleanup
-  labels:
-    app: ingress-azure-cleanup
-    chart: ingress-azure-1.9.11
-    heritage: Helm
-    release: release-name
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
-spec:
-  template:
-    spec:
-      serviceAccountName: release-name-sa-ingress-azure
-      restartPolicy: OnFailure
-      containers:
-      - name: cleanup
-        image: mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.9.11
-        imagePullPolicy: Always
-        env:
-        - name: AGIC_POD_NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        command:
-          - "/appgw-ingress"
-          - "--cleanup-oec"
-          - "app.kubernetes.io/managed-by=ingress-appgw-helm"
-        securityContext:
-          capabilities:
-            drop:
-              - ALL
+              - ALL