v1.24.3 release

What's Changed

• [release-1.24] feat: add metadata tag on the storage account created by the driver by @k8s-infra-cherrypick-robot in #1492
• [release-1.24] fix: CVE-2024-5321 by @andyzhangx in #1500
• [release-1.24] fix: blobfuse mount failure in Azure Linux v3 by @k8s-infra-cherrypick-robot in #1498
• [release-1.24] fix: clone volume content to requested volume by @k8s-infra-cherrypick-robot in #1509
• [release-1.24] fix: ignore specific blobfuse version install failure by @k8s-infra-cherrypick-robot in #1511
• [release-1.24] cleanup: refine copy volume logic by @k8s-infra-cherrypick-robot in #1513
• [release-1.24] fix: volume cloning between different storage account for BlobAccessTierNotSupportedForAccountType error by @k8s-infra-cherrypick-robot in #1519
• [release-1.24] feat: upgrade to azcopy v10.26.0 for volume clone and snapshot restore by @andyzhangx in #1525
• [release-1.24] fix: create private endpoint failure when vnetResourceGroup is specified by @andyzhangx in #1529
• [release-1.24] cleanup: refactor volume cloning by @k8s-infra-cherrypick-robot in #1532
• [release-1.24] fix: respect ReadOnly AccessMode in volume mount by @k8s-infra-cherrypick-robot in #1537
• [release-1.24] fix: only last subnet is set in account ACL created by driver by @k8s-infra-cherrypick-robot in #1535
• [release-1.24] fix: VirtualNetworkRule match issue during account search by @andyzhangx in #1542
• [release-1.24] fix: nfs mount failure when there are multiple subnets in the cluster by @k8s-infra-cherrypick-robot in #1540
• doc: cut v1.24.3 release by @andyzhangx in #1547

Full Changelog: v1.24.2...v1.24.3

v1.23.7 release

What's Changed

• [release-1.23] fix: add azcopy-dir since volume cloning supported from v1.23.2 by @umagnus in #1455
• [release-1.23] test: fix trivy action failure by @k8s-infra-cherrypick-robot in #1459
• [release-1.23] fix: GHSA-xr7q-jx4m-x55m by @andyzhangx in #1467
• [release-1.23] cleanup: refine logs by @andyzhangx in #1475
• [release-1.23] cleanup: refine log by @andyzhangx in #1480
• [release-1.23] cleanup: refine logs by @k8s-infra-cherrypick-robot in #1478
• [release-1.23] feat: add allowSharedKeyAccess parameter by @umagnus in #1482
• [release-1.23] fix: CVE-2024-5321 by @andyzhangx in #1501
• [release-1.23] fix: blobfuse mount failure in Azure Linux v3 by @k8s-infra-cherrypick-robot in #1499
• [release-1.23] fix: ignore specific blobfuse version install failure by @k8s-infra-cherrypick-robot in #1512
• [release-1.23] feat: upgrade to azcopy v10.26.0 for volume clone and snapshot restore by @andyzhangx in #1526
• [release-1.23] fix: clone volume content to requested volume by @umagnus in #1520
• [release-1.23] fix: only last subnet is set in account ACL created by driver by @k8s-infra-cherrypick-robot in #1536
• doc: cut v1.23.7 release by @andyzhangx in #1546

Full Changelog: v1.23.6...v1.23.7

v1.22.8 release

What's Changed

• [release-1.22] test: fix trivy action failure by @k8s-infra-cherrypick-robot in #1460
• [release-1.22] fix: GHSA-xr7q-jx4m-x55m by @andyzhangx in #1469
• [release-1.22] cleanup: refine logs by @k8s-infra-cherrypick-robot in #1479
• [release-1.22] fix: CVE-2024-5321 by @andyzhangx in #1502
• doc: cut v1.22.8 release by @andyzhangx in #1527

Full Changelog: v1.22.7...v1.22.8

v1.24.2 release

What's Changed

• [release-1.24] fix: CVE-2023-45288 by @andyzhangx in #1354
• [release-1.24] test: ignore azcopy CVE-2023-45288 by @k8s-infra-cherrypick-robot in #1357
• [release-1.24] chore: set node_get_volume_stats log level to 6 by @andyzhangx in #1359
• [release-1.24] fix: CVE-2024-3177 by @andyzhangx in #1368
• [release-1.24] fix: liveness probe failure when hostNetwork not enabled in controller by @andyzhangx in #1377
• [release-1.24] test: fix stdlib CVE due to golang v1.22.2 by @k8s-infra-cherrypick-robot in #1386
• [release-1.24] fix: support storeAccountKey as false in cross subscription scenario by @k8s-infra-cherrypick-robot in #1383
• [release-1.24] chore(deps): bump build-image/debian-base from bookworm-v1.0.2 to bookworm-v1.0.3 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1393
• [release-1.24] chore: upgrade CSI driver sidecar image versions by @andyzhangx in #1400
• [release-1.24] feat: upgrade to azcopy v10.25.0 for volume clone feature by @k8s-infra-cherrypick-robot in #1411
• [release-1.24] feat: install blobfuse 2.3.0 as default version by @andyzhangx in #1417
• [release-1.24] fix: CVE-2024-35255 by @andyzhangx in #1421
• [release-1.24] feat: upgrade to azcopy v10.25.1 for volume clone feature by @k8s-infra-cherrypick-robot in #1430
• [release-1.24] feat: upgrade to aznfs 2.0.7 version for nfs mount by @k8s-infra-cherrypick-robot in #1436
• [release-1.24] fix shield guard on csi controller and node by @umagnus in #1442
• [release-1.24] fix: force copy blobfuse2 binary to avoid Text file busy error by @k8s-infra-cherrypick-robot in #1444
• [release-1.24] fix: override aznfs AZURE_ENDPOINT_OVERRIDE by @k8s-infra-cherrypick-robot in #1445
• [release-1.24] chore: upgrade CSI driver sidecar image versions by @andyzhangx in #1450
• [release-1.24] test: fix trivy action failure by @k8s-infra-cherrypick-robot in #1468
• [release-1.24] feat: add tag value delimiter by @k8s-infra-cherrypick-robot in #1463
• [release-1.24] fix: GHSA-xr7q-jx4m-x55m by @andyzhangx in #1466
• [release-1.24] fix: managed identity token refresh issue by @andyzhangx in #1472
• [release-1.24] cleanup: refine logs by @k8s-infra-cherrypick-robot in #1474
• [release-1.24] cleanup: refine logs by @k8s-infra-cherrypick-robot in #1477
• [release-1.24] feat: add allowSharedKeyAccess parameter by @k8s-infra-cherrypick-robot in #1481
• doc: cut v1.24.2 release by @andyzhangx in #1486

Full Changelog: v1.24.1...v1.24.2

v1.23.6 release

What's Changed

• [release-1.23] feat: upgrade to azcopy v10.25.1 for volume clone feature by @k8s-infra-cherrypick-robot in #1431
• [release-1.23] feat: upgrade to aznfs 2.0.7 version for nfs mount by @k8s-infra-cherrypick-robot in #1437
• [release-1.23] fix shield guard on csi controller and node by @umagnus in #1441
• [release-1.23] fix: override aznfs AZURE_ENDPOINT_OVERRIDE by @k8s-infra-cherrypick-robot in #1446
• [release-1.23] fix: force copy blobfuse2 binary to avoid Text file busy error by @cvvz in #1448
• [release-1.23] chore: upgrade CSI driver sidecar image versions by @andyzhangx in #1451
• doc: cut v1.23.6 release by @andyzhangx in #1453

Full Changelog: v1.23.5...v1.23.6

v1.22.7 release

What's Changed

• [release-1.22] fix: CVE-2023-45288 by @andyzhangx in #1356
• [release-1.22] fix: CVE-2024-3177 by @andyzhangx in #1370
• [release-1.22] test: fix stdlib CVE due to golang v1.22.2 by @k8s-infra-cherrypick-robot in #1388
• [release-1.22] chore(deps): bump build-image/debian-base from bookworm-v1.0.2 to bookworm-v1.0.3 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1395
• [release-1.22] test: fix trivy and codespell error by @andyzhangx in #1414
• [release-1.22] test: adopt track2 sdk in e2e test suites by @umagnus in #1426
• [release-1.22] fix: CVE-2024-35255 by @andyzhangx in #1423
• cleanup: remove .trivyignore file by @andyzhangx in #1432
• [release-1.22] feat: upgrade to aznfs 2.0.7 version for nfs mount by @k8s-infra-cherrypick-robot in #1438
• [release-1.22] fix shield guard on csi controller and node by @umagnus in #1440
• [release-1.22] fix: override aznfs AZURE_ENDPOINT_OVERRIDE by @k8s-infra-cherrypick-robot in #1447
• doc: cut v1.22.7 release by @andyzhangx in #1452

Full Changelog: v1.22.6...v1.22.7

v1.23.5 release

What's Changed

• [release-1.23] fix: CVE-2024-24786 by @andyzhangx in #1314
• [release-1.23] fix: workload identity did not work by @cvvz in #1320
• [release-1.23] chore(deps): bump build-image/debian-base from bookworm-v1.0.1 to bookworm-v1.0.2 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1323
• [release-1.23] feat: use new restricted liveness probe endpoint by @andyzhangx in #1338
• [release-1.23] feat: upgrade to azcopy v10.24.0 for volume clone feature by @k8s-infra-cherrypick-robot in #1336
• [release-1.23] fix: CVE-2023-45288 by @andyzhangx in #1355
• [release-1.23] test: ignore azcopy CVE-2023-45288 by @k8s-infra-cherrypick-robot in #1358
• [release-1.23] fix: enable http with track2 sdk by @andyzhangx in #1366
• [release-1.23] fix: CVE-2024-3177 by @andyzhangx in #1369
• [release-1.23] fix: support storeAccountKey as false in cross subscription scenario by @k8s-infra-cherrypick-robot in #1382
• [release-1.23] test: fix stdlib CVE due to golang v1.22.2 by @k8s-infra-cherrypick-robot in #1387
• [release-1.23] chore(deps): bump build-image/debian-base from bookworm-v1.0.2 to bookworm-v1.0.3 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1394
• [release-1.23] feat: upgrade to azcopy v10.25.0 for volume clone feature by @k8s-infra-cherrypick-robot in #1412
• [release-1.23] fix: create private endpoint failure by @andyzhangx in #1408
• [release-1.23] feat: install blobfuse 2.3.0 as default version by @andyzhangx in #1416
• [release-1.23] fix: CVE-2024-35255 by @andyzhangx in #1422
• doc: cut v1.23.5 release by @andyzhangx in #1415

Full Changelog: v1.23.4...v1.23.5

v1.24.1 release

What's Changed

• [release-1.24] feat: allow multiple subnets in updating service endpoints by @k8s-infra-cherrypick-robot in #1260
• [release-1.24] fix: ensure azure cloud config could be loaded from secret by @k8s-infra-cherrypick-robot in #1266
• [release-1.24] fix: nfs volume created in storage account that has blobfuse volume by @k8s-infra-cherrypick-robot in #1273
• [release-1.24] feat: provide nfsv3 protocol to enforce nfs mount by @k8s-infra-cherrypick-robot in #1277
• [release-1.24] test: ignore azcopy CVE-2024-24786 by @k8s-infra-cherrypick-robot in #1280
• [release-1.24] fix: fix azcopy exec timeout func by @k8s-infra-cherrypick-robot in #1285
• [release-1.24] feat: upgrade azcopy version to 10.23.0 for volume clone feature by @k8s-infra-cherrypick-robot in #1287
• [release-1.24] fix: nfs mount stuck issue by @k8s-infra-cherrypick-robot in #1292
• [release-1.24] chore: only use sas token for azcopy when useDataPlaneAPI is used by @k8s-infra-cherrypick-robot in #1296
• [release-1.24] cleanup: rename WaitUntilTimeout func by @k8s-infra-cherrypick-robot in #1299
• [release-1.24] chore: refine refine private endpoint to reduce error messages by @andyzhangx in #1301
• [release-1.24] chore: refine sastoken cache by @k8s-infra-cherrypick-robot in #1304
• [release-1.24] fix: strip service account token by @k8s-infra-cherrypick-robot in #1310
• [release-1.24] fix: workload identity did not work by @k8s-infra-cherrypick-robot in #1319
• [release-1.24] chore(deps): bump build-image/debian-base from bookworm-v1.0.1 to bookworm-v1.0.2 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1322
• [release-1.24] fix: enable http with track2 sdk by @andyzhangx in #1328
• [release-1.24] feat: use new restricted liveness probe endpoint by @andyzhangx in #1337
• [release-1.24] feat: upgrade to azcopy v10.24.0 for volume clone feature by @k8s-infra-cherrypick-robot in #1335
• [release-1.24] feat: support setting kubelet path for blobfuse-proxy endpoint by @cvvz in #1342
• [release-1.24] fix: allow http auth in volume clone by @k8s-infra-cherrypick-robot in #1345
• doc: cut v1.24.1 release by @andyzhangx in #1346

Full Changelog: v1.24.0...v1.24.1

v1.22.6 release

What's Changed

• [release-1.22] chore(deps): bump build-image/debian-base from bookworm-v1.0.0 to bookworm-v1.0.1 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1231
• [release-1.22] feat: upgrade to aznfs 2.0.4 version for nfs mount by @k8s-infra-cherrypick-robot in #1244
• [release-1.22] test: fix goveralls by @k8s-infra-cherrypick-robot in #1248
• [release-1.22] fix: panic when controller does not have cloud config by @andyzhangx in #1252
• [release-1.22] test: ignore azcopy CVE-2024-24786 by @k8s-infra-cherrypick-robot in #1282
• [release-1.22] feat: provide nfsv3 protocol to enforce nfs mount by @andyzhangx in #1284
• [release-1.22] fix: CVE-2024-24786 by @andyzhangx in #1315
• [release-1.22] chore(deps): bump build-image/debian-base from bookworm-v1.0.1 to bookworm-v1.0.2 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1324
• doc: cut v1.22.6 release by @andyzhangx in #1347

Full Changelog: v1.22.5...v1.22.6

v1.23.4 release

What's Changed

• [release-1.23] chore(deps): bump build-image/debian-base from bookworm-v1.0.0 to bookworm-v1.0.1 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1230
• [release-1.23] fix: increase volume cloning timeout by @andyzhangx in #1232
• [release-1.23] feat: upgrade to aznfs 2.0.4 version for nfs mount by @k8s-infra-cherrypick-robot in #1243
• [release-1.23] test: fix goveralls by @k8s-infra-cherrypick-robot in #1247
• [release-1.23] fix: panic when controller does not have cloud config by @k8s-infra-cherrypick-robot in #1251
• [release-1.23] fix: match tags issue in account search logic by @andyzhangx in #1254
• [release-1.23] feat: allow multiple subnets in updating service endpoints by @k8s-infra-cherrypick-robot in #1261
• [release-1.23] fix: ensure azure cloud config could be loaded from secret by @k8s-infra-cherrypick-robot in #1265
• [release-1.23] test: ignore azcopy CVE-2024-24786 by @k8s-infra-cherrypick-robot in #1281
• [release-1.23] feat: provide nfsv3 protocol to enforce nfs mount by @andyzhangx in #1283
• [release-1.23] feat: upgrade azcopy version to 10.23.0 for volume clone feature by @k8s-infra-cherrypick-robot in #1288
• [release-1.23] chore: only use sas token for azcopy when useDataPlaneAPI is used by @k8s-infra-cherrypick-robot in #1297
• [release-1.23] chore: refine sastoken cache by @k8s-infra-cherrypick-robot in #1305
• [release-1.23] fix: strip service account token by @k8s-infra-cherrypick-robot in #1311
• doc: cut v1.23.4 release by @andyzhangx in #1312

Full Changelog: v1.23.3...v1.23.4