v1.23.6 release

What's Changed

• [release-1.23] feat: upgrade to azcopy v10.25.1 for volume clone feature by @k8s-infra-cherrypick-robot in #1431
• [release-1.23] feat: upgrade to aznfs 2.0.7 version for nfs mount by @k8s-infra-cherrypick-robot in #1437
• [release-1.23] fix shield guard on csi controller and node by @umagnus in #1441
• [release-1.23] fix: override aznfs AZURE_ENDPOINT_OVERRIDE by @k8s-infra-cherrypick-robot in #1446
• [release-1.23] fix: force copy blobfuse2 binary to avoid Text file busy error by @cvvz in #1448
• [release-1.23] chore: upgrade CSI driver sidecar image versions by @andyzhangx in #1451
• doc: cut v1.23.6 release by @andyzhangx in #1453

Full Changelog: v1.23.5...v1.23.6

v1.22.7 release

What's Changed

• [release-1.22] fix: CVE-2023-45288 by @andyzhangx in #1356
• [release-1.22] fix: CVE-2024-3177 by @andyzhangx in #1370
• [release-1.22] test: fix stdlib CVE due to golang v1.22.2 by @k8s-infra-cherrypick-robot in #1388
• [release-1.22] chore(deps): bump build-image/debian-base from bookworm-v1.0.2 to bookworm-v1.0.3 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1395
• [release-1.22] test: fix trivy and codespell error by @andyzhangx in #1414
• [release-1.22] test: adopt track2 sdk in e2e test suites by @umagnus in #1426
• [release-1.22] fix: CVE-2024-35255 by @andyzhangx in #1423
• cleanup: remove .trivyignore file by @andyzhangx in #1432
• [release-1.22] feat: upgrade to aznfs 2.0.7 version for nfs mount by @k8s-infra-cherrypick-robot in #1438
• [release-1.22] fix shield guard on csi controller and node by @umagnus in #1440
• [release-1.22] fix: override aznfs AZURE_ENDPOINT_OVERRIDE by @k8s-infra-cherrypick-robot in #1447
• doc: cut v1.22.7 release by @andyzhangx in #1452

Full Changelog: v1.22.6...v1.22.7

v1.23.5 release

What's Changed

• [release-1.23] fix: CVE-2024-24786 by @andyzhangx in #1314
• [release-1.23] fix: workload identity did not work by @cvvz in #1320
• [release-1.23] chore(deps): bump build-image/debian-base from bookworm-v1.0.1 to bookworm-v1.0.2 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1323
• [release-1.23] feat: use new restricted liveness probe endpoint by @andyzhangx in #1338
• [release-1.23] feat: upgrade to azcopy v10.24.0 for volume clone feature by @k8s-infra-cherrypick-robot in #1336
• [release-1.23] fix: CVE-2023-45288 by @andyzhangx in #1355
• [release-1.23] test: ignore azcopy CVE-2023-45288 by @k8s-infra-cherrypick-robot in #1358
• [release-1.23] fix: enable http with track2 sdk by @andyzhangx in #1366
• [release-1.23] fix: CVE-2024-3177 by @andyzhangx in #1369
• [release-1.23] fix: support storeAccountKey as false in cross subscription scenario by @k8s-infra-cherrypick-robot in #1382
• [release-1.23] test: fix stdlib CVE due to golang v1.22.2 by @k8s-infra-cherrypick-robot in #1387
• [release-1.23] chore(deps): bump build-image/debian-base from bookworm-v1.0.2 to bookworm-v1.0.3 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1394
• [release-1.23] feat: upgrade to azcopy v10.25.0 for volume clone feature by @k8s-infra-cherrypick-robot in #1412
• [release-1.23] fix: create private endpoint failure by @andyzhangx in #1408
• [release-1.23] feat: install blobfuse 2.3.0 as default version by @andyzhangx in #1416
• [release-1.23] fix: CVE-2024-35255 by @andyzhangx in #1422
• doc: cut v1.23.5 release by @andyzhangx in #1415

Full Changelog: v1.23.4...v1.23.5

v1.24.1 release

What's Changed

• [release-1.24] feat: allow multiple subnets in updating service endpoints by @k8s-infra-cherrypick-robot in #1260
• [release-1.24] fix: ensure azure cloud config could be loaded from secret by @k8s-infra-cherrypick-robot in #1266
• [release-1.24] fix: nfs volume created in storage account that has blobfuse volume by @k8s-infra-cherrypick-robot in #1273
• [release-1.24] feat: provide nfsv3 protocol to enforce nfs mount by @k8s-infra-cherrypick-robot in #1277
• [release-1.24] test: ignore azcopy CVE-2024-24786 by @k8s-infra-cherrypick-robot in #1280
• [release-1.24] fix: fix azcopy exec timeout func by @k8s-infra-cherrypick-robot in #1285
• [release-1.24] feat: upgrade azcopy version to 10.23.0 for volume clone feature by @k8s-infra-cherrypick-robot in #1287
• [release-1.24] fix: nfs mount stuck issue by @k8s-infra-cherrypick-robot in #1292
• [release-1.24] chore: only use sas token for azcopy when useDataPlaneAPI is used by @k8s-infra-cherrypick-robot in #1296
• [release-1.24] cleanup: rename WaitUntilTimeout func by @k8s-infra-cherrypick-robot in #1299
• [release-1.24] chore: refine refine private endpoint to reduce error messages by @andyzhangx in #1301
• [release-1.24] chore: refine sastoken cache by @k8s-infra-cherrypick-robot in #1304
• [release-1.24] fix: strip service account token by @k8s-infra-cherrypick-robot in #1310
• [release-1.24] fix: workload identity did not work by @k8s-infra-cherrypick-robot in #1319
• [release-1.24] chore(deps): bump build-image/debian-base from bookworm-v1.0.1 to bookworm-v1.0.2 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1322
• [release-1.24] fix: enable http with track2 sdk by @andyzhangx in #1328
• [release-1.24] feat: use new restricted liveness probe endpoint by @andyzhangx in #1337
• [release-1.24] feat: upgrade to azcopy v10.24.0 for volume clone feature by @k8s-infra-cherrypick-robot in #1335
• [release-1.24] feat: support setting kubelet path for blobfuse-proxy endpoint by @cvvz in #1342
• [release-1.24] fix: allow http auth in volume clone by @k8s-infra-cherrypick-robot in #1345
• doc: cut v1.24.1 release by @andyzhangx in #1346

Full Changelog: v1.24.0...v1.24.1

v1.22.6 release

What's Changed

• [release-1.22] chore(deps): bump build-image/debian-base from bookworm-v1.0.0 to bookworm-v1.0.1 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1231
• [release-1.22] feat: upgrade to aznfs 2.0.4 version for nfs mount by @k8s-infra-cherrypick-robot in #1244
• [release-1.22] test: fix goveralls by @k8s-infra-cherrypick-robot in #1248
• [release-1.22] fix: panic when controller does not have cloud config by @andyzhangx in #1252
• [release-1.22] test: ignore azcopy CVE-2024-24786 by @k8s-infra-cherrypick-robot in #1282
• [release-1.22] feat: provide nfsv3 protocol to enforce nfs mount by @andyzhangx in #1284
• [release-1.22] fix: CVE-2024-24786 by @andyzhangx in #1315
• [release-1.22] chore(deps): bump build-image/debian-base from bookworm-v1.0.1 to bookworm-v1.0.2 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1324
• doc: cut v1.22.6 release by @andyzhangx in #1347

Full Changelog: v1.22.5...v1.22.6

v1.23.4 release

What's Changed

• [release-1.23] chore(deps): bump build-image/debian-base from bookworm-v1.0.0 to bookworm-v1.0.1 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1230
• [release-1.23] fix: increase volume cloning timeout by @andyzhangx in #1232
• [release-1.23] feat: upgrade to aznfs 2.0.4 version for nfs mount by @k8s-infra-cherrypick-robot in #1243
• [release-1.23] test: fix goveralls by @k8s-infra-cherrypick-robot in #1247
• [release-1.23] fix: panic when controller does not have cloud config by @k8s-infra-cherrypick-robot in #1251
• [release-1.23] fix: match tags issue in account search logic by @andyzhangx in #1254
• [release-1.23] feat: allow multiple subnets in updating service endpoints by @k8s-infra-cherrypick-robot in #1261
• [release-1.23] fix: ensure azure cloud config could be loaded from secret by @k8s-infra-cherrypick-robot in #1265
• [release-1.23] test: ignore azcopy CVE-2024-24786 by @k8s-infra-cherrypick-robot in #1281
• [release-1.23] feat: provide nfsv3 protocol to enforce nfs mount by @andyzhangx in #1283
• [release-1.23] feat: upgrade azcopy version to 10.23.0 for volume clone feature by @k8s-infra-cherrypick-robot in #1288
• [release-1.23] chore: only use sas token for azcopy when useDataPlaneAPI is used by @k8s-infra-cherrypick-robot in #1297
• [release-1.23] chore: refine sastoken cache by @k8s-infra-cherrypick-robot in #1305
• [release-1.23] fix: strip service account token by @k8s-infra-cherrypick-robot in #1311
• doc: cut v1.23.4 release by @andyzhangx in #1312

Full Changelog: v1.23.3...v1.23.4

v1.24.0 release

What's Changed

• doc: cut v1.23.0 release by @andyzhangx in #1019
• chore(deps): bump golang.org/x/net from 0.13.0 to 0.15.0 by @dependabot in #1021
• fix: refine create volume metrics by @andyzhangx in #1023
• cleanup: fix typo by @andyzhangx in #1028
• doc: refine inline volume example by @andyzhangx in #1027
• test: remove override in blobfuse proxy enabled test by @andyzhangx in #1029
• test: fix verify-helm-chart failure by @andyzhangx in #1031
• chore(deps): bump google.golang.org/grpc from 1.54.0 to 1.58.3 by @dependabot in #1041
• fix: CVE-2023-39325 by @andyzhangx in #1042
• test: adjust log print in e2e test by @andyzhangx in #1040
• cleanup: fix k8s.io/endpointslice dependency by @andyzhangx in #1051
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.11.0 to 2.13.0 by @dependabot in #1044
• test: don't return error in blob_log.sh by @andyzhangx in #1054
• fix: support arm in init.sh by @cvvz in #1055
• fix: nfs volume creation failure due to Microsoft.Storage.Global Service endpoint enabled by @andyzhangx in #1059
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault from 1.0.0 to 1.2.0 by @dependabot in #1062
• feat: add node metrics by @andyzhangx in #1069
• chore(deps): bump github.com/jongio/azidext/go/azidext from 0.4.0 to 0.5.0 by @dependabot in #1071
• feat: support volume cloning by @umagnus in #914
• doc: correct check blob csi pod status doc by @umagnus in #1072
• fix: increase provisioner timeout as 20min by @andyzhangx in #1073
• chore: upgrade sidecar image versions by @andyzhangx in #1081
• feat: install blobfuse 2.1.1 as default version by @andyzhangx in #1085
• doc: add ZRS storage sku in the doc by @andyzhangx in #1088
• Adopt track2 sdk in e2e test suites by @MartinForReal in #1087
• cleanup: update new chart versions by @andyzhangx in #1095
• feat: upgrade azcopy version to 10.21.2 by @umagnus in #1093
• chore(deps): bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 by @dependabot in #1092
• feat: support blobfuse-proxy on OpenShift by @cvvz in #1045
• feat: switch to bookworm debian base image by @cvvz in #1090
• fix: make aznfs protocol consistent with nfs by @andyzhangx in #1103
• Refactor: adopt dependency injection pattern and extract cloud property by @MartinForReal in #1094
• chore: upgrade sidecar image versions by @andyzhangx in #1112
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault from 1.2.0 to 1.3.0 by @dependabot in #1096
• doc: add aznfs mount helper tsg by @cvvz in #1111
• feat: install blobfuse 2.1.2 as default version by @andyzhangx in #1115
• test: upgrade golangci/golangci-lint-action to v1.54 by @umagnus in #1119
• chore(deps): bump github.com/onsi/gomega from 1.29.0 to 1.30.0 by @dependabot in #1113
• doc: update blobfuse-proxy support on coreos by @andyzhangx in #1120
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.13.0 to 2.13.1 by @dependabot in #1123
• chore(deps): bump github.com/kubernetes-csi/csi-lib-utils from 0.13.0 to 0.16.0 by @dependabot in #1127
• doc: add volume cloning doc by @umagnus in #1129
• cleanup: update new chart versions by @andyzhangx in #1132
• doc: add nconnect mount option in the doc by @andyzhangx in #1131
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources from 1.1.1 to 1.2.0 by @dependabot in #1136
• feat: install blobfuse 2.1.2 as default version on v1.23.1, v1.22.3 by @andyzhangx in #1137
• doc: fix readOnly setting doc by @andyzhangx in #1139
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault from 1.3.0 to 1.4.0 by @dependabot in #1140
• Refactor: load config with configloader by @MartinForReal in #1143
• chore(deps): bump k8s.io/klog/v2 from 2.100.1 to 2.110.1 by @umagnus in #1144
• fix: modprobe command error with aznfs mount by @andyzhangx in #1146
• chore: upgrade azure cloud provider by @andyzhangx in #1145
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.13.1 to 2.13.2 by @dependabot in #1147
• chore: support installing blob-csi-driver with aznfs-mount by install-driver.sh by @cvvz in #1151
• chore(deps): bump actions/setup-go from 4 to 5 by @dependabot in #1152
• chore(deps): bump golang.org/x/net from 0.18.0 to 0.19.0 by @dependabot in #1150
• feat: install blobfuse 2.1.2 as default version on v1.22.4, v1.23.2 by @andyzhangx in #1154
• chore: support deploy aznfs mount helper in v1.22 and v1.23 by @cvvz in #1155
• doc: fix storage identity typo by @umagnus in #1157
• feat: upgrade to aznfs 2.0.0 version for nfs mount by @andyzhangx in #1159
• fix: bump azclient and fix signature change by @MartinForReal in #1158
• test: run k8s 1.27 external e2e tests by @andyzhangx in #1163
• chore(deps): bump golang.org/x/net from 0.17.0 to 0.19.0 by @dependabot in #1166
• chore(deps): bump github.com/kubernetes-csi/csi-lib-utils from 0.13.0 to 0.16.0 by @dependabot in #1167
• Refactor: Extract kubeclient from cloud provider by @MartinForReal in #1164
• test: add more external e2e tests by @andyzhangx in #1165
• chore(deps): bump github/codeql-action from 2 to 3 by @dependabot in #1171
• fix: support install blobfuse proxy on other linux distributions by @cvvz in #1173
• feat: upgrade to aznfs 2.0.1 version for nfs mount by @andyzhangx in #1176
• fix: CVE-2023-48795 by @andyzhangx in #1180
• doc: fix volume cloning doc by @andyzhangx in #1184
• chore(deps): bump k8s.io/kubernetes from 1.28.4 to 1.28.5 by @dependabot in #1186
• Refactor: remove grpc wrapper by @MartinForReal in #1187
• feat: upgrade azcopy to v10.22.1 for volume clone feature by @andyzhangx in #1190
• test: always use latest azcopy version in sanity test by @andyzhangx in #1192
• chore(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0 by @dependabot in htt...

v1.23.3 release

What's Changed

• [release-1.23] doc: add volume cloning doc by @k8s-infra-cherrypick-robot in #1130
• [release-1.23] doc: add nconnect mount option in the doc by @k8s-infra-cherrypick-robot in #1133
• [release-1.23] feat: install blobfuse 2.1.2 as default version by @andyzhangx in #1138
• [release-1.23] fix: modprobe command error with aznfs mount by @andyzhangx in #1148
• [release-1.23] feat: upgrade to aznfs 2.0.0 version for nfs mount by @k8s-infra-cherrypick-robot in #1160
• [release-1.23] test: upgrade golangci/golangci-lint-action to v1.54 by @k8s-infra-cherrypick-robot in #1175
• [release-1.23] fix: support install blobfuse proxy on other linux distributions by @k8s-infra-cherrypick-robot in #1174
• [release-1.23] feat: upgrade to aznfs 2.0.1 version for nfs mount by @k8s-infra-cherrypick-robot in #1177
• [release-1.23] fix: CVE-2023-48795 by @andyzhangx in #1181
• [release-1.23] feat: upgrade azcopy to v10.22.1 for volume clone feature by @k8s-infra-cherrypick-robot in #1191
• [release-1.23] fix: reduce mount lock to avoid volumeID collision issue by @k8s-infra-cherrypick-robot in #1194
• [release-1.23] fix: mountPermission settting issue due to case insensitive parameter by @k8s-infra-cherrypick-robot in #1197
• [release-1.23] feat: use cluster identity for using azcopy in volume cloning by @umagnus in #1200
• [release-1.23] cleanup: add cache in sastoken fallback by @k8s-infra-cherrypick-robot in #1202
• [release-1.23] feat: upgrade to aznfs 2.0.3 version for nfs mount by @k8s-infra-cherrypick-robot in #1205
• [release-1.23] fix: generate sas token when secret is used in volume cloning by @andyzhangx in #1208
• [release-1.23] feat: support workload identity setting in static PV mount by @cvvz in #1211
• [release-1.23] feat: upgrade azcopy version to 10.22.2 for volume clone feature by @andyzhangx in #1220
• doc: cut v1.23.3 release by @andyzhangx in #1221

Full Changelog: v1.23.2...v1.23.3

v1.22.5 release

What's Changed

• [release-1.22] doc: add nconnect mount option in the doc by @k8s-infra-cherrypick-robot in #1134
• [release-1.22] fix: modprobe command error with aznfs mount by @andyzhangx in #1149
• [release-1.22] feat: upgrade to aznfs 2.0.0 version for nfs mount by @k8s-infra-cherrypick-robot in #1161
• [release-1.22] feat: upgrade to aznfs 2.0.1 version for nfs mount by @k8s-infra-cherrypick-robot in #1178
• [release-1.22] test: upgrade golangci/golangci-lint-action to v1.54 by @umagnus in #1179
• [release-1.22] fix: CVE-2023-48795 by @andyzhangx in #1182
• [release-1.22] fix: mountPermission settting issue due to case insensitive parameter by @k8s-infra-cherrypick-robot in #1198
• [release-1.22] feat: upgrade to aznfs 2.0.3 version for nfs mount by @k8s-infra-cherrypick-robot in #1206
• doc: cut v1.22.5 release by @andyzhangx in #1222

Full Changelog: v1.22.4...v1.22.5

v1.21.7 release

What's Changed

• [release-1.21] doc: add nconnect mount option in the doc by @k8s-infra-cherrypick-robot in #1135
• [release-1.21] test: upgrade golangci/golangci-lint-action to v1.54 by @umagnus in #1185
• [release-1.21] fix: CVE-2023-48795 by @andyzhangx in #1183
• doc: cut v1.21.7 release by @andyzhangx in #1223

Full Changelog: v1.21.6...v1.21.7