v1.25.1 release

What's Changed

• [release-1.25] fix: add CriticalAddonsOnly toleration into controller pod by @andyzhangx in #1648
• [release-1.25] fix: skip blobfuse-proxy copy if it's not enabled in driver init by @k8s-infra-cherrypick-robot in #1653
• [release-1.25] fix: blobfuse install failure in install-blobfuse-proxy initContainer by @k8s-infra-cherrypick-robot in #1662
• [release-1.25] fix: incorrect userAgent by @andyzhangx in #1667
• [release-1.25] test: fix trivy action by @k8s-infra-cherrypick-robot in #1684
• [release-1.25] fix: don't install blobfuse v1 by default since it's deprecated by @andyzhangx in #1683
• [release-1.25] feat: upgrade to azcopy v10.27.0 for volume clone by @k8s-infra-cherrypick-robot in #1685
• [release-1.25] fix: tagValueDelimiter parameter mismatch by @k8s-infra-cherrypick-robot in #1692
• [release-1.25] feat: upgrade to azcopy v10.27.1 for volume clone by @k8s-infra-cherrypick-robot in #1696
• [release-1.25] fix: change mount timeout to 1.5min by @k8s-infra-cherrypick-robot in #1700
• [release-1.25] cleanup: remove unused livenessProbe in registrar by @andyzhangx in #1705
• [release-1.25] chore: update CSI spec to v1.10.0 by @k8s-infra-cherrypick-robot in #1712
• [release-1.25] fix: avoid duplicate ssl mounts on Redhat in AzureStack environment by @andyzhangx in #1720
• [release-1.25] fix: always start blobfuse-proxy as long as it's enabled by @k8s-infra-cherrypick-robot in #1724
• [release-1.25] fix: increase blob memory limit to avoid OOM during volume clone by @andyzhangx in #1726
• [release-1.25] chore: upgrade azure cloud provider lib by @andyzhangx in #1732
• [release-1.25] feat: install blobfuse 2.4.0 as default version by @andyzhangx in #1735
• [release-1.25] fix: CVE-2024-45337 by @andyzhangx in #1747
• [release-1.25] feat: match source account as first priority in volume restore by @k8s-infra-cherrypick-robot in #1740
• [release-1.25] chore: upgrade k8s.io/mount-utils to v1.32.0 by @andyzhangx in #1752
• [release-1.25] fix: runOnControlPlane chart config by @andyzhangx in #1758
• [release-1.25] fix: CVE-2024-45338 by @andyzhangx in #1766
• [release-1.25] fix: wait for azcopy job running in volume clone by @k8s-infra-cherrypick-robot in #1763
• [release-1.25] fix: increase default provisioner retry-interval-max by @andyzhangx in #1774
• [release-1.25] chore: set GoMaxProcs as 2 by @k8s-infra-cherrypick-robot in #1782
• [release-1.25] chore: fix azcopy download error by @k8s-infra-cherrypick-robot in #1789
• doc: cut v1.25.1 release by @andyzhangx in #1785

Full Changelog: v1.25.0...v1.25.1

v1.24.6 release

What's Changed

• [release-1.24] chore: enable blobfuse-proxy by default in kubectl install by @k8s-infra-cherrypick-robot in #1632
• [release-1.24] feat: install blobfuse2 for arm64 by @k8s-infra-cherrypick-robot in #1636
• [release-1.24] fix: install blobfuse2 on arm64 node by blobfuse-proxy by @k8s-infra-cherrypick-robot in #1638
• [release-1.24] fix: add CriticalAddonsOnly toleration into controller pod by @andyzhangx in #1649
• [release-1.24] fix: skip blobfuse-proxy copy if it's not enabled in driver init by @k8s-infra-cherrypick-robot in #1654
• [release-1.24] fix: blobfuse install failure in install-blobfuse-proxy initContainer by @k8s-infra-cherrypick-robot in #1663
• [release-1.24] test: fix trivy action by @k8s-infra-cherrypick-robot in #1675
• [release-1.24] fix: don't install blobfuse v1 by default since it's deprecated by @andyzhangx in #1680
• [release-1.24] feat: upgrade to azcopy v10.27.0 for volume clone by @k8s-infra-cherrypick-robot in #1686
• [release-1.24] fix: tagValueDelimiter parameter mismatch by @k8s-infra-cherrypick-robot in #1693
• [release-1.24] feat: upgrade to azcopy v10.27.1 for volume clone by @k8s-infra-cherrypick-robot in #1698
• [release-1.24] fix: change mount timeout to 1.5min by @k8s-infra-cherrypick-robot in #1701
• [release-1.24] cleanup: remove unused livenessProbe in registrar by @andyzhangx in #1706
• [release-1.24] fix: avoid duplicate ssl mounts on Redhat in AzureStack environment by @andyzhangx in #1721
• [release-1.24] fix: increase blob memory limit to avoid OOM during volume clone by @andyzhangx in #1727
• [release-1.24] feat: install blobfuse 2.4.0 as default version by @andyzhangx in #1736
• [release-1.24] fix: CVE-2024-45337 by @andyzhangx in #1748
• [release-1.24] fix: runOnControlPlane chart config by @andyzhangx in #1759
• [release-1.24] fix: CVE-2024-45338 by @andyzhangx in #1767
• [release-1.24] fix: wait for azcopy job running in volume clone by @k8s-infra-cherrypick-robot in #1764
• [release-1.24] fix: increase default provisioner retry-interval-max by @andyzhangx in #1775
• [release-1.24] chore: fix azcopy download error by @k8s-infra-cherrypick-robot in #1790
• doc: cut v1.24.6 release by @andyzhangx in #1784

Full Changelog: v1.24.5...v1.24.6

v1.23.10 release

What's Changed

• [release-1.23] chore: enable blobfuse-proxy by default in kubectl install by @k8s-infra-cherrypick-robot in #1631
• [release-1.23] feat: install blobfuse2 for arm64 by @k8s-infra-cherrypick-robot in #1637
• [release-1.23] fix: install blobfuse2 on arm64 node by blobfuse-proxy by @k8s-infra-cherrypick-robot in #1639
• [release-1.23] fix: add CriticalAddonsOnly toleration into controller pod by @andyzhangx in #1650
• [release-1.23] fix: blobfuse install failure in install-blobfuse-proxy initContainer by @k8s-infra-cherrypick-robot in #1664
• [release-1.23] test: fix trivy action by @k8s-infra-cherrypick-robot in #1676
• [release-1.23] fix: don't install blobfuse v1 by default since it's deprecated by @andyzhangx in #1681
• [release-1.23] feat: upgrade to azcopy v10.27.0 for volume clone by @k8s-infra-cherrypick-robot in #1687
• [release-1.23] feat: upgrade to azcopy v10.27.1 for volume clone by @k8s-infra-cherrypick-robot in #1697
• [release-1.23] cleanup: remove unused livenessProbe in registrar by @andyzhangx in #1707
• [release-1.23] fix: avoid duplicate ssl mounts on Redhat in AzureStack environment by @andyzhangx in #1722
• [release-1.23] fix: increase blob memory limit to avoid OOM during volume clone by @andyzhangx in #1728
• [release-1.23] fix: CVE-2024-45337 by @andyzhangx in #1749
• [release-1.23] fix: CVE-2024-45338 by @andyzhangx in #1768
• [release-1.23] chore: fix azcopy download error by @k8s-infra-cherrypick-robot in #1791
• doc: cut v1.23.10 release by @andyzhangx in #1783

Full Changelog: v1.23.9...v1.23.10

v1.25.0 release

What's Changed

• doc: cut v1.24.0 release by @andyzhangx in #1255
• chore: Update csi-blob-driver.yaml by @cvvz in #1256
• fix: add tokenRequests on v1.23.3, v1.24.0 in kubectl install by @andyzhangx in #1258
• feat: allow multiple subnets in updating service endpoints by @andyzhangx in #1259
• chore: Update workload-identity-static-pv-mount.md by @cvvz in #1262
• feat: install blobfuse 2.2.1 as default version by @andyzhangx in #1263
• fix: ensure azure cloud config could be loaded from secret by @andyzhangx in #1264
• chore(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #1267
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.16.0 by @dependabot in #1268
• chore(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 by @dependabot in #1270
• chore(deps): bump github.com/golang/protobuf from 1.5.3 to 1.5.4 by @dependabot in #1271
• fix: nfs volume created in storage account that has blobfuse volume by @andyzhangx in #1272
• feat: provide nfsv3 protocol to enforce nfs mount by @andyzhangx in #1276
• test: ignore azcopy CVE-2024-24786 by @andyzhangx in #1279
• fix: fix azcopy exec timeout func by @umagnus in #1278
• feat: upgrade azcopy version to 10.23.0 for volume clone feature by @andyzhangx in #1286
• fix: nfs mount stuck issue by @andyzhangx in #1290
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.16.0 to 2.17.0 by @dependabot in #1294
• Add group update policy for k8s.io dependencies by @MartinForReal in #1291
• chore: only use sas token for azcopy when useDataPlaneAPI is used by @andyzhangx in #1289
• chore(deps): bump github.com/onsi/gomega from 1.31.1 to 1.32.0 by @dependabot in #1295
• cleanup: rename WaitUntilTimeout func by @andyzhangx in #1298
• chore: refine refine private endpoint to reduce error messages by @andyzhangx in #1300
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.0-20240312050048-978ce44d3559 to 0.0.2 by @dependabot in #1302
• chore: refine sastoken cache by @andyzhangx in #1303
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.0-20240319093822-58cad130d9dc to 0.0.1 by @dependabot in #1306
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.2 to 0.0.4 by @dependabot in #1307
• fix: strip service account token by @cvvz in #1309
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.17.0 to 2.17.1 by @dependabot in #1308
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.1 to 0.0.2 by @dependabot in #1313
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.4 to 0.0.5 by @dependabot in #1317
• fix: workload identity did not work by @cvvz in #1318
• chore(deps): bump build-image/debian-base from bookworm-v1.0.1 to bookworm-v1.0.2 in /pkg/blobplugin by @dependabot in #1321
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.2 to 0.0.3 by @dependabot in #1329
• feat: use new restricted liveness probe endpoint by @andyzhangx in #1326
• fix: enable http with track2 sdk by @andyzhangx in #1327
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.7 to 0.0.9 by @dependabot in #1331
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.9 to 0.0.10 by @dependabot in #1332
• feat: support setting kubelet path for blobfuse-proxy endpoint by @cvvz in #1325
• feat: upgrade to azcopy v10.24.0 for volume clone feature by @andyzhangx in #1334
• chore(deps): bump golang.org/x/net from 0.22.0 to 0.24.0 by @dependabot in #1339
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.10 to 0.0.12 by @dependabot in #1343
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.3 to 0.0.4 by @dependabot in #1344
• fix: allow http auth in volume clone by @andyzhangx in #1341
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.12 to 0.0.13 by @dependabot in #1349
• doc: add new version charts by @andyzhangx in #1350
• test: ignore azcopy CVE-2023-45288 by @andyzhangx in #1353
• chore: set node_get_volume_stats log level to 6 by @andyzhangx in #1352
• chore(deps): bump github.com/onsi/gomega from 1.32.0 to 1.33.0 by @dependabot in #1360
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.4 to 0.0.7 by @dependabot in #1361
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.13 to 0.0.14 by @dependabot in #1362
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.14 to 0.0.15 by @dependabot in #1363
• chore(deps): bump golangci/golangci-lint-action from 4 to 5 by @dependabot in #1365
• fix: CVE-2024-3177 by @andyzhangx in #1367
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2 by @dependabot in #1371
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.7 to 0.0.8 by @dependabot in #1372
• chore(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.0 by @dependabot in #1373
• fix: liveness probe failure when hostNetwork not enabled in controller by @andyzhangx in #1376
• chore(deps): bump github.com/onsi/gomega from 1.33.0 to 1.33.1 by @dependabot in #1374
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.8 to 0.0.9 by @dependabot in #1378
• chore(deps): bump google.golang.org/protobuf from 1.34.0 to 1.34.1 by @dependabot in #1379
• chore(deps): bump golangci/golangci-lint-action from 5 to 6 by @dependabot in #1380
• fix: support storeAccountKey as false in cross subscription scenario by @andyzhangx in #1381
• test: fix stdlib CVE due to golang v1.22.2 by @andyzhangx in #1385
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.17.3 by @dependabot in #1384
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.9 to 0.0.10 by @dependabot in #1389
• chore(deps): bump build-image/debian-base from bookworm-v1.0.2 to bookworm-v1.0.3 in /pkg/blobplugin by @dependabot in #1392
• chore(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 by @dependabot in #1391
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0....

v1.24.5 release

What's Changed

• [release-1.24] fix: nfs mount failure on arm64 node by @k8s-infra-cherrypick-robot in #1625
• doc: cut v1.24.5 release by @andyzhangx in #1627

Full Changelog: v1.24.4...v1.24.5

v1.23.9 release

What's Changed

• [release-1.23] fix: nfs mount failure on arm64 node by @k8s-infra-cherrypick-robot in #1624
• doc: cut v1.23.9 release by @andyzhangx in #1626

Full Changelog: v1.23.8...v1.23.9

v1.24.4 release

What's Changed

• [release-1.24] test: use workload identity for e2e test by @andyzhangx in #1558
• [release-1.24] fix: volume cloning sas token logged by @k8s-infra-cherrypick-robot in #1561
• [release-1.24] fix: add fallback to sas token on azcopy copy command by @k8s-infra-cherrypick-robot in #1567
• [release-1.24] fix: CVE-2024-38428 remove wget to close vuln, reduce image size by @k8s-infra-cherrypick-robot in #1572
• [release-1.24] cleanup: fix golint errors by @k8s-infra-cherrypick-robot in #1574
• [release-1.24] feat: install blobfuse 2.3.2 as default version by @andyzhangx in #1580
• [release-1.24] chore: upgrade to debian-base:bookworm-v1.0.4 base image by @k8s-infra-cherrypick-robot in #1577
• [release-1.24] chore: upgrade golang version by @k8s-infra-cherrypick-robot in #1584
• [release-1.24] fix: upgrade node-driver-registrar to fix register timeout issue by @andyzhangx in #1595
• [release-1.24] chore: upgrade sidecar image versions by @andyzhangx in #1604
• [release-1.24] fix: inherit os environment when calling blobfuse2 in blobfuse-proxy by @k8s-infra-cherrypick-robot in #1608
• doc: cut v1.24.4 release by @andyzhangx in #1612

Full Changelog: v1.24.3...v1.24.4

v1.23.8 release

What's Changed

• [release-1.23] test: use workload identity for e2e test by @andyzhangx in #1559
• [release-1.23] cleanup: refactor volume cloning by @umagnus in #1563
• [release-1.23] fix: add fallback to sas token on azcopy copy command by @andyzhangx in #1568
• [release-1.23] fix: CVE-2024-38428 remove wget to close vuln, reduce image size by @k8s-infra-cherrypick-robot in #1573
• [release-1.23] chore: upgrade to debian-base:bookworm-v1.0.4 base image by @k8s-infra-cherrypick-robot in #1578
• [release-1.23] feat: install blobfuse 2.3.2 as default version by @andyzhangx in #1581
• [release-1.23] chore: upgrade golang version by @andyzhangx in #1589
• [release-1.23] cleanup: fix golint error by @andyzhangx in #1593
• [release-1.23] fix: upgrade node-driver-registrar to fix register timeout issue by @andyzhangx in #1596
• [release-1.23] chore: upgrade sidecar image versions by @andyzhangx in #1605
• [release-1.23] cleanup: upgrade golint version and fix golint errors by @Zhupku in #1601
• [release-1.23] fix: inherit os environment when calling blobfuse2 in blobfuse-proxy by @k8s-infra-cherrypick-robot in #1609
• doc: cut v1.23.8 release by @andyzhangx in #1611

Full Changelog: v1.23.7...v1.23.8

v1.22.9 release

What's Changed

• [release-1.22] test: use workload identity for e2e test by @andyzhangx in #1560
• [release-1.22] chore: upgrade to debian-base:bookworm-v1.0.4 base image by @andyzhangx in #1579
• [release-1.22] chore: upgrade golang version by @k8s-infra-cherrypick-robot in #1585
• [release-1.22] cleanup: fix golint error by @andyzhangx in #1592
• [release-1.22] cleanup: upgrade golint version and fix golint errors by @Zhupku in #1600
• [release-1.22] fix: inherit os environment when calling blobfuse2 in blobfuse-proxy by @k8s-infra-cherrypick-robot in #1610
• doc: cut v1.22.9 release by @andyzhangx in #1613

Full Changelog: v1.22.8...v1.22.9

v1.24.3 release

What's Changed

• [release-1.24] feat: add metadata tag on the storage account created by the driver by @k8s-infra-cherrypick-robot in #1492
• [release-1.24] fix: CVE-2024-5321 by @andyzhangx in #1500
• [release-1.24] fix: blobfuse mount failure in Azure Linux v3 by @k8s-infra-cherrypick-robot in #1498
• [release-1.24] fix: clone volume content to requested volume by @k8s-infra-cherrypick-robot in #1509
• [release-1.24] fix: ignore specific blobfuse version install failure by @k8s-infra-cherrypick-robot in #1511
• [release-1.24] cleanup: refine copy volume logic by @k8s-infra-cherrypick-robot in #1513
• [release-1.24] fix: volume cloning between different storage account for BlobAccessTierNotSupportedForAccountType error by @k8s-infra-cherrypick-robot in #1519
• [release-1.24] feat: upgrade to azcopy v10.26.0 for volume clone and snapshot restore by @andyzhangx in #1525
• [release-1.24] fix: create private endpoint failure when vnetResourceGroup is specified by @andyzhangx in #1529
• [release-1.24] cleanup: refactor volume cloning by @k8s-infra-cherrypick-robot in #1532
• [release-1.24] fix: respect ReadOnly AccessMode in volume mount by @k8s-infra-cherrypick-robot in #1537
• [release-1.24] fix: only last subnet is set in account ACL created by driver by @k8s-infra-cherrypick-robot in #1535
• [release-1.24] fix: VirtualNetworkRule match issue during account search by @andyzhangx in #1542
• [release-1.24] fix: nfs mount failure when there are multiple subnets in the cluster by @k8s-infra-cherrypick-robot in #1540
• doc: cut v1.24.3 release by @andyzhangx in #1547

Full Changelog: v1.24.2...v1.24.3