v4.3.0 release

Features 🌈

• enable securityContext.seccompProfile (#437)
• support volume cloning (#426)
• support snapshot (#430)
• provide option to retain subdir on delete (#432)

Bug Fixes 🐞

• fix: use mkdir -p for creating subdir in mounted base-dir (#412)
• fix: CVE-2022-41723 (#415)
• fix: CVE-2022-3294 (#435)
• fix: set ClusterFirstWithHostNet as default dnsPolicy (#440)

What's Changed

• doc: cut v4.2.0 release by @andyzhangx in #401
• test: update release tools by @andyzhangx in #417
• Update debian-base image to v1.4.3 by @saschagrunert in #419
• test: fix golint error by @andyzhangx in #425
• feat: volume clone from source volume by @wozniakjan in #426
• feat: add readOnlyRootFilesystem if possible by @farodin91 in #422
• test: copy volume from volume unit tests by @wozniakjan in #433
• fix: CVE-2022-3294 by @andyzhangx in #435
• feat: provide option to retain subdir on delete by @woehrl01 in #432
• feat: implement snapshots as tarballs by @wozniakjan in #430
• feat: enable securityContext.seccompProfile, set system-cluster-critical by @andyzhangx in #437
• test(e2e): change the storageclass configuration method in the test file by @umagnus in #438
• fix: set ClusterFirstWithHostNet as default dnsPolicy by @andyzhangx in #440
• chore: upgrade csi sidecar container images by @andyzhangx in #441
• chore: add dependabot by @andyzhangx in #442
• chore(deps): bump github/codeql-action from 1 to 2 by @dependabot in #443
• chore(deps): bump sigs.k8s.io/yaml from 1.2.0 to 1.3.0 by @dependabot in #444
• chore(deps): bump actions/setup-go from 2 to 4 by @dependabot in #445
• chore(deps): bump golang.org/x/net from 0.7.0 to 0.9.0 by @dependabot in #446
• chore(deps): bump google.golang.org/protobuf from 1.27.1 to 1.30.0 by @dependabot in #447
• chore(deps): bump github.com/onsi/gomega from 1.10.1 to 1.27.6 by @dependabot in #448
• Use dl.k8s.io instead of hardcoded GCS URIs by @stmcginnis in #450
• chore: upgrade snapshot version and refine snapshot deployment by @andyzhangx in #451
• chore: upgrade csi-snapshot to v6.2.2 by @andyzhangx in #453

New Contributors

• @saschagrunert made their first contribution in #419
• @farodin91 made their first contribution in #422
• @woehrl01 made their first contribution in #432
• @dependabot made their first contribution in #443
• @stmcginnis made their first contribution in #450

Full Changelog: v4.2.0...v4.3.0

v4.2.0 release

Features 🌈

• disable inline volume by default in kubectl install (#370)
• parametrization of deployment strategy for csi controller (#375)

Bug Fixes 🐞

• fix: CVE-2022-29526 (#367)
• fix: CVE-2022-41717 (#392)
• fix: CVE-2022-41723 (#415)
• fix: default mountPermissions issue (#388)
• fix: chart lint errors in v4.0.0 and v4.1.0 (#405)
• fix: use mkdir -p for creating subdir in mounted base-dir (#412)

What's Changed

• chore: set master branch chart version to v0.0.0 by @andyzhangx in #360
• docs: add customLabels parameter to chart README by @ruben-rodriguez in #363
• Fix NOTES.txt selector to use a valid label by @xr09 in #365
• fix: CVE-2022-29526 by @andyzhangx in #367
• feat: disable inline volume by default in kubectl install by @andyzhangx in #370
• master: update release-tools by @pohly in #368
• chore: fix code spelling issue by @andyzhangx in #371
• doc: remove nconnect mount option by @andyzhangx in #373
• feat: parametrization of deployment strategy for csi controller by @mariouhrin in #375
• Fixes broken link by @amolmote in #377
• update release-tools to latest by @humblec in #378
• test: add helm repo install check by @umagnus in #379
• chore: upgrade base image as debian-base:bullseye-v1.4.2 by @andyzhangx in #383
• master: update release-tools by @jsafrane in #386
• fix: default mountPermissions issue by @andyzhangx in #388
• update sidecars to latest version by @humblec in #385
• chore: upgrade to csi-node-driver-registrar v2.6.2 by @andyzhangx in #391
• fix: CVE-2022-41717 by @andyzhangx in #392
• fix: helm lint by @oreissig in #393
• fix: use force unmount to fix unmount NFS volume stuck issue by @andyzhangx in #394
• fix: upgrade package dependencies by @fengshunli in #399
• doc: refine doc by @andyzhangx in #400
• fix: chart lint errors in v4.0.0 and v4.1.0 by @andyzhangx in #405
• fix: buildx issue with provenance disabled by @andyzhangx in #409
• fix: use mkdir -p for creating subdir in mounted base-dir by @alankan-finocomp in #412
• cleanup: remove golang.org/x/text version dependency by @andyzhangx in #413
• fix: CVE-2022-41723 by @andyzhangx in #415

New Contributors

• @ruben-rodriguez made their first contribution in #363
• @xr09 made their first contribution in #365
• @mariouhrin made their first contribution in #375
• @amolmote made their first contribution in #377
• @umagnus made their first contribution in #379
• @oreissig made their first contribution in #393
• @fengshunli made their first contribution in #399
• @alankan-finocomp made their first contribution in #412

Full Changelog: v4.1.0...v4.2.0

v4.1.0 release

Features 🌈

• skip chmod if mountPermissions is 0 after mount (#328)
• support IPv6 server address (#342)
• add affinity, nodeSelector, runOnControlPlane in chart config (#347)
• add subDir in storage class parameters (#349)
• support pv/pvc metadata in subDir parameter (#353)

Bug Fixes 🐞

• fix: add serviceAccount for driver daemonset running on the node (#335)
• fix: bypass chmod if mounting point permissions are correct (#340)
• fix: incorrect runOnMaster config (#345)

What's Changed

• test: run k8s 1.24 external e2e test by @andyzhangx in #333
• fix: add serviceAccount for driver daemonset running on the node by @andyzhangx in #335
• chore: remove hard mount option by @andyzhangx in #336
• fix: bypass chmod if mounting point permissions are correct by @andyzhangx in #340
• chore: refine bypass chmod code by @andyzhangx in #341
• feat: support IPv6 server address by @andyzhangx in #342
• chore: update node-driver-registrar,liveness to latest version by @humblec in #343
• fix: incorrect runOnMaster config by @andyzhangx in #345
• master: update release-tools by @pohly in #346
• feat: add affinity, nodeSelector, runOnControlPlane in chart config by @andyzhangx in #347
• feat: add subDir in storage class parameters by @andyzhangx in #349
• fix: add missing runOnControlPlane config in chart by @andyzhangx in #350
• feat: support pv/pvc metadata in subDir parameter by @andyzhangx in #353
• chore: upgrade sidecar image versions by @andyzhangx in #355

Full Changelog: v4.0.0...v4.1.0

v4.0.0 release

Features 🌈

• add kubeletDir in chart config (#279)
• add optional extra labels to k8s resources(#284)
• change dnsPolicy to Default and add dnsPolicy setting in chart (#291)
• add mountPermissions parameter in storage class (#292)

Bug Fixes 🐞

• fix: disallow block volume capability (#310)
• fix: CVE (#272, #294, #301, #302, #305, #316)
• fix: NodeUnpublishVolume should be idempotent (#319)
• fix: use mount.CleanupMountPoint in NodeUnpublishVolume for handling stale nfs connections during unmount (#320)

What's Changed

• feat: upgrade to csi-provisioner v3.1.0 by @andyzhangx in #271
• update base image version of plugin binary to fix CVEs by @humblec in #272
• cleanup: remove unnecessary CVE packages by @andyzhangx in #273
• doc: comment mount-options in example by @andyzhangx in #276
• chore: set replica of controller as 1 by default by @andyzhangx in #281
• feat: add kubeletDir in chart config by @neoaggelos in #279
• chore: upgrade to k8s v1.23.3 lib by @andyzhangx in #282
• Add optional extra labels to k8s resources by @JPRbrs in #284
• test: add codespell shellcheck github actions by @andyzhangx in #285
• master: update release-tools by @pohly in #286
• feat: add ppc64le arch support by @andyzhangx in #290
• feat: change dnsPolicy to Default and add dnsPolicy setting in chart by @andyzhangx in #291
• feat: add mountPermissions parameter in storage class by @andyzhangx in #292
• fix: CVE-2022-0778 in image build by @andyzhangx in #294
• doc: add nconnect mount option in nfs example by @andyzhangx in #295
• chore: fix pushing image pipeline broken by @andyzhangx in #297
• fix: post-csi-driver-nfs-push-images failure by @andyzhangx in #298
• fix: leader-election namespace issue by @andyzhangx in #299
• Address CVE-2022-21698 by @pierreprinetti in #301
• fix: CVE issues in image build by @andyzhangx in #302
• fix: CVE-2018-25032 in image build by @andyzhangx in #305
• doc: refine PV doc by @andyzhangx in #306
• test: fix golint error by @andyzhangx in #308
• master: update release-tools by @pohly in #307
• test: fix golinter error by @andyzhangx in #309
• fix: disallow block volume capability by @andyzhangx in #310
• chore: change MCR repo to gcr repo by @andyzhangx in #311
• chore: Update golang.org/x/crypto for CVE-2022-27191 by @andyzhangx in #313
• doc: align the endpoint with environment variable used below to avoid confusing by @CarlJi in #315
• fix: CVE-2022-1271 in image build by @andyzhangx in #316
• fix: NodeUnpublishVolume should be idempotent by @nixpanic in #319
• fix: use mount.CleanupMountPoint in NodeUnpublishVolume for handling stale nfs connections during unmount process by @andyzhangx in #320
• chore: replace k8s.gcr.io with registry.k8s.io by @andyzhangx in #318
• nfs: update livenessprobe and node driver registrar to latest by @humblec in #322
• chore: switch master branch to use v4.0.0 by @andyzhangx in #323
• feat: skip chmod if mountPermissions is 0 after mount by @andyzhangx in #328
• cleanup: refine mount logging by @andyzhangx in #329

New Contributors

• @humblec made their first contribution in #272
• @neoaggelos made their first contribution in #279
• @JPRbrs made their first contribution in #284
• @CarlJi made their first contribution in #315
• @nixpanic made their first contribution in #319

Full Changelog: v3.1.0...v4.0.0

v3.1.0 release

Features 🌈

• support mountOptions in DeleteVolume (#262)
• add workingMountDir in chart config(#263)
• change volume id format (#265)
• add inline volume support (#266)

Bug Fixes 🐞

• fix: driver version print in logging (#254)
• fix: CVE (#256, #258)

What's Changed

• fix: driver version print in logging by @andyzhangx in #254
• doc: fix links of docs by @ShirleyDing in #255
• fix: CVE-2021-43618 in Ubuntu image by @andyzhangx in #256
• fix: CVE-2021-38561 with golang lib by @andyzhangx in #258
• cleanup: remove cpu limits by @andyzhangx in #259
• chore: upgrade to k8s 1.23 lib by @andyzhangx in #261
• feat: support mountOptions in DeleteVolume by @andyzhangx in #262
• doc: update mountOptions for DeleteVolume doc by @andyzhangx in #264
• feat: add workingMountDir in chart config by @andyzhangx in #263
• feat: change volume id format by @andyzhangx in #265
• fix: ValidateVolumeCapabilities by @andyzhangx in #267
• feat: add inline volume support by @andyzhangx in #266
• master: update release-tools by @chrishenzie in #268

New Contributors

• @ShirleyDing made their first contribution in #255
• @chrishenzie made their first contribution in #268

Full Changelog: v3.0.0...v3.1.0

v3.0.0 release

What's Changed

• master: update release-tools by @pohly in #34
• master: update release-tools by @pohly in #35
• Allow to set custom permissions for the mounted folder by @Fedosin in #36
• master: update release-tools by @pohly in #37
• Remove hostnetwork from plugin by @msau42 in #40
• master: update release-tools by @pohly in #45
• test: add sanity test by @andyzhangx in #43
• doc: add issue template by @andyzhangx in #48
• fix: all sanity test failures by @andyzhangx in #49
• doc: add as approver by @andyzhangx in #50
• fix: deployment script/doc issues by @andyzhangx in #52
• Add example for NFS provisioner by @mayankshah1607 in #56
• fix: broken manifest for nfs-server.yaml by @mayankshah1607 in #58
• docs: Use itsthenetwork/nfs-server-alpine for NFS server provisioning by @mayankshah1607 in #59
• master: update release-tools by @pohly in #60
• Add manifest for installing driver controller and install docs by @mayankshah1607 in #57
• CI: Add GH Actions for sanity tests by @mayankshah1607 in #62
• CI: update GH Actions for sanity-test by @mayankshah1607 in #63
• Add symlink for cloudbuild.yaml and .cloudbuild.sh by @mayankshah1607 in #66
• Bump golang.org/x/text to 0.3.3 by @jsafrane in #46
• doc: update NFS provisioner example by @andyzhangx in #61
• feat: implement CreateVolume by @mayankshah1607 in #53
• CI: add GH Actions workflow for Darwin unit tests by @mayankshah1607 in #68
• master: update release-tools by @pohly in #73
• test: add ControllerGetCapabilities and `ValidateVolumeCapabilities in sanity test by @mayankshah1607 in #71
• Add Helm chart for CSI NFS driver by @mayankshah1607 in #74
• Update k8s.io/kubernetes to use v1.18.0 by @mayankshah1607 in #75
• test: Initialize E2E test for NFS Driver by @mayankshah1607 in #76
• fix: update livenessprobe version from v1.1.0 to v2.0.0 by @songjiaxun in #78
• test: Add E2E test case for DynamicallyProvisionedCmdVolumeTest by @mayankshah1607 in #77
• Add E2E test cases for dynamic provisioning by @mayankshah1607 in #79
• helm: Update charts, initialize repository and add docs by @mayankshah1607 in #80
• doc: add install instructions by @songjiaxun in #82
• CI: Add static checks in GH Actions by @mayankshah1607 in #89
• test: add make verify by @songjiaxun in #91
• test: add integration tests by @songjiaxun in #88
• doc: use quay images by @andyzhangx in #86
• test: add more test cases for e2e test by @songjiaxun in #92
• fix: internalUnmount failure and DeleteVolume failure by @songjiaxun in #95
• Include build.make in Makefile for cloud build by @mayankshah1607 in #98
• fix: make verify checks by @songjiaxun in #97
• chore: change port num for health check by @andyzhangx in #99
• fix: change the way to install CSC to fix integration test by @songjiaxun in #100
• doc: improve documentations following SMB driver repo by @songjiaxun in #104
• test: Add unit tests for identityserver and nodeserver by @mayankshah1607 in #101
• test: Add remaining unit tests by @mayankshah1607 in #106
• Update release tools by @xing-yang in #103
• Release tool update by @andyzhangx in #107
• fix: release-image.sh script by @andyzhangx in #108
• Update vendor to k8s 1.19 and csi-lib-utils to 0.9.0 by @msau42 in #110
• CI: enable golint by @mayankshah1607 in #109
• fix: limit node server to deploy only on Linux nodes by @songjiaxun in #117
• test: refine sanity test script by @andyzhangx in #118
• test: upgrade sanity-test to v4.0.2 by @andyzhangx in #119
• doc: format yaml files by @andyzhangx in #120
• fix: support mountOptions in CreateVolume by @andyzhangx in #122
• chore: upgrade k8s dependencies by @andyzhangx in #125
• feat: add NodeGetVolumeStats support by @andyzhangx in #126
• test: add unit test action on Ubuntu by @andyzhangx in #127
• test: enable GH actions on all branches by @andyzhangx in #129
• test: add windows unit test action by @andyzhangx in #130
• test: Add missing unit tests for controller server and utils by @dr0pdb in #124
• Update release tools by @sachinkumarsingh092 in #133
• Enable spelling and boilerplate checks in prow and local tests by @sachinkumarsingh092 in #134
• test: refactor verify example test by @andyzhangx in #136
• chore: use klog instead of glog by @andyzhangx in #137
• fix: reduce driver logs by @andyzhangx in #138
• chore: rename indentityserver.go to identityserver.go by @adamcooke in #139
• chore: update latest chart by @andyzhangx in #140
• master: update release-tools by @pohly in #141
• fix: add latest helm chart file by @andyzhangx in #144
• fix: update tgz chart file by @andyzhangx in #145
• fix: add runOnMaster switch for helm chart by @songjiaxun in #146
• cleanup: disable NodeStageVolume by @andyzhangx in #143
• master: update release-tools by @pohly in #147
• provide more driver info in logs by @boddumanohar in #149
• test: add verify-helm-chart-files.sh script by @andyzhangx in #151
• fix: makeDir error in CreateVolume by @andyzhangx in #156
• set 200Mi limit for csi-provisioner by @andyzhangx in #157
• feat: add locks for nodeserver publish/unpublish operations by @songjiaxun in #160
• doc: update supported k8s version by @songjiaxun in #161
• test: add helm chart index verification by @andyzhangx in #163
• fix: change base image to debian by @andyzhangx in #164
• Update release tools by @andyzhangx in #167
• feat: add ARCH in Dockerfile by @andyzhangx in #166
• fix: add hostNetwork in controller b...

v2.0.0

Overall status

Experimental

Supported CSI spec versions

1.0.0

Minimum Kubernetes version

1.14

Container

docker pull quay.io/k8scsi/csi-driver-nfs:v2.0.0

Full Changelog

https://github.com/kubernetes-csi/csi-driver-nfs/blob/v2.0.0/CHANGELOG/CHANGELOG-2.0.md