We are excited to announce another release of Ceph CSI, v3.17.0. This is another significant step towards using enhanced Container Storage Interface (CSI) features with Ceph Cluster in the backend. With this release, we are introducing many brand-new features and enhancements to the Ceph CSI driver. Here are the changelog/release highlights.

Changelog and Highlights:

NOTE

• The --setmetadata flag has been deprecated and has no effect. Metadata is now always set on RBD images and CephFS subvolumes. The flag will be removed in a future release (#6225).

Features

Kubernetes ServiceAccount Based Volume Access Restriction

This release introduces ServiceAccount based volume access restriction across all drivers (RBD, CephFS, NFS, NVMe-oF), enabling fine-grained access control for volumes based on Kubernetes ServiceAccount identity. Refer to the design proposal and #6076 for more details.

RBD

• VolumeAttributesClass QoS: Use VolumeAttributesClass feature to implement RBD volume QoS via ControllerModifyVolume, allowing dynamic QoS parameter changes without recreating volumes (this is only supported for nbd mounter) (#6160)
• StorageClass image features for temp clones and snapshots: Temp clones and snapshot backing images now use StorageClass image features (#6205)
• Fix missing data pool in PVC restore and clone images: Fixed data pool not being set correctly during PVC restore and clone operations (#6086)
• DiffIterateByID fix: Fixed Length calculation in DiffIterateByID (#6200)
• PV metadata updates: Update PV metadata on volumes (#6059)
• Enable WholeObject & IncludeParent in snap diff (#6279)
• GKLM KMS over KMIP: Added support for GKLM (Guardium Key Lifecycle Manager) KMS over KMIP protocol (#6048)

CephFS

• VolumeGroupReplication RBAC: Added RBAC for VolumeGroupReplication resources (#6233)
• CSI metadata on subvolumes: Added SetSubVolCSIMetadata to set CSI metadata on subvolumes (#6174)
• Improved unfencing: Use RemoveNetworkFence directly for unfencing (#6278)

NFS

• ControllerModifyVolume: Allow changing NFS-server hostname through ControllerModifyVolume (#5829)

NVMe-oF

• DH-CHAP authentication: Added DH-CHAP authentication support for NVMe-oF connections, enabling secure host authentication at both controller publish and node stage levels (#5913)
• Snapshot support: Relay CreateSnapshot/DeleteSnapshot to RBD backend for NVMe-oF volumes (#5928)
• Auto listeners: Added auto listener feature for NVMe-oF gateway listeners (#5891)
• Safe controller disconnect: Implemented safe controller disconnect logic with device tracking (#6163)
• Mount cache and locking: Added mount cache and GroupLock for safe NVMe disconnect during stage/unstage operations (#6192, #6210)
• Namespace masking: Added namespace masking calls for NVMe-oF (#6241)
• Optional gateway port: Made nvmeofGatewayPort an optional StorageClass parameter (#6230)
• IP address resolution: Support resolving IP address for NVMe-oF gateway listeners by hostname (#6061)
• GroupLock utility: Added GroupLock for two-group mutual exclusion (#6183)

Common

• VolumeID validation: Added validator for VolumeID in incoming gRPC requests (#5957)
• Allow underscores in volume ID: Volume IDs now support underscores (#6094)
• Slow gRPC restart: The CSI driver process is now automatically restarted if any unary gRPC call is stuck for more than 10 minutes. ReclaimSpace calls are excluded from this limit. Use --feature-gates=SlowGRPCRestart=false to disable (#6286)
• VolumeLocks for NodeGetVolumeStats: Added VolumeLocks to NodeGetVolumeStats for RBD and CephFS (#6291)

What's Changed

NVMe-oF

• Fix CSI node plugin crash on immutable Linux distributions (#6165)
• Fix NVMe-oF resource cleanup on CreateVolume failure (#5936)
• Fix removeHost bug (#6084)
• Fix dhchap key-value bug in rbd metadata (#6085)
• Add check return status at removeHost (#6124)
• Treat "connecting" state as valid in path detection (#5974)

RBD

• Revert "rbd: fetch the volumeIds from VGRContent's status for omap data" (#5962)
• Validate mounter type in ControllerModifyVolume (#6229)

Other

• Use go-ceph blocklist APIs (#6054)
• Use csi objectuuid for rados locks (#6204)
• Include stderr in cryptsetup errors (#6036)
• Disable informers on secrets (#5984)

Continuous Integration and Testing

• Start testing the devel branch with Kubernetes 1.35 (#5973)
• Use Rook 1.19.3 and Ceph Tentacle (#5672)
• Use minikube v1.38.0 and v1.38.1 (#5993, #6138)
• Enable NVMe-oF testing by default (#5641)
• Add volume expansion tests for NVMe-oF (#6058)
• Enable fail-fast to abort suite on first test failure (#6088)
• Convert By() to It() and use Ordered containers (#6136)
• Add markdown links validation action (#6092)
• Cache mon IPs, clusterID, and parallelize readiness checks (#6114)
• Add testing for EC pool (#6086)
• Update ceph-csi-operator API from v1alpha1 to v1 (#6218)
• Upgrade from v3.16.0 for upgrade tests (#5932)

Deployment

• Add deployment files for NVMe-oF (#5641)
• Update CSI sidecars to latest versions available (#6112)
• Use GA versions of sidecars everywhere (#6189)
• Add SecurityContextConstraints to NVMe-oF ServiceAccounts (#6249)
• Add RBAC for csi-provisioner to access VolumeAttributesClass (#6160)
• Allow NFS-provisioner to access VolumeAttributesClasses (#5829)

Helm Charts

• Fix domainLabels empty array handling in template (#5990)

Documentation

• Add design proposal for K8s SA based volume access restriction (#6076)
• Add NVMe-oF DH-CHAP feature doc design (#6063)
• Document current NVMe-oF features (#6065)
• Add documentation for GKLM KMS (#6048)
• Add examples for NVMe-oF and NVMe-oF snapshots (#5641)
• Update QoS design doc and VolumeAttributesClass documentation (#6264)
• Mention encryption is not supported for static PVC (#6212)
• Add AGENTS.md with guidance for AI agents (#6181)
• Fix broken links in docs (#6082)

Build and Cleanups

• Adapt to go-ceph 0.38.0 and 0.39.0 blocklist API changes (#6069, #6245)
• Add go-lint-fix Makefile target for golangci-lint autofix (#6208)
• Deprecate the --setmetadata flag from configuration (#6225)
• Refactor tryAcquire function to reduce complexity (#6115)
• Use SetWriteDeadline for writeTimeout (#6115)
• Fix encryptedMetedataDEK typo (#6115)

Updates of dependencies

• Bump k8s.io/kubernetes from 1.35.0 to 1.35.4 (#6068, #6152, #6195, #6242)
• Bump k8s.io/api from 0.35.0 to 0.36.0 (#6070, #6153, #6196, #6243)
• Bump github.com/ceph/go-ceph from 0.37.0 to 0.39.0 (#6069, #6245)
• Bump github.com/ceph/ceph-nvmeof/lib/go/nvmeof (#5947)
• Bump google.golang.org/grpc from 1.78.0 to 1.81.0 (#6071, #6172, #6188, #6223, #6262)
• Bump github.com/hashicorp/vault/api from 1.22.0 to 1.23.0 (#6197)
• Bump github.com/onsi/ginkgo/v2 (#6255)
• Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#6220)
• Bump sigs.k8s.io/controller-runtime from 0.22.4 to 0.23.1 (#5945, #5976)
• Bump github.com/csi-addons/kubernetes-csi-addons from 0.13.0 to 0.14.0 (#5946)
• Bump github.com/kubernetes-csi/csi-lib-utils (#6009)
• Bump golang.org/x/oauth2 (#6040, #6166)
• Bump golang.org/x/sync (#6173)
• Bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.43.0 (#6143, #6227)
• Bump actions/github-script from 8.0.0 to 9.0.0 (#6231)
• Bump actions/checkout from 6.0.1 to 6.0.2 (#5975)
• Bump actions/stale from 10.1.1 to 10.2.0 (#6118)
• Bump actions/dependency-review-action from 4.8.2 to 4.9.0 (#6117, #6168)
• Multiple other dependency updates in k8s-dependencies, github-dependencies, and golang-dependencies groups

New Contributors

• @FreekingDean made their first contribution in #6094
• @keshavsoni251199 made their first contribution in #5990
• @philipp-intelliroad made their first contribution in #6082
• @pschichtel made their first contribution in #5951
• @kaovilai made their first contribution in #6208

Full Changelog: v3.16.0...v3.17.0

What's Changed

• revert: prepare of v3.16.1 release by @iPraveenParihar in #6033
• util: use go-ceph blocklist APIs (backport #6054) by @mergify[bot] in #6056
• Allow underscore in volume ID (backport #6094) by @mergify[bot] in #6108
• nvmeof: Support resolving IP address for NVMe-oF gateway listeners (backport #6061) by @mergify[bot] in #6121
• nvmeof: add check return status at removeHost (backport #6124) by @mergify[bot] in #6128
• nvmeof: backport bugfixes and enhancements for the next v3.16 release by @nixpanic in #6161
• nvmeof: fix CSI node plugin crash on immutable Linux distributions (backport #6165) by @mergify[bot] in #6175
• doc: update templates for release-v3.16.2 by @black-dragon74 in #6176

Full Changelog: v3.16.1...v3.16.2

What's Changed

• util: disable informers on secrets (backport #5984) by @mergify[bot] in #5998
• Revert "rbd: fetch the volumeIds from VGRContent's status for omap data" (backport #5962) by @mergify[bot] in #5972
• util: validate VolumeID in incoming gRPC requests (backport #5957) by @black-dragon74 in #6022
• nvmeof: Add support for snapshots in the NVMe-oF driver (backport #5928) by @mergify[bot] in #5979
• ci: create the configmap if missing when running k8s-storage (backport #5968) by @mergify[bot] in #5980
• Release/update templates 3.16.1 by @iPraveenParihar in #6030

Full Changelog: v3.16.0...v3.16.1

We are excited to announce another release of Ceph CSI, v3.16.0. This is another significant step towards using enhanced Container Storage Interface (CSI) features with Ceph Cluster in the backend. With this release, we are introducing many brand-new features and enhancements to the Ceph CSI driver. Here are the changelog/release highlights.

Changelog and Highlights:

Features

NVMe-oF (NEW and Experimental)

The Deployment of NVMe-oF driver will be supported by Ceph-CSI-Operator soon.

This release introduces the NVMe-oF CSI driver, enabling Ceph storage to be accessed over the NVMe over Fabrics protocol. Refer to NVMe-oF.md and #5370 for more details.

RBD

• Block volume statistics support: Added ability to retrieve block volume usage statistics (#5799)
• Configurable block encryption cipher: Made the encryption cipher configurable for block volumes (#5711)
• Improved fencing logic: Modified fencing logic for RBD and CephFS volumes (#5828)

CephFS

• Improved fencing logic: Modified fencing logic for RBD and CephFS volumes (#5828)

Other

• Controller publish secret caching: Added caching for controller publish secrets to improve performance (#5497)
• User ID metadata storage: Store user ID in volume metadata (#5445)
• IPv6 support improvement: Support for compressed IPv6 addresses in ParseClientIP (#5547)

What's Changed

CephFS

• Skip reset quiesce during DeleteVolumeGroupSnapshot (#5583)
• Fix mounting of alternate filesystem when mounting by monitor list (#5643)

RBD

• Fix fencing for shallow volumes (#5503)
• Fix volume replication promote/demote failures (#5533)
• Volume demote after unpublish call (#5567)
• Remove forcePromote function (#5725)
• Prevent panic when expanding a statically provisioned volume (#5786)
• Fetch volumeIds from VGRContent's status for omap data (#5899)

Continuous Integration and Testing

• Prevent running multiple e2e suites at the same time (#5537)
• Let Mergify label NVMe-oF PRs (#5563)
• Use ceph-csi-bot for Mergify actions (#5584)
• Set update_bot_account in Mergify config (#5586)
• Use minikube v1.37.0 (#5598)
• Update CI rules for Kubernetes 1.34 (#5602)
• Auto-detect running on OpenShift (#5617)
• Add NVMe-oF gateway deployment (#5614)
• Use gci in golangci-lint (#5676)
• Update static tools in the repo (#5680)
• Prevent Mergify from triggering CI jobs twice (#5734)
• Deploy ceph-csi-operator in configurable Namespace (#5867)
• Fix pushing artifacts to quay.io (#5896)

Deployment

• Update CSI sidecars to latest versions available (#5421)
• Add list and watch permissions for secrets (#5809)

Helm Charts

• Inject POD_NAMESPACE for KMIP secret lookup (#5722)
• Add support for optionally injecting labels for VolumeSnapshotClass (#5843)
• Claim ownership of the ArtifactHub repository (#5906)
• Use repository-id instead of name for ArtifactHub (#5921, #5923)

Documentation

• Update docs & Mergify rules to prepare for v3.16 release (#5912)
• Fix link for CephFS helm doc (#5851)

Build and Cleanups

• Use Go 1.24.6 (#5781)
• Use github.com/avast/retry instead of kubernetes/wait (#5511)
• Add modprobe helper for loading kernel modules (#5564)
• Remove duplication code of k8s GetSecret (#5603)
• Introduce a Driver interface for Run() function (#5636)
• Move k8s API calls to internal/util/k8s (#5604)
• Retry controllerpublish secret fetch on missing clusterId (#5677)
• Add explicit nil check before errors.Is(err) check (#5692)
• Fix cache miss when secret watcher is not running (#5807)
• Download Golang distribution from go.dev (#5818)
• Switch to tentacle base image (#5856)

Updates of dependencies

• Bump k8s.io/kubernetes from 1.33.3 to 1.34.2 (#5520, #5590, #5762)
• Bump k8s.io/api from 0.33.3 to 0.35.0 (#5514, #5576, #5765, #5863, #5886)
• Bump github.com/ceph/go-ceph from 0.34.0 to 0.37.0 (#5516, #5689, #5885)
• Bump github.com/ceph/ceph-nvmeof/lib/go/nvmeof (#5727, #5890)
• Bump google.golang.org/grpc from 1.74.2 to 1.78.0 (#5545, #5593, #5665, #5797, #5892)
• Bump google.golang.org/protobuf from 1.36.7 to 1.36.11 (#5546, #5592, #5628, #5861)
• Bump github.com/container-storage-interface/spec from 1.11.0 to 1.12.0 (#5690)
• Bump sigs.k8s.io/controller-runtime from 0.22.1 to 0.22.4 (#5626, #5663, #5719)
• Bump github.com/onsi/ginkgo/v2 from 2.25.2 to 2.26.0 (#5571, #5629)
• Bump github.com/stretchr/testify from 1.10.0 to 1.11.0 (#5542)
• Bump github.com/opencontainers/selinux from 1.11.1 to 1.13.0 (#5738, #5739)
• Bump github.com/hashicorp/vault/api from 1.21.0 to 1.22.0 (#5627)
• Bump golang.org/x/net from 0.45.0 to 0.48.0 (#5687, #5858)
• Bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#5778, #5777)
• Bump golang.org/x/sys from 0.37.0 to 0.38.0 (#5744)
• Bump golang.org/x/oauth2 from 0.30.0 to 0.34.0 (#5575, #5661, #5743, #5834)
• Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.11.0 to 1.12.0 (#5600)
• Bump github.com/aws/aws-sdk-go-v2/service/sts from 1.38.4 to 1.41.5 (multiple updates)
• Bump docker/login-action from 3.4.0 to 3.5.0 (#5467)
• Bump actions/dependency-review-action from 4.7.1 to 4.8.2 (multiple updates)
  ...

What's Changed

• ci: upgrade from v3.14.2 for upgrade tests (backport #5509) by @mergify[bot] in #5522
• Bug/fencing shallow volume (backport #5503) by @mergify[bot] in #5550
• rbd: fix bug where volumereplication promote/demote would fail (backport #5533) by @mergify[bot] in #5552
• util, ParseClientIP: support compressed ipv6 addresses (backport #5547) by @mergify[bot] in #5562
• cephfs: skip reset quiesce during DeleteVolumeGroupSnapshot (backport #5583) by @mergify[bot] in #5594
• fix: retry controllerpublish secret fetch on missing clusterId (backport #5677) by @mergify[bot] in #5684
• util: add explicit nil check before errors.Is(err) check by @nixpanic in #5705
• cephfs: pass fsName when mounting from monitor list by @1602077 in #5753

Full Changelog: v3.15.0...v3.15.1

Ceph-CSI v3.15.0 release notes

We are excited to announce another release of Ceph CSI, v3.15.0. This is another significant step towards using enhanced Container Storage Interface (CSI) features with Ceph Cluster in the backend. With this release, we are introducing many brand-new features and enhancements to the Ceph CSI driver. Here are the changelog/release highlights.

Note: From Ceph CSI v3.16.0 onwards, Ceph CSI Operator will be the only supported mode of deployment for kubernetes. Migration steps will be documented for users.

Changelog and Highlights:

Features

RBD

• rbd: support read/write mix qos limit option for rbdVol by @YiteGu in #5480
• rbd: adjust qos parameters start with small case by @YiteGu in #5488
• rbd: support set qos max limit for rbdVol by @YiteGu in #5501

Common

• --setmetadata flag has been set to true by default.
• helm: Support VolumeSnapshotClass and VolumeGroupSnapshotClass by @hswong3i in #5240

What's Changed

RBD

• rbd: cleanup and improve read-only volume handling by @nixpanic in #5290
• rbd: prevent restarting mirror resync when the mirror is syncing already by @nixpanic in #5279
• rbd: improve logging for rpc calls by @Nikhil-Ladha in #5315
• rbd: skip comparing volumes in a group if new group is created by @Nikhil-Ladha in #5345
• rbd: update VolumeGroupContext by @iPraveenParihar in #5376
• rbd: add steps to enable librbd logs by @Nikhil-Ladha in #5403
• rbd: add additional logging details for stream server by @Rakshith-R in #5411
• rbd: add check before calling Destroy by @Madhu-1 in #5446
• rbd: fix expand rbd qos volume invaild by @YiteGu in #5479
• rbd: consider lastSyncTimeNotFound as image not syncing by @Rakshith-R in #5498
• rbd: return replication status and status message in case of error by @Nikhil-Ladha in #5500

NFS

• nfs: return success if export already exists by @Madhu-1 in #5372

Continuous Integration and Testing

• e2e: test for PVC with volumeBindingMode on helm installation by @ShravaniVangur in #5243
• ci: install awk in Fedora test container-image by @nixpanic in #5281
• ci: add ok-to-test label after Mergify rephrase by @nixpanic in #5289
• ci: update pull request commenter for 1.33 by @Madhu-1 in #5381
• ci: dont upload the snyk report to the github by @Madhu-1 in #5416
• ci: cancel in-progress workflow when PR is updated by @Madhu-1 in #5447
• ci: FiX E2E failures for new ceph version 19.2.2 by @Madhu-1 in #5460

Deployment

• helm: mark userID and userKey required in secret by @black-dragon74 in #5288
• helm: use CSIDriver.seLinuxMount parameter in templates by @alelindq in #5303
• deploy: add -automaxprocs to reduce CPU and memory resources by @nixpanic in #5292
• helm: use unique names for container ports by @sebhoss in #5413

Documentation

• doc: Update cephfs caps by @flx5 in #5294
• doc: fix format in helm chart by @Madhu-1 in #5360
• doc: add v3 symlink to get current versions in pkg.go.dev by @nixpanic in #5364
• doc: update Readme for v3.14.1 by @Madhu-1 in #5377
• doc: add design for NVMe-oF access to RBD-images by @nixpanic in #5397
• doc: design doc for non-graceful node shutdown by @iPraveenParihar in #5409
• doc: clarifiy NVMe-oF design a little more by @nixpanic in #5422
• doc: changes for 3.14.2 release by @Madhu-1 in #5434
• doc: design doc for userID mapping metadata by @Rakshith-R in #5425
• doc: update docs & mergifyio rules to prepare for v3.15 release by @Rakshith-R in #5506

Other

• util: fix bug in health checker by @Rakshith-R in #5272
• Run cryptsetup with "-d -" instead of "-d /dev/stdin" by @bartlaarhoven in #5307
• enable setmetadata flag by default by @yati1998 in #5333
• util: pass Servers by reference to Start() by @Rakshith-R in #5351
• csi: validate incoming VolumeGroupSnapshot requests by @nixpanic in #5353
• util: pass Servers by reference to serve() by @Rakshith-R in #5354
• csiaddons: add Status, StatusMessage in GetVolumeReplicationInfo resp by @Nikhil-Ladha in #5369
• flattenClonedRbdImages may require namespace by @odoucet in #5392
• util: explicitly set the Luks2 header size by @iPraveenParihar in #5394
• omap-generator: Fix memory problem in the csi controller cache by @Madhu-1 in #5443
• fix: Tracevol now correctly parses hexadecimal pool id by @jggc in #5451

Build and Cleanups

• build: use Go 1.24.2 by @nixpanic in #5481
• build: prepare for v3.15.0 by @Rakshith-R in #5508

Updates of dependencies

• rebase: bump the golang-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #5255
• rebase: bump golang.org/x/net from 0.38.0 to 0.39.0 in the golang-dependencies group by @dependabot[bot] in #5274
• rebase: bump the github-dependencies group with 3 updates by @dependabot[bot] in #5275
• rebase: bump golang.org/x/net from 0.36.0 to 0.38.0 in /api by @dependabot[bot] in #5277
• rebase: bump golang.org/x/net from 0.37.0 to 0.38.0 in /e2e by @dependabot[bot] in #5278
• rebase: bump google.golang.org/grpc from 1.71.1 to 1.72.0 by @dependabot[bot] in #5286
• rebase: bump github.com/ceph/go-ceph from 0.32.1-0.20250307053135-38b9676b1d4e to 0.33.0 by @dependabot[bot] in #5285
• rebase: bump github.com/aws/aws-sdk-go from 1.55.6 to 1.55.7 in the github-dependencies group by @dependabot[bot] in #5297
• rebase: bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 in /actions/retest by @dependabot[bot] in #5305
• rebase: bump k8s.io/kubernetes from 1.32.3 to 1.33.0 in the k8s-dependencies group by @dependabot[bot] in #5296
• rebase: bump the golang-dependencies group with 3 updates by @dependabot[bot] in #5304
• rebase: bump k8s.io/api from 0.32.3 to 0.33.0 in /api in the k8s-dependencies group by @dependabot[bot] in #5295
• rebase: bump the k8s-dependencies group in /e2e with 3 updates by @dependabot[bot] in #5298
• rebase: bump actions/dependency-review-action from 4.6.0 to 4.7.0 by @dependabot[bot] in #5313
• rebase: bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.9.0 to 1.10.0 in the github-dependencies group by @dependabot[bot] in #5320
• rebase: bump k8s.io/kubernetes from 1.33.0 to 1.33.1 in the k8s-dependencies group by @dependabot[bot] in #5319
• rebase: bump actions/dependency-review-action from 4.7.0 to 4.7.1 by @dependabot[bot] in #5318
• rebase: bump google.golang.org/grpc from 1.72.0 to 1.72.1 by @dependabot[bot] in #5321
• rebase: bump the k8s-dependencies group in /e2e with 4 updates by @dependabot[bot] in #5322
• rebase: bump sigs.k8s.io/controller-runtime from 0.20.4 to 0.21.0 in the k8s-dependencies group by @dependabot[bot] in #5335
• rebase: bump github.com/kubernetes-csi/csi-lib-utils from 0.21.0 to 0.22.0 in the github-dependencies group by @dependabot[bot] in #5336
• rebase: bump google.golang.org/grpc from 1.72.1 to 1.72.2 by @dependabot[bot] in #5337
• rebase: bump k8s.io/api from 0.33.0 to 0.33.1 in /api in the k8s-dependencies group by @dependabot[bot] in #5317
• rebase: bump the github-dependencies group with 3 updates by @dependabot[bot] in #5356
• rebase: bump the golang-dependencies group with 2 updates by @dependabot[bot] in https://...

What's Changed

• revert: prepare for v3.14.1 by @Madhu-1 in #5384
• flattenClonedRbdImages may require namespace (backport #5392) by @mergify[bot] in #5396
• Run cryptsetup with "-d -" instead of "-d /dev/stdin" (backport #5307) by @mergify[bot] in #5407
• doc: changes for 3.14.2 release (backport #5434) by @mergify[bot] in #5435
• Template changes for 3.14.2 release by @Madhu-1 in #5436

Full Changelog: v3.14.1...v3.14.2

What's Changed

• revert: revert to 3.14-canary by @Rakshith-R in #5269
• util: fix bug in health checker (backport #5272) by @mergify in #5273
• ci: install awk in Fedora test container-image (backport #5281) by @mergify in #5284
• rbd: skip comparing volumes in a group if new group is created (backport #5345) by @mergify in #5350
• nfs: return success if export already exists (backport #5372) by @mergify in #5373
• doc: update Readme for v3.14.1 (backport #5377) by @mergify in #5378
• doc: add v3 symlink to get current versions in pkg.go.dev (backport #5364) by @mergify in #5379
• build: prepare for v3.14.1 by @Madhu-1 in #5382

Full Changelog: v3.14.0...v3.14.1

v3.14.0 release notes

We are excited to announce another release of Ceph CSI, v3.14.0. This is another significant step towards using enhanced Container Storage Interface (CSI) features with Ceph Cluster in the backend. With this release, we are introducing many brand-new features and enhancements to the Ceph CSI driver. Here are the changelog/release highlights.

Changelog and Highlights:

Features

RBD

• rbd: Use assume_storage_prezeroed when formatting by @black-dragon74 in #4996
• rbd: support QoS based on capacity for rbd volume for nbd-rbd client by @YiteGu in #5016

CephFS

• cephfs: upgrading mount syntax by @MageekChiu in #5090

Other

• util: enhance tracevol.py script to work with volumesnapshots by @black-dragon74 in #5049

What's Changed

CephFS

• cephfs: use userid and keys for provisioning by @black-dragon74 in #4988

RBD

• rbd: flatten group snapshot by @Rakshith-R in #4973
• rbd: return group not found error for Get,Delete RPC calls by @Nikhil-Ladha in #5001
• rbd: add snap delete function by @iPraveenParihar in #5000
• rbd: rename groupNamePrefix to volumeGroupNamePrefix by @iPraveenParihar in #5063
• rbd: add check to getVolumeReplicationInfo by @yati1998 in #5078
• rbd: add context in reported errors by GetVolumeReplicationInfo by @nixpanic in #5079
• rbd: correct default encryption type by @iPraveenParihar in #5087
• rbd: use correct radosNamespace by @iPraveenParihar in #5099
• rbd: VolumeGroupReplicationContent controller to regenerate the OMAP data by @iPraveenParihar in #4750
• rbd: log formatting and go-ceph deprecation in constructImageOptions by @nixpanic in #5116
• rbd: get volumegroup in secondary cluster by @iPraveenParihar in #5118
• rbd: fix bug in rbdVol.Exists() in PVC-PVC clone case by @Rakshith-R in #5159
• rbd: Update return error message when delete volume failed by @ecosysbin in #5138
• rbd: add validation to ToCSI() for rbdVolume and rbdSnapshot by @nixpanic in #5151
• rbd: return gRPC code Aborted when the RBD-image is in-use on delete by @nixpanic in #5168
• rbd: fix encrypted PVC with metadata KMS cannot be deleted by @zerotens in #5149
• rbd: set logger for the controller-runtime by @iPraveenParihar in #5174
• rbd: use ListChildrenAttributes() instead of ListChildren() by @Rakshith-R in #5206
• rbd: add one depth for softlimit of snapshot for restore PVC by @Rakshith-R in #5217
• rbd: retain temp snap by @iPraveenParihar in #5191
• rbd: check for volume group existence by @iPraveenParihar in #5184
• rbd: use pre-existing volume group if content matches by @nixpanic in #5221
• rbd: cleanup volume info from group if the image is not part of group anymore by @Nikhil-Ladha in #5250
• rbd: Register FenceController only once by @monoamin in #5248
• rbd: do not start the healer for NBD on non-Kubernetes platforms by @nixpanic in #5247

Continuous Integration and Testing

• e2e: ceph-csi-operator deployment support by @iPraveenParihar in #4947
• e2e: Skip() inside a test case causes other cases to be skipped by @nixpanic in #5253
• ci: update mergify rules for K8s v1.32 by @iPraveenParihar in #5050
• ci: update minikube to v1.35.0 by @nixpanic in #5083
• ci: update rule for ci/skip/e2e by @ShravaniVangur in #5208
• ci: update CSI_UPGRADE_VERSION to v3.13.1 by @Rakshith-R in #5213
• ci: check for modified files after go mod checks by @Rakshith-R in #5223
• ci: cleanup golangci configuration by @nixpanic in #5231
• ci: fix codespell and lint issues by @Nikhil-Ladha in #5242

Deployment

• helm: Add missing RBAC for nodes to cephfs chart by @Lirt in #5126

Documentation

• doc: guide for static PVC creation by @MondayCha in #4997
• doc: Add hint that the userID must not include the client. prefix by @Mtze in #5072
• doc: update doc for disaster recovery by @yati1998 in #4905
• doc: Removes Helm 2 related documentation by @ShravaniVangur in #5111
• doc: update docs & mergifyio rules to prepare for v3.14 release by @Rakshith-R in #5266

Other

• util: return correct status code for VolumeGroupSnapshot by @Nikhil-Ladha in #5024
• util: do not use mount-utils.IsLikelyNotMountPoint anymore by @nixpanic in #5203

Build and Cleanups

• build: refactor dockerfile to simplify selinux config directory creation by @guoard in #4991
• build: include --nobest while upgrading the devel container packages by @nixpanic in #5008
• build: update Go 1.23 by @iPraveenParihar in #5036
• build: reinstall the ceph-release package by @nixpanic in #5137
• build: update rook version to v1.16.4 by @iPraveenParihar in #5181
• build: the Fedora container image is now maintained at quay.io by @nixpanic in #5190
• build: move e2e dependencies into e2e/go.mod by @nixpanic in #5188
• build: prepare for v3.14.0 by @Rakshith-R in #5268

Updates of dependencies

• rebase: bump github.com/aws/aws-sdk-go-v2/service/sts from 1.33.1 to 1.33.2 in the github-dependencies group by @dependabot in #4993
• rebase: bump sigs.k8s.io/controller-runtime from 0.19.2 to 0.19.3 in the k8s-dependencies group by @dependabot in #4992
• rebase: bump google.golang.org/grpc from 1.68.0 to 1.68.1 by @dependabot in #5005
• rebase: bump github/codeql-action from 3.27.5 to 3.27.6 by @dependabot in #5006
• rebase: bump golang.org/x/crypto from 0.29.0 to 0.31.0 by @dependabot in #5014
• rebase: bump golang.org/x/net from 0.31.0 to 0.32.0 in the golang-dependencies group across 1 directory by @dependabot in #5022
• rebase: bump github/codeql-action from 3.27.6 to 3.27.9 by @dependabot in #5026
• rebase: bump github.com/onsi/gomega from 1.36.0 to 1.36.1 in the github-dependencies group by @dependabot in #5027
• rebase: bump google.golang.org/grpc from 1.68.1 to 1.69.0 by @dependabot in #5028
• rebase: bump google.golang.org/protobuf from 1.35.2 to 1.36.0 by @dependabot in #5029
• rebase: bump github.com/ceph/go-ceph from 0.30.1-0.20241102143109-75d1af3ed638 to 0.31.0 by @dependabot in #5044
• rebase: bump google.golang.org/grpc from 1.69.0 to 1.69.2 by @dependabot in #5045
• rebase: bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 in /actions/retest by @dependabot in #5052
• rebase: bump google.golang.org/protobuf from 1.36.0 to 1.36.2 by @dependabot in #5059
• rebase: bump the golang-dependencies group across 1 directory with 3 updates by @dependabot in #5053
• rebase: bump sigs.k8s.io/controller-runtime from 0.19.3 to 0.19.4 in the k8s-dependencies group by @dependabot in #5070
• rebase: bump github/codeql-action from 3.27.9 to 3.28.1 by @dependabot in #5076
• rebase: bump google.golang.org/grpc from 1.69.2 to 1.69.4 by @dependabot in #5075
• rebase: update csi-resizer to v1.13.1 by @nixpanic in #5071
• rebase: update Kubernetes CSI sidecars to current versions by @nixpanic in #5088
• rebase: bump golang.org/x/net from 0.26.0 to 0.33.0 in /api by @dependabot in #5091
• rebase: bump google.golang.org/protobuf from 1.36.2 to 1.36.3 by @dependabot in #5095
• rebase: bump k8s.io/api from 0.31.3 to 0.32.1 in /api in the k8s-dependencies group across 1 directory by @dependabot ...

v3.13.1 release notes

This minor release includes one of the important deployment change for VolumeGroupSnapshot. External snapshotter has changed the flag to enable volumegroupsnapshot from enable-volume-group-snapshots to feature-gates=CSIVolumeGroupSnapshot=true. Now users can use v3.13.1 with snapshot controller version v8.2.0 .

What's Changed

RBD

• RBD: add snap delete function (backport #5000) by @mergify in #5031
• RBD: Flatten group snapshot (backport #4973) by @mergify in #5032
• rbd: return group not found error for Get,Delete RPC calls (backport #5001) by @mergify in #5037
• rbd: rename groupNamePrefix to volumeGroupNamePrefix (backport #5063) by @mergify in #5065
• rbd: add check to getVolumeReplicationInfo (backport #5078) by @mergify in #5080
• rbd: correct default encryption type (backport #5087) by @mergify in #5089
• rbd: use correct radosNamespace (backport #5099) by @mergify in #5100
• rbd: fix bug in rbdVol.Exists() in PVC-PVC clone case (backport #5159) by @mergify in #5161
• rbd: add validation to ToCSI() for rbdVolume and rbdSnapshot (backport #5151) by @mergify in #5167
• rbd: fix encrypted PVC with metadata KMS cannot be deleted (backport #5149) by @mergify in #5176

Deployment

• helm: Add missing RBAC for nodes to cephfs chart (backport #5126) by @mergify in #5128
• update VolumeGroupSnapshot to v1beta1 (backport #5021) by @mergify in #5030

Continuous Integration and Testing

• ci: update version to 3.13-canary by @Madhu-1 in #5011

Build and Cleanups

• build: reinstall the ceph-release package (backport #5137) by @mergify in #5142
• build: the Fedora container image is now maintained at quay.io (backport #5190) by @mergify in #5192
• build: prepare of 3.13.1 by @yati1998 in #5189

Updates of dependencies

• rebase: bump golang.org/x/crypto from 0.29.0 to 0.31.0 (backport #5014) by @mergify in #5018

Other

• util: return correct status code for VolumeGroupSnapshot (backport #5024) by @mergify in #5039

Full Changelog: v3.13.0...v3.13.1