v1.25.0 release

What's Changed

• doc: cut v1.24.0 release by @andyzhangx in #1255
• chore: Update csi-blob-driver.yaml by @cvvz in #1256
• fix: add tokenRequests on v1.23.3, v1.24.0 in kubectl install by @andyzhangx in #1258
• feat: allow multiple subnets in updating service endpoints by @andyzhangx in #1259
• chore: Update workload-identity-static-pv-mount.md by @cvvz in #1262
• feat: install blobfuse 2.2.1 as default version by @andyzhangx in #1263
• fix: ensure azure cloud config could be loaded from secret by @andyzhangx in #1264
• chore(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #1267
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.16.0 by @dependabot in #1268
• chore(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 by @dependabot in #1270
• chore(deps): bump github.com/golang/protobuf from 1.5.3 to 1.5.4 by @dependabot in #1271
• fix: nfs volume created in storage account that has blobfuse volume by @andyzhangx in #1272
• feat: provide nfsv3 protocol to enforce nfs mount by @andyzhangx in #1276
• test: ignore azcopy CVE-2024-24786 by @andyzhangx in #1279
• fix: fix azcopy exec timeout func by @umagnus in #1278
• feat: upgrade azcopy version to 10.23.0 for volume clone feature by @andyzhangx in #1286
• fix: nfs mount stuck issue by @andyzhangx in #1290
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.16.0 to 2.17.0 by @dependabot in #1294
• Add group update policy for k8s.io dependencies by @MartinForReal in #1291
• chore: only use sas token for azcopy when useDataPlaneAPI is used by @andyzhangx in #1289
• chore(deps): bump github.com/onsi/gomega from 1.31.1 to 1.32.0 by @dependabot in #1295
• cleanup: rename WaitUntilTimeout func by @andyzhangx in #1298
• chore: refine refine private endpoint to reduce error messages by @andyzhangx in #1300
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.0-20240312050048-978ce44d3559 to 0.0.2 by @dependabot in #1302
• chore: refine sastoken cache by @andyzhangx in #1303
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.0-20240319093822-58cad130d9dc to 0.0.1 by @dependabot in #1306
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.2 to 0.0.4 by @dependabot in #1307
• fix: strip service account token by @cvvz in #1309
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.17.0 to 2.17.1 by @dependabot in #1308
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.1 to 0.0.2 by @dependabot in #1313
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.4 to 0.0.5 by @dependabot in #1317
• fix: workload identity did not work by @cvvz in #1318
• chore(deps): bump build-image/debian-base from bookworm-v1.0.1 to bookworm-v1.0.2 in /pkg/blobplugin by @dependabot in #1321
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.2 to 0.0.3 by @dependabot in #1329
• feat: use new restricted liveness probe endpoint by @andyzhangx in #1326
• fix: enable http with track2 sdk by @andyzhangx in #1327
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.7 to 0.0.9 by @dependabot in #1331
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.9 to 0.0.10 by @dependabot in #1332
• feat: support setting kubelet path for blobfuse-proxy endpoint by @cvvz in #1325
• feat: upgrade to azcopy v10.24.0 for volume clone feature by @andyzhangx in #1334
• chore(deps): bump golang.org/x/net from 0.22.0 to 0.24.0 by @dependabot in #1339
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.10 to 0.0.12 by @dependabot in #1343
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.3 to 0.0.4 by @dependabot in #1344
• fix: allow http auth in volume clone by @andyzhangx in #1341
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.12 to 0.0.13 by @dependabot in #1349
• doc: add new version charts by @andyzhangx in #1350
• test: ignore azcopy CVE-2023-45288 by @andyzhangx in #1353
• chore: set node_get_volume_stats log level to 6 by @andyzhangx in #1352
• chore(deps): bump github.com/onsi/gomega from 1.32.0 to 1.33.0 by @dependabot in #1360
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.4 to 0.0.7 by @dependabot in #1361
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.13 to 0.0.14 by @dependabot in #1362
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.14 to 0.0.15 by @dependabot in #1363
• chore(deps): bump golangci/golangci-lint-action from 4 to 5 by @dependabot in #1365
• fix: CVE-2024-3177 by @andyzhangx in #1367
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2 by @dependabot in #1371
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.7 to 0.0.8 by @dependabot in #1372
• chore(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.0 by @dependabot in #1373
• fix: liveness probe failure when hostNetwork not enabled in controller by @andyzhangx in #1376
• chore(deps): bump github.com/onsi/gomega from 1.33.0 to 1.33.1 by @dependabot in #1374
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.8 to 0.0.9 by @dependabot in #1378
• chore(deps): bump google.golang.org/protobuf from 1.34.0 to 1.34.1 by @dependabot in #1379
• chore(deps): bump golangci/golangci-lint-action from 5 to 6 by @dependabot in #1380
• fix: support storeAccountKey as false in cross subscription scenario by @andyzhangx in #1381
• test: fix stdlib CVE due to golang v1.22.2 by @andyzhangx in #1385
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.17.3 by @dependabot in #1384
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.9 to 0.0.10 by @dependabot in #1389
• chore(deps): bump build-image/debian-base from bookworm-v1.0.2 to bookworm-v1.0.3 in /pkg/blobplugin by @dependabot in #1392
• chore(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 by @dependabot in #1391
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0....

v1.24.5 release

What's Changed

• [release-1.24] fix: nfs mount failure on arm64 node by @k8s-infra-cherrypick-robot in #1625
• doc: cut v1.24.5 release by @andyzhangx in #1627

Full Changelog: v1.24.4...v1.24.5

v1.23.9 release

What's Changed

• [release-1.23] fix: nfs mount failure on arm64 node by @k8s-infra-cherrypick-robot in #1624
• doc: cut v1.23.9 release by @andyzhangx in #1626

Full Changelog: v1.23.8...v1.23.9

v1.24.4 release

What's Changed

• [release-1.24] test: use workload identity for e2e test by @andyzhangx in #1558
• [release-1.24] fix: volume cloning sas token logged by @k8s-infra-cherrypick-robot in #1561
• [release-1.24] fix: add fallback to sas token on azcopy copy command by @k8s-infra-cherrypick-robot in #1567
• [release-1.24] fix: CVE-2024-38428 remove wget to close vuln, reduce image size by @k8s-infra-cherrypick-robot in #1572
• [release-1.24] cleanup: fix golint errors by @k8s-infra-cherrypick-robot in #1574
• [release-1.24] feat: install blobfuse 2.3.2 as default version by @andyzhangx in #1580
• [release-1.24] chore: upgrade to debian-base:bookworm-v1.0.4 base image by @k8s-infra-cherrypick-robot in #1577
• [release-1.24] chore: upgrade golang version by @k8s-infra-cherrypick-robot in #1584
• [release-1.24] fix: upgrade node-driver-registrar to fix register timeout issue by @andyzhangx in #1595
• [release-1.24] chore: upgrade sidecar image versions by @andyzhangx in #1604
• [release-1.24] fix: inherit os environment when calling blobfuse2 in blobfuse-proxy by @k8s-infra-cherrypick-robot in #1608
• doc: cut v1.24.4 release by @andyzhangx in #1612

Full Changelog: v1.24.3...v1.24.4

v1.23.8 release

What's Changed

• [release-1.23] test: use workload identity for e2e test by @andyzhangx in #1559
• [release-1.23] cleanup: refactor volume cloning by @umagnus in #1563
• [release-1.23] fix: add fallback to sas token on azcopy copy command by @andyzhangx in #1568
• [release-1.23] fix: CVE-2024-38428 remove wget to close vuln, reduce image size by @k8s-infra-cherrypick-robot in #1573
• [release-1.23] chore: upgrade to debian-base:bookworm-v1.0.4 base image by @k8s-infra-cherrypick-robot in #1578
• [release-1.23] feat: install blobfuse 2.3.2 as default version by @andyzhangx in #1581
• [release-1.23] chore: upgrade golang version by @andyzhangx in #1589
• [release-1.23] cleanup: fix golint error by @andyzhangx in #1593
• [release-1.23] fix: upgrade node-driver-registrar to fix register timeout issue by @andyzhangx in #1596
• [release-1.23] chore: upgrade sidecar image versions by @andyzhangx in #1605
• [release-1.23] cleanup: upgrade golint version and fix golint errors by @Zhupku in #1601
• [release-1.23] fix: inherit os environment when calling blobfuse2 in blobfuse-proxy by @k8s-infra-cherrypick-robot in #1609
• doc: cut v1.23.8 release by @andyzhangx in #1611

Full Changelog: v1.23.7...v1.23.8

v1.22.9 release

What's Changed

• [release-1.22] test: use workload identity for e2e test by @andyzhangx in #1560
• [release-1.22] chore: upgrade to debian-base:bookworm-v1.0.4 base image by @andyzhangx in #1579
• [release-1.22] chore: upgrade golang version by @k8s-infra-cherrypick-robot in #1585
• [release-1.22] cleanup: fix golint error by @andyzhangx in #1592
• [release-1.22] cleanup: upgrade golint version and fix golint errors by @Zhupku in #1600
• [release-1.22] fix: inherit os environment when calling blobfuse2 in blobfuse-proxy by @k8s-infra-cherrypick-robot in #1610
• doc: cut v1.22.9 release by @andyzhangx in #1613

Full Changelog: v1.22.8...v1.22.9

v1.24.3 release

What's Changed

• [release-1.24] feat: add metadata tag on the storage account created by the driver by @k8s-infra-cherrypick-robot in #1492
• [release-1.24] fix: CVE-2024-5321 by @andyzhangx in #1500
• [release-1.24] fix: blobfuse mount failure in Azure Linux v3 by @k8s-infra-cherrypick-robot in #1498
• [release-1.24] fix: clone volume content to requested volume by @k8s-infra-cherrypick-robot in #1509
• [release-1.24] fix: ignore specific blobfuse version install failure by @k8s-infra-cherrypick-robot in #1511
• [release-1.24] cleanup: refine copy volume logic by @k8s-infra-cherrypick-robot in #1513
• [release-1.24] fix: volume cloning between different storage account for BlobAccessTierNotSupportedForAccountType error by @k8s-infra-cherrypick-robot in #1519
• [release-1.24] feat: upgrade to azcopy v10.26.0 for volume clone and snapshot restore by @andyzhangx in #1525
• [release-1.24] fix: create private endpoint failure when vnetResourceGroup is specified by @andyzhangx in #1529
• [release-1.24] cleanup: refactor volume cloning by @k8s-infra-cherrypick-robot in #1532
• [release-1.24] fix: respect ReadOnly AccessMode in volume mount by @k8s-infra-cherrypick-robot in #1537
• [release-1.24] fix: only last subnet is set in account ACL created by driver by @k8s-infra-cherrypick-robot in #1535
• [release-1.24] fix: VirtualNetworkRule match issue during account search by @andyzhangx in #1542
• [release-1.24] fix: nfs mount failure when there are multiple subnets in the cluster by @k8s-infra-cherrypick-robot in #1540
• doc: cut v1.24.3 release by @andyzhangx in #1547

Full Changelog: v1.24.2...v1.24.3

v1.23.7 release

What's Changed

• [release-1.23] fix: add azcopy-dir since volume cloning supported from v1.23.2 by @umagnus in #1455
• [release-1.23] test: fix trivy action failure by @k8s-infra-cherrypick-robot in #1459
• [release-1.23] fix: GHSA-xr7q-jx4m-x55m by @andyzhangx in #1467
• [release-1.23] cleanup: refine logs by @andyzhangx in #1475
• [release-1.23] cleanup: refine log by @andyzhangx in #1480
• [release-1.23] cleanup: refine logs by @k8s-infra-cherrypick-robot in #1478
• [release-1.23] feat: add allowSharedKeyAccess parameter by @umagnus in #1482
• [release-1.23] fix: CVE-2024-5321 by @andyzhangx in #1501
• [release-1.23] fix: blobfuse mount failure in Azure Linux v3 by @k8s-infra-cherrypick-robot in #1499
• [release-1.23] fix: ignore specific blobfuse version install failure by @k8s-infra-cherrypick-robot in #1512
• [release-1.23] feat: upgrade to azcopy v10.26.0 for volume clone and snapshot restore by @andyzhangx in #1526
• [release-1.23] fix: clone volume content to requested volume by @umagnus in #1520
• [release-1.23] fix: only last subnet is set in account ACL created by driver by @k8s-infra-cherrypick-robot in #1536
• doc: cut v1.23.7 release by @andyzhangx in #1546

Full Changelog: v1.23.6...v1.23.7

v1.22.8 release

What's Changed

• [release-1.22] test: fix trivy action failure by @k8s-infra-cherrypick-robot in #1460
• [release-1.22] fix: GHSA-xr7q-jx4m-x55m by @andyzhangx in #1469
• [release-1.22] cleanup: refine logs by @k8s-infra-cherrypick-robot in #1479
• [release-1.22] fix: CVE-2024-5321 by @andyzhangx in #1502
• doc: cut v1.22.8 release by @andyzhangx in #1527

Full Changelog: v1.22.7...v1.22.8

v1.24.2 release

What's Changed

• [release-1.24] fix: CVE-2023-45288 by @andyzhangx in #1354
• [release-1.24] test: ignore azcopy CVE-2023-45288 by @k8s-infra-cherrypick-robot in #1357
• [release-1.24] chore: set node_get_volume_stats log level to 6 by @andyzhangx in #1359
• [release-1.24] fix: CVE-2024-3177 by @andyzhangx in #1368
• [release-1.24] fix: liveness probe failure when hostNetwork not enabled in controller by @andyzhangx in #1377
• [release-1.24] test: fix stdlib CVE due to golang v1.22.2 by @k8s-infra-cherrypick-robot in #1386
• [release-1.24] fix: support storeAccountKey as false in cross subscription scenario by @k8s-infra-cherrypick-robot in #1383
• [release-1.24] chore(deps): bump build-image/debian-base from bookworm-v1.0.2 to bookworm-v1.0.3 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1393
• [release-1.24] chore: upgrade CSI driver sidecar image versions by @andyzhangx in #1400
• [release-1.24] feat: upgrade to azcopy v10.25.0 for volume clone feature by @k8s-infra-cherrypick-robot in #1411
• [release-1.24] feat: install blobfuse 2.3.0 as default version by @andyzhangx in #1417
• [release-1.24] fix: CVE-2024-35255 by @andyzhangx in #1421
• [release-1.24] feat: upgrade to azcopy v10.25.1 for volume clone feature by @k8s-infra-cherrypick-robot in #1430
• [release-1.24] feat: upgrade to aznfs 2.0.7 version for nfs mount by @k8s-infra-cherrypick-robot in #1436
• [release-1.24] fix shield guard on csi controller and node by @umagnus in #1442
• [release-1.24] fix: force copy blobfuse2 binary to avoid Text file busy error by @k8s-infra-cherrypick-robot in #1444
• [release-1.24] fix: override aznfs AZURE_ENDPOINT_OVERRIDE by @k8s-infra-cherrypick-robot in #1445
• [release-1.24] chore: upgrade CSI driver sidecar image versions by @andyzhangx in #1450
• [release-1.24] test: fix trivy action failure by @k8s-infra-cherrypick-robot in #1468
• [release-1.24] feat: add tag value delimiter by @k8s-infra-cherrypick-robot in #1463
• [release-1.24] fix: GHSA-xr7q-jx4m-x55m by @andyzhangx in #1466
• [release-1.24] fix: managed identity token refresh issue by @andyzhangx in #1472
• [release-1.24] cleanup: refine logs by @k8s-infra-cherrypick-robot in #1474
• [release-1.24] cleanup: refine logs by @k8s-infra-cherrypick-robot in #1477
• [release-1.24] feat: add allowSharedKeyAccess parameter by @k8s-infra-cherrypick-robot in #1481
• doc: cut v1.24.2 release by @andyzhangx in #1486

Full Changelog: v1.24.1...v1.24.2