v1.24.4 release

What's Changed

• [release-1.24] test: use workload identity for e2e test by @andyzhangx in #1558
• [release-1.24] fix: volume cloning sas token logged by @k8s-infra-cherrypick-robot in #1561
• [release-1.24] fix: add fallback to sas token on azcopy copy command by @k8s-infra-cherrypick-robot in #1567
• [release-1.24] fix: CVE-2024-38428 remove wget to close vuln, reduce image size by @k8s-infra-cherrypick-robot in #1572
• [release-1.24] cleanup: fix golint errors by @k8s-infra-cherrypick-robot in #1574
• [release-1.24] feat: install blobfuse 2.3.2 as default version by @andyzhangx in #1580
• [release-1.24] chore: upgrade to debian-base:bookworm-v1.0.4 base image by @k8s-infra-cherrypick-robot in #1577
• [release-1.24] chore: upgrade golang version by @k8s-infra-cherrypick-robot in #1584
• [release-1.24] fix: upgrade node-driver-registrar to fix register timeout issue by @andyzhangx in #1595
• [release-1.24] chore: upgrade sidecar image versions by @andyzhangx in #1604
• [release-1.24] fix: inherit os environment when calling blobfuse2 in blobfuse-proxy by @k8s-infra-cherrypick-robot in #1608
• doc: cut v1.24.4 release by @andyzhangx in #1612

Full Changelog: v1.24.3...v1.24.4

v1.23.8 release

What's Changed

• [release-1.23] test: use workload identity for e2e test by @andyzhangx in #1559
• [release-1.23] cleanup: refactor volume cloning by @umagnus in #1563
• [release-1.23] fix: add fallback to sas token on azcopy copy command by @andyzhangx in #1568
• [release-1.23] fix: CVE-2024-38428 remove wget to close vuln, reduce image size by @k8s-infra-cherrypick-robot in #1573
• [release-1.23] chore: upgrade to debian-base:bookworm-v1.0.4 base image by @k8s-infra-cherrypick-robot in #1578
• [release-1.23] feat: install blobfuse 2.3.2 as default version by @andyzhangx in #1581
• [release-1.23] chore: upgrade golang version by @andyzhangx in #1589
• [release-1.23] cleanup: fix golint error by @andyzhangx in #1593
• [release-1.23] fix: upgrade node-driver-registrar to fix register timeout issue by @andyzhangx in #1596
• [release-1.23] chore: upgrade sidecar image versions by @andyzhangx in #1605
• [release-1.23] cleanup: upgrade golint version and fix golint errors by @Zhupku in #1601
• [release-1.23] fix: inherit os environment when calling blobfuse2 in blobfuse-proxy by @k8s-infra-cherrypick-robot in #1609
• doc: cut v1.23.8 release by @andyzhangx in #1611

Full Changelog: v1.23.7...v1.23.8

v1.22.9 release

What's Changed

• [release-1.22] test: use workload identity for e2e test by @andyzhangx in #1560
• [release-1.22] chore: upgrade to debian-base:bookworm-v1.0.4 base image by @andyzhangx in #1579
• [release-1.22] chore: upgrade golang version by @k8s-infra-cherrypick-robot in #1585
• [release-1.22] cleanup: fix golint error by @andyzhangx in #1592
• [release-1.22] cleanup: upgrade golint version and fix golint errors by @Zhupku in #1600
• [release-1.22] fix: inherit os environment when calling blobfuse2 in blobfuse-proxy by @k8s-infra-cherrypick-robot in #1610
• doc: cut v1.22.9 release by @andyzhangx in #1613

Full Changelog: v1.22.8...v1.22.9

v1.24.3 release

What's Changed

• [release-1.24] feat: add metadata tag on the storage account created by the driver by @k8s-infra-cherrypick-robot in #1492
• [release-1.24] fix: CVE-2024-5321 by @andyzhangx in #1500
• [release-1.24] fix: blobfuse mount failure in Azure Linux v3 by @k8s-infra-cherrypick-robot in #1498
• [release-1.24] fix: clone volume content to requested volume by @k8s-infra-cherrypick-robot in #1509
• [release-1.24] fix: ignore specific blobfuse version install failure by @k8s-infra-cherrypick-robot in #1511
• [release-1.24] cleanup: refine copy volume logic by @k8s-infra-cherrypick-robot in #1513
• [release-1.24] fix: volume cloning between different storage account for BlobAccessTierNotSupportedForAccountType error by @k8s-infra-cherrypick-robot in #1519
• [release-1.24] feat: upgrade to azcopy v10.26.0 for volume clone and snapshot restore by @andyzhangx in #1525
• [release-1.24] fix: create private endpoint failure when vnetResourceGroup is specified by @andyzhangx in #1529
• [release-1.24] cleanup: refactor volume cloning by @k8s-infra-cherrypick-robot in #1532
• [release-1.24] fix: respect ReadOnly AccessMode in volume mount by @k8s-infra-cherrypick-robot in #1537
• [release-1.24] fix: only last subnet is set in account ACL created by driver by @k8s-infra-cherrypick-robot in #1535
• [release-1.24] fix: VirtualNetworkRule match issue during account search by @andyzhangx in #1542
• [release-1.24] fix: nfs mount failure when there are multiple subnets in the cluster by @k8s-infra-cherrypick-robot in #1540
• doc: cut v1.24.3 release by @andyzhangx in #1547

Full Changelog: v1.24.2...v1.24.3

v1.23.7 release

What's Changed

• [release-1.23] fix: add azcopy-dir since volume cloning supported from v1.23.2 by @umagnus in #1455
• [release-1.23] test: fix trivy action failure by @k8s-infra-cherrypick-robot in #1459
• [release-1.23] fix: GHSA-xr7q-jx4m-x55m by @andyzhangx in #1467
• [release-1.23] cleanup: refine logs by @andyzhangx in #1475
• [release-1.23] cleanup: refine log by @andyzhangx in #1480
• [release-1.23] cleanup: refine logs by @k8s-infra-cherrypick-robot in #1478
• [release-1.23] feat: add allowSharedKeyAccess parameter by @umagnus in #1482
• [release-1.23] fix: CVE-2024-5321 by @andyzhangx in #1501
• [release-1.23] fix: blobfuse mount failure in Azure Linux v3 by @k8s-infra-cherrypick-robot in #1499
• [release-1.23] fix: ignore specific blobfuse version install failure by @k8s-infra-cherrypick-robot in #1512
• [release-1.23] feat: upgrade to azcopy v10.26.0 for volume clone and snapshot restore by @andyzhangx in #1526
• [release-1.23] fix: clone volume content to requested volume by @umagnus in #1520
• [release-1.23] fix: only last subnet is set in account ACL created by driver by @k8s-infra-cherrypick-robot in #1536
• doc: cut v1.23.7 release by @andyzhangx in #1546

Full Changelog: v1.23.6...v1.23.7

v1.22.8 release

What's Changed

• [release-1.22] test: fix trivy action failure by @k8s-infra-cherrypick-robot in #1460
• [release-1.22] fix: GHSA-xr7q-jx4m-x55m by @andyzhangx in #1469
• [release-1.22] cleanup: refine logs by @k8s-infra-cherrypick-robot in #1479
• [release-1.22] fix: CVE-2024-5321 by @andyzhangx in #1502
• doc: cut v1.22.8 release by @andyzhangx in #1527

Full Changelog: v1.22.7...v1.22.8

v1.24.2 release

What's Changed

• [release-1.24] fix: CVE-2023-45288 by @andyzhangx in #1354
• [release-1.24] test: ignore azcopy CVE-2023-45288 by @k8s-infra-cherrypick-robot in #1357
• [release-1.24] chore: set node_get_volume_stats log level to 6 by @andyzhangx in #1359
• [release-1.24] fix: CVE-2024-3177 by @andyzhangx in #1368
• [release-1.24] fix: liveness probe failure when hostNetwork not enabled in controller by @andyzhangx in #1377
• [release-1.24] test: fix stdlib CVE due to golang v1.22.2 by @k8s-infra-cherrypick-robot in #1386
• [release-1.24] fix: support storeAccountKey as false in cross subscription scenario by @k8s-infra-cherrypick-robot in #1383
• [release-1.24] chore(deps): bump build-image/debian-base from bookworm-v1.0.2 to bookworm-v1.0.3 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1393
• [release-1.24] chore: upgrade CSI driver sidecar image versions by @andyzhangx in #1400
• [release-1.24] feat: upgrade to azcopy v10.25.0 for volume clone feature by @k8s-infra-cherrypick-robot in #1411
• [release-1.24] feat: install blobfuse 2.3.0 as default version by @andyzhangx in #1417
• [release-1.24] fix: CVE-2024-35255 by @andyzhangx in #1421
• [release-1.24] feat: upgrade to azcopy v10.25.1 for volume clone feature by @k8s-infra-cherrypick-robot in #1430
• [release-1.24] feat: upgrade to aznfs 2.0.7 version for nfs mount by @k8s-infra-cherrypick-robot in #1436
• [release-1.24] fix shield guard on csi controller and node by @umagnus in #1442
• [release-1.24] fix: force copy blobfuse2 binary to avoid Text file busy error by @k8s-infra-cherrypick-robot in #1444
• [release-1.24] fix: override aznfs AZURE_ENDPOINT_OVERRIDE by @k8s-infra-cherrypick-robot in #1445
• [release-1.24] chore: upgrade CSI driver sidecar image versions by @andyzhangx in #1450
• [release-1.24] test: fix trivy action failure by @k8s-infra-cherrypick-robot in #1468
• [release-1.24] feat: add tag value delimiter by @k8s-infra-cherrypick-robot in #1463
• [release-1.24] fix: GHSA-xr7q-jx4m-x55m by @andyzhangx in #1466
• [release-1.24] fix: managed identity token refresh issue by @andyzhangx in #1472
• [release-1.24] cleanup: refine logs by @k8s-infra-cherrypick-robot in #1474
• [release-1.24] cleanup: refine logs by @k8s-infra-cherrypick-robot in #1477
• [release-1.24] feat: add allowSharedKeyAccess parameter by @k8s-infra-cherrypick-robot in #1481
• doc: cut v1.24.2 release by @andyzhangx in #1486

Full Changelog: v1.24.1...v1.24.2

v1.23.6 release

What's Changed

• [release-1.23] feat: upgrade to azcopy v10.25.1 for volume clone feature by @k8s-infra-cherrypick-robot in #1431
• [release-1.23] feat: upgrade to aznfs 2.0.7 version for nfs mount by @k8s-infra-cherrypick-robot in #1437
• [release-1.23] fix shield guard on csi controller and node by @umagnus in #1441
• [release-1.23] fix: override aznfs AZURE_ENDPOINT_OVERRIDE by @k8s-infra-cherrypick-robot in #1446
• [release-1.23] fix: force copy blobfuse2 binary to avoid Text file busy error by @cvvz in #1448
• [release-1.23] chore: upgrade CSI driver sidecar image versions by @andyzhangx in #1451
• doc: cut v1.23.6 release by @andyzhangx in #1453

Full Changelog: v1.23.5...v1.23.6

v1.22.7 release

What's Changed

• [release-1.22] fix: CVE-2023-45288 by @andyzhangx in #1356
• [release-1.22] fix: CVE-2024-3177 by @andyzhangx in #1370
• [release-1.22] test: fix stdlib CVE due to golang v1.22.2 by @k8s-infra-cherrypick-robot in #1388
• [release-1.22] chore(deps): bump build-image/debian-base from bookworm-v1.0.2 to bookworm-v1.0.3 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1395
• [release-1.22] test: fix trivy and codespell error by @andyzhangx in #1414
• [release-1.22] test: adopt track2 sdk in e2e test suites by @umagnus in #1426
• [release-1.22] fix: CVE-2024-35255 by @andyzhangx in #1423
• cleanup: remove .trivyignore file by @andyzhangx in #1432
• [release-1.22] feat: upgrade to aznfs 2.0.7 version for nfs mount by @k8s-infra-cherrypick-robot in #1438
• [release-1.22] fix shield guard on csi controller and node by @umagnus in #1440
• [release-1.22] fix: override aznfs AZURE_ENDPOINT_OVERRIDE by @k8s-infra-cherrypick-robot in #1447
• doc: cut v1.22.7 release by @andyzhangx in #1452

Full Changelog: v1.22.6...v1.22.7

v1.23.5 release

What's Changed

• [release-1.23] fix: CVE-2024-24786 by @andyzhangx in #1314
• [release-1.23] fix: workload identity did not work by @cvvz in #1320
• [release-1.23] chore(deps): bump build-image/debian-base from bookworm-v1.0.1 to bookworm-v1.0.2 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1323
• [release-1.23] feat: use new restricted liveness probe endpoint by @andyzhangx in #1338
• [release-1.23] feat: upgrade to azcopy v10.24.0 for volume clone feature by @k8s-infra-cherrypick-robot in #1336
• [release-1.23] fix: CVE-2023-45288 by @andyzhangx in #1355
• [release-1.23] test: ignore azcopy CVE-2023-45288 by @k8s-infra-cherrypick-robot in #1358
• [release-1.23] fix: enable http with track2 sdk by @andyzhangx in #1366
• [release-1.23] fix: CVE-2024-3177 by @andyzhangx in #1369
• [release-1.23] fix: support storeAccountKey as false in cross subscription scenario by @k8s-infra-cherrypick-robot in #1382
• [release-1.23] test: fix stdlib CVE due to golang v1.22.2 by @k8s-infra-cherrypick-robot in #1387
• [release-1.23] chore(deps): bump build-image/debian-base from bookworm-v1.0.2 to bookworm-v1.0.3 in /pkg/blobplugin by @k8s-infra-cherrypick-robot in #1394
• [release-1.23] feat: upgrade to azcopy v10.25.0 for volume clone feature by @k8s-infra-cherrypick-robot in #1412
• [release-1.23] fix: create private endpoint failure by @andyzhangx in #1408
• [release-1.23] feat: install blobfuse 2.3.0 as default version by @andyzhangx in #1416
• [release-1.23] fix: CVE-2024-35255 by @andyzhangx in #1422
• doc: cut v1.23.5 release by @andyzhangx in #1415

Full Changelog: v1.23.4...v1.23.5