v1.25.0 release

What's Changed

• doc: cut v1.24.0 release by @andyzhangx in #1255
• chore: Update csi-blob-driver.yaml by @cvvz in #1256
• fix: add tokenRequests on v1.23.3, v1.24.0 in kubectl install by @andyzhangx in #1258
• feat: allow multiple subnets in updating service endpoints by @andyzhangx in #1259
• chore: Update workload-identity-static-pv-mount.md by @cvvz in #1262
• feat: install blobfuse 2.2.1 as default version by @andyzhangx in #1263
• fix: ensure azure cloud config could be loaded from secret by @andyzhangx in #1264
• chore(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #1267
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.16.0 by @dependabot in #1268
• chore(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 by @dependabot in #1270
• chore(deps): bump github.com/golang/protobuf from 1.5.3 to 1.5.4 by @dependabot in #1271
• fix: nfs volume created in storage account that has blobfuse volume by @andyzhangx in #1272
• feat: provide nfsv3 protocol to enforce nfs mount by @andyzhangx in #1276
• test: ignore azcopy CVE-2024-24786 by @andyzhangx in #1279
• fix: fix azcopy exec timeout func by @umagnus in #1278
• feat: upgrade azcopy version to 10.23.0 for volume clone feature by @andyzhangx in #1286
• fix: nfs mount stuck issue by @andyzhangx in #1290
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.16.0 to 2.17.0 by @dependabot in #1294
• Add group update policy for k8s.io dependencies by @MartinForReal in #1291
• chore: only use sas token for azcopy when useDataPlaneAPI is used by @andyzhangx in #1289
• chore(deps): bump github.com/onsi/gomega from 1.31.1 to 1.32.0 by @dependabot in #1295
• cleanup: rename WaitUntilTimeout func by @andyzhangx in #1298
• chore: refine refine private endpoint to reduce error messages by @andyzhangx in #1300
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.0-20240312050048-978ce44d3559 to 0.0.2 by @dependabot in #1302
• chore: refine sastoken cache by @andyzhangx in #1303
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.0-20240319093822-58cad130d9dc to 0.0.1 by @dependabot in #1306
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.2 to 0.0.4 by @dependabot in #1307
• fix: strip service account token by @cvvz in #1309
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.17.0 to 2.17.1 by @dependabot in #1308
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.1 to 0.0.2 by @dependabot in #1313
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.4 to 0.0.5 by @dependabot in #1317
• fix: workload identity did not work by @cvvz in #1318
• chore(deps): bump build-image/debian-base from bookworm-v1.0.1 to bookworm-v1.0.2 in /pkg/blobplugin by @dependabot in #1321
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.2 to 0.0.3 by @dependabot in #1329
• feat: use new restricted liveness probe endpoint by @andyzhangx in #1326
• fix: enable http with track2 sdk by @andyzhangx in #1327
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.7 to 0.0.9 by @dependabot in #1331
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.9 to 0.0.10 by @dependabot in #1332
• feat: support setting kubelet path for blobfuse-proxy endpoint by @cvvz in #1325
• feat: upgrade to azcopy v10.24.0 for volume clone feature by @andyzhangx in #1334
• chore(deps): bump golang.org/x/net from 0.22.0 to 0.24.0 by @dependabot in #1339
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.10 to 0.0.12 by @dependabot in #1343
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.3 to 0.0.4 by @dependabot in #1344
• fix: allow http auth in volume clone by @andyzhangx in #1341
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.12 to 0.0.13 by @dependabot in #1349
• doc: add new version charts by @andyzhangx in #1350
• test: ignore azcopy CVE-2023-45288 by @andyzhangx in #1353
• chore: set node_get_volume_stats log level to 6 by @andyzhangx in #1352
• chore(deps): bump github.com/onsi/gomega from 1.32.0 to 1.33.0 by @dependabot in #1360
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.4 to 0.0.7 by @dependabot in #1361
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.13 to 0.0.14 by @dependabot in #1362
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.14 to 0.0.15 by @dependabot in #1363
• chore(deps): bump golangci/golangci-lint-action from 4 to 5 by @dependabot in #1365
• fix: CVE-2024-3177 by @andyzhangx in #1367
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2 by @dependabot in #1371
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.7 to 0.0.8 by @dependabot in #1372
• chore(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.0 by @dependabot in #1373
• fix: liveness probe failure when hostNetwork not enabled in controller by @andyzhangx in #1376
• chore(deps): bump github.com/onsi/gomega from 1.33.0 to 1.33.1 by @dependabot in #1374
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.8 to 0.0.9 by @dependabot in #1378
• chore(deps): bump google.golang.org/protobuf from 1.34.0 to 1.34.1 by @dependabot in #1379
• chore(deps): bump golangci/golangci-lint-action from 5 to 6 by @dependabot in #1380
• fix: support storeAccountKey as false in cross subscription scenario by @andyzhangx in #1381
• test: fix stdlib CVE due to golang v1.22.2 by @andyzhangx in #1385
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.17.3 by @dependabot in #1384
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.9 to 0.0.10 by @dependabot in #1389
• chore(deps): bump build-image/debian-base from bookworm-v1.0.2 to bookworm-v1.0.3 in /pkg/blobplugin by @dependabot in #1392
• chore(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 by @dependabot in #1391
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.15 to 0.0.19 by @dependabot in #1396
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.10 to 0.0.11 by @dependabot in #1397
• chore: upgrade to CSI spec v1.9.0 by @andyzhangx in #1398
• chore: upgrade CSI driver sidecar image versions by @andyzhangx in #1399
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.19 to 0.0.21 by @dependabot in #1401
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader from 0.0.11 to 0.0.12 by @dependabot in #1402
• feat: install blobfuse 2.3.0 as default version by @andyzhangx in #1403
• feat: upgrade to azcopy v10.25.0 for volume clone feature by @andyzhangx in #1409
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.21 to 0.0.24 by @dependabot in #1410
• chore(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 by @dependabot in #1413
• chore(deps): bump github.com/Azure/go-autorest/autorest/adal from 0.9.23 to 0.9.24 by @dependabot in #1418
• fix: CVE-2024-35255 by @andyzhangx in #1420
• fix: shield guard issues by @umagnus in #1424
• chore: use go 1.22 in go.mod by @andyzhangx in #1428
• feat: upgrade to azcopy v10.25.1 for volume clone feature by @andyzhangx in #1429
• fix: shield guard issues in latest 2 versions by @umagnus in #1433
• fix: shield guard issues on node by @umagnus in #1434
• feat: upgrade to aznfs 2.0.7 version for nfs mount by @andyzhangx in #1435
• chore: fix workload identity docs by @cvvz in #1443
• fix: force copy blobfuse2 binary to avoid Text file busy error by @cvvz in #1425
• fix: override aznfs AZURE_ENDPOINT_OVERRIDE by @andyzhangx in #1439
• chore: upgrade CSI driver sidecar image versions by @andyzhangx in #1449
• fix: add azcopy-dir since volume cloning supported from v1.23.2 by @umagnus in #1454
• doc: deprecate AzureStorageIdentityObjectID field by @andyzhangx in #1456
• test: fix trivy action failure by @andyzhangx in #1457
• test: fix trivy action failure by @andyzhangx in #1458
• feat: add tag value delimiter by @umagnus in #1461
• doc: add blobfuse mount with managed identity doc by @umagnus in #1464
• fix: managed identity token refresh issue by @andyzhangx in #1471
• cleanup: refine logs by @andyzhangx in #1473
• cleanup: refine logs by @andyzhangx in #1476
• feat: add allowSharedKeyAccess parameter by @specialforest in #1470
• doc: add yamllint check by @andyzhangx in #1484
• test: add allowSharedKeyAccess feature unit test by @umagnus in #1483
• test: upgrade csi-test to v5.2.0 for more test coverage by @andyzhangx in #1485
• chore(deps): bump k8s.io/klog/v2 from 2.120.1 to 2.130.1 in the k8s group by @dependabot in #1488
• chore(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2 by @dependabot in #1491
• feat: add metadata tag on the storage account created by the driver by @umagnus in #1490
• fix: blobfuse mount failure in Azure Linux v3 by @cvvz in #1496
• chore(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.0.31 to 0.0.32 by @dependabot in #1494
• fix: CVE-2024-5321 by @andyzhangx in #1497
• doc: update new chart versions by @andyzhangx in #1505
• fix: clone volume content to requested volume by @acortelyou in #1504
• fix: ignore specific blobfuse version install failure by @andyzhangx in #1508
• cleanup: refine copy volume logic by @andyzhangx in #1510
• fix: add pv patch permission with HonorPVReclaimPolicy enabled by @andyzhangx in #1515
• fix: volume cloning between different storage account for BlobAccessTierNotSupportedForAccountType error by @umagnus in #1517
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.19.1 by @dependabot in #1522
• feat: add grpcprom interceptor to export basic grpc metrics by @steeling in #1523
• feat: upgrade to azcopy v10.26.0 for volume clone and snapshot restore by @andyzhangx in #1524
• fix: create private endpoint failure when vnetResourceGroup is specified by @andyzhangx in #1528
• chore(deps): bump github.com/onsi/gomega from 1.34.0 to 1.34.1 by @dependabot in #1530
• cleanup: refactor volume cloning by @umagnus in #1521
• fix: only last subnet is set in account ACL created by driver by @andyzhangx in #1534
• fix: respect ReadOnly AccessMode in volume mount by @andyzhangx in #1533
• doc: improve volume cloning doc by @umagnus in #1539
• fix: nfs mount failure when there are multiple subnets in the cluster by @andyzhangx in #1538
• fix: VirtualNetworkRule match issue during account search by @andyzhangx in #1541
• chore(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0 by @dependabot in #1543
• chore(deps): bump golang.org/x/net from 0.27.0 to 0.28.0 by @dependabot in #1544
• doc: update new chart versions by @andyzhangx in #1549
• fix: volume cloning sas token logged by @umagnus in #1550
• test: use workload identity for e2e test by @cvvz in #1551
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.19.1 to 2.20.2 by @dependabot in #1555
• chore(deps): bump github.com/onsi/gomega from 1.34.1 to 1.34.2 by @dependabot in #1565
• chore: Replace deprecated k8s.io/utils/pointer with k8s.io/utils/ptr by @Zhupku in #1554
• fix: add fallback to sas token on azcopy copy command by @andyzhangx in #1564
• fix: CVE-2024-38428 remove wget to close vuln, reduce image size by @Zhupku in #1569
• cleanup: fix golint errors by @Zhupku in #1570
• chore: upgrade to debian-base:bookworm-v1.0.4 base image by @andyzhangx in #1575
• feat: install blobfuse 2.3.2 as default version by @andyzhangx in #1576
• chore(deps): bump golang.org/x/net from 0.28.0 to 0.29.0 by @dependabot in #1582
• chore: upgrade golang version by @andyzhangx in #1583
• Migrate vault,role,roleassignment client to track2 ones by @MartinForReal in #1586
• doc: update inline volume doc by @andyzhangx in #1590
• fix: upgrade node-driver-registrar to fix register timeout issue by @andyzhangx in #1594
• Bump sigs.k8s.io/cloud-provider-azure/pkg/azclient to 0.0.56 by @MartinForReal in #1597
• chore: update verify-golint.sh by @Zhupku in #1603
• chore: upgrade sidecar image versions by @andyzhangx in #1602
• fix: inherit os environment when calling blobfuse2 in blobfuse-proxy by @andyzhangx in #1607
• Migrate msi/subnet client to track2 one by @MartinForReal in #1588
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v6 from 6.0.0 to 6.1.0 by @dependabot in #1617
• chore(deps): bump google.golang.org/protobuf from 1.34.2 to 1.35.1 by @dependabot in #1621
• chore(deps): bump golang.org/x/net from 0.29.0 to 0.30.0 by @dependabot in #1623
• fix: nfs mount failure on arm64 node by @andyzhangx in #1622
• chore: enable blobfuse-proxy by default in kubectl install by @andyzhangx in #1630
• feat: install blobfuse2 for arm64 by @explsd in #1633
• fix: install blobfuse2 on arm64 node by blobfuse-proxy by @andyzhangx in #1634

New Contributors

• @specialforest made their first contribution in #1470
• @acortelyou made their first contribution in #1504
• @steeling made their first contribution in #1523
• @explsd made their first contribution in #1633

Full Changelog: v1.24.0...v1.25.0