IBM Cloud File Storage for VPC add-on change log

The File Storage for VPC cluster add-on is available in Beta.

View information for patch updates to the IBM Cloud File Storage for VPC add-on in your IBM Cloud Kubernetes Service clusters.

Patch updates: Patch updates are delivered automatically by IBM and don't contain any feature updates or changes in the supported add-on and cluster versions.
Release updates: Release updates contain new features for the IBM Cloud File Storage for VPC or changes in the supported add-on or cluster versions. You must manually apply release updates to your IBM Cloud File Storage for VPC add-on. To update your IBM Cloud File Storage for VPC add-on, see Updating the IBM Cloud File Storage for VPC add-on.

To view a list of add-ons and the supported cluster versions in the CLI, run the following command.

ibmcloud ks cluster addon versions --addon vpc-file-csi-driver

To view a list of add-ons and the supported cluster versions, see the Supported cluster add-ons table.

Version 1.2

Fixes hanging issue related to mounting and unmounting after node server restart.
Introduces granular locking mounting and unmounting at the targetPath level.
Disables the CSI NodeExpansion method as it is not required for the file share. The PVC can still be expanded.
Changes how the IAM endpoint is determined for VPC Gen2 clusters.
Upgrades Kubernetes client library to 1.28.
Upgrades CSI spec to 1.8.0.
Resolves the following CVEs: CVE-2022-48560, CVE-2022-48564, CVE-2023-39615, CVE-2023-43804, CVE-2023-45803, and CVE-2023-5981.
Updates the following sidecar images:
- armada-storage-secret to v1.2.31.
- csi-node-driver-registrar to v2.9.3.
- csi-provisioner to v3.6.3.
- csi-resizer to v1.9.3.
- livenessprobe to v2.11.0.

Resolves CVE-2023-3446, CVE-2023-3817, and CVE-2023-5678.
Applies a security fix to use the correct socket path following SElinux policy module changes and CSI recommendations to use /var/lib/kubelet/plugins/.

Updates Golang to 1.20.11.
Updates UBI image to 8.9.1029.
Updates the armada-storage-secret to v1.2.29.
Resolves the following CVEs: CVE-2023-22745, CVE-2007-4559, CVE-2023-40217, and CVE-2023-4641.

Tiered and custom profile storage classes are no longer supported. Update your PVCs to use a dp2 storage classes.
Adds support for granular authorization via the Virtual Network Interface VNI (Elastic Network Interface ENI).
Adds support for cross zone mounting by default. Pods can now mount storage volumes across zones.
Allows you to bring your own security group to control granular authorization at the worker node, zone, or worker pool level.
Adds bring your own subnet support to control which subnet the virtual network interface (VNI) IP for storage is assigned and created in.
Adds bring your own IP support existing PrimaryIP which the VNI will assign.
Allows you to set a custom PrimaryIPAddress within the subnet range where the VNI IP will be assigned and created.

Updates Golang to 1.20.11.
Updates UBI image to 8.9.1029.
Updates the armada-storage-secret to v1.2.29.
Resolves the following CVEs: CVE-2023-22745, CVE-2007-4559, CVE-2023-40217, and CVE-2023-4641.

Updates the storage-secret-sidecar image to 1.2.27.
Updates Golang to 1.20.10.
Resolves CVE-2023-44487, CVE-2023-4911, CVE-2023-4527, CVE-2023-4806, CVE-2023-4813.

Tiered storage classes are deprecated and will be unsupported soon. To migrate, create new PVCs and that use a dp2 storage class and redeploy your apps.
Updates for the VPC API compatibility changes. For more information, see the VPC REST API change log
Adds support for dp2 profiles.
Updates the UBI to version 8.8-1014 to resolve the following CVEs: CVE-2023-1667, CVE-2023-2283, CVE-2023-26604, and CVE-2020-24736.
Updates Golang to version 1.19.11 to resolve CVE-2023-29406.

Kubernetes dependencies upgraded to 1.26.4.
Controller pods are now deployed as Deployment, in previous releases pods were deployed as Satefulsets.
Adds the priorityClass in the deployment file for controller and node pods.