Changelog

Other

• baefe8c bump exposer image
• 6ba8eb2 chore(config): migrate config renovate.json5
• 7e3f7fd chore: bump go toolchain to 1.26.3 and golang.org/x/net to v0.55.0
• faf9181 chore: release v26.21.0
• e322838 chore: update demo GIFs [skip ci]
• dc04091 chore: update demo GIFs [skip ci]

Changelog

Other

• aa54c00 Clean up README by removing disclaimer section
• 0a9b38e Update funding information for GitHub and Ko-fi
• 7ac4a09 bump debian image version
• 4d19dd9 chore: update demo GIFs [skip ci]
• 4f0a3c0 picture with background

Changelog

Features

• aebadda feat: show pv-mounter version as first command in demo tapes

Bug Fixes

• 32b9a37 fix: inject version from tag into goreleaser builds
• ad9e605 fix: resolve binary GIF conflicts during VHS workflow rebase

Other

• aaf6019 chore: update demo GIFs [skip ci]
• 55f1d68 chore: update demo GIFs [skip ci]
• 1747fae docs: restore pv-mounter.png diagram in README
• 6b84576 refactor: move GIFs and PNG to images/ subdirectory

Changelog

Features

• fe8732a feat: add NFS mounted-pvc demo and improve ls colors
• eda9e25 feat: colorize ls output in demo tapes

Bug Fixes

• 3e88db4 fix: add git pull --rebase before push in VHS commit step
• d82ec5c fix: force-add GIFs ignored by .gitignore in VHS workflow
• e15a5f3 fix: pin dependencies to SHA hashes for Scorecard compliance
• e494ac4 fix: populate PVCs with sample data and fix mount point path
• d1e13dc fix: restore populate-pvc step for unmounted-pvc sample data
• cf48212 fix: run VHS tapes from demo/ dir and allow commit on workflow_dispatch
• 5fc8a33 fix: scope workflow permissions to job level and pin govulncheck
• 31c31c6 fix: set TERM and LS_COLORS in tapes for 256-color ls output
• 6e7d94f fix: update setup-kubesolo to v5.0.4 for local-storage-shared-path
• 0200d21 fix: use Dracula theme instead of custom LS_COLORS
• 2cb71ca fix: use Env directive instead of Set Env in VHS tapes
• 326e220 fix: use default namespace, install sshfs, expose plugin to root
• ca72166 fix: use proper pod manifest to populate unmounted-pvc

Other

• ed53224 Fix image syntax in README for pv-mounter
• 1620e80 add pv-mounter.png
• 5b1db1b chore: update demo GIFs [skip ci]
• f050d50 chore: update demo GIFs [skip ci]
• a602068 chore: update demo GIFs [skip ci]
• d7f954b chore: update demo GIFs [skip ci]
• 5a6a3bf chore: update demo GIFs [skip ci]
• e2c3b6a chore: update demo GIFs [skip ci]
• efdcfa6 chore: update demo GIFs [skip ci]
• b296fc0 chore: update demo GIFs [skip ci]
• 627b9a9 chore: update demo GIFs [skip ci]
• 45fe2f1 chore: update demo GIFs [skip ci]
• 6045658 demos updates
• 1caa348 docs: restructure README for dual-backend support
• 04f88e5 faster demos
• ea5dfe1 refactor: rename PVCs/pod, drop color hacks, add mount command
• 04f97d5 refactor: rename demo GIFs to match backend and access mode
• f0ad139 refactor: rename ephemeral containers to volume-exposer and speed up demos
• c23966a refactor: rename tape files to match GIF output names
• 8d90296 remove old images

Changelog

Features

• bc394f4 feat: add --version flag, update help text for NFS, fix VHS sudo

Bug Fixes

• a398fec fix: add demo-specific YAMLs and fix VHS workflow
• b11353b fix: allow unmounted-pvc wait to timeout in VHS workflow

Other

• 797eed4 Add image to README for visualization

Changelog

Features

• e352485 feat: add NFS-Ganesha backend as alternative to SSHFS
• a8ab470 feat: add configurable LOG_LEVEL for NFS-Ganesha debugging
• 2798cdf feat: build NFS-Ganesha 9.5 from source

Bug Fixes

• 302e5a3 fix: add explicit Filesystem_id to bypass VFS FSAL detection
• 39ea2d0 fix: add libnsl-dev build dependency for ntirpc
• f8f51c5 fix: add required capabilities for NFS-Ganesha container
• f1bd0e6 fix: add soft mount options to prevent NFS mount from hanging indefinitely
• 02bd4f6 fix: allow PR_SET_IO_FLUSHER to fail for non-root containers
• 09b8eef fix: bind-mount /volume so VFS FSAL can resolve it
• 6057607 fix: default to UID 0 when workload pod has no runAsUser set
• d34aedd fix: ensure NFS ephemeral container runs as root with NET_BIND_SERVICE
• e3ed7df fix: fake /etc/mtab for VFS FSAL on NFS-backed ephemeral volumes
• eb2ea25 fix: fix NFS-Ganesha config and add /etc/mtab symlink
• b5de90f fix: handle /etc/mtab symlink to /proc/self/mounts in container runtimes
• 5f480aa fix: improve NFS readiness check and use 127.0.0.1 for mount
• f3139e9 fix: look up ephemeral container by name instead of last index
• 263a8e7 fix: make /etc/mtab world-writable for non-root containers
• 5899a78 fix: pass KUBECONFIG to sudo in NFS integration tests
• 77fc8be fix: patch correct file for lower_my_caps and detect workload UID
• 5b14faa fix: patch out lower_my_caps to preserve container capabilities
• 21d678b fix: remove RunAsUser 0 that breaks non-root pod policies
• 5279805 fix: route all ganesha writable paths through /tmp
• c8e3757 fix: set file capabilities on ganesha.nfsd for non-root operation
• 829c6be fix: set runAsUser on CI test pod so NFS ephemeral container detects correct UID
• 0b4f660 fix: update test to match soft NFS mount options
• 265b847 fix: use /proc/self/fd/2 for ganesha log output
• dc3211d fix: use PROXY_V4 FSAL for NFS-backed volumes
• bc9ee06 fix: use PROXY_V4 FSAL for ephemeral containers with Ganesha 9.5
• f8ac69c fix: use PROXY_V4 with NET_BIND_SERVICE and preserved capabilities
• 73bf017 fix: use VFS FSAL for ephemeral containers instead of PROXY_V4
• bc13054 fix: use kill 1 instead of pkill to stop ganesha in ephemeral container
• 488adf4 fix: use nfsvers=4 and tcp options for macOS NFS mount
• 022bb08 fix: use non-privileged client port for PROXY_V4 FSAL
• a0412aa fix: use non-root user (65534) for NFS ephemeral containers
• 2362c28 fix: use shell builtin kill and make ephemeral container cleanup best-effort
• faeb5be fix: use umount -f on macOS for NFS unmount
• 47a8e82 fix: write PROXY_V4 config to /tmp for ephemeral containers

Other

• ce194d8 Revert "fix: set runAsUser on CI test pod so NFS ephemeral container detects correct UID"
• 1591078 chore: revert NFS log level from EVENT to WARN for production use
• a073d09 ci: pre-pull NFS image and add debug step for NFS test failures
• 4f08f6d debug: add diagnostics to NFS entrypoint
• aab5042 docs: add NFS backend documentation to README
• 3219a8b docs: update krew plugin description to mention NFS backend

Changelog

Features

• d38ef21 feat: add changelog generation to goreleaser config

Bug Fixes

• 419322c fix(deps): update kubernetes packages to v0.35.1
• 14c4d2f fix(deps): update module golang.org/x/crypto to v0.48.0
• 394d07c fix: add missing v prefix to action version comments in docker workflow
• 1bb9cf1 fix: remove unsupported UsePrivilegeSeparation and fix /run/sshd ownership
• 52b814f fix: separate host key ownership for root and non-root sshd modes

Other

• 9354456 Simplify architecture: remove proxy pod and reverse SSH tunnel
• 6bbb58d Update ImageVersion to use new unified Docker image
• 1f19bc1 bump go in golint
• bf3b696 chore: update ImageVersion to 1bb9cf1
• d8d2c02 chore: update ImageVersion to 52b814f
• 44260cb chore: update go directive to 1.26.0

Maintenance release

Changelog

• 38d4b1d bump debian image
• def4bdf Merge pull request #347 from fenio/renovate/debian-stable-slim
• 8bcdfe5 Merge pull request #350 from fenio/renovate/go-1.x
• 5a53d93 Merge pull request #349 from fenio/renovate/golang-1.x
• 302b811 chore(deps): update dependency go to v1.25.7
• 392224f Merge pull request #348 from fenio/renovate/actions-checkout-digest
• 26af8b9 chore(deps): update dependency golang to v1.25.7
• 254c87d chore(deps): update actions/checkout digest to de0fac2
• 4f39292 chore(deps): update debian:stable-slim docker digest to 4448d44
• e9d3681 Merge pull request #346 from fenio/renovate/github-codeql-action-4.x
• 8279215 chore(deps): update github/codeql-action action to v4.32.1
• 3ddfc90 Merge pull request #345 from fenio/renovate/actions-upload-artifact-digest
• 41888ad chore(deps): update actions/upload-artifact digest to 47309c9

Maintenance release

Changelog

• 96c3a57 bump go debian
• fc989e1 Merge pull request #334 from fenio/renovate/debian-stable-slim
• 9d33861 Merge pull request #344 from fenio/renovate/actions-cache-5.x
• ea9f146 chore(deps): update actions/cache action to v5.0.3
• 1f1e529 bump go version
• c322336 Merge pull request #343 from fenio/renovate/docker-login-action-3.x
• fec845e Merge pull request #342 from fenio/renovate/github-codeql-action-4.x
• e8b0d7d Merge pull request #341 from fenio/renovate/step-security-harden-runner-2.x
• f9911ce chore(deps): update docker/login-action action to v3.7.0
• 2b77590 chore(deps): update github/codeql-action action to v4.32.0
• ee8b142 chore(deps): update step-security/harden-runner action to v2.14.1
• 816c132 Merge pull request #340 from fenio/renovate/github-codeql-action-4.x
• 3bda5cc chore(deps): update github/codeql-action action to v4.31.11
• 8b37baf Merge pull request #339 from fenio/renovate/actions-checkout-6.x
• 157d5b0 chore(deps): update actions/checkout action to v6.0.2
• 8bef1e9 Merge pull request #338 from fenio/renovate/actions-cache-5.x
• b68e23e chore(deps): update actions/cache action to v5.0.2
• cadab76 Merge pull request #336 from fenio/renovate/golang-1.x
• caddd52 Merge pull request #335 from fenio/renovate/google-osv-scanner-action-2.x
• 3d2f6a5 chore(deps): update dependency golang to v1.25.6
• a68f3ae chore(deps): update google/osv-scanner-action action to v2.3.2
• 7dd3f1d chore(deps): update debian:stable-slim docker digest to ed542b2

Maintenance release

Changelog

• 96c3a57 bump go debian
• fc989e1 Merge pull request #334 from fenio/renovate/debian-stable-slim
• 9d33861 Merge pull request #344 from fenio/renovate/actions-cache-5.x
• ea9f146 chore(deps): update actions/cache action to v5.0.3
• 1f1e529 bump go version
• c322336 Merge pull request #343 from fenio/renovate/docker-login-action-3.x
• fec845e Merge pull request #342 from fenio/renovate/github-codeql-action-4.x
• e8b0d7d Merge pull request #341 from fenio/renovate/step-security-harden-runner-2.x
• f9911ce chore(deps): update docker/login-action action to v3.7.0
• 2b77590 chore(deps): update github/codeql-action action to v4.32.0
• ee8b142 chore(deps): update step-security/harden-runner action to v2.14.1
• 816c132 Merge pull request #340 from fenio/renovate/github-codeql-action-4.x
• 3bda5cc chore(deps): update github/codeql-action action to v4.31.11
• 8b37baf Merge pull request #339 from fenio/renovate/actions-checkout-6.x
• 157d5b0 chore(deps): update actions/checkout action to v6.0.2
• 8bef1e9 Merge pull request #338 from fenio/renovate/actions-cache-5.x
• b68e23e chore(deps): update actions/cache action to v5.0.2
• cadab76 Merge pull request #336 from fenio/renovate/golang-1.x
• caddd52 Merge pull request #335 from fenio/renovate/google-osv-scanner-action-2.x
• 3d2f6a5 chore(deps): update dependency golang to v1.25.6
• a68f3ae chore(deps): update google/osv-scanner-action action to v2.3.2
• 7dd3f1d chore(deps): update debian:stable-slim docker digest to ed542b2