- Added liveness and readiness probe for Kanister operator.
- Support patch operation in the KubeOps function.
- Security Context of the Kanister operator pod can be configured using the helm fields
podSecurityContextandcontainerSecurityContext.
- Restored log stream functionality to improve debugging and monitoring capabilities.
- Make container override copied to background and output overrides for MultiContainerRun function.
- Added failure reasons in ActionSet CR.
- Improved S3 profile validation error messages.
- Volume snapshot function such as CreateVolumeSnapshot, WaitForSnapshotCompletion, CreateVolumeFromSnapshot and DeleteVolumeSnapshot in favour of CSI snapshot functions.
- Build process changed from using GODEBUG=boringcrypto to Go1.24 native crypto libraries for FIPS-compliant use.
- Added gRPC call to support sending of UNIX signals to
kandomanaged processes
- Added command line option to follow stdout/stderr of
kandomanaged processes
- Enable RDS functions to accept AWS credentials using a Secret or ServiceAccount.
- The Kopia snapshot command output parser now skips the ignored and fatal error counts
- Set default namespace and serviceaccount for MultiContainerRun pods
- Upgrade to K8s 1.31 API
- K8s VolumeSnapshot is now GA, remove support for beta and alpha APIs
- Change
TIMEOUT_WORKER_POD_READYenvironment variable toKANISTER_POD_READY_WAIT_TIMEOUT
- Errors are now handled with https://github.com/kanisterio/errkit across the board
- Introduced new Kanister function
MultiContainerRunto run pods with two containers connected by shared volume.
- Introduced a GRPC client/server to
kandoto run/check processes.
- Enhanced security by removing the default
editClusterRoleBindingassignment, minimizing the risk of excessive permissions.
- Users upgrading from previous versions should note that the
editClusterRoleBindingis no longer included by default. They must now create their ownRole/RoleBindingwith appropriate permissions for Kanister's Service Account in the application's namespace.
- Update ubi-minimal base image to ubi-minimal:9.4-1227.1726694542.
- Add
gciandunparamlinters to test packages.
- Add support for Read-Only and Write Access Modes when connecting to the Kopia Repository Server in
kando.
- Add support for Cache Size Limits to the
kopia server startcommand.
- Add support to pass labels and annotations to the methods that create/clone VolumeSnapshot and VolumeSnapshotContent resources.
- Support
imageargument forExportRDSSnapshotToLocationandRestoreRDSSnapshotfunctions to override default postgres-kanister-tools image.
- Added support to customise the labels and annotations of the temporary pods that are created by some Kanister functions.
- Added two new fields,
podLabelsandpodAnnotations, to the ActionSet. These fields can be used to configure the labels and annotations of the Kanister function pod run by an ActionSet.
- Update Go to 1.22.7 to pull in latest security updates.
- Update ubi-minimal base image to ubi-minimal:9.4-1227.1725849298.
- Add
stylecheck,errcheck, andmisspellinters to test packages.
- Split parallelism helm value into dataStore.parallelism.upload and dataStore.parallelism.download to be used separately in BackupDataUsingKopiaServer and RestoreDataUsingKopiaServer
- Make pod writer exec wait for cat command to finish. Fixes race condition between cat cat command end exec termination.
- Make sure all storage providers return similar error if snapshot doesn't exist, which is expected by DeleteVolumeSnapshot
- Update ubi-minimal base image to ubi-minimal:9.4-1194
- Update errkit to v0.0.2
- Switch pkg/app to errkit
- Switch pkg/kopia to errkit
- Switch pkg/kube to errkit