Mainly Update

DISK: introduce local disk data cache for CloudDisk
BMCPFS: Added validation to ensure the FUSE auto-restart mechanism functions correctly by checking the status returned from fuse_dev_ioctl_recover.
OSS: Implement AgentBucket support

What's Changed

• don't check OSS cert in private cloud by @huww98 in #1768
• support noopAgent for local passthrough driver in csi-agent by @AlbeeSo in #1771
• Feature/bumpup efc v2.4 by @mowangdk in #1776
• support CredentialProviderName key in OSS volumeAttributes by @AlbeeSo in #1775
• chart: release v1.36.2 by @huww98 in #1773
• Update path validation by @mowangdk in #1777
• Bump up golang to v1.26.5 by @mowangdk in #1778
• disk: fix nil deref in CreateSnapshot when snapshot disappears by @huww98 in #1772
• bmcpfs: check fuse_dev_ioctl_recover kernel symbol in init container by @mowangdk in #1770
• bump ossfs version to v1.91.11.ack.1 by @AlbeeSo in #1780
• disk: declare ONLINE volume expansion capability by @huww98 in #1774
• utils: resolve symlinks recursively for non-existent path suffixes by @mowangdk in #1781
• bump alinas-utils and efc RPM versions by @mowangdk in #1782
• init.sh: check fuse connection recovery per OS type by @mowangdk in #1783
• chore: bump aliyun-alinas-utils to 2.4-0.20260721112941.f65c1a by @mowangdk in #1785
• chore: upgrade grpc to v1.82.1 by @mowangdk in #1790
• Alinas always overwrite default config by @bingrenlyyyyy in #1792
• core: bump golang text package version by @AlbeeSo in #1794
• chore(chart): raise bmcpfs external-attacher worker-threads to 256 by @mowangdk in #1793
• refactor: extract agentidentity utils into dedicated package by @AlbeeSo in #1787
• build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #1788
• feat(alinas): update version by @bingrenlyyyyy in #1796
• fix: let path validation get past a mount point with a dead filesystem by @AlbeeSo in #1807
• feat: support overlayfs on top of FUSE in RunD/Sandbox by @AlbeeSo in #1786
• fix: update test cluster script to use current ACK image types by @huww98 in #1808
• docs: add local-disk data cache guide, BMCPFS in README, and enrich README by @mowangdk in #1810
• feat(mounter): jwtauth credential support with pluggable credential sinks by @mowangdk in #1784
• disk: enable controller on Windows by @huww98 in #1692
• bmcpfs: skip forcing g_lease_Enable=false for nas2 file systems by @myccccccc in #1816
• Fix/nas unmount via broker by target by @mowangdk in #1817
• bump ossfs version to v1.91.12.ack.2, ossfs2 to v2.0.9.ack.2 by @AlbeeSo in #1818
• chore(chart): raise bmcpfs external-attacher kube API QPS by @huww98 in #1819
• bump EFC to 2.4-20260817 and alinas-utils to 2.4-20260813 by @bingrenlyyyyy in #1821
• Bump up golang to v1.26.6 by @huww98 in #1820
• feat(oss): support AgenticBucket/BucketSpace mounting by @AlbeeSo in #1812
• disk: auto-tag and scope LingJun disks by node topology by @huww98 in #1814
• Chmod to 777 for agent expecially by @mowangdk in #1822
• fix(nas): chmod 0777 for auto-created subpath when AGENT_SANDBOX is enabled by @mowangdk in #1823

Image Address:

registry.cn-beijing.aliyuncs.com/acs/csi-plugin:v1.37.2
registry.cn-beijing.aliyuncs.com/acs/csi-plugin:v1.37.2-init

New Contributors

• @bingrenlyyyyy made their first contribution in #1792
• @myccccccc made their first contribution in #1816

Full Changelog: v1.36.2...v1.37.2

Mainly Update

• OSS: ossfs1 upgraded to v1.91.10.ack.5, and ossfs2 upgraded to v2.0.8.ack.1.
• DISK: Supports online modification of disk specifications (type, performance level, IOPS, throughput, etc.) via Kubernetes VolumeAttributesClass without rebuilding PVs.
• DISK: In HighDensityDisk mode, nodes automatically report the correct maximum number of mountable volumes, allowing the scheduler to make more accurate scheduling decisions.
• NAS: The default QPS has been increased from 2 to 6, reducing throttling wait times during large-scale mount/unmount operations.

What's Changed

• owners: remove iltyty by @huww98 in #1710
• disk: read block device capacity before filesystem resize by @huww98 in #1711
• nas: support AccessMode and readonly field for readonly mounts by @huww98 in #1709
• Feature/fix volume already deleted by @mowangdk in #1712
• disk: get disk quantity and identify LingJun node from metadata by @huww98 in #1605
• bump k8s deps to 1.36.1 by @huww98 in #1713
• refactor(oss): rename skipAttach to skipGlobalMount and set by env by @AlbeeSo in #1714
• csi-agent: ignore cnfs options in agent mode by @iltyty in #1619
• Bump up alinas version by @mowangdk in #1718
• Bump up go to v1.26.4 by @mowangdk in #1719
• bump ossfs to v1.91.10.ack.2-fd3910d by @huww98 in #1708
• ossfs: bump version to 1.91.10.ack.3 by @AlbeeSo in #1720
• disk: fix misleading log / comment by @huww98 in #1721
• disk: ModifyVolume by @huww98 in #1252
• labeler: add centralized metadata labeler by @huww98 in #1685
• disk: migrate ModifyVolume APIs from ECSInterface to ECSv2Interface by @huww98 in #1723
• Add efc default arguments for bmcpfs by @mowangdk in #1724
• Disk cleanups about attach by @huww98 in #1727
• Bump efc & alinas version to v2.1 by @mowangdk in #1732
• nas: fix error handling in DeleteAccesspoint and CancelDirQuota by @huww98 in #1730
• ossfs 1.0: support Agent Identity Authority in sandbox scenario by @AlbeeSo in #1731
• Fix efc & alinas version by @mowangdk in #1734
• feat(oss): add user-configurable region parameter for sigVersion=v4 w… by @AlbeeSo in #1735
• ossfs1: bump version to v1.91.10.ack.5 by @AlbeeSo in #1736
• feat(oss): region implies sigVersion=v4 unless v1 is explicitly configured by @AlbeeSo in #1737
• Update Dockerfile by @huww98 in #1738
• build(deps): bump actions/checkout from 6.0.2 to 7.0.0 by @dependabot[bot] in #1726
• build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot[bot] in #1733
• Cherry-pick inner branch by @mowangdk in #1739
• disk: don't send empty DiskCategory/PerformanceLevel in ModifyDiskSpec by @huww98 in #1740
• ecs: send RegionId on RPC-style v2 SDK requests by @huww98 in #1741
• cloud: reject broken lingjun_config by @huww98 in #1743
• build(deps): bump the k8s group with 6 updates by @dependabot[bot] in #1744
• disk: correct xc disk type min size to 40Gi by @huww98 in #1745
• Add incremental test coverage by @mowangdk in #1753
• Update ci configuration of test coverage by @mowangdk in #1754
• Implement automatic mount point cleanup for NAS-backed sandboxes. by @mowangdk in #1742
• Bump up efc & alinas version by @mowangdk in #1755
• Remove logs by @mowangdk in #1756
• Support secrets in options by @mowangdk in #1757
• Replace bmcpfs VSC workqueue/condvar with TTLCache + Throttler by @huww98 in #1758
• nas: enlarge default qps to 6 by @huww98 in #1761
• fix: restore short driver type in metric labels by @huww98 in #1762
• build(deps): bump github.com/kubernetes-csi/csi-lib-utils from 0.7.1 to 0.24.0 by @dependabot[bot] in #1748
• bump ossfs2.0 version to v2.0.8.ack.1 by @AlbeeSo in #1765
• disk: report HighDensityDisk mode limit as NodeGetInfo max volumes by @huww98 in #1763
• Increase default attacher worker count to 1200 by @mowangdk in #1766
• disk: sync PV disktype label/annotation on ModifyVolume by @huww98 in #1767

Image Address:

registry.cn-beijing.aliyuncs.com/acs/csi-plugin:v1.36.2
registry.cn-beijing.aliyuncs.com/acs/csi-plugin:v1.36.2-init

Full Changelog: v1.36.1...v1.36.2

Mainly Update

• OSS: Optimized OSS mount management by utilizing systemd to manage the ossfs process, and implemented a version-aware ResourceVersion strategy for FUSE pod deletion.
• DISK: Enhanced block storage security by adding verification for free VFIO groups and refactored node RPC methods to use structured logging.
• NAS: Strengthened security by blocking user-space access to ports 10249 and 12049, and updated EFC and ALINAS components.
• Bmcpfs: Support vsc attach for specific node type
• Network: Optimized VPC endpoint logic to support auto-enabling endpoints when running within a VPC network.
• Security: Removed python36 and pyyaml from the csi-agent to address CVE scan vulnerabilities.

What's Changed

• cmd-mounter: use systemd to manage ossfs process by @AlbeeSo in #1659
• fix(oss): keep req priority for CNFS path and normalize URL by @AlbeeSo in #1660
• metric/disk: fix error log by @huww98 in #1661
• disk: always mount rootfs directly by @huww98 in #1530
• Bump up alinas to block access to 10249 port from userspace in amd64 by @mowangdk in #1668
• Block access to 12049 from userspace process by @mowangdk in #1669
• Change nftable command to golang/nftable by @mowangdk in #1670
• helm: v1.35.3 by @huww98 in #1671
• Bump up efc & alinas version by @mowangdk in #1676
• ossfs: poll mountpoint every 100ms by @huww98 in #1678
• build(deps): bump go.opentelemetry.io/otel from 1.39.0 to 1.41.0 in the security group across 1 directory by @dependabot[bot] in #1680
• build(deps): bump crate-ci/typos from 24c5854966d17070a3b25e2c2dfc63ec5bc94cf4 to 2d0ce569feab1f8752f1dde43cc2f2aa53236e06 by @dependabot[bot] in #1672
• proxy: enlarge MaxMsgSize to 16k by @huww98 in #1681
• credentials: auto-enable VPC endpoint when running in VPC network by @huww98 in #1653
• disk: fix Detaching disks treated as attached by @huww98 in #1520
• Support sysconfig for disk & nas by @mowangdk in #1679
• Fix typo by @huww98 in #1684
• build(deps): bump crate-ci/typos from 1.40.0 to 1.46.0 by @dependabot[bot] in #1683
• deploy: pull main container image first by @huww98 in #1662
• Make GOOS=windows compile by @huww98 in #1691
• Add expired ttl to bmcpfs cache by @mowangdk in #1689
• mount-proxy: contextual log and cancel by @huww98 in #1688
• disk: refactor node RPC methods to use structured logging by @huww98 in #1696
• bump golang to v1.26.3 by @huww98 in #1699
• add skills for dev by @huww98 in #1694
• build: cleanup and fix mount-proxy Dockerfile by @huww98 in #1693
• bump ossfs versions to v1.91.10.ack.1 and v2.0.7.ack.1 by @AlbeeSo in #1690
• Sanitize nas req by @mowangdk in #1703
• build(deps): bump crate-ci/typos from 1.46.0 to 1.46.2 by @dependabot[bot] in #1701
• build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by @dependabot[bot] in #1702
• disk: open to verify VFIO group is free by @huww98 in #1686
• csi-agent: remove python36 and pyyaml to fix CVE scans by @huww98 in #1700
• Support vsc attachments for ecs node type by @mowangdk in #1698
• feat(oss): implement version-aware ResourceVersion strategy for fuse pod delete by @AlbeeSo in #1682
• Add PodDisruptionBudget for csi-provisioner controller by @huww98 in #1695
• Fix vswitch_ids variable scope in cluster setup script by @huww98 in #1704
• Update Dockerfile 2026-05 by @huww98 in #1705
• Bump sidecars by @huww98 in #1706

Image Address:

registry.cn-beijing.aliyuncs.com/acs/csi-plugin:v1.36.1
registry.cn-beijing.aliyuncs.com/acs/csi-plugin:v1.36.1-init

Full Changelog: v1.35.3...v1.36.1

Mainly Update

• DISK: Moved cloud disk mounting operations with serial numbers to the controller side by default
• NAS: Removed the restriction requiring Extreme NAS file systems to use the /share prefix.
• SNAPSHOT: Updated VolumeGroupSnapshot-related CRDs to v1beta2.
• METRICS: Optimized memory usage during slow metrics collection.

What's Changed

• Bump up to v1.35.1 by @mowangdk in #1622
• Bump up alinas version by @mowangdk in #1632
• [2026-01] Update Dockerfile by @huww98 in #1624
• helm: external-oss-attacher with default worker-threads 32 by @AlbeeSo in #1620
• utils: ECS SDK v2: use VPC endpoints for cn-hangzhou, etc. by @huww98 in #1614
• build(deps): bump google.golang.org/grpc from 1.75.0 to 1.78.0 by @dependabot[bot] in #1631
• Remove mandatory /share prefix requirement for extreme nas by @iltyty in #1526
• Add support for bmcpfs metrics by @iltyty in #1636
• build(deps): bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 by @dependabot[bot] in #1628
• disk: attach disks with serial number at controller by @huww98 in #1199
• Support vpc endpoint for cn-zhongwei by @mowangdk in #1639
• Bump to Go 1.26 and apply go fix by @huww98 in #1637
• build(deps): bump golang.org/x/time from 0.7.0 to 0.14.0 by @dependabot[bot] in #1642
• disk: re-implement StagingTargetPath cleanup logic by @huww98 in #1248
• fix POV driver capability by @huww98 in #1643
• Bump up efc & alinas to new version by @mowangdk in #1644
• Bump alinas-utils to 1.9-0.20260306145150 by @mowangdk in #1645
• Fix efc/alinas utils path by @mowangdk in #1646
• build: remove lspci,lsof by @huww98 in #1593
• cloud/throttle: use synctest by @huww98 in #1597
• disk: add some unit test by @huww98 in #1648
• [chore]Add more ut for om & losetup by @mowangdk in #1647
• disk: add unit test for attach disk by @huww98 in #1649
• bump external snapshotter to v8.5.0 by @huww98 in #1370
• Add support for bmcpfs metrics by @iltyty in #1638
• build: bump Go version to 1.26.1 by @huww98 in #1650
• Bump up alinas & efc for nas by @mowangdk in #1651
• nas: me-east-1 can use VPC endpoint by @huww98 in #1652
• nas: pass along context to rate limiter by @huww98 in #1583
• revert: efc metrics mount modification by @iltyty in #1654
• fix: broken extreme nas subpath creation by @iltyty in #1656
• fix: extreme nas subdir creation edge cases by @iltyty in #1657
• build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3 in the security group across 1 directory by @dependabot[bot] in #1655
• metric: support context cancellation to prevent OOM by @huww98 in #1658

Image Address:

registry.cn-beijing.aliyuncs.com/acs/csi-plugin:v1.35.3
registry.cn-beijing.aliyuncs.com/acs/csi-plugin:v1.35.3-init

Full Changelog: v1.35.1...v1.35.3

Mainly Update

• OSS: ossfs 2.0 upgraded to v2.0.5
  • Enabled metrics by default
  • Supports fetching oss object directly into memory
• OSS: ossfs 1.0 upgraded to v1.91.9
• OSS: Added support for monitoring the status of mount points.
• OSS: Support VolumePopulator
• DISK: Support lingjun type node

What's Changed

• Create directory automatically when mounting CPFS with EFC protocol by @iltyty in #1563
• deploy: release 1.34.3 by @huww98 in #1576
• disk: don't get VGS to check for an unsupported parameter by @huww98 in #1386
• build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @dependabot[bot] in #1571
• build(deps): bump golang.org/x/sys from 0.37.0 to 0.38.0 by @dependabot[bot] in #1575
• Support ebs driver for lingjun node type by @mowangdk in #1566
• build(deps): bump github.com/prometheus/procfs from 0.15.1 to 0.19.2 by @dependabot[bot] in #1542
• Use go tool for mockgen by @huww98 in #1564
• nas: use golang/x rate limiter by @huww98 in #1485
• Fix nas event recorder init issue under agent mode by @iltyty in #1577
• mount-proxy(metrics): create metricsPath dynamically for agent mode by @AlbeeSo in #1579
• utils: lack of kubeconfig is not fatal for EventRecorder by @huww98 in #1578
• metadata: migrate STS SDK to v2 by @huww98 in #1549
• refactor(mounter): use registration mechanism for OSS fuse mounter types by @AlbeeSo in #1580
• feat: support mixed deployment of runc and rund runtimes by @AlbeeSo in #1558
• disk/bdf: remove unused extras by @huww98 in #1581
• test: switch to ALinux3 container optimized version by @huww98 in #1397
• oss(credentials): support standard keys accessKeyId and accessKeySecret by @AlbeeSo in #1565
• refactor(oss): extract runtime type determination logic by @AlbeeSo in #1584
• Remove runD csi 1.0 by @huww98 in #1588
• helm: allow to skip installing volumesnapshotclass by @AlbeeSo in #1589
• Add instanceID for DescribeVscMountPoints when mpid exists by @mowangdk in #1590
• Support NAS access point RAM authentication with AK/SK by @iltyty in #1562
• Support nic lingjun node type by @mowangdk in #1585
• bump Go to 1.25.5 by @huww98 in #1587
• disk: allow unpublish pci-pf-stub driver by @huww98 in #1582
• build: fix libblkid install path by @huww98 in #1586
• Miscellaneous changes during perf test by @huww98 in #1519
• disk: optimize batch create/delete by @huww98 in #1460
• Always detach disk on controller by @huww98 in #1517
• ossfs2: enable metrics by default by @AlbeeSo in #1594
• helm: hide OSS annotations if driver not enabled by @huww98 in #1595
• refactor(nas): get node information only in losetup mode by @iltyty in #1592
• test: bump kubernetes to 1.34.3 by @huww98 in #1610
• disk: skip unavailable test on darwin by @huww98 in #1609
• batcher: fix lint by @huww98 in #1596
• metadata: use synctest to avoid long sleep by @huww98 in #1606
• metadata: migrate to ECS OpenAPI SDK v2 by @huww98 in #1599
• oss(credentials): support STS.Token in nodePublishSecretRef and rotation by republish by @AlbeeSo in #1591
• mounter/proxy: cleanups by @huww98 in #1275
• oss: bump ossfs1.0 and ossfs2.0 versions by @AlbeeSo in #1611
• disk: replace conf file with xattr by @huww98 in #1608
• build(deps): bump github.com/aliyun/credentials-go from 1.4.8 to 1.4.10 by @dependabot[bot] in #1603
• build(deps): bump github.com/alibabacloud-go/nas-20170626/v4 from 4.1.2 to 4.1.4 by @dependabot[bot] in #1602
• remove deprecated oss token rotating uts by @AlbeeSo in #1615
• test: add ecs.u2 instance type by @huww98 in #1598
• refactor: make kube config optional in nas/oss node drivers by @iltyty in #1607
• Support bmcpfs fileset dynamic provisioning by @mowangdk in #1568
• Bump up alinas to v1.9 hotfix by @mowangdk in #1617
• deploy: align bmcpfs sidecar with others by @huww98 in #1616

Image Address:

registry.cn-beijing.aliyuncs.com/acs/csi-plugin:v1.35.1
registry.cn-beijing.aliyuncs.com/acs/csi-plugin:v1.35.1-init

Full Changelog: v1.34.3...v1.35.1

Mainly Update

• OSS: ossfs 2.0 upgraded to 2.0.4
• OSS: ossfs 2.0 Added support for arm64 architecture.
• OSS: ossfs 1.0: Fixed a segmentation fault caused by occasional empty path requests from libfuse2.
• OSS: Added support for monitoring the status of mount points.
• Snapshots: Added support for snapshots of erofs type filesystems.
• BMCPFS: Added support for static creation of filesets.
• BMCPFS: Added support for automatic cross-domain switching.
• DISK: Added support for lingjun node type

What's Changed

• Fix incorrect nas mounter issue by @iltyty in #1527
• release helm 1.34.1 by @huww98 in #1518
• Support fsetid static attach by @mowangdk in #1532
• bump NAS SDK to v4 by @huww98 in #1524
• Support specifying NAS filesystem ID by @iltyty in #1515
• bump util-linux to 2.41.2 by @huww98 in #1511
• deploy: bump disk attach worker by @huww98 in #1521
• Fix nil pointer issue when fallbacking cnfs without mount proxy by @iltyty in #1534
• passthrough ALICLOUD_CLIENT_SCHEME by @huww98 in #1536
• disk: remove the call to NeedResize by @huww98 in #1102
• remove outdated inner dep by @huww98 in #1514
• delay detecting package manager by @huww98 in #1533
• add more OWNERS by @huww98 in #1537
• Copy alinas-utils conf files to csi-agent /etc/aliyun-defaults by @iltyty in #1538
• Bump go version to v1.24.8 by @mowangdk in #1548
• Update Dockerfile [2025-10] by @huww98 in #1545
• bump golang version to 1.24.9 by @mowangdk in #1550
• deploy: add ossfs versions in plugin' annotations by @AlbeeSo in #1546
• feat: support erofs filesystem when create disk from a snapshot by @AlbeeSo in #1535
• fuse/metrics: add mountpoint metrics for ossfs by @AlbeeSo in #1544
• ossfs: allow change ossfs pod' dnspolicy to ClusterFirstWithHostNet by @AlbeeSo in #1525
• csi-agent: bump python, alinas-utils, efc versions by @iltyty in #1552
• NAS: validate server in NodePublishVolume by @iltyty in #1529
• osssfs: bump 1.91.8.ack.3 && 2.0.4.ack.1, cleanup metrics dir by @AlbeeSo in #1553
• add more owners by @huww98 in #1556
• Support disk available label for lingjun node type by @mowangdk in #1555
• build(deps): bump github.com/aliyun/credentials-go from 1.4.5 to 1.4.8 by @dependabot[bot] in #1541
• build(deps): bump golang.org/x/sys from 0.35.0 to 0.37.0 by @dependabot[bot] in #1540
• build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 by @dependabot[bot] in #1522
• bump efc & alinas version by @mowangdk in #1559
• nas/bmcpfs: switch to new credential implementation by @huww98 in #1547
• build: fix a typo in SPDX by @huww98 in #1561
• oss: reduce list pods without ResourceVersion by @huww98 in #1497
• Add max ebs volume count for lingjun node by @mowangdk in #1560
• Disable additional cgroup of efc container by @mowangdk in #1554

Image Address:

registry.cn-beijing.aliyuncs.com/acs/csi-plugin:v1.34.3
registry.cn-beijing.aliyuncs.com/acs/csi-plugin:v1.34.3-init

Full Changelog: v1.34.1...v1.34.3