[kubevirt-dev] CDI v1.65.0 Release

[Alex Kalenyuk]

I am happy to announce the release of CDI v1.65.0!
This release is meant to be paired with KubeVirt 1.8.

This release includes changes that make CDI integrate better with cloud provider clusters,

alongside several key optimizations and bug fixes that could impact the user experience.
Special call out to the maintenance work around Bazel that essentially allowed us to bump the Go version.

Thanks to everyone involved!

---------------

This release follows v1.64.0 and consists of 45 changes, contributed by
17 people, leading to 1421 files changed.

The source code and selected binaries are available for download at:
<https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.65.0>.

Pre-built CDI containers are published on Quay.io and can be viewed at:
<https://quay.io/repository/kubevirt/cdi-controller/>
<https://quay.io/repository/kubevirt/cdi-importer/>
<https://quay.io/repository/kubevirt/cdi-cloner/>
<https://quay.io/repository/kubevirt/cdi-uploadproxy/>
<https://quay.io/repository/kubevirt/cdi-apiserver/>
<https://quay.io/repository/kubevirt/cdi-uploadserver/>
<https://quay.io/repository/kubevirt/cdi-operator/>


Notable changes
---------------

- [PR #4010] Add hash validation for DataVolume HTTP/HTTPS import sources.
- [PR #4054] Inherit Storage Class for Scratch Space PVCs instead of using default sc
- [PR #4061] Snapshot clone no longer gets permanently stuck in CloneFromSnapshotSourceInProgress when the snapshot is not immediately ReadyToUse
- [PR #4032] RWX Capability for HPP Overlay
- [PR #4067] Set EnableServiceLinks=false on CDI worker pods to prevent "argument list too long" failures in namespaces with many Services.
- [PR #4056] CDI importer and uploader pods can now use a custom ServiceAccount by setting the annotation cdi.kubevirt.io/storage.pod.serviceAccountName on the DataVolume or PVC. Clone flows are not affected.
- [PR #4058] GCE persistent disk StorageProfile now supports RWO Filesystem.
- [PR #4052] Enhancement: use headless service for upload server
- [PR #4044] Add StorageProfile "Recognized" status condition, explaining if the provisioner or the storage class parameters are not recognized by CDI
- [PR #4033] fix: cdi-operator and cdi-deployment metrics-server now correctly inherit TLS options from the CDI TLSSecrutiyProfile.
- [PR #4039] Fix cert collection to include pem certs
- [PR #4046] BugFix: Use an uncached client for webhooks, cache only PVs with transform
- [PR #4040] Reduce DataVolume status update conflicts when multiple controllers act on the same resource by using patch instead of update
- [PR #4038] kubevirt_cdi_clone_pods_high_restart, kubevirt_cdi_import_pods_high_restart, kubevirt_cdi_upload_pods_high_restart and kubevirt_cdi_operator_up are deprecated in favor of cluster:kubevirt_cdi_clone_pods_high_restart:count, cluster:kubevirt_cdi_import_pods_high_restart:count, cluster:kubevirt_cdi_upload_pods_high_restart:count and cluster:kubevirt_cdi_operator_up:sum, in order to comply with the recording rules naming conventions.
- [PR #3991] Add provisioner-aware VolumeSnapshotClass selection and RWO access mode for DataImportCron
- [PR #4008] Enhancement: Expose advised restore size for cron snapshot sources cdi.kubevirt.io/storage.import.advisedRestoreSize
- [PR #4004] Maintenance: release-note tool refactored bash->go with added functionality
- [PR #4005] Refactor metrics docs
- [PR #4009] VDDK: Correctly check snapshot parent backing info for VirtualDiskFlatVer2BackingInfo and VirtualDiskRawDiskMappingVer1BackingInfo types.
- [PR #3841] BugFix: unset namespace selector on webhooks to allow cloud provider mutation
- [PR #3993] Build CDI with Bazel 6.5.0 and Go 1.24.0


Other changes
-------------

- [PR #4047] Update kubevirtci, 1.35 lanes
- [PR #4053] report failure earlier for node pull imports
- [PR #4075] tests/cloner_test: use patch instead of update to override minimumSupportedPvcSize annotation
- [PR #4071] Run go run ./robots/uploader -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../containerized-data-importer/WORKSPACE -dry-run=false
- [PR #4035] Enable go multi-module workspace
- [PR #4048] Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 in /tools/release-notes
- [PR #4012] tests: stop using /dev/pvc hack
- [PR #4051] Update controller-gen to 0.17.2 in cdi builder container
- [PR #4049] Run go run ./robots/uploader -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../containerized-data-importer/WORKSPACE -dry-run=false
- [PR #4042] Update HPP-wffc manifest URL
- [PR #3883] Adjust test helper-images push according to arch compatibility
- [PR #4036] VDDK: wrap errors from TransferFile instead of just logging them
- [PR #4026] Set nosniff header on API calls to CDI API server
- [PR #4020] Run go run ./robots/uploader -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../containerized-data-importer/WORKSPACE -dry-run=false
- [PR #4016] Use random storageclass names in datavolume_test.go (#4015)
- [PR #4013] ci: fix cluster-sync don't fresh local image cache for kind provider
- [PR #3999] build: use gzip compression on pkg_tar
- [PR #3998] build: update to use PUSH_TARGETS to generate list of images for hack/push-container-manifest.sh
- [PR #3997] bazel-builder: add skopeo
- [PR #3994] keystore_test: fix flaky RSA key comparison by replacing DeepEqual
- [PR #3992] Run go run ./robots/cmd/uploader -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../containerized-data-importer/WORKSPACE -dry-run=false
- [PR #3990] Build: bump builder Bazel version to 6.5.0 and go version to 1.24.9
- [PR #3937] Bazel: move from rules_docker to rules_oci
- [PR #3980] Fix metric names linter to handle recording rules separately

Contributors
------------

17 people contributed to this release:

    1 Adam Litke <ali...@redhat.com>
    10 Adi Aloni <10534624...@users.noreply.github.com>
    8 Alex Kalenyuk <akal...@redhat.com>
    3 Alexander Wels <aw...@redhat.com>
    1 Arnon Gilboa <agi...@redhat.com>
    2 Aviv Litman <64130977...@users.noreply.github.com>
    3 Danny Sanatar <dsan...@redhat.com>
    1 Elad Hazan <33450275...@users.noreply.github.com>
    1 Howard Gao <hg...@redhat.com>
    1 Jeffrey Holm <jhol...@gmail.com>
    2 Matthew Arnold <5075485...@users.noreply.github.com>
    2 Noam Assouline <nass...@redhat.com>
    1 Roni Rabinovitz <rrab...@redhat.com>
    2 Thomas-David Griedel <gried...@gmail.com>
    1 dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    2 halfcrazy <hackz...@gmail.com>
    4 kubevirt-bot <kubev...@redhat.com>

Additional Resources
--------------------
- Mailing list: <https://groups.google.com/forum/#!forum/kubevirt-dev>
- [How to contribute][contributing]
- [License][license]

[contributing]: https://github.com/kubevirt/containerized-data-importer/blob/main/hack/README.md
[license]: https://github.com/kubevirt/containerized-data-importer/blob/main/LICENSE

[Lee Yarwood]

On Tue, 31 Mar 2026 at 21:38, 'Alex Kalenyuk' via kubevirt-dev
<kubevi...@googlegroups.com> wrote:
>
> I am happy to announce the release of CDI v1.65.0!
> This release is meant to be paired with KubeVirt 1.8.

Congratulations on the release!

Just a quick note, I've been pushing for CDI to be pinned to the
correct version on the kubevirt/kubevirt release branches for a while
now under:

[release-1.{6,7,8}] kubevirtci and gocli deploying wrong version of CDI
https://github.com/kubevirt/kubevirt/issues/16472

Can I ask folks to review the following PRs for release-1.{6,7,8}:

https://github.com/kubevirt/kubevirt/pull/16478
https://github.com/kubevirt/kubevirt/pull/16474
https://github.com/kubevirt/kubevirt/pull/17372

I've also created the following sig-release PR adding this to the
release checklist, folks are also welcome to automate this if they
have time!

https://github.com/kubevirt/sig-release/pull/63

Many thanks in advance!

Lee

> --
> You received this message because you are subscribed to the Google Groups "kubevirt-dev" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to kubevirt-dev...@googlegroups.com.
> To view this discussion visit https://groups.google.com/d/msgid/kubevirt-dev/CAHahevdH-1trGeX5U-bo%2Bgn%3DCkfGUN30OJQ8iR%3DJauxzRR9QYg%40mail.gmail.com.