[kubevirt-dev] CDI v1.66.0 Release
4 views
Skip to first unread message
Alex Kalenyuk
Aug 5, 2026, 4:32:58 PM (5 days ago) Aug 5
to kubevirt-dev
I am happy to announce the release of CDI v1.66.0!
This release should be paired with KubeVirt 1.9.
Key themes for this release included: VDDK data source reliability, storage driver compatibility, and greater operational flexibility.
This release should be paired with KubeVirt 1.9.
Key themes for this release included: VDDK data source reliability, storage driver compatibility, and greater operational flexibility.
Thanks to everyone involved!
This release follows v1.65.0 and consists of 52 changes, contributed by
21 people, leading to 1638 files changed.
The source code and selected binaries are available for download at:
<https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.66.0>.
Pre-built CDI containers are published on Quay.io and can be viewed at:
<https://quay.io/repository/kubevirt/cdi-controller/>
<https://quay.io/repository/kubevirt/cdi-importer/>
<https://quay.io/repository/kubevirt/cdi-cloner/>
<https://quay.io/repository/kubevirt/cdi-uploadproxy/>
<https://quay.io/repository/kubevirt/cdi-apiserver/>
<https://quay.io/repository/kubevirt/cdi-uploadserver/>
<https://quay.io/repository/kubevirt/cdi-operator/>
Notable changes
---------------
- [PR #3947] VDDK datasource connection now supports TLS with the certConfigMap option.
- [PR #4218] Fixed StorageProfile controller advising the wrong clone strategy for Portworx StorageClasses with backend=pure_block or backend=pure_fa_file parameters; they now correctly advise csi-clone.
- [PR #4056] CDI importer and uploader pods can now use a custom ServiceAccount by setting the annotation cdi.kubevirt.io/storage.pod.serviceAccountName on the DataVolume or PVC. Clone flows are not affected.
- [PR #4200] Removed prlimit(RLIMIT_AS) enforcement from qemu-img operations.
- [PR #4138] Add support for IBM VPC File Storage driver (vpc.file.csi.ibm.io)
- [PR #4167] Added insecureSkipVerify to http source type to support connecting to https endpoints with invalid certificates. By default this option is set to false, and must be explicitly set to "true" to use. This will not break any existing datavolume definitions.
- [PR #4190] Suppress ClaimMisbound Warning from prime PVCs
- [PR #4109] fix cluster wide certConfigMap for http datasources
- [PR #4174] BugFix: instancetype labels from containerdisk doesn't get propogated to VolumeSnapshot/DataSource on multiarch clusters
- [PR #4179] BugFix: qemu issue results in not being able import DV into a 4k block device
- [PR #4069] VDDK: add re-login and retry on session timeout
- [PR #4161] Expose secure pprof endpoints on controller and operator for live runtime diagnostics
- [PR #4121] The /metrics endpoints on cdi-deployment and cdi-operator now requires authentication. Clients must present a bearer token with get permission on the /metrics nonResourceURL. A cdi-metrics-reader ServiceAccount and ClusterRole are created automatically for Prometheus scraping.
- [PR #4127] VDDK: look up VMs with instance UUIDs instead of BIOS UUIDs
- [PR #4119] Added support for DirectPV CSI driver
- [PR #4124] Add OVN-Kubernetes open-default-ports annotation to upload server pod to fix uploads in namespaces with network segmentation
- [PR #4052] Enhancement: use headless service for upload server
- [PR #4110] Bump google.golang.org/grpc to 1.79.3 to remediate CVE CVE-2026-33186
- [PR #4107] BugFix: Host assisted clone should adjust requested storage when cloning from block to filesystem volume mode
- [PR #4055] VDDK: search root snapshot backing file chain for target disk
- [PR #4096] Add per-PVC node selector override via annotation
- [PR #4087] bump rules_oci to 2.3.0
- [PR #4091] Copy Labels from PVC to Importer Pod
Other changes
-------------
- [PR #4220] Delete ConfigMaps while also Providing them with Specific Labels for Downstream Testing
- [PR #4219] Extract datavolumes/source from view role into standalone ClusterRole
- [PR #4216] Run go run ./robots/uploader -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../containerized-data-importer/WORKSPACE -dry-run=false
- [PR #4211] doc: document serviceAccountName field on DataVolume
- [PR #4208] fix: tests, util: append DockerTag to container images
- [PR #4209] importer, format-readers: use pgzip
- [PR #4199] fix(bazel-docker): avoid container cleanup affecting build exit code
- [PR #4197] poller: Use JSON Patch instead of Update to avoid conflicts
- [PR #4191] fix(bazel-docker): mount bazel cache GCS credentials into builder container
- [PR #4176] Update kubevirtci, 1.36 lanes
- [PR #4183] Fix in-docker to not error out with VCS status
- [PR #4181] Run go run ./robots/uploader -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../containerized-data-importer/WORKSPACE -dry-run=false
- [PR #4172] Enable the WebhookPvcRendering feature gate by default
- [PR #4171] docs: add k3s/RKE2 guidance for device_ownership_from_security_context
- [PR #4163] tests: replace racy cdi_cr_ready e2e test with unit test
- [PR #4160] Run go run ./robots/uploader -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../containerized-data-importer/WORKSPACE -dry-run=false
- [PR #4126] image, nbdkit: replace writePasswordFile with createPasswordPipe
- [PR #4150] Run go run ./robots/uploader -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../containerized-data-importer/WORKSPACE -dry-run=false
- [PR #4141] Makefile, hack: Allow compiling ginkgo + tests without Bazel
- [PR #4120] Fix AfterEach in ingress manifest tests to restore override first
- [PR #4118] Test commit for latest manifest publish
- [PR #4108] Add uploadproxyURL environmental variable
- [PR #4103] imageio, vcenter: add node affinity and skip tests for missing arch
- [PR #4105] Add common error symptoms to block CRI ownership doc
- [PR #4100] Allow CDI_NAMESPACE to be set externally in test.sh
- [PR #4102] Bump libnbd version from 1.11.5 to 1.25.4
- [PR #4099] Fix typo "RatainAll" -> "RetainAll" in DataImportCron docs
- [PR #4092] Fix wrong error variable checked in cleanupTransfer closures
- [PR #4050] Respect pod retain annotation in cross ns host assisted clone
- [PR #4088] Fix CDI node-placement test for cross-architecture clusters
- [PR #4083] multi arch script: exit in case of errors in push
Contributors
------------
21 people contributed to this release:
8 Adi Aloni <10534624...@users.noreply.github.com>
13 Alex Kalenyuk <akal...@redhat.com>
1 Alexander Wels <aw...@redhat.com>
2 Carter Pewterschmidt <118891669+c...@users.noreply.github.com>
1 Celis <celis.hern...@gmail.com>
2 Danny Sanatar <dsan...@redhat.com>
2 Davide Marro <dma...@redhat.com>
1 Dylan White <148541126...@users.noreply.github.com>
1 Geetika Kapoor <13978799+...@users.noreply.github.com>
1 Gera Fuentes <gera...@outlook.com>
1 Mark D <377971...@users.noreply.github.com>
2 Matthew Arnold <5075485...@users.noreply.github.com>
1 Muhammad Arif <101164030...@users.noreply.github.com>
1 Pujitha Paladugu <pujitha...@gmail.com>
1 RamLavi <ral...@redhat.com>
2 Roshan Karthik Rajesh <rora...@redhat.com>
1 Shiwani Biradar <sbir...@redhat.com>
4 Thomas-David Griedel <gried...@gmail.com>
1 Yaacov Zamir <kobi....@gmail.com>
2 gwencasey96 <74568397+g...@users.noreply.github.com>
4 kubevirt-bot <kubev...@redhat.com>
Additional Resources
--------------------
- Mailing list: <https://groups.google.com/forum/#!forum/kubevirt-dev>
- [How to contribute][contributing]
- [License][license]
[contributing]: https://github.com/kubevirt/containerized-data-importer/blob/main/hack/README.md
[license]: https://github.com/kubevirt/containerized-data-importer/blob/main/LICENSE
21 people, leading to 1638 files changed.
The source code and selected binaries are available for download at:
<https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.66.0>.
Pre-built CDI containers are published on Quay.io and can be viewed at:
<https://quay.io/repository/kubevirt/cdi-controller/>
<https://quay.io/repository/kubevirt/cdi-importer/>
<https://quay.io/repository/kubevirt/cdi-cloner/>
<https://quay.io/repository/kubevirt/cdi-uploadproxy/>
<https://quay.io/repository/kubevirt/cdi-apiserver/>
<https://quay.io/repository/kubevirt/cdi-uploadserver/>
<https://quay.io/repository/kubevirt/cdi-operator/>
Notable changes
---------------
- [PR #3947] VDDK datasource connection now supports TLS with the certConfigMap option.
- [PR #4218] Fixed StorageProfile controller advising the wrong clone strategy for Portworx StorageClasses with backend=pure_block or backend=pure_fa_file parameters; they now correctly advise csi-clone.
- [PR #4056] CDI importer and uploader pods can now use a custom ServiceAccount by setting the annotation cdi.kubevirt.io/storage.pod.serviceAccountName on the DataVolume or PVC. Clone flows are not affected.
- [PR #4200] Removed prlimit(RLIMIT_AS) enforcement from qemu-img operations.
- [PR #4138] Add support for IBM VPC File Storage driver (vpc.file.csi.ibm.io)
- [PR #4167] Added insecureSkipVerify to http source type to support connecting to https endpoints with invalid certificates. By default this option is set to false, and must be explicitly set to "true" to use. This will not break any existing datavolume definitions.
- [PR #4190] Suppress ClaimMisbound Warning from prime PVCs
- [PR #4109] fix cluster wide certConfigMap for http datasources
- [PR #4174] BugFix: instancetype labels from containerdisk doesn't get propogated to VolumeSnapshot/DataSource on multiarch clusters
- [PR #4179] BugFix: qemu issue results in not being able import DV into a 4k block device
- [PR #4069] VDDK: add re-login and retry on session timeout
- [PR #4161] Expose secure pprof endpoints on controller and operator for live runtime diagnostics
- [PR #4121] The /metrics endpoints on cdi-deployment and cdi-operator now requires authentication. Clients must present a bearer token with get permission on the /metrics nonResourceURL. A cdi-metrics-reader ServiceAccount and ClusterRole are created automatically for Prometheus scraping.
- [PR #4127] VDDK: look up VMs with instance UUIDs instead of BIOS UUIDs
- [PR #4119] Added support for DirectPV CSI driver
- [PR #4124] Add OVN-Kubernetes open-default-ports annotation to upload server pod to fix uploads in namespaces with network segmentation
- [PR #4052] Enhancement: use headless service for upload server
- [PR #4110] Bump google.golang.org/grpc to 1.79.3 to remediate CVE CVE-2026-33186
- [PR #4107] BugFix: Host assisted clone should adjust requested storage when cloning from block to filesystem volume mode
- [PR #4055] VDDK: search root snapshot backing file chain for target disk
- [PR #4096] Add per-PVC node selector override via annotation
- [PR #4087] bump rules_oci to 2.3.0
- [PR #4091] Copy Labels from PVC to Importer Pod
Other changes
-------------
- [PR #4220] Delete ConfigMaps while also Providing them with Specific Labels for Downstream Testing
- [PR #4219] Extract datavolumes/source from view role into standalone ClusterRole
- [PR #4216] Run go run ./robots/uploader -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../containerized-data-importer/WORKSPACE -dry-run=false
- [PR #4211] doc: document serviceAccountName field on DataVolume
- [PR #4208] fix: tests, util: append DockerTag to container images
- [PR #4209] importer, format-readers: use pgzip
- [PR #4199] fix(bazel-docker): avoid container cleanup affecting build exit code
- [PR #4197] poller: Use JSON Patch instead of Update to avoid conflicts
- [PR #4191] fix(bazel-docker): mount bazel cache GCS credentials into builder container
- [PR #4176] Update kubevirtci, 1.36 lanes
- [PR #4183] Fix in-docker to not error out with VCS status
- [PR #4181] Run go run ./robots/uploader -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../containerized-data-importer/WORKSPACE -dry-run=false
- [PR #4172] Enable the WebhookPvcRendering feature gate by default
- [PR #4171] docs: add k3s/RKE2 guidance for device_ownership_from_security_context
- [PR #4163] tests: replace racy cdi_cr_ready e2e test with unit test
- [PR #4160] Run go run ./robots/uploader -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../containerized-data-importer/WORKSPACE -dry-run=false
- [PR #4126] image, nbdkit: replace writePasswordFile with createPasswordPipe
- [PR #4150] Run go run ./robots/uploader -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../containerized-data-importer/WORKSPACE -dry-run=false
- [PR #4141] Makefile, hack: Allow compiling ginkgo + tests without Bazel
- [PR #4120] Fix AfterEach in ingress manifest tests to restore override first
- [PR #4118] Test commit for latest manifest publish
- [PR #4108] Add uploadproxyURL environmental variable
- [PR #4103] imageio, vcenter: add node affinity and skip tests for missing arch
- [PR #4105] Add common error symptoms to block CRI ownership doc
- [PR #4100] Allow CDI_NAMESPACE to be set externally in test.sh
- [PR #4102] Bump libnbd version from 1.11.5 to 1.25.4
- [PR #4099] Fix typo "RatainAll" -> "RetainAll" in DataImportCron docs
- [PR #4092] Fix wrong error variable checked in cleanupTransfer closures
- [PR #4050] Respect pod retain annotation in cross ns host assisted clone
- [PR #4088] Fix CDI node-placement test for cross-architecture clusters
- [PR #4083] multi arch script: exit in case of errors in push
Contributors
------------
21 people contributed to this release:
8 Adi Aloni <10534624...@users.noreply.github.com>
13 Alex Kalenyuk <akal...@redhat.com>
1 Alexander Wels <aw...@redhat.com>
2 Carter Pewterschmidt <118891669+c...@users.noreply.github.com>
1 Celis <celis.hern...@gmail.com>
2 Danny Sanatar <dsan...@redhat.com>
2 Davide Marro <dma...@redhat.com>
1 Dylan White <148541126...@users.noreply.github.com>
1 Geetika Kapoor <13978799+...@users.noreply.github.com>
1 Gera Fuentes <gera...@outlook.com>
1 Mark D <377971...@users.noreply.github.com>
2 Matthew Arnold <5075485...@users.noreply.github.com>
1 Muhammad Arif <101164030...@users.noreply.github.com>
1 Pujitha Paladugu <pujitha...@gmail.com>
1 RamLavi <ral...@redhat.com>
2 Roshan Karthik Rajesh <rora...@redhat.com>
1 Shiwani Biradar <sbir...@redhat.com>
4 Thomas-David Griedel <gried...@gmail.com>
1 Yaacov Zamir <kobi....@gmail.com>
2 gwencasey96 <74568397+g...@users.noreply.github.com>
4 kubevirt-bot <kubev...@redhat.com>
Additional Resources
--------------------
- Mailing list: <https://groups.google.com/forum/#!forum/kubevirt-dev>
- [How to contribute][contributing]
- [License][license]
[contributing]: https://github.com/kubevirt/containerized-data-importer/blob/main/hack/README.md
[license]: https://github.com/kubevirt/containerized-data-importer/blob/main/LICENSE
Reply all
Reply to author
Forward
0 new messages