release candidate v1.1.1

.github/workflows/nightly_e2e_tests_report.yaml

@@ -45,7 +45,7 @@ jobs:
           markdown_table=""
 
           header="| CSI | Status | Passed | Failed	| Pending	| Skipped	| Date | Time | Branch|\n"
-          separator="|---|---|---|---|---|---|---|---|\n"
+          separator="|---|---|---|---|---|---|---|---|---|\n"
 
           markdown_table+="$header"
           markdown_table+="$separator"

api/core/v1alpha2/virtual_machine_operation.go

@@ -69,22 +69,26 @@ type VirtualMachineOperationRestoreSpec struct {
 	VirtualMachineSnapshotName string `json:"virtualMachineSnapshotName"`
 }
 
+// +kubebuilder:validation:XValidation:rule="(has(self.customization) && ((has(self.customization.namePrefix) && size(self.customization.namePrefix) > 0) || (has(self.customization.nameSuffix) && size(self.customization.nameSuffix) > 0))) || (has(self.nameReplacement) && size(self.nameReplacement) > 0)",message="At least one of customization.namePrefix, customization.nameSuffix, or nameReplacement must be set"
 // VirtualMachineOperationCloneSpec defines the clone operation.
 type VirtualMachineOperationCloneSpec struct {
 	Mode VMOPRestoreMode `json:"mode"`
 	// NameReplacement defines rules for renaming resources during cloning.
+	// +kubebuilder:validation:XValidation:rule="self.all(nr, has(nr.to) && size(nr.to) >= 1 && size(nr.to) <= 59)",message="Each nameReplacement.to must be between 1 and 59 characters"
 	NameReplacement []NameReplacement `json:"nameReplacement,omitempty"`
 	// Customization defines customization options for cloning.
 	Customization *VirtualMachineOperationCloneCustomization `json:"customization,omitempty"`
 }
 
+// +kubebuilder:validation:XValidation:rule="!has(self.namePrefix) || (size(self.namePrefix) >= 1 && size(self.namePrefix) <= 59)",message="namePrefix length must be between 1 and 59 characters if set"
+// +kubebuilder:validation:XValidation:rule="!has(self.nameSuffix) || (size(self.nameSuffix) >= 1 && size(self.nameSuffix) <= 59)",message="nameSuffix length must be between 1 and 59 characters if set"
 // VirtualMachineOperationCloneCustomization defines customization options for cloning.
 type VirtualMachineOperationCloneCustomization struct {
 	// NamePrefix adds a prefix to resource names during cloning.
-	// Applied to VirtualDisk, VirtualMachineIPAddress, VirtualMachineMACAddress, and Secret resources.
+	// Applied to VirtualMachine, VirtualDisk, VirtualMachineBlockDeviceAttachment, and Secret resources.
 	NamePrefix string `json:"namePrefix,omitempty"`
 	// NameSuffix adds a suffix to resource names during cloning.
-	// Applied to VirtualDisk, VirtualMachineIPAddress, VirtualMachineMACAddress, and Secret resources.
+	// Applied to VirtualMachine, VirtualDisk, VirtualMachineBlockDeviceAttachment, and Secret resources.
 	NameSuffix string `json:"nameSuffix,omitempty"`
 }
 

build/components/versions.yml

@@ -4,7 +4,7 @@ firmware:
   edk2: stable202411
 core:
   3p-kubevirt: v1.3.1-v12n.17
-  3p-containerized-data-importer: v1.60.3-v12n.11
+  3p-containerized-data-importer: v1.60.3-v12n.12
   distribution: 2.8.3
 package:
   acl: v2.3.1
@@ -13,7 +13,7 @@ package:
   dtc: v1.7.2
   e2fsprogs: v1.47.1
   file: FILE5_45
-  gcc: releases/gcc-14.2.0
+  gcc: releases/gcc-13.2.0
   glib2: 2.84.2
   glibc: glibc-2.38
   libgmp: 6.3.0
@@ -84,8 +84,9 @@ package:
   readline: readline-8.2
   cyrus-sasl2: cyrus-sasl-2.1.28 # libsasl2-3
   libseccomp: v2.6.0
-  selinux: 3.6
+  selinux: 3.8
   libslirp: v4.8.0
+  libxkbcommon: xkbcommon-1.10.0
   snappy: 1.2.2 # libsnappy
   systemd: v255
   zlib: v1.3.1

crds/virtualmachineoperations.yaml

@@ -81,6 +81,19 @@ spec:
                             Applied to VirtualMachine, VirtualDisk, VirtualMachineBlockDeviceAttachment, and Secret resources.
                           type: string
                       type: object
+                      x-kubernetes-validations:
+                        - message:
+                            namePrefix length must be between 1 and 59 characters
+                            if set
+                          rule:
+                            "!has(self.namePrefix) || (size(self.namePrefix) >= 1
+                            && size(self.namePrefix) <= 59)"
+                        - message:
+                            nameSuffix length must be between 1 and 59 characters
+                            if set
+                          rule:
+                            "!has(self.nameSuffix) || (size(self.nameSuffix) >= 1
+                            && size(self.nameSuffix) <= 59)"
                     mode:
                       description: |-
                         VMOPRestoreMode defines the kind of the restore operation.
@@ -121,9 +134,23 @@ spec:
                           - to
                         type: object
                       type: array
+                      x-kubernetes-validations:
+                        - message: Each nameReplacement.to must be between 1 and 59 characters
+                          rule:
+                            self.all(nr, has(nr.to) && size(nr.to) >= 1 && size(nr.to)
+                            <= 59)
                   required:
                     - mode
                   type: object
+                  x-kubernetes-validations:
+                    - message:
+                        At least one of customization.namePrefix, customization.nameSuffix,
+                        or nameReplacement must be set
+                      rule:
+                        (has(self.customization) && ((has(self.customization.namePrefix)
+                        && size(self.customization.namePrefix) > 0) || (has(self.customization.nameSuffix)
+                        && size(self.customization.nameSuffix) > 0))) || (has(self.nameReplacement)
+                        && size(self.nameReplacement) > 0)
                 force:
                   description: |-
                     Force execution of an operation.

docs/USER_GUIDE.md

@@ -2492,26 +2492,12 @@ spec:
       name: user-net # Network name
 ```
 
-It is allowed to connect a VM to the same network multiple times. Example:
-
-```yaml
-spec:
-  networks:
-    - type: Main # Must always be specified first
-    - type: Network
-      name: user-net # Network name
-    - type: Network
-      name: user-net # Network name
-```
-
 Example of connecting to the cluster network `corp-net`:
 
 ```yaml
 spec:
   networks:
     - type: Main # Must always be specified first
-    - type: Network
-      name: user-net
     - type: Network
       name: user-net
     - type: ClusterNetwork
@@ -2527,12 +2513,9 @@ status:
     - type: Network
       name: user-net
       macAddress: aa:bb:cc:dd:ee:01
-    - type: Network
-      name: user-net
-      macAddress: aa:bb:cc:dd:ee:02
     - type: ClusterNetwork
       name: corp-net
-      macAddress: aa:bb:cc:dd:ee:03
+      macAddress: aa:bb:cc:dd:ee:02
 ```
 
 For each additional network interface, a unique MAC address is automatically generated and reserved to avoid collisions. The following resources are used for this: `VirtualMachineMACAddress` (`vmmac`) and `VirtualMachineMACAddressLease` (`vmmacl`).

docs/USER_GUIDE.ru.md

@@ -2524,26 +2524,12 @@ spec:
       name: user-net # Название сети
 ```
 
-Допускается подключать одну ВМ к одной и той же сети несколько раз. Пример:
-
-```yaml
-spec:
-  networks:
-    - type: Main # Обязательно указывать первым
-    - type: Network
-      name: user-net # Название сети
-    - type: Network
-      name: user-net # Название сети
-```
-
 Пример подключения кластерной сети `corp-net`:
 
 ```yaml
 spec:
   networks:
     - type: Main # Обязательно указывать первым
-    - type: Network
-      name: user-net
     - type: Network
       name: user-net
     - type: ClusterNetwork
@@ -2559,12 +2545,9 @@ status:
     - type: Network
       name: user-net
       macAddress: aa:bb:cc:dd:ee:01
-    - type: Network
-      name: user-net
-      macAddress: aa:bb:cc:dd:ee:02
     - type: ClusterNetwork
       name: corp-net
-      macAddress: aa:bb:cc:dd:ee:03
+      macAddress: aa:bb:cc:dd:ee:02
 ```
 
 Для каждого дополнительного сетевого интерфейса автоматически создается и резервируется уникальный MAC-адрес, что обеспечивает отсутствие коллизий MAC-адресов. Для этих целей используются ресурсы: `VirtualMachineMACAddress` (`vmmac`) и `VirtualMachineMACAddressLease` (`vmmacl`).

images/bounder/werf.inc.yaml

@@ -12,7 +12,7 @@ imageSpec:
 ---
 image: {{ .ModuleNamePrefix }}{{ .ImageName }}-cbuilder
 final: false
-fromImage: builder/golang-bookworm-1.23
+fromImage: builder/golang-bookworm-1.24
 git:
   - add: {{ .ModuleDir }}/images/{{ .ImageName }}/static_binaries
     to: /static_binaries

images/cdi-artifact/werf.inc.yaml

@@ -143,7 +143,7 @@ shell:
 ---
 image: {{ .ModuleNamePrefix }}{{ .ImageName }}-cbuilder
 final: false
-fromImage: {{ eq $.SVACE_ENABLED "false" | ternary "builder/golang-bookworm-1.23" "builder/alt-go-svace" }}
+fromImage: {{ eq $.SVACE_ENABLED "false" | ternary "builder/golang-bookworm-1.24" "builder/alt-go-svace" }}
 git:
   - add: {{ .ModuleDir }}/images/{{ .ImageName }}
     to: /

images/cdi-cloner/werf.inc.yaml

@@ -53,7 +53,7 @@ shell:
 ---
 image: {{ .ModuleNamePrefix }}{{ .ImageName }}-gobuild
 final: false
-fromImage: {{ eq $.SVACE_ENABLED "false" | ternary "builder/golang-bookworm-1.23" "builder/alt-go-svace" }}
+fromImage: {{ eq $.SVACE_ENABLED "false" | ternary "builder/golang-bookworm-1.24" "builder/alt-go-svace" }}
 git:
   - add: {{ .ModuleDir }}/images/{{ .ImageName }}/cloner-startup
     to: /app

images/dvcr-artifact/docker-fuzz.sh

@@ -62,6 +62,8 @@ echo
 
 docker run --rm \
     --platform linux/amd64 \
+    -v $(pwd)/fuzzartifact/.cache/go-build:/root/.cache/go-build \
+    -v $(pwd)/fuzzartifact/logs:/tmp/fuzz \
     $(docker build --platform linux/amd64 -q -f "$DOCKERFILE" .)
 
 echo

images/dvcr-artifact/fuzz.Dockerfile

@@ -1,8 +1,9 @@
-FROM golang:1.23-bookworm
+FROM golang:1.24-bookworm
 
 RUN apt update -y && apt install -y \
   build-essential \
-  libnbd-dev
+  libnbd-dev \
+  qemu-utils
 
 WORKDIR /app
 

images/dvcr-artifact/fuzz.sh

@@ -32,10 +32,10 @@ cleanup() {
   done
 
   # kill workers if they are still running
-  pids=$(ps aux | grep 'fuzzworker' | awk '{print $2}')
+  pids=$(pgrep -f fuzzworker)
   if [[ ! -z "$pids" ]]; then
-    echo "$pids" | xargs kill 2>/dev/null || true
-    sleep 1  # wait a moment for them to terminate
+    echo "$pids" | xargs kill -2 2>/dev/null || true
+    sleep 10  # wait a moment for them to terminate
     echo "$pids" | xargs kill -9 2>/dev/null || true
   fi
 
@@ -85,10 +85,10 @@ for file in ${files}; do
         wait "$fuzz_pid" 2>/dev/null || true
 
         # kill workers if they are still running
-        pids=$(ps aux | grep 'fuzzworker' | awk '{print $2}')
+        pids=$(pgrep -f fuzzworker)
         if [[ ! -z "$pids" ]]; then
-          echo "$pids" | xargs kill 2>/dev/null || true
-          sleep 1  # wait a moment for them to terminate
+          echo "$pids" | xargs kill -2 2>/dev/null || true
+          sleep 10  # wait a moment for them to terminate
           echo "$pids" | xargs kill -9 2>/dev/null || true
         fi