v1.36.1

Mainly Update

• OSS: Optimized OSS mount management by utilizing systemd to manage the ossfs process, and implemented a version-aware ResourceVersion strategy for FUSE pod deletion.
• DISK: Enhanced block storage security by adding verification for free VFIO groups and refactored node RPC methods to use structured logging.
• NAS: Strengthened security by blocking user-space access to ports 10249 and 12049, and updated EFC and ALINAS components.
• Bmcpfs: Support vsc attach for specific node type
• Network: Optimized VPC endpoint logic to support auto-enabling endpoints when running within a VPC network.
• Security: Removed python36 and pyyaml from the csi-agent to address CVE scan vulnerabilities.

What's Changed

• cmd-mounter: use systemd to manage ossfs process by @AlbeeSo in #1659
• fix(oss): keep req priority for CNFS path and normalize URL by @AlbeeSo in #1660
• metric/disk: fix error log by @huww98 in #1661
• disk: always mount rootfs directly by @huww98 in #1530
• Bump up alinas to block access to 10249 port from userspace in amd64 by @mowangdk in #1668
• Block access to 12049 from userspace process by @mowangdk in #1669
• Change nftable command to golang/nftable by @mowangdk in #1670
• helm: v1.35.3 by @huww98 in #1671
• Bump up efc & alinas version by @mowangdk in #1676
• ossfs: poll mountpoint every 100ms by @huww98 in #1678
• build(deps): bump go.opentelemetry.io/otel from 1.39.0 to 1.41.0 in the security group across 1 directory by @dependabot[bot] in #1680
• build(deps): bump crate-ci/typos from 24c5854966d17070a3b25e2c2dfc63ec5bc94cf4 to 2d0ce569feab1f8752f1dde43cc2f2aa53236e06 by @dependabot[bot] in #1672
• proxy: enlarge MaxMsgSize to 16k by @huww98 in #1681
• credentials: auto-enable VPC endpoint when running in VPC network by @huww98 in #1653
• disk: fix Detaching disks treated as attached by @huww98 in #1520
• Support sysconfig for disk & nas by @mowangdk in #1679
• Fix typo by @huww98 in #1684
• build(deps): bump crate-ci/typos from 1.40.0 to 1.46.0 by @dependabot[bot] in #1683
• deploy: pull main container image first by @huww98 in #1662
• Make GOOS=windows compile by @huww98 in #1691
• Add expired ttl to bmcpfs cache by @mowangdk in #1689
• mount-proxy: contextual log and cancel by @huww98 in #1688
• disk: refactor node RPC methods to use structured logging by @huww98 in #1696
• bump golang to v1.26.3 by @huww98 in #1699
• add skills for dev by @huww98 in #1694
• build: cleanup and fix mount-proxy Dockerfile by @huww98 in #1693
• bump ossfs versions to v1.91.10.ack.1 and v2.0.7.ack.1 by @AlbeeSo in #1690
• Sanitize nas req by @mowangdk in #1703
• build(deps): bump crate-ci/typos from 1.46.0 to 1.46.2 by @dependabot[bot] in #1701
• build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by @dependabot[bot] in #1702
• disk: open to verify VFIO group is free by @huww98 in #1686
• csi-agent: remove python36 and pyyaml to fix CVE scans by @huww98 in #1700
• Support vsc attachments for ecs node type by @mowangdk in #1698
• feat(oss): implement version-aware ResourceVersion strategy for fuse pod delete by @AlbeeSo in #1682
• Add PodDisruptionBudget for csi-provisioner controller by @huww98 in #1695
• Fix vswitch_ids variable scope in cluster setup script by @huww98 in #1704
• Update Dockerfile 2026-05 by @huww98 in #1705
• Bump sidecars by @huww98 in #1706

Image Address:

registry.cn-beijing.aliyuncs.com/acs/csi-plugin:v1.36.1
registry.cn-beijing.aliyuncs.com/acs/csi-plugin:v1.36.1-init

Full Changelog: v1.35.3...v1.36.1