v5.22.0

Release v5.22.0

What's Changed

• CI | Remove KMS condition status Init checks from tests by @liranmauda in #1755
• filter out NOOBAA_ROOT_SECRET from env vars to avoid exposing it in pod spec by @liranmauda in #1753
• Bump github.com/expr-lang/expr from 1.17.6 to 1.17.7 by @dependabot[bot] in #1751
• Bump github.com/kedacore/keda/v2 from 2.18.1 to 2.18.3 by @dependabot[bot] in #1752
• Bumping version from 5.21.0 to 5.22.0 by @liranmauda in #1759
• fix:bad secret key blocking other backingstores by @VershaAgrawal in #1758
• Disable HAC by default and set noobaa-core terminationGracePeriodSeconds to 1 by @dannyzaken in #1754
• Changed DB PVC access mode to RWOP by @dannyzaken in #1761
• Revert "Bump github.com/kedacore/keda/v2 from 2.18.1 to 2.18.3" by @liranmauda in #1766
• Added noobaa-db-backup.md doc by @dannyzaken in #1774
• added regex validation to check cron format of dbBackup.schedule by @dannyzaken in #1775
• CI | adding Set up kind step to the yamls by @liranmauda in #1782
• ThanosRuleHighRuleEvaluationWarnings firing due to sufix by @naveenpaul1 in #1784
• Added a prometheus alert rule for unreachable target by @aayushchouhan09 in #1778
• OBC on Hosted Cluster | Exclude OBCs That Were Created for Client Clusters from CLI by @shirady in #1786
• prom alerts - replace bucket capacity alerts with BS capacity alert DF3671 by @alphaprinz in #1747
• Improved the NooBaaBucketErrorState alert description and message with bucket_mode by @aayushchouhan09 in #1781
• Added support documentation for prometheus monitoring by @aayushchouhan09 in #1788
• Added Azure STSCredential in Types by @VershaAgrawal in #1787
• Add runbooks full capacity alerts by @jackyalbo in #1780
• Update AWS Regions with cn-north-1 and cn-northwest-1 by @liranmauda in #1798
• Added a fix for merging the PR in update NooBaa container image tag CI by @aayushchouhan09 in #1792
• DFBUGS-5052 Fix for Noobaa DB cleaner not honoring set value by @kajalpareek-lab in #1791
• Separate Module for NooBaa APIs by @shirady in #1802
• Fix the 'runbook_url' position in prometheus-rules file by @liranmauda in #1804
• CI | adding Set up kind step to be in a fixed version and do not install twice by @liranmauda in #1807
• Revert "Separate Module for NooBaa API" by @shirady in #1806
• Update keda/v2 to v2.18.3 to avoid CVE by @liranmauda in #1808
• STS | Azure Default backingstore STS flows by @naveenpaul1 in #1777
• Re-enable HAC for components other than DB by @tangledbytes in #1810
• IAM | Missing IAM port during upgrade by @naveenpaul1 in #1819
• STS | Azure Identity flow support in Namespacestore by @naveenpaul1 in #1818
• Add Azure STS namespace store CLI (azure-sts-blob) by @kajalpareek-lab in #1817
• OBC on Hosted Cluster | Exclude Labels Used by Provider Cluster by @shirady in #1801
• Added command to create Azure STS Backingstore by @VershaAgrawal in #1789
• Bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.40.0 by @dependabot[bot] in #1822
• Update golang.org/x/oauth2 to v0.36.0 to avoid CVE by @liranmauda in #1839
• CI | fixed releaser.yaml to use go.mod instead of specific go version by @liranmauda in #1840
• Adding PDB alert silencer by @dannyzaken in #1842
• Vector Bucket | Vector Policy API type and Vector Bucket RPC definitions | PR 1 by @romayalon in #1846
• STS | Azure STS param validation by @naveenpaul1 in #1837
• Skip GCP cloud credentials and use PVPool for default backing store by @aayushchouhan09 in #1835
• Metrics - Make metrics targets to use HTTPS instead of HTTP by @romayalon in #1827
• Remove 7004 http metrics port from service by @romayalon in #1854
• Adds unit and integration tests for Azure STS (workload identity) by @kajalpareek-lab in #1836
• Resolved max object and max size override conflict by @VershaAgrawal in #1851
• OBC on Hosted Cluster | OBC list by default would include remobe obc by @shirady in #1849
• Revert PR #1835: Restore GCP cloud credentials and backing store by @aayushchouhan09 in #1858
• Update noobaa-core container image tag in options.go by @romayalon in #1859
• Remove vector db config from the internal RPC API by @romayalon in #1860
• Added a warning when quota exceeding the available space by @aayushchouhan09 in #1826
• STS | Azure backing and namespace store CLI changes by @naveenpaul1 in #1856
• Add support for priority classes by @tangledbytes in #1861
• Endpoint TLS configuration support by @romayalon in #1824
• Vector Bucket Class CLI and admission webhooks by @romayalon in #1864
• Admission webhook TLS configuration load/reload support by @romayalon in #1863
• Fix negative number in Num Objects Avail by @VershaAgrawal in #1847
• vectors - cluster service by @alphaprinz in #1870
• Vector bucket provisioner changes by @romayalon in #1868
• Support key rotation to IBM KeyProtect on ROKS Cluster by @naveenpaul1 in #1862
• Vector bucket CLI support for OBC commands by @romayalon in #1869
• OBC provisioner/CLI changes post vectors service addition by @romayalon in #1873
• vectors - add namespacestores to ui role by @alphaprinz in #1871
• TLS configuration ODF alignement by @romayalon in #1867
• STS | DOC Azure STS setup for Openshift and Minikube by @naveenpaul1 in #1825
• Default to loading the endpoints system store from the core instead of the DB by @dannyzaken in #1874
• Bumping deps to avoid CVE (19/04/2026) by @liranmauda in #1882
• Fixed negative reporting of quota metrics by @VershaAgrawal in #1883
• STS | Azure env updated to uppercase by @naveenpaul1 in #1884
• [Backport into 5.22] by @liranmauda in #1896
• [Backport into 5.22] STS | Azure provider spec missing Region by @liranmauda in #1901
• Backport to 5.22 by @dannyzaken in #1906
• [Backport into 5.22] Add runtime-configurable OPERATOR_LOG_LEVEL and reduce log noise by @liranmauda in #1913
• [Backport into 5.22] Bumping deps to avoid CVE (10/06/2026) by @liranmauda in #1943
• [Backport to 5.22] Harden CNPG PostgreSQL config for replica HA stability by @dannyzaken in #1950
• [Backport into 5.22] Fix BucketClass quota ignore during OBC update by @VershaAgrawal in #1952
• [Backport into 5.22] DFBUGS-7108 | Add ConnectAuto instead of Connect To Use CLI Commands From Operator Pod by @liranmauda in #1962
• [Backport to 5.22] Bumped cnpg dependency to 1.29.1 by @dannyzaken in #1967
• [Backport into 5.22] Fixed Stale External Connection on Endpoint Change by @VershaAgrawal in #1971
• [Direct into 5.22] Bumping deps to avoid CVE (30/06/2026) by @liranmauda in #1983
• [Backport to 5.22] bumped cnpg vesion to 1.29.2 by @dannyzaken in #1993
• [Backport to 5.22] revert to cnpg 1.29.1 and patch cnpg cluster role by @dannyzaken in #1998
• [Backport 5.22] Fix IPv6 URL parsing by @tangledbytes in #2013

Full Changelog: v5.21.0...v5.22.0