v1.21.0

What's Changed

• Fix missing env variables for prow runs in OIDC auth + temporarily disable the OIDC auth tests in prow/local by @amacaskill in #1044
• add min version / driver installation instructions to oidc auth docs by @amacaskill in #1046
• Correct mount options for gcsfuse profiles. by @uriel-guzman in #1047
• Allow sidecar to handle the "file-cache-medium" flag. by @uriel-guzman in #1049
• Add label to Pod if the cache was created by the user. by @uriel-guzman in #1050
• Call gcsfuse profiles from NodePublishVolume by @uriel-guzman in #1052
• Address nits by @uriel-guzman in #1054
• Fallback to RAM if TPU specified LSSD in priority list. by @uriel-guzman in #1055
• Add JSON recommendation log with signals and decisions. by @uriel-guzman in #1056
• Bump GCS Fuse version for CVE fix by @Sneha-at in #1058
• Allow only-dir to be passed in config-file format by @uriel-guzman in #1062
• Bump Go version to 1.24.9 to fix CVEs by @Sneha-at in #1061
• Create AnywhereCache during bucket scan operation by @chrisThePattyEater in #981
• Bump gcsfuse binary to v3.4.4 for CVE fix by @amacaskill in #1064
• Delete HNS annotation from PV. by @uriel-guzman in #1060
• Revert GCSFuse Profiles Feature - AC Creation - due to test grid failures by @chrisThePattyEater in #1065
• Reapply Anywhere Cache creation logic and related dependencies by @chrisThePattyEater in #1067
• Categorize scanner errors in preparation for SLO metrics. by @uriel-guzman in #1068
• add version filter for managed driver testgrid by @Sneha-at in #1053
• Update supported minimum GKE version for sidecar bucket access check … by @Sneha-at in #1076
• move sidecar bucket access check enablement to stable by @Sneha-at in #1057
• Update documentation to install from publicly hosted image by default by @amacaskill in #1077
• Enable sidecar bucket access check behavior on tests as the feature is in stable overlay by @Sneha-at in #1079
• Added Prometheus metric counters to scanner syncPV and syncPod by @uriel-guzman in #1069
• Update GKE version mapping for feature releases by @Sneha-at in #1078
• No Agent Available- retry exec commands in e2e tests by @chrisThePattyEater in #1070
• always set sidecar bucket access check env variable by @Sneha-at in #1081
• Use full custer version for feature version comparison by @Sneha-at in #1082
• Revert "Use full custer version for feature version comparison" by @amacaskill in #1083
• add fix and corresponding tests by @jdnurme in #1086

New Contributors

• @jdnurme made their first contribution in #1086

Full Changelog: v1.20.0...v1.21.0

v1.20.4

What's Changed

• Automated cherry pick of #1064: Bump gcsfuse binary to v3.4.4 for CVE fix by @chrisThePattyEater in #1066

Full Changelog: v1.20.3...v1.20.4

v1.20.3

What's Changed

• Automated cherry pick of #1061: Bump Go version to 1.24.9 to fix CVEs by @Sneha-at in #1063

Full Changelog: v1.20.2...v1.20.3

v1.20.2

What's Changed

• Automated cherry pick of #1058: Bump GCS Fuse version for CVE fix by @Sneha-at in #1059

Full Changelog: v1.20.1...v1.20.2

v1.20.1

What's Changed

• Automated cherry pick of #1046: add min version / driver installation instructions to oidc auth docs by @amacaskill in #1051

Testing out image generation changes, so creating new release just to trigger it. This release is no different from v1.20.0 besides a minor doc change that isn't even included in the binary.

Full Changelog: v1.20.0...v1.20.1

v1.20.0

What's Changed

• Fix CVE-2025-9230, CVE-2025-9232 and skip profile test for managed by @chrisThePattyEater in #988
• Add support and documentation for running GCSFuse CSI Driver on OSS K8s by @amacaskill in #975
• add host network restriction for SA volume injection by @Sneha-at in #989
• Bucket Scanner Controller - Bucket Scan Override Status by @uriel-guzman in #986
• update minimum version for oss k8s support in oss k8s setup guide by @amacaskill in #993
• safeguard k8s client creation behind feature flag by @Sneha-at in #994
• update tag for oss support by @Sneha-at in #998
• fix typo in Makefile when building from GCSFUSE_SOURCE by @amacaskill in #1000
• Update cloud profilier agent sidecar min version by @siyanshen in #999
• document the gcsfusecsi mount workflow by @saikat-royc in #1001
• update design snippets link by @saikat-royc in #1002
• GCSFuse Profiles: Rename enable-bucket-scanner to enable-gcsfuse-profiles by @uriel-guzman in #997
• Setup overlay/profiles for CSI node gcsfuse profile related changes. by @uriel-guzman in #1003
• Setup necessary informers and listers for upcoming gcsfuse profiles CSI node changes by @uriel-guzman in #1004
• GCSFuse Profiles: BuildProfileConfig helper function by @uriel-guzman in #1007
• Add Node details to the BuildProfileConfig by @uriel-guzman in #1015
• Support passing of custom gcloud command / args to test/e2e/run-e2e-ci.sh by @uriel-guzman in #1016
• Add Pod details to BuildProfileConfig by @uriel-guzman in #1017
• update client creation logic and add new overlay by @Sneha-at in #1014
• Fix failed mount tests for sidecar bucket access check by @Sneha-at in #985
• Storage Profiles Add PV Annotations Validation by @chrisThePattyEater in #1018
• add a new test with skip-csi-bucket-access-check to verify permission… by @Sneha-at in #1028
• Recommend metadata cache type and stat max sizes. by @uriel-guzman in #1020
• skip the permission test when bucket access check is skipped by @Sneha-at in #1030
• Restrict sidecar bucket access check for only workload identity by @Sneha-at in #1023
• Bump gcsfuse to 3.4.1 by @chrisThePattyEater in #1031
• Report bucket access check sidecar errors to node driver pod by @Sneha-at in #1022
• feat: add workload identity credential support for GCS FUSE sidecar by @pawanpnvda in #979
• GCSFuse Profiles: Recommend file cache and medium. by @uriel-guzman in #1032
• pass overlay settings for prow job by @Sneha-at in #1035
• conditionally allow profiles flag to be passed to gcsfuse by @chrisThePattyEater in #1008
• Fix CVE-2025-47906 and CVE-2025-47907 by updating go to 1.24.6 by @chrisThePattyEater in #1036
• add overlay variable by @Sneha-at in #1040
• check sc for metadata prefetch override by @chrisThePattyEater in #1029
• update min version check for sidecar bucket access check by @Sneha-at in #1045

New Contributors

• @pawanpnvda made their first contribution in #979

Full Changelog: v1.19.0...v1.20.0

v1.19.6

What's Changed

• Automated cherry pick of #1036: Fix CVE-2025-47906 and CVE-2025-47907 by updating go to 1.24.6 by @chrisThePattyEater in #1039

Full Changelog: v1.19.5...v1.19.6

v1.19.5

What's Changed

• Automated cherry pick of #1014: update client creation logic and add new overlay by @Sneha-at in #1019
• Automated cherry pick of #1031: Bump gcsfuse to 3.4.1 by @chrisThePattyEater in #1034

Full Changelog: v1.19.3...v1.19.5

v1.19.4

What's Changed

• Automated cherry pick of #994: safeguard k8s client creation behind feature flag by @Sneha-at in #996

Full Changelog: v1.19.2...v1.19.4

v1.19.3

What's Changed

• Automated cherry pick of #994: safeguard k8s client creation behind feature flag by @Sneha-at in #996

Full Changelog: v1.19.2...v19.3