Release v5.22.0
What's Changed
- CI | Remove KMS condition status Init checks from tests by @liranmauda in #1755
- filter out NOOBAA_ROOT_SECRET from env vars to avoid exposing it in pod spec by @liranmauda in #1753
- Bump github.com/expr-lang/expr from 1.17.6 to 1.17.7 by @dependabot[bot] in #1751
- Bump github.com/kedacore/keda/v2 from 2.18.1 to 2.18.3 by @dependabot[bot] in #1752
- Bumping version from 5.21.0 to 5.22.0 by @liranmauda in #1759
- fix:bad secret key blocking other backingstores by @VershaAgrawal in #1758
- Disable HAC by default and set noobaa-core terminationGracePeriodSeconds to 1 by @dannyzaken in #1754
- Changed DB PVC access mode to RWOP by @dannyzaken in #1761
- Revert "Bump github.com/kedacore/keda/v2 from 2.18.1 to 2.18.3" by @liranmauda in #1766
- Added noobaa-db-backup.md doc by @dannyzaken in #1774
- added regex validation to check cron format of dbBackup.schedule by @dannyzaken in #1775
- CI | adding Set up kind step to the yamls by @liranmauda in #1782
- ThanosRuleHighRuleEvaluationWarnings firing due to sufix by @naveenpaul1 in #1784
- Added a prometheus alert rule for unreachable target by @aayushchouhan09 in #1778
- OBC on Hosted Cluster | Exclude OBCs That Were Created for Client Clusters from CLI by @shirady in #1786
- prom alerts - replace bucket capacity alerts with BS capacity alert DF3671 by @alphaprinz in #1747
- Improved the NooBaaBucketErrorState alert description and message with bucket_mode by @aayushchouhan09 in #1781
- Added support documentation for prometheus monitoring by @aayushchouhan09 in #1788
- Added Azure STSCredential in Types by @VershaAgrawal in #1787
- Add runbooks full capacity alerts by @jackyalbo in #1780
- Update AWS Regions with cn-north-1 and cn-northwest-1 by @liranmauda in #1798
- Added a fix for merging the PR in update NooBaa container image tag CI by @aayushchouhan09 in #1792
- DFBUGS-5052 Fix for Noobaa DB cleaner not honoring set value by @kajalpareek-lab in #1791
- Separate Module for NooBaa APIs by @shirady in #1802
- Fix the 'runbook_url' position in prometheus-rules file by @liranmauda in #1804
- CI | adding Set up kind step to be in a fixed version and do not install twice by @liranmauda in #1807
- Revert "Separate Module for NooBaa API" by @shirady in #1806
- Update keda/v2 to v2.18.3 to avoid CVE by @liranmauda in #1808
- STS | Azure Default backingstore STS flows by @naveenpaul1 in #1777
- Re-enable HAC for components other than DB by @tangledbytes in #1810
- IAM | Missing IAM port during upgrade by @naveenpaul1 in #1819
- STS | Azure Identity flow support in Namespacestore by @naveenpaul1 in #1818
- Add Azure STS namespace store CLI (azure-sts-blob) by @kajalpareek-lab in #1817
- OBC on Hosted Cluster | Exclude Labels Used by Provider Cluster by @shirady in #1801
- Added command to create Azure STS Backingstore by @VershaAgrawal in #1789
- Bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.40.0 by @dependabot[bot] in #1822
- Update
golang.org/x/oauth2to v0.36.0 to avoid CVE by @liranmauda in #1839 - CI | fixed
releaser.yamlto usego.modinstead of specific go version by @liranmauda in #1840 - Adding PDB alert silencer by @dannyzaken in #1842
- Vector Bucket | Vector Policy API type and Vector Bucket RPC definitions | PR 1 by @romayalon in #1846
- STS | Azure STS param validation by @naveenpaul1 in #1837
- Skip GCP cloud credentials and use PVPool for default backing store by @aayushchouhan09 in #1835
- Metrics - Make metrics targets to use HTTPS instead of HTTP by @romayalon in #1827
- Remove 7004 http metrics port from service by @romayalon in #1854
- Adds unit and integration tests for Azure STS (workload identity) by @kajalpareek-lab in #1836
- Resolved max object and max size override conflict by @VershaAgrawal in #1851
- OBC on Hosted Cluster | OBC list by default would include remobe obc by @shirady in #1849
- Revert PR #1835: Restore GCP cloud credentials and backing store by @aayushchouhan09 in #1858
- Update noobaa-core container image tag in options.go by @romayalon in #1859
- Remove vector db config from the internal RPC API by @romayalon in #1860
- Added a warning when quota exceeding the available space by @aayushchouhan09 in #1826
- STS | Azure backing and namespace store CLI changes by @naveenpaul1 in #1856
- Add support for priority classes by @tangledbytes in #1861
- Endpoint TLS configuration support by @romayalon in #1824
- Vector Bucket Class CLI and admission webhooks by @romayalon in #1864
- Admission webhook TLS configuration load/reload support by @romayalon in #1863
- Fix negative number in Num Objects Avail by @VershaAgrawal in #1847
- vectors - cluster service by @alphaprinz in #1870
- Vector bucket provisioner changes by @romayalon in #1868
- Support key rotation to IBM KeyProtect on ROKS Cluster by @naveenpaul1 in #1862
- Vector bucket CLI support for OBC commands by @romayalon in #1869
- OBC provisioner/CLI changes post vectors service addition by @romayalon in #1873
- vectors - add namespacestores to ui role by @alphaprinz in #1871
- TLS configuration ODF alignement by @romayalon in #1867
- STS | DOC Azure STS setup for Openshift and Minikube by @naveenpaul1 in #1825
- Default to loading the endpoints system store from the core instead of the DB by @dannyzaken in #1874
- Bumping deps to avoid CVE (19/04/2026) by @liranmauda in #1882
- Fixed negative reporting of quota metrics by @VershaAgrawal in #1883
- STS | Azure env updated to uppercase by @naveenpaul1 in #1884
- [Backport into 5.22] by @liranmauda in #1896
- [Backport into 5.22] STS | Azure provider spec missing Region by @liranmauda in #1901
- Backport to 5.22 by @dannyzaken in #1906
- [Backport into 5.22] Add runtime-configurable OPERATOR_LOG_LEVEL and reduce log noise by @liranmauda in #1913
- [Backport into 5.22] Bumping deps to avoid CVE (10/06/2026) by @liranmauda in #1943
- [Backport to 5.22] Harden CNPG PostgreSQL config for replica HA stability by @dannyzaken in #1950
- [Backport into 5.22] Fix BucketClass quota ignore during OBC update by @VershaAgrawal in #1952
- [Backport into 5.22] DFBUGS-7108 | Add
ConnectAutoinstead ofConnectTo Use CLI Commands From Operator Pod by @liranmauda in #1962 - [Backport to 5.22] Bumped cnpg dependency to 1.29.1 by @dannyzaken in #1967
- [Backport into 5.22] Fixed Stale External Connection on Endpoint Change by @VershaAgrawal in #1971
- [Direct into 5.22] Bumping deps to avoid CVE (30/06/2026) by @liranmauda in #1983
- [Backport to 5.22] bumped cnpg vesion to 1.29.2 by @dannyzaken in #1993
- [Backport to 5.22] revert to cnpg 1.29.1 and patch cnpg cluster role by @dannyzaken in #1998
- [Backport 5.22] Fix IPv6 URL parsing by @tangledbytes in #2013
Full Changelog: v5.21.0...v5.22.0