CHANGELOG-2.x.md

V2.3.1

• Update AccessPointPerFsLimit to 10000 (#1806, @DavidXU12345)
• Fix Validation for Hardcoded AccessPoint GID/UID (#1809, @samuhale)
• Remove Extraneous Describe Call from CreateVolume (#1810, @samuhale)

V2.3.0

• fix: Add CSI topology for One Zone EFS (#1761, @aliyajo)
• Upgrade golang to 1.25.5 to fix high CVE (#1763, @DavidXU12345)
• fix: verify startup taint removal after patch to prevent false positives (#1774, @aliyajo)
• Fix OpenSSL CVE (#1775, @YangjinanHu)
• Fix Sidecar CVEs (#1779, @YangjinanHu)
• Upgrade k8s.io/kubernetes from v1.33.4 to v1.33.6 to fix CVE (#1781, @DavidXU12345)

V2.2.0

• Add revisionHistoryLimit support in charts (#1760, @DavidXU12345)
• Upgrade sidecar to fix CVEs (#1758, @DavidXU12345)
• Add force-unmount-after-timeout configuration to the helm chart (#1751, @brainfair)
• Add opt-in parameter to disable node mutation permissions (#1739, @dankova22)
• feat: Add ability to configure emptyDir params (sizeLimit, medium) (#1727, @mkilchhofer)
• Support whitespace in tag keys and values (#1716, @slackfan)
• feat: added support for externalId in cross-account EFS configuration (#1690, @andylim0221)

V2.1.15

• Golang upgrade (#1738, @DavidXU12345)
• Update efs-utils conf for eu regions DNS (#1737, @dankova22)
• Update Dockerfile for new efs-utils dependencies (#1736, @dankova22)
• Specify fileSystemId from K8 ConfigMap/Secret (#1724, @aliyajo)
• Add force unmount after timeout option (#1710, @DavidXU12345)

V2.1.14

• Upgrade aws-sdk-go-v2 to latest version (#1729, @DavidXU12345)

V2.1.13

• Update Dependencies (#1709, @zmaguire)
• Set PosixUser.Uid correctly in ListAccessPoints (#1707, @yerzhan7)
• Add maxInflightMountCalls and volumeAttachLimit args (#1706, @DavidXU12345)

V2.1.12

• Update golang MV in DockerFile (#1697, @mondaljs)
• Update Sidecar Versions to Resolve CVEs (#1694, @samuhale)
• Allow : in Tags with Escape Character (#1693, @samuhale)

V2.1.11

• Bump k8 version to default 1.33 for e2e tests(#1681, @dankova22)
• Update openssl installation change in Dockerfile (#1678, @anthotse)
• Fix spelling errors and modernize deprecated io/ioutil usage (#1674, @oyiz)

V2.1.10

• Update dependencies and fix go.sum (#1663, @anthotse)
• Implement ControllerModifyVolume function (#1663, @anthotse)
• Update golang in Dockerfile (#1663, @anthotse)

V2.1.9

• Fixing CVEs and depricated pod images (#1649), @thakurmi
• unpinned openssl to fix failing build (#1611), @thakurmi
• CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 (#1611), @kunalmemane

V2.1.8

• Remove unused workflow that publishes images to dockerhub (#1621, @jrakas-dev)
• Return existing access point if one already exists during create workflow (#1620, @jrakas-dev)
• Clean install openssl and standardize eks distro (#1619, @dankova22)
• Fix centos image in pod config examples (#1611, @thakurmi)

V2.1.7

• Adding additional checks and multi threaded testing to ensure concurrent createVolume and deleteVolume calls are handled correctly ([#1592] (#1592), @dluthcke)
• Clarifying Note when uninstalling CSI driver ([#1599] (#1599), @dluthcke)
• Update README.md to include uninstall instructions ([#1597] (#1596), @dluthcke)
• Updating sidecar versions (#1596, @dluthcke)
• Update K8s version to mitigate CVE-2025-0426 (#1594, @mskanth97)

V2.1.6

Remove libwrap=no from stunnel config on startup for newer stunnel compatibility (#1586, @dankova22)

V2.1.5

• Upgrade golang.net (v0.25.0 -> v0.33.0) ([#1562]#1562)
• Updated Python distribution to latest version and add symlink to stunnel5 to ensure compatibility ([#1569]https://github.com/kubernetes-sigs/aws-efs-csi-driver/pull/1569/files)

V2.1.4

• Upgrade stunnel to 5 (#1561, @dankova22)

V2.1.3

• Fix default value for unhealthyPodEvictionPolicy (#1524, @z0rc)
• Switch to adaptive retry mode to reduce throttling errors (#1520, @dankova22)

V2.1.2

• Modify delete access point root directory logic to only remove temporary directory if empty (#1532, @jrakas-dev)
• Bump golang.org/x/crypto to v0.31.0 (#1531, @germanparente)
• Update k8s dependencies (#1514, @andrewjamesbrown)

V2.1.1

• Fix volume delete failure for static provisioning when accessPointId is empty (#1507, @dankova22)
• Update Go and dependencies to address CVEs (#1513, @andrewjamesbrown)
• Add metadata.namespace to chart templates (#1376, @Kellen275)
• Adding new argument for csi provisioner (#1512, @mskanth972)
• Add permissions to all GitHub actions (#1508, @mskanth972)
• Add additional arguments for Side cars (#1506, @mskanth972)
• Fix controller podLabels typo in values.yaml (#1445, @pvickery-ParamountCommerce)
• Add anti-affinity for incompatible compute types (#1496, @abhinavmpandey08)
• Update python base images to newer versions (#1480, @andrewjamesbrown)

V2.1.0

• Update CodeQL workflow to v2. (#1485,@mskanth972)
• Bump side-cars to the latest. (#1484,@mskanth972)
• Update kubernetes to version 1.27.16 to patch CVE-2024-5321. (#1475,@mselim00)

V2.0.9

• Upgrade AL2 version and address CVEs (CVE-2024-34156, CVE-2024-34158)
• Fix controller template to support replicaCount, resources, topologySpreadConstraints
• Migrate to aws-sdk-go-v2. (#1458, @avanish23)

V2.0.8

• Update K8s dependencies. (#1440, @retornam)
• Add flag that enables CSI driver to be added without using helm hooks (#1074, @woehrl01)
• Add new region DNS suffixes to watchdog (#1455, @jdwtf)
• Use protobuf content type instead of JSON for K8s client (#1451, @bhavi-koduru)

V2.0.7

• Update GO version from 1.20 to 1.22.5 to mitigate CVEs. (#1427,@mskanth972)

V2.0.6

• Updated the docker file to install the latest version of Rust. (#1414,@mskanth972)
• Increase the default Port Range from 400 to 1000. (#1402,@mskanth972)
• Update statefulset example (#1400 @seanzatzdev-amazon)
• Add additionalLabels to node-daemonset (#1394 @omerap12)
• Set fips_mode_enabled in efs-utils.conf (#1344 @mpatlasov)
• make sure the startup taint will eventually being removed after efs driver ready (#1287 @abbshr)
• Refactor re-use Access Point (#1233 @otorreno)

V2.0.5

• Add a note to not proceed to the next step until pv STATUS is Bound (#1075,@wafuwafu13)
• Add Pod Identity Support (#1254,@askulkarni2)
• Add Pod Identity Documentation (#1381,@arnavgup1)
• Bump Side-cars and add Patch verbs (#1387,@mskanth972)
• Update k8s dependencies (#1384,@mskanth972)

V2.0.4

• Reap efs-proxy zombie processes. (#1364,@mskanth972)
• Sanitize CSI RPC request logs. (#1363,@mskanth972)
• Edit file paths in provisioning.go to fix failing e2e test. (#1366 @seanzatzdev-amazon)

V2.0.3

• Expose env, volume, and volume mounts in helm chart for the efs controller and deamonset. (#1165, @cnmcavoy)
• Update golang.org dependency. (#1355,@mskanth972)
• efs-utils v2.0.2: Check for efs-proxy PIDs when cleaning tunnel state files. (#219, @anthotse)

V2.0.2

• Update the ChangeLog to point to latest. (#1334, @mskanth972)
• Fix ARM support for EFS CSI Driver.

V2.0.1

• Efs-utils v2.0.1. Disable Nagle's algorithm for efs-proxy TLS mounts to improve latencies. (#210, @RyanStan)
• Updated the default image to be used from Public AWS ECR Repo instead of DockerHub. (#1323, @mskanth972)

V2.0.0

• Efs-utils v2.0.0 replaces stunnel, which provides TLS encryptions for mounts, with efs-proxy, a component built in-house at AWS. (#203, @RyanStan)
• Install Rust and Cargo for building efs-utils v2.0.0 (#1306, @RyanStan)
• Update go-restful dependency. (#1308, @RyanStan)
• Adds script + instructions for an in-place upgrade test. (#1304, @seanzatzdev-amazon)
• Update test file manifest paths for e2e tests. (#1303, @seanzatzdev-amazon)
• Bump SIDECARS to the latest. (#1302, @mskanth972)