feat: upgrade azurefile-csi-driver image to v1.35.5#8909
Conversation
Changes cached containers or packages on windows VHDsPlease get a Windows SIG member to approve. The following dif file shows any additions or deletions from what will be cached on windows VHDs organised by VHD type.
diff --git a/vhd_files/2022-containerd-gen2.txt b/vhd_files/2022-containerd-gen2.txt
index e187816..551c21e 100644
--- a/vhd_files/2022-containerd-gen2.txt
+++ b/vhd_files/2022-containerd-gen2.txt
@@ -123 +122,0 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.34.6-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.3-windows-hp
@@ -124,0 +124 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.4-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.5-windows-hp
diff --git a/vhd_files/2022-containerd.txt b/vhd_files/2022-containerd.txt
index 760db3c..9c29534 100644
--- a/vhd_files/2022-containerd.txt
+++ b/vhd_files/2022-containerd.txt
@@ -123 +122,0 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.34.6-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.3-windows-hp
@@ -124,0 +124 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.4-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.5-windows-hp
diff --git a/vhd_files/2025-gen2-tl.txt b/vhd_files/2025-gen2-tl.txt
index a901175..2f99da4 100644
--- a/vhd_files/2025-gen2-tl.txt
+++ b/vhd_files/2025-gen2-tl.txt
@@ -54 +53,0 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.34.6-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.3-windows-hp
@@ -55,0 +55 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.4-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.5-windows-hp
diff --git a/vhd_files/2025-gen2.txt b/vhd_files/2025-gen2.txt
index 4d7aa19..e301b4f 100644
--- a/vhd_files/2025-gen2.txt
+++ b/vhd_files/2025-gen2.txt
@@ -54 +53,0 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.34.6-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.3-windows-hp
@@ -55,0 +55 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.4-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.5-windows-hp
diff --git a/vhd_files/2025.txt b/vhd_files/2025.txt
index 1441011..21df0cd 100644
--- a/vhd_files/2025.txt
+++ b/vhd_files/2025.txt
@@ -54 +53,0 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.34.6-windows-hp
-mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.3-windows-hp
@@ -55,0 +55 @@ mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.4-windows-hp
+mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.5-windows-hp |
There was a problem hiding this comment.
Pull request overview
This PR updates the pinned Azure File CSI Driver container image versions in parts/common/components.json, ensuring AKS node/VHD build and provisioning flows reference the latest patch release.
Changes:
- Bump
oss/v2/kubernetes-csi/azurefile-csifrom v1.35.4 → v1.35.5 (multi-arch). - Bump
oss/v2/kubernetes-csi/azurefile-csiWindows HP image from v1.35.4-windows-hp → v1.35.5-windows-hp.
Package Update Analysis: azurefile-csi-driver
Version change: v1.35.4 → v1.35.5 (patch update)
OS variants affected: Linux (multi-arch image), Windows (windows-hp image)
OS variants NOT updated: None — full coverage for the v1.35.x entries updated in this PR
Notable changes between v1.35.4 and v1.35.5 (upstream release notes / compare):
- Security: Fix for CVE-2026-25680 (🔴 High impact, but the fix itself is beneficial; upgrade recommended).
Sources: GitHub releases + compare: https://github.com/kubernetes-sigs/azurefile-csi-driver/releases and kubernetes-sigs/azurefile-csi-driver@v1.35.4...v1.35.5 - Validation/Robustness: Added
volumeidvalidation (🟡 Medium; could surface previously-hidden invalid inputs, but improves correctness). - Dependencies: Updated CSI sidecar images (🟡 Medium; can change behavior subtly, but is typical for patch releases).
- Performance/Scaling: Increased kube API QPS/burst for snapshot-related components (🟢 Low/🟡 Medium depending on cluster load; generally beneficial).
Overall Risk: 🟡 Medium
Recommendation: Approve (patch release with a security fix; changes are in line with routine component pin bumps).
What this PR does / why we need it:
Upgrade azurefile-csi-driver image to v1.35.5.
Changes:
latestVersionfromv1.35.4tov1.35.5(Linux multi-arch)latestVersionfromv1.35.4-windows-hptov1.35.5-windows-hp(Windows)previousLatestVersionaccordingly (v1.35.3→v1.35.4,v1.35.3-windows-hp→v1.35.4-windows-hp)Which issue(s) this PR fixes:
N/A