Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 14, 2026

This PR contains the following updates:

Package Update Change
snapshot-controller (source) major 4.2.05.0.2

Release Notes

kubernetes-csi/external-snapshotter (snapshot-controller)

v5.0.1

Compare Source

Overall Status

Volume snapshotting has been a GA feature since Kubernetes v1.20.

Supported CSI Spec Versions

1.0-1.5

Minimum Kubernetes version

1.20

Recommended Kubernetes version

1.20+

Container

docker pull registry.k8s.io/sig-storage/snapshot-controller:v5.0.1
docker pull registry.k8s.io/sig-storage/csi-snapshotter:v5.0.1
docker pull registry.k8s.io/sig-storage/snapshot-validation-webhook:v5.0.1

Notable Changes in v5.0.1 compared to v5.0.0

  • Update release tools and pull in the change to increase the timeout value to allow all snapshot images to be build before the timeout. (#​641, @​xing-yang)

Breaking Changes

  • Replaces many VolumeSnapshot/VolumeSnapshotContent Update/UpdateStatus operations with Patch. This lowers the probability of the "object has been modified" update API errors occurring. This change introduces a dependency on two new RBAC rules for the CSI snapshotter sidecar: volumesnapshotcontents:patch, volumesnapshotcontents/status:patch and four new RBAC rules for the snapshot-controller: volumesnapshotcontents:patch, volumesnapshotcontents/status:patch, volumesnapshots:patch, and volumesnapshots/status: patch. (#​526, @​ggriffiths)

Feature

  • Added short names for Volume Snapshot CRDs:
    • VolumeSnapshot - vs
    • VolumeSnapshotContent - vsc, vscs
    • VolumeSnapshotClass` - vsclass, vsclasses (#​604, @​robbie-demuth)
  • Adds support for distributed snapshotting. This affects both snapshot controller and CSI snapshotter sidecar. (#​585, @​nearora-msft)
  • Make the QPS and Burst of kube client config to be configurable in both snapshot-controller and CSI snapshotter sidecar (#​621, @​lintongj)

Design

  • Added kustomization manifests to CRDs, snapshot controller, and CSI snapshotter sidecar components (#​606, @​itspngu)

Bug or Regression

  • Fixed a bug introduced by #​621 which makes the QPS and Burst of kube client config configurable in both snapshot-controller and CSI snapshotter sidecar. This fix exposed the kube-api-qps cmd option properly (#​626, @​lintongj)
  • Fixed deadlock in reporting metrics in snapshot controller. (#​581, @​jsafrane)
  • Replaces many VolumeSnapshot/VolumeSnapshotContent Update/UpdateStatus operations with Patch. This lowers the probability of the "object has been modified" update API errors occurring. This change introduces a dependency on two new RBAC rules for the CSI snapshotter sidecar: volumesnapshotcontents:patch, volumesnapshotcontents/status:patch and four new RBAC rules for the snapshot-controller: volumesnapshotcontents:patch, volumesnapshotcontents/status:patch, volumesnapshots:patch, and volumesnapshots/status: patch. (#​526, @​ggriffiths)

Other (Cleanup or Flake)

  • Rename KUBE_NODE_NAME to NODE_NAME for CSI snapshotter sidecar deployment. (#​616, @​zhucan)

Uncategorized

  • Updated CertificateSigningRequest apiversion to V1 for Snapshot validation webhook deployment. (#​588, @​Kartik494)

Full Changelog

https://github.com/kubernetes-csi/external-snapshotter/blob/v5.0.1/CHANGELOG/CHANGELOG-5.0.md

v5.0.0

Compare Source

Overall Status

Volume snapshotting has been a GA feature since Kubernetes v1.20.

Supported CSI Spec Versions

1.0-1.5

Minimum Kubernetes version

1.20

Recommended Kubernetes version

1.20+

Container

docker pull registry.k8s.io/sig-storage/snapshot-controller:v5.0.0
docker pull registry.k8s.io/sig-storage/csi-snapshotter:v5.0.0
docker pull registry.k8s.io/sig-storage/snapshot-validation-webhook:v5.0.0 (Note: The snapshot-validation-webhook v5.0.0 image does not work for multi-arch due to the timeout issue. It is fixed in v5.0.1)

Breaking Changes

  • Replaces many VolumeSnapshot/VolumeSnapshotContent Update/UpdateStatus operations with Patch. This lowers the probability of the "object has been modified" update API errors occurring. This change introduces a dependency on two new RBAC rules for the CSI snapshotter sidecar: volumesnapshotcontents:patch, volumesnapshotcontents/status:patch and four new RBAC rules for the snapshot-controller: volumesnapshotcontents:patch, volumesnapshotcontents/status:patch, volumesnapshots:patch, and volumesnapshots/status: patch. (#​526, @​ggriffiths)

Feature

  • Added short names for Volume Snapshot CRDs:
    • VolumeSnapshot - vs
    • VolumeSnapshotContent - vsc, vscs
    • VolumeSnapshotClass` - vsclass, vsclasses (#​604, @​robbie-demuth)
  • Adds support for distributed snapshotting. This affects both snapshot controller and CSI snapshotter sidecar. (#​585, @​nearora-msft)
  • Make the QPS and Burst of kube client config to be configurable in both snapshot-controller and CSI snapshotter sidecar (#​621, @​lintongj)

Design

  • Added kustomization manifests to CRDs, snapshot controller, and CSI snapshotter sidecar components (#​606, @​itspngu)

Bug or Regression

  • Fixed a bug introduced by #​621 which makes the QPS and Burst of kube client config configurable in both snapshot-controller and CSI snapshotter sidecar. This fix exposed the kube-api-qps cmd option properly (#​626, @​lintongj)
  • Fixed deadlock in reporting metrics in snapshot controller. (#​581, @​jsafrane)
  • Replaces many VolumeSnapshot/VolumeSnapshotContent Update/UpdateStatus operations with Patch. This lowers the probability of the "object has been modified" update API errors occurring. This change introduces a dependency on two new RBAC rules for the CSI snapshotter sidecar: volumesnapshotcontents:patch, volumesnapshotcontents/status:patch and four new RBAC rules for the snapshot-controller: volumesnapshotcontents:patch, volumesnapshotcontents/status:patch, volumesnapshots:patch, and volumesnapshots/status: patch. (#​526, @​ggriffiths)

Other (Cleanup or Flake)

  • Rename KUBE_NODE_NAME to NODE_NAME for CSI snapshotter sidecar deployment. (#​616, @​zhucan)

Uncategorized

  • Updated CertificateSigningRequest apiversion to V1 for Snapshot validation webhook deployment. (#​588, @​Kartik494)

Full Changelog

https://github.com/kubernetes-csi/external-snapshotter/blob/v5.0.0/CHANGELOG/CHANGELOG-5.0.md


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions
Copy link

github-actions bot commented Jan 14, 2026

qgr1-cluster-0 - kustomization

--- k8s/base/snapshot-controller/snapshot-controller Kustomization: flux-system/snapshot-controller-snapshot-controller HelmRelease: snapshot-controller/snapshot-controller

+++ k8s/base/snapshot-controller/snapshot-controller Kustomization: flux-system/snapshot-controller-snapshot-controller HelmRelease: snapshot-controller/snapshot-controller

@@ -13,13 +13,13 @@

     spec:
       chart: snapshot-controller
       sourceRef:
         kind: HelmRepository
         name: snapshot-controller
         namespace: flux-system
-      version: 4.2.0
+      version: 5.0.2
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m

@github-actions
Copy link

github-actions bot commented Jan 14, 2026

qgr1-cluster-0 - helmrelease

--- HelmRelease: snapshot-controller/snapshot-controller Deployment: snapshot-controller/snapshot-controller

+++ HelmRelease: snapshot-controller/snapshot-controller Deployment: snapshot-controller/snapshot-controller

@@ -32,12 +32,13 @@

           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
         image: registry.k8s.io/sig-storage/snapshot-controller:v8.4.0
         imagePullPolicy: IfNotPresent
         args:
+        - --feature-gates=CSIVolumeGroupSnapshot=true
         - --http-endpoint=:8080
         - --leader-election=true
         - --leader-election-namespace=$(NAMESPACE)
         ports:
         - name: http
           containerPort: 8080
--- HelmRelease: snapshot-controller/snapshot-controller ServiceAccount: snapshot-controller/snapshot-controller-conversion-webhook

+++ HelmRelease: snapshot-controller/snapshot-controller ServiceAccount: snapshot-controller/snapshot-controller-conversion-webhook

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: snapshot-controller-conversion-webhook
+  namespace: snapshot-controller
+  labels:
+    app.kubernetes.io/name: conversion-webhook
+    app.kubernetes.io/instance: snapshot-controller
+    app.kubernetes.io/managed-by: Helm
+
--- HelmRelease: snapshot-controller/snapshot-controller Service: snapshot-controller/snapshot-controller-conversion-webhook

+++ HelmRelease: snapshot-controller/snapshot-controller Service: snapshot-controller/snapshot-controller-conversion-webhook

@@ -0,0 +1,19 @@

+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: snapshot-controller-conversion-webhook
+  namespace: snapshot-controller
+  labels:
+    app.kubernetes.io/name: conversion-webhook
+    app.kubernetes.io/instance: snapshot-controller
+    app.kubernetes.io/managed-by: Helm
+spec:
+  ports:
+  - port: 443
+    targetPort: 8443
+    name: https
+  selector:
+    app.kubernetes.io/name: conversion-webhook
+    app.kubernetes.io/instance: snapshot-controller
+
--- HelmRelease: snapshot-controller/snapshot-controller Deployment: snapshot-controller/snapshot-controller-conversion-webhook

+++ HelmRelease: snapshot-controller/snapshot-controller Deployment: snapshot-controller/snapshot-controller-conversion-webhook

@@ -0,0 +1,61 @@

+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: snapshot-controller-conversion-webhook
+  namespace: snapshot-controller
+  labels:
+    app.kubernetes.io/name: conversion-webhook
+    app.kubernetes.io/instance: snapshot-controller
+    app.kubernetes.io/managed-by: Helm
+spec:
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: conversion-webhook
+      app.kubernetes.io/instance: snapshot-controller
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: conversion-webhook
+        app.kubernetes.io/instance: snapshot-controller
+    spec:
+      serviceAccountName: snapshot-controller-conversion-webhook
+      securityContext: {}
+      containers:
+      - name: conversion-webhook
+        securityContext:
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsNonRoot: true
+          runAsUser: 1000
+        image: ghcr.io/piraeusdatastore/snapshot-conversion-webhook:v8.4.0
+        imagePullPolicy: IfNotPresent
+        args:
+        - --port=8443
+        - --tls-cert-file=/etc/webhook/tls.crt
+        - --tls-private-key-file=/etc/webhook/tls.key
+        ports:
+        - name: https
+          containerPort: 8443
+          protocol: TCP
+        livenessProbe:
+          httpGet:
+            port: https
+            path: /readyz
+            scheme: HTTPS
+        resources: {}
+        volumeMounts:
+        - name: tls
+          mountPath: /etc/webhook
+          readOnly: true
+      hostNetwork: false
+      dnsPolicy: ClusterFirst
+      volumes:
+      - name: tls
+        secret:
+          secretName: snapshot-controller-conversion-webhook
+

@renovate renovate bot changed the title feat(container)!: Update image snapshot-controller ( 4.2.0 ➔ 5.0.0 ) feat(container)!: Update image snapshot-controller ( 4.2.0 ➔ 5.0.1 ) Jan 16, 2026
@renovate renovate bot force-pushed the renovate/snapshot-controller-5.x branch from 6e9a02c to 7e3c8fa Compare January 16, 2026 14:34
@renovate renovate bot changed the title feat(container)!: Update image snapshot-controller ( 4.2.0 ➔ 5.0.1 ) feat(container)!: Update image snapshot-controller ( 4.2.0 ➔ 5.0.2 ) Jan 19, 2026
@renovate renovate bot force-pushed the renovate/snapshot-controller-5.x branch from 7e3c8fa to 5235580 Compare January 19, 2026 11:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant