cozystack Files

⚠️ Beta Release Warning: This is a pre-release version intended for testing and early adoption. Breaking changes may occur before the stable v1.0.0 release.

Major Features and Improvements

Virtual Machines

• [vm-instance] Complete migration from virtual-machine to vm-disk and vm-instance: Completed the architectural redesign of virtual machine management by fully migrating from the legacy virtual-machine application to the new vm-disk and vm-instance applications. This includes automatic migration scripts (migration 28) that convert existing virtual machines, handle CDI webhook configurations, and update cloud-init references. The new architecture provides better separation of concerns between disk management and VM lifecycle, enabling more flexible VM configuration and improved resource management (@kvaps in [#2040]).

• [vm-instance] Port advanced VM features: Ported critical VM features from the legacy virtual-machine application including cpuModel field for direct CPU model specification, support for switching between instanceType and custom resource configurations, and migration from deprecated running field to runStrategy field following KubeVirt best practices (@kvaps in [#2040]).

Storage and CSI

• [kubevirt-csi-driver] Add RWX Filesystem (NFS) support: Added Read-Write-Many (RWX) filesystem support to kubevirt-csi-driver, enabling multiple pods to mount the same persistent volume simultaneously via NFS. This provides native NFS support for shared storage use cases without requiring external NFS provisioners, with automatic NFS server deployment per PVC and seamless integration with KubeVirt's storage layer (@kvaps in [#2042]).

Platform and Infrastructure

• [cozystack-api] Switch from DaemonSet to Deployment: Migrated cozystack-api from DaemonSet to Deployment with PreferClose topology spread constraints, improving resource efficiency while maintaining high availability. The Deployment approach reduces resource consumption compared to running API pods on every node, while topology spreading ensures resilient pod placement across the cluster (@kvaps in [#2041], [#2048]).

• [linstor] Move CRDs installation to dedicated chart: Refactored LINSTOR CRDs installation by moving them to a dedicated piraeus-operator-crds chart, solving Helm's limitation with large CRD files that could cause unreliable installations. This ensures all LINSTOR CRDs (including linstorsatellites.io) are properly installed before the operator starts, preventing satellite pod creation failures. Includes automatic migration script to reassign existing CRDs to the new chart (@kvaps in [#2036]).

• [installer] Unify operator templates: Merged separate operator templates into a single variant-based template, simplifying the installation process and reducing configuration duplication. The new template supports different deployment variants (Talos, non-Talos) through a unified configuration approach (@kvaps in [#2034]).

Applications

• [mariadb] Rename mysql application to mariadb: Renamed the MySQL application to MariaDB to accurately reflect the underlying database engine being used. Includes automatic migration script (migration 27) that handles resource renaming and ensures seamless upgrade path for existing MySQL deployments. All resources, including databases, users, backups, and configurations, are automatically migrated to use the mariadb naming (@kvaps in [#2026]).

• [ferretdb] Remove FerretDB application: Removed the FerretDB application from the catalog as it has been superseded by native MongoDB support with improved performance and features (@kvaps in [#2028]).

Improvements

• [rbac] Use hierarchical naming scheme: Refactored RBAC configuration to use hierarchical naming scheme for cluster roles and role bindings, improving organization and maintainability of permission structures across the platform (@lllamnyp in [#2019]).

• [backups] Create RBAC for backup resources: Added comprehensive RBAC configuration for backup resources, enabling proper permission management for backup operations and restore jobs across different user roles (@lllamnyp in [#2018]).

• [etcd-operator] Add vertical-pod-autoscaler dependency: Added vertical-pod-autoscaler as a dependency to etcd-operator package, ensuring proper resource scaling and optimization for etcd clusters (@sircthulhu in [#2047]).

Fixes

• [cozystack-operator] Preserve existing suspend field in package reconciler: Fixed package reconciler to properly preserve the existing suspend field state during reconciliation, preventing unintended resumption of suspended packages (@sircthulhu in [#2043]).

• [cozystack-operator] Fix namespace privileged flag resolution: Fixed operator to correctly resolve namespace privileged flag by checking all Packages in the namespace, not just the first one. This ensures namespaces are properly marked as privileged when any package requires elevated permissions (@kvaps in [#2046]).

• [cozystack-operator] Fix namespace reconciliation field ownership: Fixed Server-Side Apply (SSA) field ownership conflicts by using per-Package field owner for namespace reconciliation, preventing conflicts when multiple packages reconcile the same namespace (@kvaps in [#2046]).

• [platform] Clean up Helm secrets for removed releases: Added cleanup logic to migration 23 to remove orphaned Helm secrets from removed -rd releases, preventing secret accumulation and reducing cluster resource usage (@kvaps in [#2035]).

• [monitoring] Fix YAML parse error in vmagent template: Fixed YAML parsing error in monitoring-agents vmagent template that could cause monitoring stack deployment failures (@kvaps in [#2037]).

• [talm] Fix metadata.id type casting in physical_links_info: Fixed Prometheus query in physical_links_info chart to properly cast metadata.id to string for regexMatch operations, preventing query failures with numeric interface IDs (@kvaps in cozystack/talm#110).

Dependencies

• [kilo] Update to v0.7.1: Updated Kilo WireGuard mesh networking to v0.7.1 with bug fixes and improvements (@kvaps in [#2049]).

Development, Testing, and CI/CD

• [ci] Improve cozyreport functionality: Enhanced cozyreport tool with improved reporting capabilities for CI/CD pipelines, providing better visibility into test results and build status (@lllamnyp in [#2032]).

• [e2e] Increase HelmRelease readiness timeout for kubernetes test: Increased HelmRelease readiness timeout in Kubernetes end-to-end tests to prevent false failures on slower hardware or during high load conditions, specifically targeting ingress-nginx component which may take longer to become ready (@lexfrei in [#2033]).

Documentation

• [website] Add documentation versioning: Implemented comprehensive documentation versioning system with separate v0 and v1 documentation trees, version selector in the UI, proper URL redirects for unversioned docs, and improved navigation for users working with different Cozystack versions (@IvanStukov in cozystack/website#415).

• [website] Describe upgrade to v1.0: Added detailed upgrade instructions for migrating from v0.x to v1.0, including prerequisites, upgrade steps, and troubleshooting guidance (@nbykov0 in cozystack/website@21bbe84).

• [website] Update support documentation: Updated support documentation with current contact information and support channels (@xrmtech-isk in cozystack/website#420).

---

Contributors

We'd like to thank all contributors who made this release possible:

• @IvanStukov
• @kvaps
• @lexfrei
• @lllamnyp
• @nbykov0
• @sircthulhu
• @xrmtech-isk

New Contributors

We're excited to welcome our first-time contributors:

• @IvanStukov - First contribution!
• @xrmtech-isk - First contribution!

---

Full Changelog: v1.0.0-beta.3...v1.0.0-beta.4